$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa File: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (raw, json) Hash identifier: VCw7RYuCqRgcxZgWZmzpPEk1YCa+byu4rAUKwjjwm9k= Subject key identifier: 59:88:FB:E0:15:B9:07:C2:3B:50:A0:2E:71:DF:35:39:60:67:E5:6E Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 01B5 Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa Signing time: Wed 29 Oct 2025 15:24:27 +0000 ROA not before: Wed 29 Oct 2025 15:24:27 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152300 IP address blocks: 2001:df3:51c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: Oct 29 15:24:27 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=690231ab-dfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:33:2d:46:fe:09:6a:8b:d2:a6:27:0b:f9:c2: 68:8f:ed:7e:1b:c3:22:31:0c:b5:c8:8b:5d:23:41: 6a:b6:cc:58:b8:c4:1b:d5:9b:07:67:e8:11:69:96: d2:11:cf:e5:0c:75:97:3c:ac:fd:b5:6c:02:20:64: 37:93:4a:eb:0f:54:5b:b8:73:da:e8:6e:57:a3:d6: 7d:43:57:25:66:06:8b:19:02:3e:b9:a5:9c:c1:50: 59:54:1f:98:e7:55:39:ac:1b:e7:76:c8:a1:37:28: ad:0e:0f:6a:bf:1e:45:0c:d1:a2:84:ae:4e:c4:75: fc:30:84:e1:17:c4:96:06:5a:8a:b3:7c:29:4d:83: b8:7e:52:21:77:25:52:47:fa:ef:90:9c:b9:64:22: 58:0b:fb:c0:ab:06:ba:fe:f2:61:65:08:b9:2e:73: 6d:26:08:e3:c8:51:3d:2a:cd:01:39:6e:f3:aa:e2: c3:56:61:30:b0:c8:8b:59:e0:b6:d5:12:65:c2:26: 1d:cd:32:95:0f:56:41:f2:b6:79:14:10:3c:24:8d: 1c:07:38:5f:2e:22:38:dd:5d:4a:8b:40:b6:2f:d0: 6f:1f:23:1e:5f:97:99:60:bc:a7:cb:24:67:ed:d7: 61:97:2d:b8:4c:a4:cf:0e:60:c7:74:b1:7c:6f:0c: 66:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:88:FB:E0:15:B9:07:C2:3B:50:A0:2E:71:DF:35:39:60:67:E5:6E X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:51c0::/48 Signature Algorithm: sha256WithRSAEncryption 33:65:92:f1:6a:42:f4:4a:0d:91:d8:81:90:35:a0:ab:4f:0c: 67:94:5c:80:f5:20:af:28:31:2e:4a:ab:56:12:2a:7a:34:36: d2:c8:7d:39:bd:46:ad:a7:70:86:16:a5:17:6f:2a:74:72:f2: 61:40:0f:f9:b8:f5:fc:ff:b6:6c:44:9d:fa:5b:70:01:e3:23: 5e:b9:95:da:f5:e2:0a:25:09:a8:6b:e7:60:62:1e:84:fd:33: 48:5d:42:c8:a3:ff:de:34:a4:70:b4:0c:bb:5d:20:28:63:c2: fb:38:16:8e:7d:fa:fb:91:62:b8:b7:93:dd:b3:b8:19:de:2d: 6f:f6:bb:11:e5:42:54:60:a8:28:54:46:ef:fc:89:3f:7f:06: 3f:4d:c2:62:79:00:b6:41:36:2d:19:79:a3:aa:84:7d:18:a8: a5:db:3a:da:87:e8:e0:44:e5:db:b7:67:c6:f1:4d:68:38:a9: 51:13:ad:60:96:56:97:9d:1c:02:9a:05:04:9e:67:5b:38:58: e8:1c:be:95:af:3b:89:e2:d1:6f:fa:f7:26:83:44:7d:fa:0a: 2b:86:cb:91:49:43:3b:02:3d:10:e4:cf:39:fb:58:2b:58:fe: cf:e3:5e:72:e1:2e:74:46:94:75:6a:7f:be:22:82:9f:e3:75: 0b:16:7c:24 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjUxMDI5MTUyNDI3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAyMzFhYi1kZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TMtRv4JaovSpicL+cJoj+1+G8MiMQy1yItdI0FqtsxYuMQb1ZsHZ+gRaZbS Ec/lDHWXPKz9tWwCIGQ3k0rrD1RbuHPa6G5Xo9Z9Q1clZgaLGQI+uaWcwVBZVB+Y 51U5rBvndsihNyitDg9qvx5FDNGihK5OxHX8MIThF8SWBlqKs3wpTYO4flIhdyVS R/rvkJy5ZCJYC/vAqwa6/vJhZQi5LnNtJgjjyFE9Ks0BOW7zquLDVmEwsMiLWeC2 1RJlwiYdzTKVD1ZB8rZ5FBA8JI0cBzhfLiI43V1Ki0C2L9BvHyMeX5eZYLynyyRn 7ddhly24TKTPDmDHdLF8bwxmJQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFmI++AV uQfCO1CgLnHfNTlgZ+VuMB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBEMDcvRDNFODg5RDQ4RTdGMTFFRThFOTdCNDg0QzRGOUFFMDIvNUI2NkM2RkVC NERCMTFGMEIzREM2RDdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zUcAwDQYJKoZIhvcNAQELBQADggEBADNlkvFqQvRK DZHYgZA1oKtPDGeUXID1IK8oMS5Kq1YSKno0NtLIfTm9Rq2ncIYWpRdvKnRy8mFA D/m49fz/tmxEnfpbcAHjI165ldr14golCahr52BiHoT9M0hdQsij/940pHC0DLtd IChjwvs4Fo59+vuRYri3k92zuBneLW/2uxHlQlRgqChURu/8iT9/Bj9NwmJ5ALZB Ni0ZeaOqhH0YqKXbOtqH6OBE5du3Z8bxTWg4qVETrWCWVpedHAKaBQSeZ1s4WOgc vpWvO4ni0W/69yaDRH36CiuGy5FJQzsCPRDkzzn7WCtY/s/jXnLhLnRGlHVqf74i gp/jdQsWfCQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:37:04 2025 by rpki-client