$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa File: 8862654086CF11EF901ED838C4F9AE02.roa (raw, json) Hash identifier: dAwZWxx+srppBtgqrZ/oHgtdVNW5hBeUnD2UdJKWYzE= Subject key identifier: A9:A1:7E:C2:5B:1B:33:60:B7:00:AE:F7:99:52:15:A4:2D:79:8B:27 Certificate issuer: /CN=A91106C7/serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7 Certificate serial: D2 Authority key identifier: 78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa Signing time: Fri 01 Aug 2025 07:12:28 +0000 ROA not before: Fri 01 Aug 2025 07:12:28 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 152928 IP address blocks: 2001:df3:f640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91106C7, serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7 Validity Not Before: Aug 1 07:12:28 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688c68dc-947a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:71:bb:1f:ea:bf:09:e0:a2:4a:de:8f:ec: 1c:c2:f5:bb:cd:53:0b:5d:51:19:f4:2f:94:67:5d: 6b:c6:8f:b0:2b:59:b3:fd:8f:ed:70:6a:1b:c8:13: 45:af:8a:3a:3f:af:2b:38:25:4b:59:8b:47:e4:6d: 8a:49:88:6b:a6:51:79:31:4b:7f:9c:00:36:5d:4e: 35:2c:ec:57:79:95:5d:2c:8e:e4:50:59:97:f3:f0: 4f:93:1a:23:bb:2e:3c:74:3b:d1:c0:0f:74:3c:85: 52:e1:d4:0f:34:32:79:8b:e9:d3:d6:34:b6:b2:e6: d7:cd:f6:4d:6f:cc:5f:57:c1:b6:dd:ce:f5:91:b4: bf:d7:79:85:cb:66:9a:b8:1e:87:8a:ac:f4:bc:0f: f9:8a:09:17:8c:c4:c3:f6:aa:de:cb:cd:16:55:57: 0a:a3:2a:14:03:74:6d:f7:a2:db:2a:74:e8:55:37: 11:27:67:12:9a:45:af:43:46:07:c3:f1:02:f5:23: e3:18:a4:60:ec:e8:ea:3c:a3:35:f0:9a:cc:81:96: 80:e3:47:b3:f7:ca:5a:9f:f6:a3:44:89:60:3c:cb: 90:66:71:ce:ff:1c:e9:bf:70:07:03:1b:ab:01:b7: 6f:d2:d0:01:19:21:4a:45:a8:95:6f:0e:89:d0:13: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A1:7E:C2:5B:1B:33:60:B7:00:AE:F7:99:52:15:A4:2D:79:8B:27 X509v3 Authority Key Identifier: keyid:78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:f640::/48 Signature Algorithm: sha256WithRSAEncryption 65:39:17:72:37:9b:db:57:e8:df:fb:89:27:04:b7:2f:d5:8e: 12:a8:9d:a7:31:8d:43:e8:70:e8:ae:79:e9:ee:69:2b:89:e2: aa:b0:cd:7f:14:02:55:41:2e:d9:b8:b1:c8:d0:6a:ac:71:6d: 96:22:a5:3f:16:c0:07:3f:57:e0:5a:a5:59:88:dd:ac:d2:7f: d5:ab:54:d2:70:25:02:93:a0:0b:52:e8:6e:f7:10:0e:dc:18: 45:69:97:df:76:e6:7d:75:07:f3:97:84:b2:32:97:45:97:3f: b6:00:da:ab:ea:4f:44:05:08:fd:fd:97:01:a4:d3:b3:8c:35: 7a:0d:03:1a:be:5b:57:bf:4b:e8:a7:19:83:fd:60:c3:aa:42: 94:19:9c:82:45:53:4b:a8:eb:cd:bf:66:84:ad:f8:f6:de:4a: 34:db:7f:b5:15:73:d9:97:52:07:a6:04:2f:e9:a7:0c:28:f5: 64:7c:92:cb:eb:6e:d4:ac:71:c8:ad:5d:a2:ea:79:c0:e8:ab: e7:c8:65:05:b9:1e:d2:3a:7e:42:8e:1f:74:4f:36:30:b6:33: d1:ab:53:67:b6:6b:b0:11:b8:73:7e:c1:07:09:a0:28:2d:cd: 20:49:ae:62:f4:90:a3:2d:03:3e:73:ec:e0:93:91:b6:8a:b4: a0:4e:48:ee -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA2QzcxMTAvBgNVBAUTKDc4RkJGQ0Q4RDUzMkJGQkJBQjdENzlDNTFBNzczOEVB NDk0QzI2QjcwHhcNMjUwODAxMDcxMjI4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjNjhkYy05NDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOdxux/qvwngokrej+wcwvW7zVMLXVEZ9C+UZ11rxo+wK1mz/Y/tcGobyBNF r4o6P68rOCVLWYtH5G2KSYhrplF5MUt/nAA2XU41LOxXeZVdLI7kUFmX8/BPkxoj uy48dDvRwA90PIVS4dQPNDJ5i+nT1jS2subXzfZNb8xfV8G23c71kbS/13mFy2aa uB6Hiqz0vA/5igkXjMTD9qrey80WVVcKoyoUA3Rt96LbKnToVTcRJ2cSmkWvQ0YH w/EC9SPjGKRg7OjqPKM18JrMgZaA40ez98pan/ajRIlgPMuQZnHO/xzpv3AHAxur Abdv0tABGSFKRaiVbw6J0BMY6QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKmhfsJb GzNgtwCu95lSFaQteYsnMB8GA1UdIwQYMBaAFHj7/NjVMr+7q315xRp3OOpJTCa3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDZDNy83N0I2OTQzNDMy MEUxMUVGQjZFMERBNzZDNEY5QUUwMi9lUHY4Mk5VeXY3dXJmWG5GR25jNDZrbE1K cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VQdjgyTlV5djd1cmZYbkZHbmM0NmtsTUpyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTA2QzcvNzdCNjk0MzQzMjBFMTFFRkI2RTBEQTc2QzRGOUFFMDIvODg2MjY1NDA4 NkNGMTFFRjkwMUVEODM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3z9kAwDQYJKoZIhvcNAQELBQADggEBAGU5F3I3m9tX 6N/7iScEty/VjhKonacxjUPocOiueenuaSuJ4qqwzX8UAlVBLtm4scjQaqxxbZYi pT8WwAc/V+BapVmI3azSf9WrVNJwJQKToAtS6G73EA7cGEVpl9925n11B/OXhLIy l0WXP7YA2qvqT0QFCP39lwGk07OMNXoNAxq+W1e/S+inGYP9YMOqQpQZnIJFU0uo 682/ZoSt+PbeSjTbf7UVc9mXUgemBC/ppwwo9WR8ksvrbtSsccitXaLqecDoq+fI ZQW5HtI6fkKOH3RPNjC2M9GrU2e2a7ARuHN+wQcJoCgtzSBJrmL0kKMtAz5z7OCT kbaKtKBOSO4= -----END CERTIFICATE-----Generated at Mon Aug 11 07:29:39 2025 by rpki-client