$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4EE07E481F7F11ECA7242F6CC4F9AE02.roa File: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (raw, json) Hash identifier: Hnemh9EwwTeduD1Zc7gVprQ1BQwQSdNFXtPrRgQGYJ0= Subject key identifier: 11:1D:55:7C:51:38:69:2C:21:A2:C9:97:CA:82:AF:B7:83:46:BE:78 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 35C7 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4EE07E481F7F11ECA7242F6CC4F9AE02.roa Signing time: Thu 24 Jul 2025 14:50:20 +0000 ROA not before: Thu 24 Jul 2025 14:50:20 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 134461 IP address blocks: 2405:a000:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13767 (0x35c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jul 24 14:50:20 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6882482c-6ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:82:45:82:eb:f5:07:19:de:d8:f1:2b:e2:d2: 8e:5f:96:82:22:ca:bb:a7:90:9d:7e:f6:1d:1a:d6: cf:14:93:0f:be:83:52:d9:ed:94:44:5e:9a:a5:6e: 1e:c2:4e:17:8c:01:6a:74:97:5f:65:81:1d:18:4b: 14:8f:5d:f2:8f:6c:e8:f1:e4:59:d2:25:20:42:8b: f7:6f:05:36:39:3c:0e:ad:73:63:89:9b:77:fe:cb: 38:8b:da:4d:ac:41:ac:54:e3:1f:91:74:ff:81:3e: b6:e3:ff:6f:fa:86:2f:0c:5e:2e:f7:a8:d0:d4:7d: 20:f2:f2:72:85:cd:88:0c:9d:6f:e4:cf:5d:30:b1: 01:1b:4c:aa:e3:ac:29:7f:31:9d:c6:4d:06:3b:e7: 65:50:32:c9:f7:6d:91:8b:c3:9e:cf:be:0d:cc:8a: c0:22:54:85:d1:05:52:7f:4b:03:87:7d:38:ed:49: 67:71:a3:c8:f0:8a:ab:da:f1:e9:e4:14:09:4b:63: b6:05:f8:43:89:00:f1:2e:50:d7:7f:f1:de:92:97: 0d:d2:33:74:85:5a:e9:72:98:f4:83:bc:79:f3:7f: ed:f6:aa:97:e6:a2:4d:0a:6c:40:2d:03:d6:68:0b: a8:a7:da:65:75:fe:27:da:15:0d:c9:13:f7:83:17: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1D:55:7C:51:38:69:2C:21:A2:C9:97:CA:82:AF:B7:83:46:BE:78 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4EE07E481F7F11ECA7242F6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:a000:20::/48 Signature Algorithm: sha256WithRSAEncryption b6:8b:43:b1:49:91:59:49:92:7a:a7:c8:c9:59:ae:be:74:bc: 83:5f:b7:08:98:46:d4:94:a9:ad:e8:3b:9f:ec:c3:69:ad:9a: b1:90:93:fe:d5:55:43:c2:39:a1:aa:3b:db:1c:85:2a:61:2f: fa:9c:19:3f:94:fd:9c:89:6a:00:64:c0:ef:be:1f:71:7c:bd: 41:80:49:4e:52:f6:13:a9:6f:35:a1:a1:e9:00:f4:6b:24:a0: dd:61:bd:ec:d7:01:60:0e:9d:1c:da:0e:cd:f3:e5:61:71:26: 11:13:0c:a4:2c:69:e0:2f:4b:44:91:b1:ef:6a:1e:90:80:9b: a1:ca:94:3d:3e:31:27:2e:44:aa:03:d4:85:cf:86:d4:48:21: cc:eb:37:89:01:55:b9:65:f0:fd:c2:e7:45:d0:62:2c:2e:da: 02:25:37:6e:7f:a7:11:8a:b3:c8:5e:f6:1e:8d:cb:43:dc:b3: ad:09:69:cb:47:ec:3c:63:01:05:e5:0e:17:61:60:1a:1b:dc: 1a:42:ba:8b:d4:b8:0c:8d:49:e0:ac:8c:d4:ab:aa:c5:aa:7b: 5e:02:20:a7:c3:26:e4:55:cb:14:21:b0:d2:29:da:e7:01:b4: 2c:96:9b:28:2e:5c:be:3e:66:55:ca:a7:ef:bf:28:e9:65:79: 01:b6:25:58 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICNccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjUwNzI0MTQ1MDIwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyNDgyYy02ZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oJFguv1Bxne2PEr4tKOX5aCIsq7p5CdfvYdGtbPFJMPvoNS2e2URF6apW4e wk4XjAFqdJdfZYEdGEsUj13yj2zo8eRZ0iUgQov3bwU2OTwOrXNjiZt3/ss4i9pN rEGsVOMfkXT/gT624/9v+oYvDF4u96jQ1H0g8vJyhc2IDJ1v5M9dMLEBG0yq46wp fzGdxk0GO+dlUDLJ922Ri8Oez74NzIrAIlSF0QVSf0sDh3047UlncaPI8Iqr2vHp 5BQJS2O2BfhDiQDxLlDXf/HekpcN0jN0hVrpcpj0g7x583/t9qqX5qJNCmxALQPW aAuop9pldf4n2hUNyRP3gxeDawIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBEdVXxR OGksIaLJl8qCr7eDRr54MB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNEVFMDdFNDgx RjdGMTFFQ0E3MjQyRjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBaAAACAwDQYJKoZIhvcNAQELBQADggEBALaLQ7FJkVlJ knqnyMlZrr50vINftwiYRtSUqa3oO5/sw2mtmrGQk/7VVUPCOaGqO9schSphL/qc GT+U/ZyJagBkwO++H3F8vUGASU5S9hOpbzWhoekA9GskoN1hvezXAWAOnRzaDs3z 5WFxJhETDKQsaeAvS0SRse9qHpCAm6HKlD0+MScuRKoD1IXPhtRIIczrN4kBVbll 8P3C50XQYiwu2gIlN25/pxGKs8he9h6Ny0Pcs60JactH7DxjAQXlDhdhYBob3BpC uovUuAyNSeCsjNSrqsWqe14CIKfDJuRVyxQhsNIp2ucBtCyWmyguXL4+ZlXKp++/ KOlleQG2JVg= -----END CERTIFICATE-----Generated at Mon Aug 11 10:31:09 2025 by rpki-client