$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/0D90C6C899BC11EEBF0F7411C4F9AE02.roa File: 0D90C6C899BC11EEBF0F7411C4F9AE02.roa (raw, json) Hash identifier: DbQzBvOnAFe3BB3LeWsRDpUaJHvQEKXpReB3hECf9GM= Subject key identifier: 0D:39:F2:E7:98:B9:CE:CB:24:69:FF:92:FF:66:90:2B:D0:1F:04:2C Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0E7C Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/0D90C6C899BC11EEBF0F7411C4F9AE02.roa Signing time: Mon 04 Aug 2025 06:39:57 +0000 ROA not before: Mon 04 Aug 2025 06:39:57 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 209554 IP address blocks: 2001:df1:4580::/48 maxlen: 48 2405:84c0::/48 maxlen: 48 2405:84c0:2000::/36 maxlen: 40 2405:84c0:4000::/36 maxlen: 40 2405:84c0:5000::/36 maxlen: 40 2405:84c0:6800::/40 maxlen: 44 2405:84c0:6f00::/40 maxlen: 44 2405:84c0:8000::/44 maxlen: 48 2405:84c0:8010::/44 maxlen: 48 2405:84c0:8020::/44 maxlen: 48 2405:84c0:8030::/44 maxlen: 48 2405:84c0:8040::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3708 (0xe7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Aug 4 06:39:57 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=689055bc-37c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:d1:54:11:1f:88:12:01:8b:1f:55:b0:58: a8:1d:b1:fc:9d:b3:3d:d3:a4:ae:cf:99:85:ad:81: 93:f2:71:52:05:f5:86:46:0e:b3:c0:9c:7e:7a:9b: 20:25:84:5b:b9:ce:9b:af:be:9c:bb:7c:92:5c:13: 8c:d5:8f:72:18:ae:47:44:b2:6d:0e:cc:38:9a:9b: 0b:f4:c8:cd:64:a2:88:34:96:6a:07:94:57:bb:22: 7d:4d:5f:2d:3e:a3:a4:0b:26:54:94:02:37:8d:ce: 30:fa:3f:68:da:ec:c8:4a:ff:10:d0:92:75:d4:27: 14:ca:c1:89:61:66:81:6d:87:1e:cd:6a:94:c8:dd: 4a:b2:39:e4:77:6f:96:ad:31:a4:3a:0d:5e:14:bc: 25:6f:ae:bd:08:21:84:64:04:94:4e:27:53:65:b3: cb:66:81:1b:08:13:1e:8a:00:cf:70:3b:26:c0:ca: b3:ce:45:b3:78:59:f6:9e:b2:5a:cb:80:f7:e7:e1: d2:02:e6:e2:70:0d:c8:92:aa:59:d1:2f:0c:29:04: 07:6b:34:61:7d:eb:f6:07:fe:75:2d:5f:a3:77:23: 8a:ad:c6:fb:06:a9:7b:79:63:14:f0:a1:6f:a0:ab: b6:7f:dd:6d:b1:a4:f4:cb:16:b9:4b:b7:8c:2d:30: b2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:39:F2:E7:98:B9:CE:CB:24:69:FF:92:FF:66:90:2B:D0:1F:04:2C X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/0D90C6C899BC11EEBF0F7411C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:4580::/48 2405:84c0::/48 2405:84c0:2000::/36 2405:84c0:4000::/35 2405:84c0:6800::/40 2405:84c0:6f00::/40 2405:84c0:8000::-2405:84c0:804f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 64:4b:ce:03:c4:ae:59:21:d6:aa:b6:6c:2c:22:fe:b6:1f:1c: fa:e4:64:46:0f:f5:29:db:d9:14:05:0c:ac:5b:37:c1:3c:07: 2b:07:c2:27:fc:d8:5b:1f:84:19:24:cf:ca:0a:a2:6a:53:ec: e2:42:96:cb:e4:72:86:f8:7c:f4:87:a6:f0:c3:0a:3f:a6:05: 45:1c:af:dd:d2:69:12:38:1c:b8:82:71:14:c4:2c:36:c6:0f: ad:55:2e:44:e7:ce:4e:de:4b:68:a5:2d:8b:ba:d0:b0:6e:d4: 9b:51:cc:da:c6:14:30:6b:45:6f:fe:90:ff:6a:20:d9:75:4f: 6c:fc:57:7c:4e:a7:5b:88:18:d7:3c:e8:10:da:b0:c0:79:11: 9c:d7:4d:51:7a:c6:a0:e9:30:d5:98:95:2c:a5:bb:70:77:2c: 1f:75:d7:e9:11:f8:bf:86:a6:d4:23:d8:da:ae:1e:ed:cf:b8: 01:fd:d0:26:6e:43:6e:e5:89:72:62:77:dd:cb:a3:c4:17:c0: 84:c2:d2:3e:37:55:a4:a4:4e:06:92:66:22:ea:35:55:05:5c: 87:49:61:63:f4:84:da:f2:cb:c7:ad:30:42:13:49:32:57:4c: 7e:3c:a2:66:aa:c5:5d:38:b3:b2:77:cc:c1:ea:2f:bf:a6:a0: 45:dd:6f:54 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgICDnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjUwODA0MDYzOTU3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkwNTViYy0zN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug7RVBEfiBIBix9VsFioHbH8nbM906Suz5mFrYGT8nFSBfWGRg6zwJx+epsg JYRbuc6br76cu3ySXBOM1Y9yGK5HRLJtDsw4mpsL9MjNZKKINJZqB5RXuyJ9TV8t PqOkCyZUlAI3jc4w+j9o2uzISv8Q0JJ11CcUysGJYWaBbYcezWqUyN1Ksjnkd2+W rTGkOg1eFLwlb669CCGEZASUTidTZbPLZoEbCBMeigDPcDsmwMqzzkWzeFn2nrJa y4D35+HSAubicA3IkqpZ0S8MKQQHazRhfev2B/51LV+jdyOKrcb7Bql7eWMU8KFv oKu2f91tsaT0yxa5S7eMLTCytwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFA058ueY uc7LJGn/kv9mkCvQHwQsMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvMEQ5MEM2Qzg5 OUJDMTFFRUJGMEY3NDExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXgYIKwYBBQUHAQcBAf8E TzBNMEsEAgACMEUDBwAgAQ3xRYADBwAkBYTAAAADBgQkBYTAIAMGBSQFhMBAAwYA JAWEwGgDBgAkBYTAbzARAwYHJAWEwIADBwQkBYTAgEAwDQYJKoZIhvcNAQELBQAD ggEBAGRLzgPErlkh1qq2bCwi/rYfHPrkZEYP9Snb2RQFDKxbN8E8BysHwif82Fsf hBkkz8oKompT7OJClsvkcob4fPSHpvDDCj+mBUUcr93SaRI4HLiCcRTELDbGD61V LkTnzk7eS2ilLYu60LBu1JtRzNrGFDBrRW/+kP9qINl1T2z8V3xOp1uIGNc86BDa sMB5EZzXTVF6xqDpMNWYlSylu3B3LB911+kR+L+GptQj2NquHu3PuAH90CZuQ27l iXJid93Lo8QXwITC0j43VaSkTgaSZiLqNVUFXIdJYWP0hNryy8etMEITSTJXTH48 omaqxV04s7J3zMHqL7+moEXdb1Q= -----END CERTIFICATE-----Generated at Sun Aug 10 05:50:28 2025 by rpki-client