$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/7F9EB0A28CF111F09EC8727CC4F9AE02.roa File: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (raw, json) Hash identifier: BxPajmDdLGfIydsWc2EIPgDs9jrVdPhKlvGIPc4xwYE= Subject key identifier: 52:2D:99:C8:F9:3E:8E:EF:61:08:5A:63:02:A4:B1:3A:C6:0D:63:95 Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 082E Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/7F9EB0A28CF111F09EC8727CC4F9AE02.roa Signing time: Mon 08 Sep 2025 20:22:10 +0000 ROA not before: Mon 08 Sep 2025 20:22:10 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 206300 IP address blocks: 2404:8c80:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2094 (0x82e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Sep 8 20:22:10 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68bf3af2-7124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:93:a6:79:3b:a7:c9:5a:fe:22:80:a3:02:d2: a5:64:a5:fc:c8:00:63:95:87:a0:a6:2d:d7:5c:25: f6:46:d1:1d:b8:0b:b2:b4:c9:4e:c5:6a:53:ba:47: e5:84:fe:fb:a6:07:af:0f:3e:35:f1:96:f9:c4:6e: e6:a1:bf:e4:72:ed:b4:9d:0b:06:94:14:9b:20:25: 2b:5b:fe:a1:d4:f3:e7:91:5a:79:90:19:a8:3b:1c: 29:22:44:e2:46:2d:66:ff:d2:73:85:a0:36:e6:f3: 81:8e:1c:6f:9a:9e:59:41:cd:a0:af:58:4b:27:93: aa:29:bb:75:1c:59:bc:df:fc:e8:e9:f2:20:05:a0: ec:c5:d0:80:44:06:e3:3f:cc:4f:1b:6a:aa:6a:61: b5:2c:d1:89:bd:92:e1:b9:df:32:b3:b4:c8:1e:63: a1:24:83:de:95:c0:36:ee:3c:1e:90:ef:ee:ac:7f: 2b:b0:eb:4c:bb:62:e9:76:7d:fe:75:49:93:7a:50: ec:de:d2:e2:65:8a:59:af:93:1a:aa:b4:07:43:05: 7b:d4:4b:93:eb:c6:8d:62:57:04:78:a7:8a:04:aa: 02:33:79:5e:b6:63:53:15:f9:33:73:e6:56:03:84: 6f:c4:ac:8c:ca:76:69:b1:05:fb:ff:92:e6:63:99: 5e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2D:99:C8:F9:3E:8E:EF:61:08:5A:63:02:A4:B1:3A:C6:0D:63:95 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/7F9EB0A28CF111F09EC8727CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:8c80:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 6b:3a:54:b1:65:98:20:2e:1b:72:51:6a:55:90:93:f4:1b:dc: 66:0d:af:e6:26:3a:8c:b1:a3:df:ff:95:33:b9:70:c5:49:7b: a3:0d:fa:d6:28:b0:47:6f:d1:fc:d0:d9:f3:a1:4e:7c:18:fe: 21:bc:19:de:68:77:a5:b1:df:60:e2:93:57:2a:09:b6:d5:96: 62:13:1e:24:56:f0:aa:b1:5a:be:1a:2f:8b:fc:31:14:94:bf: 5b:31:76:9e:70:f6:1e:2b:c4:81:83:f7:80:c4:60:ab:cc:b7: ae:79:2b:3f:e5:c7:ed:1f:de:31:d3:b5:e4:79:b9:69:9a:d3: b3:63:0d:e7:c2:2b:d0:79:ea:b9:be:4f:a5:75:a3:66:74:4e: e0:a2:09:08:9a:99:d4:95:46:95:b6:9f:73:9d:99:3f:d8:0e: cf:89:45:6f:e8:a1:2e:86:72:f7:fc:a0:46:e7:81:e5:6f:e9: b1:f7:65:c5:c9:34:ec:53:22:94:70:fb:c0:05:69:46:0a:4d: bd:45:cf:ee:2d:26:02:b3:c4:3f:ea:74:8d:98:a3:8f:46:77: 5e:26:ff:f0:f9:38:0c:f4:1c:00:a4:5d:96:3c:3a:2e:f1:fe: 8e:3b:25:e2:1f:6f:9a:c9:09:0c:1b:6b:9d:67:e4:29:bd:5d: e0:a4:bd:2c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjUwOTA4MjAyMjEwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJmM2FmMi03MTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5OmeTunyVr+IoCjAtKlZKX8yABjlYegpi3XXCX2RtEduAuytMlOxWpTukfl hP77pgevDz418Zb5xG7mob/kcu20nQsGlBSbICUrW/6h1PPnkVp5kBmoOxwpIkTi Ri1m/9JzhaA25vOBjhxvmp5ZQc2gr1hLJ5OqKbt1HFm83/zo6fIgBaDsxdCARAbj P8xPG2qqamG1LNGJvZLhud8ys7TIHmOhJIPelcA27jwekO/urH8rsOtMu2Lpdn3+ dUmTelDs3tLiZYpZr5MaqrQHQwV71EuT68aNYlcEeKeKBKoCM3letmNTFfkzc+ZW A4RvxKyMynZpsQX7/5LmY5lenQIDAQABo4IClzCCApMwHQYDVR0OBBYEFFItmcj5 Po7vYQhaYwKksTrGDWOVMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk3QzIvNEU0MjZERThGQkVBMTFFQTk0MEExRDE5QzRGOUFFMDIvN0Y5RUIwQTI4 Q0YxMTFGMDlFQzg3MjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkBIyA/zANBgkqhkiG9w0BAQsFAAOCAQEAazpUsWWYIC4b clFqVZCT9BvcZg2v5iY6jLGj3/+VM7lwxUl7ow361iiwR2/R/NDZ86FOfBj+IbwZ 3mh3pbHfYOKTVyoJttWWYhMeJFbwqrFavhovi/wxFJS/WzF2nnD2HivEgYP3gMRg q8y3rnkrP+XH7R/eMdO15Hm5aZrTs2MN58Ir0Hnqub5PpXWjZnRO4KIJCJqZ1JVG lbafc52ZP9gOz4lFb+ihLoZy9/ygRueB5W/psfdlxck07FMilHD7wAVpRgpNvUXP 7i0mArPEP+p0jZijj0Z3Xib/8Pk4DPQcAKRdljw6LvH+jjsl4h9vmskJDBtrnWfk Kb1d4KS9LA== -----END CERTIFICATE-----Generated at Wed Nov 5 00:03:21 2025 by rpki-client