$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0E4A1946AB211F0976F001AC4F9AE02.roa File: D0E4A1946AB211F0976F001AC4F9AE02.roa (raw, json) Hash identifier: mZq4ESa3sYKUhMXlPEh614v/+7uhBeYVmsv4x4LdoBk= Subject key identifier: E9:C6:98:42:AC:A9:B0:D1:40:06:48:DE:ED:EE:45:4E:BF:89:55:5B Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: 86 Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0E4A1946AB211F0976F001AC4F9AE02.roa Signing time: Sun 27 Jul 2025 06:27:49 +0000 ROA not before: Sun 27 Jul 2025 06:27:49 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 142419 IP address blocks: 2401:e920:fffd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: Jul 27 06:27:49 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6885c6e5-403a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:3c:1b:27:78:8c:8b:79:35:c8:79:bb:16: ed:5d:fe:60:10:2b:66:2f:46:16:1c:d4:b4:54:50: f5:0c:c4:30:fe:9e:63:ba:c3:d1:35:8b:38:7f:56: 74:3b:6b:87:25:56:64:9c:92:6c:e7:6f:fe:e0:e1: 57:94:1e:85:7f:1b:b0:33:f8:27:42:72:54:9e:c0: 8d:c3:b9:0e:35:bb:83:c7:dd:4b:8f:6c:9a:d6:04: 98:df:27:42:2f:1a:60:6f:66:72:10:e9:2a:1e:dd: f2:1e:91:3f:7c:4b:d4:4a:bd:21:1e:3d:e5:ed:8e: 66:8f:bc:5f:c0:b5:d7:bb:50:d0:bb:a8:5c:08:38: 46:a9:25:5d:ec:d3:60:3b:06:3e:11:ac:31:e4:6a: 97:8e:01:17:56:8b:11:91:f1:36:8f:67:e0:88:f6: bf:63:b4:56:bd:20:fc:92:63:26:bf:8e:48:11:99: a6:6e:fd:94:aa:29:4b:d3:e6:a5:6a:d8:a8:b8:b5: 1c:c9:26:61:91:0e:8c:3e:0e:ac:ce:80:61:35:2e: 90:16:d1:0f:76:c7:58:f6:48:ba:5a:43:53:da:3e: 67:02:2b:8c:66:ca:4e:89:61:65:48:0a:5f:3c:d0: b3:cc:40:24:c2:a2:b3:5d:dc:3a:c7:bc:6b:92:a8: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C6:98:42:AC:A9:B0:D1:40:06:48:DE:ED:EE:45:4E:BF:89:55:5B X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0E4A1946AB211F0976F001AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:e920:fffd::/48 Signature Algorithm: sha256WithRSAEncryption 82:18:e4:fc:30:b3:d7:10:8b:86:51:66:82:e7:6d:20:80:59: cc:39:82:c8:4b:46:bd:32:62:9a:09:d9:99:4c:d7:6e:0e:7a: af:8b:0b:93:55:f5:fb:80:52:3a:df:0e:3a:ff:2d:e3:45:ac: f1:f8:5a:1c:ad:ef:3f:04:82:ff:87:9e:b1:19:16:d9:37:ca: 59:fc:3a:e0:c6:e9:d8:99:a2:f0:7b:b2:67:f3:36:1a:71:e2: ab:c5:d1:cd:53:7a:a6:52:11:51:73:f1:7e:66:7e:61:92:4a: 36:68:f2:71:06:72:5f:0a:fa:cb:ec:fd:bf:75:8a:61:3a:ee: b2:e4:5e:62:dc:c0:b2:68:22:dd:10:51:ae:1b:2f:d5:f8:11: 00:b0:b4:35:12:87:ba:16:8a:f4:1e:c1:b8:1b:75:46:48:53: 69:0a:c5:51:d4:8e:cf:ed:d0:8b:7c:bd:fa:75:f7:97:67:8a: 8e:8a:e4:43:34:c4:b4:91:25:86:c7:35:6f:57:ef:3b:31:4f: f7:b7:0d:ea:37:ce:3f:7d:9e:c5:be:be:f1:43:53:46:31:d6: 20:9c:34:85:aa:ad:45:e2:a4:80:fc:17:ab:91:28:8c:46:51: ec:1d:c5:a0:99:9c:25:5f:3f:f0:72:00:dd:09:91:a1:1a:53: 59:38:8d:32 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKEY2OThCNUI0N0EwNkQ1MzA3REVDNjA4OTY5MDYzMDc0 QjY4RkY1Q0EwHhcNMjUwNzI3MDYyNzQ5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg1YzZlNS00MDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyo8Gyd4jIt5Nch5uxbtXf5gECtmL0YWHNS0VFD1DMQw/p5jusPRNYs4f1Z0 O2uHJVZknJJs52/+4OFXlB6FfxuwM/gnQnJUnsCNw7kONbuDx91Lj2ya1gSY3ydC Lxpgb2ZyEOkqHt3yHpE/fEvUSr0hHj3l7Y5mj7xfwLXXu1DQu6hcCDhGqSVd7NNg OwY+Eawx5GqXjgEXVosRkfE2j2fgiPa/Y7RWvSD8kmMmv45IEZmmbv2UqilL0+al atiouLUcySZhkQ6MPg6szoBhNS6QFtEPdsdY9ki6WkNT2j5nAiuMZspOiWFlSApf PNCzzEAkwqKzXdw6x7xrkqjZZwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOnGmEKs qbDRQAZI3u3uRU6/iVVbMB8GA1UdIwQYMBaAFPaYtbR6BtUwfexgiWkGMHS2j/XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DOTI4MDQzQUQx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFUQjk3R0NKYVFZd2RMYVA5 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDljby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg1RTkvQzkyODA0M0FEMTc2MTFFRjk1QzVERTVBQzRGOUFFMDIvRDBFNEExOTQ2 QUIyMTFGMDk3NkYwMDFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAekg//0wDQYJKoZIhvcNAQELBQADggEBAIIY5Pwws9cQ i4ZRZoLnbSCAWcw5gshLRr0yYpoJ2ZlM124Oeq+LC5NV9fuAUjrfDjr/LeNFrPH4 Whyt7z8Egv+HnrEZFtk3yln8OuDG6diZovB7smfzNhpx4qvF0c1TeqZSEVFz8X5m fmGSSjZo8nEGcl8K+svs/b91imE67rLkXmLcwLJoIt0QUa4bL9X4EQCwtDUSh7oW ivQewbgbdUZIU2kKxVHUjs/t0It8vfp195dnio6K5EM0xLSRJYbHNW9X7zsxT/e3 Deo3zj99nsW+vvFDU0Yx1iCcNIWqrUXipID8F6uRKIxGUewdxaCZnCVfP/ByAN0J kaEaU1k4jTI= -----END CERTIFICATE-----Generated at Tue Aug 5 17:26:52 2025 by rpki-client