$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/CB608BD0D13311EE8B61C185C4F9AE02.roa File: CB608BD0D13311EE8B61C185C4F9AE02.roa (raw, json) Hash identifier: MU2wUDuyzagHm9F4OiRqXQUJIEzaNG6Nd16FGb/cNZ4= Subject key identifier: 47:50:AD:EE:47:C3:1C:89:6F:60:FD:9C:4D:56:B5:5B:60:68:32:6C Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3F84 Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/CB608BD0D13311EE8B61C185C4F9AE02.roa Signing time: Sat 02 Aug 2025 14:50:11 +0000 ROA not before: Sat 02 Aug 2025 14:50:11 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 10233 IP address blocks: 2001:df7:5380::/48 maxlen: 48 2001:df7:5381::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16260 (0x3f84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: Aug 2 14:50:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688e25a3-52a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:94:34:af:16:55:a4:6c:fa:e4:93:9a:c0: a1:9f:b6:15:cd:60:ea:25:6d:1d:5c:41:b1:fe:9e: 92:89:07:cc:f0:23:ff:22:55:a7:32:1a:aa:46:76: e9:ab:8e:10:8a:d8:0e:b5:48:13:47:ce:d0:f4:84: f7:53:0f:69:01:91:ad:d6:3f:e1:38:02:26:6e:01: 50:a7:8d:ed:8e:ad:02:70:35:0d:62:bb:b3:f2:40: 67:c9:a9:70:0b:9b:94:32:f1:0c:03:bb:25:c5:13: 39:ac:84:28:e8:d7:fb:4b:80:9c:d5:19:e2:94:e7: 59:e2:9e:44:54:c4:68:e9:72:73:36:5b:8d:78:db: af:2b:f9:9a:b0:de:bc:6b:51:d2:93:dc:36:89:cd: c7:12:95:a2:0a:db:a7:85:29:d0:81:a5:38:b8:77: 0c:a2:81:30:35:ed:db:b2:50:cb:cd:80:c8:4b:be: 5c:5e:bf:38:96:df:df:05:8e:0b:2d:f2:d9:fb:80: 0f:51:d7:42:50:dd:f6:30:f1:06:92:de:d5:dc:fa: 06:d4:d4:9f:96:2b:2d:21:a7:75:5d:0b:90:7c:8a: c4:63:b2:70:c0:94:08:13:f9:a1:88:54:65:1f:13: 44:d3:fd:eb:c7:8c:09:73:1a:34:fb:ec:c6:07:ab: 4e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:50:AD:EE:47:C3:1C:89:6F:60:FD:9C:4D:56:B5:5B:60:68:32:6C X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/CB608BD0D13311EE8B61C185C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df7:5380::/47 Signature Algorithm: sha256WithRSAEncryption bc:81:35:05:50:a3:63:d8:72:01:6c:fa:6e:08:15:36:46:3a: 97:43:2f:61:7b:b0:b7:4b:d0:1a:f8:b1:dc:31:b6:25:44:ee: a2:e6:09:74:16:15:74:f5:9c:a4:b4:a6:4f:9c:1e:3b:5f:ff: 2f:2e:b4:78:48:37:12:79:bf:de:78:39:79:72:a6:32:56:21: 67:39:f7:02:1d:db:38:55:b3:16:8b:2d:e4:59:74:f5:1e:b9: b4:c0:d4:bb:24:c4:35:b8:fd:b5:e7:eb:27:bd:0c:04:91:36: 93:75:fb:99:7e:d6:e5:3d:f0:84:96:73:ea:2f:00:52:46:76: 2b:0d:75:7a:1e:2c:23:a5:bc:b6:9e:50:bb:6f:1e:26:8c:93: 03:c8:eb:63:6c:24:d9:30:9e:b2:a7:60:88:06:88:fe:8d:8c: 4e:c1:2f:c4:52:50:d6:fa:e6:b0:e6:cd:e5:c4:9d:e4:e2:20: 3b:48:2d:7f:b7:a4:0e:ca:62:b8:94:b3:a5:7e:4b:2d:a5:fa: 56:c8:ba:ba:16:0c:8f:4c:91:04:ac:b4:7b:c0:92:18:41:1e: 52:94:28:f0:4f:af:62:f8:52:38:67:a2:92:4a:c5:89:5a:04: a5:61:61:66:2e:37:f3:2c:af:c8:3d:10:19:0f:af:a4:17:6f: 84:96:f2:f9 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICP4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjUwODAyMTQ1MDExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMjVhMy01MmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukWUNK8WVaRs+uSTmsChn7YVzWDqJW0dXEGx/p6SiQfM8CP/IlWnMhqqRnbp q44QitgOtUgTR87Q9IT3Uw9pAZGt1j/hOAImbgFQp43tjq0CcDUNYruz8kBnyalw C5uUMvEMA7slxRM5rIQo6Nf7S4Cc1RnilOdZ4p5EVMRo6XJzNluNeNuvK/masN68 a1HSk9w2ic3HEpWiCtunhSnQgaU4uHcMooEwNe3bslDLzYDIS75cXr84lt/fBY4L LfLZ+4APUddCUN32MPEGkt7V3PoG1NSflistIad1XQuQfIrEY7JwwJQIE/mhiFRl HxNE0/3rx4wJcxo0++zGB6tOzwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEdQre5H wxyJb2D9nE1WtVtgaDJsMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTAwMUUvMzVGQTBGNTYxRDc4MTFFMjkzNzcxRkM0MDhCMDJDRDIvQ0I2MDhCRDBE MTMzMTFFRThCNjFDMTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEgAQ33U4AwDQYJKoZIhvcNAQELBQADggEBALyBNQVQo2PY cgFs+m4IFTZGOpdDL2F7sLdL0Br4sdwxtiVE7qLmCXQWFXT1nKS0pk+cHjtf/y8u tHhINxJ5v954OXlypjJWIWc59wId2zhVsxaLLeRZdPUeubTA1LskxDW4/bXn6ye9 DASRNpN1+5l+1uU98ISWc+ovAFJGdisNdXoeLCOlvLaeULtvHiaMkwPI62NsJNkw nrKnYIgGiP6NjE7BL8RSUNb65rDmzeXEneTiIDtILX+3pA7KYriUs6V+Sy2l+lbI uroWDI9MkQSstHvAkhhBHlKUKPBPr2L4UjhnopJKxYlaBKVhYWYuN/Msr8g9EBkP r6QXb4SW8vk= -----END CERTIFICATE-----Generated at Wed Aug 13 00:32:10 2025 by rpki-client