$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7CCAAFA6F58A11EFA9C8FE1EC4F9AE02.roa File: 7CCAAFA6F58A11EFA9C8FE1EC4F9AE02.roa (raw, json) Hash identifier: 5OQ9m7Rwmjqi+0vrKUmNpFIEmxBJfxgbwnZHsXsHyWo= Subject key identifier: 79:EE:09:FF:04:9B:00:7D:3A:A5:52:21:A1:76:4F:91:B2:DB:D0:4C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4DB9 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7CCAAFA6F58A11EFA9C8FE1EC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:55:56 +0000 ROA not before: Thu 28 Aug 2025 14:55:56 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152935 IP address blocks: 2001:df4:b840::/48 maxlen: 48 2001:df4:de40::/48 maxlen: 48 2001:df4:eec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19897 (0x4db9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:55:56 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06dfc-a59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:41:56:33:fe:9e:b0:42:2b:76:58:59:73: 0f:ef:60:e7:58:a1:f4:51:23:7c:e3:60:75:58:15: 6a:94:97:de:fc:1b:70:2c:c4:35:c0:5a:bc:59:47: 4a:a8:b2:61:75:eb:0f:84:ca:5f:98:3c:43:d7:2e: 7b:a5:13:76:ca:21:86:b0:9b:c9:21:c2:ea:51:17: 5f:1a:3f:a1:c1:6a:ce:2e:be:a3:74:89:5f:11:a4: 1e:0e:d0:fd:7e:b2:b0:7d:5f:77:50:ac:9f:f9:e0: 6a:1f:77:92:08:c1:ba:62:cb:30:7c:29:82:4e:75: f4:26:86:8d:27:c4:25:30:5e:6a:01:84:f2:ca:ae: 7a:c4:83:24:48:79:69:72:d8:5d:5b:c7:8f:99:63: ca:65:a8:d8:56:2c:72:9d:3d:a9:2e:61:97:09:b0: ba:55:d1:29:32:92:55:f2:c8:0f:1c:93:ac:78:a3: 11:ab:f9:43:c0:e6:2d:6a:59:29:97:4a:dc:0c:dd: a5:57:cc:62:96:c5:a4:f6:7d:5f:a8:7a:14:0e:cc: fe:69:9e:b2:5f:46:a7:59:21:23:c6:86:be:6c:fa: 81:75:97:0a:3a:46:f3:9f:68:71:15:75:7b:62:8a: a1:38:1f:2d:e6:7a:36:38:e3:7c:68:51:f9:01:dc: 57:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EE:09:FF:04:9B:00:7D:3A:A5:52:21:A1:76:4F:91:B2:DB:D0:4C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7CCAAFA6F58A11EFA9C8FE1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:b840::/48 2001:df4:de40::/48 2001:df4:eec0::/48 Signature Algorithm: sha256WithRSAEncryption 16:44:b5:54:c8:d8:6b:28:78:8a:20:b7:a7:00:29:8e:50:12: b0:46:79:ac:67:4f:b0:61:d0:bd:93:88:5e:48:f0:bd:16:1f: df:d6:b1:a1:8f:99:a4:74:82:1e:37:50:bc:96:36:3b:6e:c2: 96:52:44:e7:cc:b6:83:4b:39:f2:68:f7:c0:c8:31:45:25:a9: 7c:bd:02:e2:5a:f2:dd:5b:c8:be:91:17:f6:62:e0:89:09:a4: f4:3a:69:70:41:bd:9f:b4:1e:8b:af:9f:db:7b:b4:a5:a8:38: 2b:35:88:d3:a8:58:c4:17:c9:73:61:a2:11:7e:47:a7:52:42: e8:25:8d:7d:ca:88:be:e1:1e:20:b0:50:f6:11:ba:bd:98:33: 2f:90:42:7b:7e:db:ef:27:bc:1d:df:ef:b9:23:39:0b:ce:b9: d6:50:82:01:59:bd:6c:3c:fc:ed:cb:fa:3d:40:89:00:70:9b: 0c:9e:c1:2d:ee:15:dd:0f:21:1b:dd:83:7e:8f:39:f7:cb:bf: fb:b6:c0:7f:a5:33:fb:d1:39:34:11:cc:37:fb:ad:2e:76:0a: 2e:2c:b0:59:b4:de:0f:77:63:32:42:b0:5a:b5:3f:37:15:ea: 71:95:ad:c9:1f:00:93:b2:fb:80:37:3c:0a:18:bf:84:dd:08: 91:c3:d9:ba -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICTbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NTU2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmRmYy1hNTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqz9BVjP+nrBCK3ZYWXMP72DnWKH0USN842B1WBVqlJfe/BtwLMQ1wFq8WUdK qLJhdesPhMpfmDxD1y57pRN2yiGGsJvJIcLqURdfGj+hwWrOLr6jdIlfEaQeDtD9 frKwfV93UKyf+eBqH3eSCMG6YsswfCmCTnX0JoaNJ8QlMF5qAYTyyq56xIMkSHlp cthdW8ePmWPKZajYVixynT2pLmGXCbC6VdEpMpJV8sgPHJOseKMRq/lDwOYtalkp l0rcDN2lV8xilsWk9n1fqHoUDsz+aZ6yX0anWSEjxoa+bPqBdZcKOkbzn2hxFXV7 YoqhOB8t5no2OON8aFH5AdxXBwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHnuCf8E mwB9OqVSIaF2T5Gy29BMMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvN0NDQUFGQTZG NThBMTFFRkE5QzhGRTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMCEEAgACMBsDBwAgAQ30uEADBwAgAQ303kADBwAgAQ307sAwDQYJKoZIhvcN AQELBQADggEBABZEtVTI2GsoeIogt6cAKY5QErBGeaxnT7Bh0L2TiF5I8L0WH9/W saGPmaR0gh43ULyWNjtuwpZSROfMtoNLOfJo98DIMUUlqXy9AuJa8t1byL6RF/Zi 4IkJpPQ6aXBBvZ+0Houvn9t7tKWoOCs1iNOoWMQXyXNhohF+R6dSQugljX3KiL7h HiCwUPYRur2YMy+QQnt+2+8nvB3f77kjOQvOudZQggFZvWw8/O3L+j1AiQBwmwye wS3uFd0PIRvdg36POffLv/u2wH+lM/vROTQRzDf7rS52Ci4ssFm03g93YzJCsFq1 PzcV6nGVrckfAJOy+4A3PAoYv4TdCJHD2bo= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:08 2025 by rpki-client