$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/D0F8C1B2558E11F0AA71D85AC4F9AE02.roa File: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (raw, json) Hash identifier: oh7ui7LK3WMunAv1J2fHvn2kFRTi6Zr/uzSPr1lq2oo= Subject key identifier: 75:7C:0D:2B:39:A6:30:EB:CF:7A:2E:4D:FD:4A:57:C9:A0:75:95:27 Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 01CC Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/D0F8C1B2558E11F0AA71D85AC4F9AE02.roa Signing time: Mon 30 Jun 2025 08:47:13 +0000 ROA not before: Mon 30 Jun 2025 08:47:13 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 151349 IP address blocks: 2402:be0:fefd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 06:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Jun 30 08:47:13 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68624f11-045c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:f3:4b:e4:e5:35:52:b9:80:1c:36:7e:7f: 96:fd:3b:7f:00:bc:a8:aa:fa:b4:93:f7:38:d2:e9: 87:0b:d0:38:68:8e:27:e9:ff:22:0d:c9:66:73:9e: 6d:82:b3:d7:42:e4:fc:7f:bc:3a:e3:37:a9:ee:51: c1:ee:b1:1a:c0:05:3f:bd:35:dc:9c:61:f7:c5:63: a4:97:4f:2b:1a:0d:ef:c7:98:4a:c6:78:ec:7e:ff: e1:ce:12:d3:5a:d3:2d:2c:a0:8d:b5:de:e1:a4:a4: 35:87:40:f2:ff:6d:7c:76:de:2e:b2:21:c6:e4:e3: 17:30:84:a4:c7:9d:f3:a5:97:0f:a5:dc:06:d3:42: 0e:b5:90:bd:22:64:30:e0:eb:87:a0:0b:36:34:b0: 29:65:c0:62:59:21:21:fd:8e:e9:66:55:8c:73:14: 81:f3:f0:09:33:26:a0:e4:b6:f6:ef:86:3a:ae:78: f7:0b:91:00:03:85:10:16:46:86:20:54:23:26:5d: 09:92:96:f5:27:68:ce:37:b2:1d:cb:bd:9a:5b:48: 63:8e:7f:05:69:ef:1d:d6:6f:b4:4b:4c:24:68:f5: c6:cb:da:40:6c:b4:1b:39:23:6c:05:9b:05:07:8e: 15:6d:35:16:21:b1:43:34:1d:72:7d:ab:b0:8d:a5: 87:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7C:0D:2B:39:A6:30:EB:CF:7A:2E:4D:FD:4A:57:C9:A0:75:95:27 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/D0F8C1B2558E11F0AA71D85AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:be0:fefd::/48 Signature Algorithm: sha256WithRSAEncryption 45:fa:cf:b7:dd:c7:e4:60:03:e7:16:09:6b:ae:fa:5f:2b:c6: 22:fc:31:55:4f:97:da:0d:13:56:38:0c:92:d3:c4:02:9c:85: 23:5a:b6:c0:b9:1c:6d:09:39:70:38:79:93:0e:11:a6:3e:89: 56:1f:fd:f3:20:d8:da:12:eb:37:f6:82:76:e1:19:2f:1d:3a: 3f:12:ff:7a:7e:39:b6:cb:31:48:18:94:b6:cb:74:56:8e:bc: 16:e3:56:23:a3:6f:56:84:7a:62:f4:42:75:69:a7:06:2d:ce: 8c:dc:ba:54:ee:c4:95:80:80:e3:0e:e1:2f:e0:8b:c2:6b:e7: 4c:18:47:8d:26:ff:a1:ad:96:8e:fd:7b:24:1a:07:bc:14:61: 08:25:a2:6c:89:ac:7f:ec:f5:ad:56:39:4e:e6:d4:a1:2e:9b: 52:0c:05:66:2d:74:9c:42:ab:68:1c:cf:71:29:1e:b8:b7:5a: 42:7a:88:a0:10:cb:f4:8f:da:07:dc:25:6e:43:35:1b:c7:91: f6:0e:82:1c:c9:fa:09:10:75:f7:1b:69:53:a1:9c:b4:e0:d6: c1:06:61:b2:01:29:5b:fc:cd:a8:4f:cf:90:42:b6:9e:d7:c9: 44:22:60:ef:9e:15:73:af:89:e1:4f:31:eb:c4:15:87:c7:29: e1:1e:41:db -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUwNjMwMDg0NzEzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYyNGYxMS0wNDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSXzS+TlNVK5gBw2fn+W/Tt/ALyoqvq0k/c40umHC9A4aI4n6f8iDclmc55t grPXQuT8f7w64zep7lHB7rEawAU/vTXcnGH3xWOkl08rGg3vx5hKxnjsfv/hzhLT WtMtLKCNtd7hpKQ1h0Dy/218dt4usiHG5OMXMISkx53zpZcPpdwG00IOtZC9ImQw 4OuHoAs2NLApZcBiWSEh/Y7pZlWMcxSB8/AJMyag5Lb274Y6rnj3C5EAA4UQFkaG IFQjJl0Jkpb1J2jON7Idy72aW0hjjn8Fae8d1m+0S0wkaPXGy9pAbLQbOSNsBZsF B44VbTUWIbFDNB1yfauwjaWHywIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHV8DSs5 pjDrz3ouTf1KV8mgdZUnMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvRDBGOEMxQjI1 NThFMTFGMEFBNzFEODVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAgvg/v0wDQYJKoZIhvcNAQELBQADggEBAEX6z7fdx+Rg A+cWCWuu+l8rxiL8MVVPl9oNE1Y4DJLTxAKchSNatsC5HG0JOXA4eZMOEaY+iVYf /fMg2NoS6zf2gnbhGS8dOj8S/3p+ObbLMUgYlLbLdFaOvBbjViOjb1aEemL0QnVp pwYtzozculTuxJWAgOMO4S/gi8Jr50wYR40m/6Gtlo79eyQaB7wUYQglomyJrH/s 9a1WOU7m1KEum1IMBWYtdJxCq2gcz3EpHri3WkJ6iKAQy/SP2gfcJW5DNRvHkfYO ghzJ+gkQdfcbaVOhnLTg1sEGYbIBKVv8zahPz5BCtp7XyUQiYO+eFXOvieFPMevE FYfHKeEeQds= -----END CERTIFICATE-----Generated at Sat Oct 25 23:15:16 2025 by rpki-client