$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/309268DCBB7E11E9AFB49C42C4F9AE02.roa File: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (raw, json) Hash identifier: vkdEUpa0uX2LdRNKslgCoqxAxrazYilRXx4dGIkC7ss= Subject key identifier: FA:54:BD:D5:6F:77:B4:EE:91:A9:56:FF:AC:32:0D:F0:81:DA:2F:F3 Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 362D Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/309268DCBB7E11E9AFB49C42C4F9AE02.roa Signing time: Tue 02 Sep 2025 15:01:25 +0000 ROA not before: Tue 02 Sep 2025 15:01:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 24183 IP address blocks: 2403:cc00:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13869 (0x362d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Sep 2 15:01:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b706c5-33a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:f7:41:dd:3f:c6:db:09:cd:8a:c5:e6:fd: 00:43:fe:59:d1:3e:7a:cf:d0:24:6a:b7:0d:7d:77: 94:74:08:8c:f7:65:cd:dd:ae:8f:bf:48:4c:8f:fc: 2c:ea:cf:6a:31:5d:d5:3c:d5:b7:48:f1:9a:12:15: 59:d4:18:4e:ab:9e:63:c6:dd:b5:55:2e:30:03:31: 93:6f:fd:25:a4:0b:ba:7a:d3:43:e6:f4:19:2a:8a: f4:2d:20:e5:7a:9e:95:42:7b:58:68:52:00:67:df: 11:07:09:4b:8e:fa:1b:8d:83:d5:55:b4:d8:38:0d: 1c:f3:8b:88:71:da:cf:c0:e5:61:48:a2:c8:e3:97: 7b:34:a7:47:ea:3f:a5:4f:a3:e1:20:9b:2c:39:54: 81:dc:47:b8:52:3c:81:f2:dd:6e:fd:cd:15:d7:e0: a8:25:c8:87:46:94:f6:17:b6:b0:16:fd:18:50:fc: 37:ed:4b:f8:3c:dd:32:63:85:ea:31:00:0b:cf:4b: 01:0b:a3:d1:94:1d:ed:fa:36:dd:ff:0d:7d:aa:83: dd:e0:76:fb:5e:65:31:17:73:c8:84:dd:8e:1e:03: 00:52:36:80:80:67:e8:8a:c2:c9:8c:24:a4:92:4f: f8:5d:ef:37:a6:19:06:b3:db:3c:10:ae:36:d9:49: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:54:BD:D5:6F:77:B4:EE:91:A9:56:FF:AC:32:0D:F0:81:DA:2F:F3 X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/309268DCBB7E11E9AFB49C42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:cc00:a000::/36 Signature Algorithm: sha256WithRSAEncryption 6d:ef:49:a5:97:4c:e1:a5:1e:04:08:e1:ad:33:fe:a0:5a:46: 80:11:34:24:19:12:b6:e0:94:75:e5:a8:9b:b0:7e:90:47:54: 3e:66:cb:37:ac:2c:08:2d:7c:db:35:d1:a1:5b:f3:c0:ca:b5: 3d:3f:0a:9d:aa:53:bd:d3:f0:47:71:8c:60:e6:3e:9c:3f:df: 11:38:86:fa:11:2d:f2:87:0a:4e:fd:55:fd:16:11:6a:c7:1d: 1a:4a:d8:0b:8f:5e:6b:cf:e0:85:68:56:70:ce:db:68:fa:51: e8:3d:42:a6:e9:c0:ca:c6:6d:3f:d9:c2:c8:c7:a6:3f:05:e1: ed:3f:88:eb:fe:ec:df:79:03:f8:fa:3c:4e:66:53:ff:14:27: 71:30:19:0b:e3:17:59:43:3f:68:08:3e:c4:d2:df:1d:0b:3f: af:a4:d0:f1:4b:c6:86:25:0b:4a:b8:44:17:4f:f9:7d:24:b5: 84:cb:6c:aa:b0:ee:8e:36:d9:2d:05:ae:19:d6:02:dc:cc:a2: 8f:95:13:e0:64:b8:56:fe:0f:c6:c1:ce:b0:47:39:d6:3a:c2: 2c:75:12:e8:0f:a5:68:e2:7e:2c:1e:bf:a1:53:b6:af:7f:e5: 8d:43:bd:28:67:1b:f6:3e:4b:ba:86:5e:1e:d5:ed:0f:eb:40: a5:c4:52:41 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICNi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjUwOTAyMTUwMTI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MDZjNS0zM2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWj3Qd0/xtsJzYrF5v0AQ/5Z0T56z9AkarcNfXeUdAiM92XN3a6Pv0hMj/ws 6s9qMV3VPNW3SPGaEhVZ1BhOq55jxt21VS4wAzGTb/0lpAu6etND5vQZKor0LSDl ep6VQntYaFIAZ98RBwlLjvobjYPVVbTYOA0c84uIcdrPwOVhSKLI45d7NKdH6j+l T6PhIJssOVSB3Ee4UjyB8t1u/c0V1+CoJciHRpT2F7awFv0YUPw37Uv4PN0yY4Xq MQALz0sBC6PRlB3t+jbd/w19qoPd4Hb7XmUxF3PIhN2OHgMAUjaAgGfoisLJjCSk kk/4Xe83phkGs9s8EK422UlF2QIDAQABo4IClzCCApMwHQYDVR0OBBYEFPpUvdVv d7TukalW/6wyDfCB2i/zMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvMzA5MjY4RENC QjdFMTFFOUFGQjQ5QzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgQkA8wAoDANBgkqhkiG9w0BAQsFAAOCAQEAbe9JpZdM4aUe BAjhrTP+oFpGgBE0JBkStuCUdeWom7B+kEdUPmbLN6wsCC182zXRoVvzwMq1PT8K napTvdPwR3GMYOY+nD/fETiG+hEt8ocKTv1V/RYRascdGkrYC49ea8/ghWhWcM7b aPpR6D1CpunAysZtP9nCyMemPwXh7T+I6/7s33kD+Po8TmZT/xQncTAZC+MXWUM/ aAg+xNLfHQs/r6TQ8UvGhiULSrhEF0/5fSS1hMtsqrDujjbZLQWuGdYC3Myij5UT 4GS4Vv4PxsHOsEc51jrCLHUS6A+laOJ+LB6/oVO2r3/ljUO9KGcb9j5LuoZeHtXt D+tApcRSQQ== -----END CERTIFICATE-----Generated at Sun Sep 7 16:24:15 2025 by rpki-client