$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/063FA6B25B2811F09B9A3A54C4F9AE02.roa File: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (raw, json) Hash identifier: PdzatKQUNncHpwKWYwWLFeCXI+EXj5VrdThfE8iLC8o= Subject key identifier: BB:57:0C:46:41:3E:0B:D9:28:D4:CB:B9:31:0F:41:0D:E4:FE:85:E4 Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 01DC Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/063FA6B25B2811F09B9A3A54C4F9AE02.roa Signing time: Mon 07 Jul 2025 11:46:31 +0000 ROA not before: Mon 07 Jul 2025 11:46:31 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 13383 IP address blocks: 2402:be0:fffa::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 06:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Jul 7 11:46:31 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=686bb397-567b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:d8:ea:69:41:26:a0:52:10:2f:f7:45:4f: f6:d2:4c:8e:b7:25:c4:99:81:a1:37:12:5c:e5:9e: 6e:c4:ae:ea:03:11:03:66:f0:20:68:ab:a1:cb:c9: 94:54:07:da:17:82:1d:8a:f7:c5:80:8a:41:02:59: bf:cc:f1:91:d6:cb:9e:64:57:45:a1:4b:f2:a9:67: b5:05:22:27:00:98:82:b8:6b:08:94:41:a2:bf:6d: 35:37:1e:ad:74:c2:de:af:44:d4:5e:ea:6b:55:6c: e3:ca:8f:cf:54:c3:75:9b:67:d4:3f:a5:ec:cd:b8: 01:f1:5c:ec:c8:a6:28:f0:b3:95:00:cb:17:48:8c: 88:79:1e:a4:92:3d:98:ad:49:59:e0:aa:2d:92:21: 06:e6:48:9f:94:3c:b9:e4:a4:b0:72:8f:c4:97:f1: d2:63:05:20:7c:dd:b0:47:f9:c2:de:d5:6b:2d:af: f7:a3:3f:64:94:5c:ad:0d:58:cf:ef:be:84:1f:f1: 62:ad:ea:6d:95:f0:3d:2c:b5:74:a3:48:5d:3f:fd: 07:03:9d:15:e8:83:70:3b:4a:d5:cd:80:14:ac:33: 2a:fe:91:d8:c3:56:b7:c4:62:17:1d:46:51:7a:e5: b1:cf:db:29:69:eb:87:b2:89:be:46:7c:21:32:58: b4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:57:0C:46:41:3E:0B:D9:28:D4:CB:B9:31:0F:41:0D:E4:FE:85:E4 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/063FA6B25B2811F09B9A3A54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:be0:fffa::/47 Signature Algorithm: sha256WithRSAEncryption 8c:00:85:fb:85:28:38:dc:70:10:b1:9c:5e:04:04:ee:3a:fe: f9:fd:65:6e:4e:54:6e:53:f0:71:90:d3:a6:b9:3c:24:bf:7b: 4f:f6:37:44:da:e9:ed:c6:ab:8d:58:b6:6b:2d:df:26:38:07: f1:fa:01:c9:cb:70:24:12:0a:9c:10:ca:4f:96:e2:f5:b6:82: a5:0b:13:1c:08:45:45:bc:a4:61:50:f2:3f:22:9d:45:a2:7b: 9d:d2:43:a5:e8:b6:ab:1e:86:85:b7:c7:a0:1d:53:f4:d8:e0: 83:f2:2d:9f:7b:ca:f7:ab:b1:e7:16:6f:41:d0:1e:f0:0a:37: 43:6e:49:89:64:b1:19:12:a9:10:94:16:52:8a:c8:43:e0:81: fc:be:5b:f2:1b:9b:73:5c:f0:64:e0:c7:7a:0c:c9:5f:2e:a1: 9f:b2:6f:74:86:bb:28:c6:cf:a6:2c:f4:4b:7d:ed:5e:79:85: 46:25:3a:71:b1:c0:e5:e1:25:49:49:26:47:b3:f7:9e:1b:de: bc:31:65:82:05:25:f1:e0:21:a6:53:2c:20:fc:da:d2:be:c0: 13:66:92:9f:23:4a:a3:48:5c:0b:0d:4d:e6:ff:ea:37:74:73: bc:69:39:5c:0b:f3:5e:0f:7f:8c:13:71:d7:e9:e7:44:25:a4: 7d:99:1e:64 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUwNzA3MTE0NjMxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZiYjM5Ny01NjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VTY6mlBJqBSEC/3RU/20kyOtyXEmYGhNxJc5Z5uxK7qAxEDZvAgaKuhy8mU VAfaF4IdivfFgIpBAlm/zPGR1sueZFdFoUvyqWe1BSInAJiCuGsIlEGiv201Nx6t dMLer0TUXuprVWzjyo/PVMN1m2fUP6XszbgB8VzsyKYo8LOVAMsXSIyIeR6kkj2Y rUlZ4KotkiEG5kiflDy55KSwco/El/HSYwUgfN2wR/nC3tVrLa/3oz9klFytDVjP 776EH/FireptlfA9LLV0o0hdP/0HA50V6INwO0rVzYAUrDMq/pHYw1a3xGIXHUZR euWxz9spaeuHsom+RnwhMli0jQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLtXDEZB PgvZKNTLuTEPQQ3k/oXkMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvMDYzRkE2QjI1 QjI4MTFGMDlCOUEzQTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkAgvg//owDQYJKoZIhvcNAQELBQADggEBAIwAhfuFKDjc cBCxnF4EBO46/vn9ZW5OVG5T8HGQ06a5PCS/e0/2N0Ta6e3Gq41Ytmst3yY4B/H6 AcnLcCQSCpwQyk+W4vW2gqULExwIRUW8pGFQ8j8inUWie53SQ6XotqsehoW3x6Ad U/TY4IPyLZ97yversecWb0HQHvAKN0NuSYlksRkSqRCUFlKKyEPggfy+W/Ibm3Nc 8GTgx3oMyV8uoZ+yb3SGuyjGz6Ys9Et97V55hUYlOnGxwOXhJUlJJkez954b3rwx ZYIFJfHgIaZTLCD82tK+wBNmkp8jSqNIXAsNTeb/6jd0c7xpOVwL814Pf4wTcdfp 50QlpH2ZHmQ= -----END CERTIFICATE-----Generated at Sat Oct 25 23:15:18 2025 by rpki-client