$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/B44C2C06B4B211F08EEFDF43C4F9AE02.roa File: B44C2C06B4B211F08EEFDF43C4F9AE02.roa (raw, json) Hash identifier: owXPWWTvbOHMdijTrjs5nUjJn72ZVck6W96FPsIZ2aI= Subject key identifier: 53:BE:98:4A:EC:59:EB:58:E7:79:E0:C9:C8:9F:4F:9D:5A:26:17:14 Certificate issuer: /CN=A9192F5B/serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA Certificate serial: 02 Authority key identifier: 5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/B44C2C06B4B211F08EEFDF43C4F9AE02.roa Signing time: Wed 29 Oct 2025 10:33:27 +0000 ROA not before: Wed 29 Oct 2025 10:33:27 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154327 IP address blocks: 2001:df6:4340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192F5B, serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA Validity Not Before: Oct 29 10:33:27 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6901ed77-0477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:81:83:4a:0a:da:a6:8f:c4:22:ea:5d:cf:0b: 51:7c:00:1f:c2:cf:b2:a2:af:ca:ef:9a:58:52:59: 43:38:1e:b6:53:31:69:3f:fb:19:2f:5d:20:60:84: 86:54:1d:82:2c:84:b0:b7:6a:8d:b8:8c:3b:9e:79: c8:a5:3c:0d:ed:c7:4a:f5:ac:83:08:10:df:71:98: cd:d2:23:6c:f2:80:e5:51:4c:d8:d4:ff:1c:e6:43: bb:d6:df:32:ac:4e:2b:60:53:12:01:9f:60:99:1a: 49:13:3c:89:67:31:95:84:27:21:7a:13:19:be:08: e7:bc:e3:1b:83:cf:30:9a:46:ee:df:78:40:33:ad: 40:eb:07:f1:91:cc:54:bd:41:38:dd:26:47:ea:75: dc:78:9e:03:e7:d0:00:a1:13:55:18:44:b0:79:09: d1:f1:8c:cb:a2:3c:58:e9:0c:a2:15:92:0b:1e:ca: ee:d4:b8:6a:54:38:53:75:9d:84:6b:a7:4b:5a:fe: e0:ec:19:78:53:fb:42:e6:47:d7:f5:86:d2:04:1f: 87:1e:82:f8:44:e5:e4:a2:97:57:b9:8e:36:58:62: d2:a5:5f:94:37:75:29:ee:fa:25:45:d7:4d:9e:99: bf:df:6d:9c:97:4e:51:63:81:07:b1:17:b6:79:22: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BE:98:4A:EC:59:EB:58:E7:79:E0:C9:C8:9F:4F:9D:5A:26:17:14 X509v3 Authority Key Identifier: keyid:5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/B44C2C06B4B211F08EEFDF43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:4340::/48 Signature Algorithm: sha256WithRSAEncryption d1:54:38:af:5d:d5:4f:3b:3b:ee:97:b1:82:98:a1:bf:67:12: 78:32:d3:d4:9c:fe:24:ed:3e:7d:0f:11:73:80:eb:f1:6b:ab: 45:62:99:51:a5:75:d4:08:00:70:d1:92:6e:aa:9f:7a:b4:d8: d9:eb:d1:83:8a:69:cf:15:87:80:cd:26:80:2a:1a:8f:e5:ed: ec:c3:a6:b0:7c:ad:12:35:c5:cb:fd:2d:6d:33:ec:e6:b8:c9: 62:78:7d:80:96:8f:08:f7:f4:d7:8c:eb:50:a5:ef:a0:f1:d5: 2e:10:f5:bb:23:78:92:9d:bd:e7:68:dd:3d:87:da:e7:60:a4: 4f:aa:45:d9:70:90:fe:c1:13:1f:28:6c:34:61:53:5d:67:88: f8:89:71:bc:3e:48:a6:3a:cf:c9:20:a9:50:d5:b3:0a:dc:95: e6:61:0d:9b:de:b8:7d:d3:37:23:1c:0c:c6:5c:2c:3b:77:9f: 3b:22:3b:d7:6e:83:ba:25:60:25:aa:20:2a:62:5c:df:e3:2b: 0e:4a:89:4c:f5:df:f3:6a:7c:eb:8b:5f:96:54:f8:c9:31:15: 16:a1:cb:b9:69:19:3e:c7:ce:92:93:eb:a5:e0:ad:95:6f:e6: 63:26:bb:a9:15:a3:d3:a0:1e:c5:b9:40:54:8e:f2:84:0b:34: 34:08:48:f2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkY1QjExMC8GA1UEBRMoNUZFRDA0MEZBNkM2QjY1NjRFNDAyQjJFQjc2MzY5MkNF MjQzMDdFQTAeFw0yNTEwMjkxMDMzMjdaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MDFlZDc3LTA0NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRgYNKCtqmj8Qi6l3PC1F8AB/Cz7Kir8rvmlhSWUM4HrZTMWk/+xkvXSBghIZU HYIshLC3ao24jDueecilPA3tx0r1rIMIEN9xmM3SI2zygOVRTNjU/xzmQ7vW3zKs TitgUxIBn2CZGkkTPIlnMZWEJyF6Exm+COe84xuDzzCaRu7feEAzrUDrB/GRzFS9 QTjdJkfqddx4ngPn0AChE1UYRLB5CdHxjMuiPFjpDKIVkgseyu7UuGpUOFN1nYRr p0ta/uDsGXhT+0LmR9f1htIEH4cegvhE5eSil1e5jjZYYtKlX5Q3dSnu+iVF102e mb/fbZyXTlFjgQexF7Z5IhzxAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUU76YSuxZ 61jneeDJyJ9PnVomFxQwHwYDVR0jBBgwFoAUX+0ED6bGtlZOQCsut2NpLOJDB+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyRjVCL0Q3MURDMjU0QjRC MTExRjBBREMyQjExRkM0RjlBRTAyL1gtMEVENmJHdGxaT1FDc3V0Mk5wTE9KREIt by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWC0wRUQ2Ykd0bFpPUUNzdXQyTnBMT0pEQi1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkY1Qi9ENzFEQzI1NEI0QjExMUYwQURDMkIxMUZDNEY5QUUwMi9CNDRDMkMwNkI0 QjIxMUYwOEVFRkRGNDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfZDQDANBgkqhkiG9w0BAQsFAAOCAQEA0VQ4r13VTzs7 7pexgpihv2cSeDLT1Jz+JO0+fQ8Rc4Dr8WurRWKZUaV11AgAcNGSbqqferTY2evR g4ppzxWHgM0mgCoaj+Xt7MOmsHytEjXFy/0tbTPs5rjJYnh9gJaPCPf014zrUKXv oPHVLhD1uyN4kp2952jdPYfa52CkT6pF2XCQ/sETHyhsNGFTXWeI+IlxvD5IpjrP ySCpUNWzCtyV5mENm964fdM3IxwMxlwsO3efOyI7126DuiVgJaogKmJc3+MrDkqJ TPXf82p864tfllT4yTEVFqHLuWkZPsfOkpPrpeCtlW/mYya7qRWj06AexblAVI7y hAs0NAhI8g== -----END CERTIFICATE-----Generated at Wed Nov 5 17:28:15 2025 by rpki-client