$ rpki-client -vvf rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/5ADF4C92956811EC9028F155C4F9AE02.roa File: 5ADF4C92956811EC9028F155C4F9AE02.roa (raw, json) Hash identifier: 6C9pOBCK4sWDlaS78t/pprsEcl/8A0s9Wlk6KVMoAhE= Subject key identifier: BE:04:2A:9D:35:7D:F8:AF:F3:95:A7:83:73:B0:9B:A3:1E:D1:6E:EE Certificate issuer: /CN=A91243FE/serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7 Certificate serial: 0382 Authority key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/5ADF4C92956811EC9028F155C4F9AE02.roa Signing time: Wed 05 Mar 2025 02:17:16 +0000 ROA not before: Wed 05 Mar 2025 02:17:16 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 149520 IP address blocks: 2001:df0:77c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91243FE, serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7 Validity Not Before: Mar 5 02:17:16 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c7b42c-edc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b5:5b:6b:98:0d:d7:d9:36:5f:d8:32:46:1d: 85:94:d3:ab:a5:02:0c:79:da:df:b9:0b:7d:82:93: b6:27:18:57:bf:60:4f:53:ca:a3:fa:4d:69:b3:9f: e7:e9:2a:74:ab:45:14:ba:f4:25:1c:7e:a8:ba:dc: ff:75:0d:e3:0c:d9:94:0f:24:bd:b9:8a:a9:cf:a7: 57:28:93:6c:b0:32:ff:8a:00:41:01:71:ea:c4:79: b0:6b:ed:e0:50:78:7a:59:f9:42:03:c9:f9:25:62: d5:8c:49:c8:12:ab:65:76:cb:68:f2:83:82:aa:1f: 1d:ab:92:e1:df:b4:6a:cc:be:70:8a:ea:95:d1:5b: 56:2f:60:d1:7e:cf:dc:39:3d:af:e8:4e:39:a1:05: 68:c5:52:c3:5a:bb:71:2e:47:bc:be:64:36:43:b1: f0:de:00:70:67:fe:40:49:39:e8:1e:44:56:79:c0: cc:5c:d2:b0:88:02:7f:2b:1d:a7:a0:e9:fa:30:b9: fe:f4:f4:4d:64:a8:74:6b:f5:d2:13:6b:44:8a:b9: 47:fc:d6:27:94:56:87:76:d0:35:87:43:e5:08:e5: 61:a7:f3:74:e5:92:aa:6a:ab:f8:c8:ac:7d:e0:c4: 50:69:51:9f:24:c5:72:81:f4:8a:f3:41:82:c9:c7: 7b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:04:2A:9D:35:7D:F8:AF:F3:95:A7:83:73:B0:9B:A3:1E:D1:6E:EE X509v3 Authority Key Identifier: keyid:C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/5ADF4C92956811EC9028F155C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:77c0::/48 Signature Algorithm: sha256WithRSAEncryption d0:f0:4f:cc:f2:0d:6b:92:5d:e0:bc:73:f0:10:7f:48:46:af: 4c:6f:a7:e6:66:7e:94:21:45:54:f8:4e:18:96:25:fb:1b:b6: f2:d6:8b:1e:6c:cf:b5:aa:27:ee:08:1c:4f:3d:bd:ca:15:86: 06:da:99:bd:2d:f6:91:46:ec:b5:8f:a8:73:b9:01:31:ec:90: 3c:22:8e:b0:5a:0e:9d:c5:d9:4f:30:3a:60:13:6c:7c:4b:10: a7:59:83:d0:e0:e7:3a:fb:bd:0d:e6:3a:22:e2:ad:b0:8e:e2: c9:2d:dc:eb:c0:a2:f4:07:09:73:0d:37:5f:06:58:f9:1a:11: 4c:83:e4:42:f7:d7:07:17:5b:d1:e1:31:83:da:57:31:10:d7: 12:12:e2:f3:76:75:00:5b:6e:c4:3f:ca:df:1d:d0:c9:fc:17: e9:62:af:6e:c0:f4:7a:d1:4d:87:ed:47:58:85:33:c8:2a:eb: a9:0a:dd:b9:83:13:44:90:04:f7:3d:d2:9c:4f:77:59:4c:fa: 20:18:df:e7:b5:50:a4:fa:7f:cd:f3:ed:0a:48:ea:05:ab:4d: 37:da:15:c5:6b:81:02:1c:3d:fa:91:48:10:7d:17:99:65:c4: be:44:06:82:17:be:71:65:0b:c1:ac:d0:36:6f:67:6a:b8:4f: 2b:1b:5a:20 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzRkUxMTAvBgNVBAUTKEM3MEJGM0RGRjQ1MDIzRDQxQUY0QzRERjVENzY1MDQw QjkyNDFBQzcwHhcNMjUwMzA1MDIxNzE2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3YjQyYy1lZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbVba5gN19k2X9gyRh2FlNOrpQIMedrfuQt9gpO2JxhXv2BPU8qj+k1ps5/n 6Sp0q0UUuvQlHH6outz/dQ3jDNmUDyS9uYqpz6dXKJNssDL/igBBAXHqxHmwa+3g UHh6WflCA8n5JWLVjEnIEqtldsto8oOCqh8dq5Lh37RqzL5wiuqV0VtWL2DRfs/c OT2v6E45oQVoxVLDWrtxLke8vmQ2Q7Hw3gBwZ/5ASTnoHkRWecDMXNKwiAJ/Kx2n oOn6MLn+9PRNZKh0a/XSE2tEirlH/NYnlFaHdtA1h0PlCOVhp/N05ZKqaqv4yKx9 4MRQaVGfJMVygfSK80GCycd7RQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFL4EKp01 ffiv85Wng3Owm6Me0W7uMB8GA1UdIwQYMBaAFMcL89/0UCPUGvTE3112UEC5JBrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDNGRS85ODE0ODA2Mjk1 NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5UWE5TVRmWFhaUVFMa2tH c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3dnozX1JRSTlRYTlNVGZYWFpRUUxra0dzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQzRkUvOTgxNDgwNjI5NTY1MTFFQzkxODNCRTUzQzRGOUFFMDIvNUFERjRDOTI5 NTY4MTFFQzkwMjhGMTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3wd8AwDQYJKoZIhvcNAQELBQADggEBANDwT8zyDWuS XeC8c/AQf0hGr0xvp+ZmfpQhRVT4ThiWJfsbtvLWix5sz7WqJ+4IHE89vcoVhgba mb0t9pFG7LWPqHO5ATHskDwijrBaDp3F2U8wOmATbHxLEKdZg9Dg5zr7vQ3mOiLi rbCO4skt3OvAovQHCXMNN18GWPkaEUyD5EL31wcXW9HhMYPaVzEQ1xIS4vN2dQBb bsQ/yt8d0Mn8F+lir27A9HrRTYftR1iFM8gq66kK3bmDE0SQBPc90pxPd1lM+iAY 3+e1UKT6f83z7QpI6gWrTTfaFcVrgQIcPfqRSBB9F5llxL5EBoIXvnFlC8Gs0DZv Z2q4TysbWiA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:27 2025 by rpki-client