$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8DFF3E8E736D11F0AA6D9947C4F9AE02.roa File: 8DFF3E8E736D11F0AA6D9947C4F9AE02.roa (raw, json) Hash identifier: MW391bEe/T8DJfxtpU1JH/r2tx2heLhjTNzB2Wv8uaU= Subject key identifier: 0B:08:D2:74:B3:BA:45:13:85:68:08:19:0C:FF:48:F0:50:D7:6C:11 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4C1A Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8DFF3E8E736D11F0AA6D9947C4F9AE02.roa Signing time: Thu 07 Aug 2025 09:04:42 +0000 ROA not before: Thu 07 Aug 2025 09:04:42 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 154091 IP address blocks: 2001:df5:e940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 08:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19482 (0x4c1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 7 09:04:42 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68946c2a-bfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:bf:e1:8d:63:39:87:a3:5a:94:e5:0b:91: 38:c6:4d:33:29:18:50:e5:80:3c:3d:14:bb:1a:95: f9:70:5a:4c:b9:b2:4f:cd:20:6a:87:e3:5b:72:51: 61:e3:f6:02:a6:34:0b:d9:94:e5:58:39:28:11:21: 19:4a:40:2f:7b:71:9d:fb:65:b2:44:7d:5f:0a:b7: 7b:0e:8e:9f:a1:65:87:b9:d1:9e:50:a6:e8:d6:57: d7:05:23:3c:8c:71:e0:0c:2e:09:85:6b:e8:8f:59: 32:6f:1d:b6:33:ed:fb:7d:23:23:23:ca:ac:30:d5: c5:56:47:84:23:9f:91:5c:27:86:05:8e:fd:5e:47: 07:15:25:9b:9c:c2:57:ff:24:2b:5b:7e:1c:b0:6e: d9:2e:19:e5:9b:32:2f:2f:85:52:38:60:86:b5:eb: 8c:68:bb:7c:6b:2b:d6:26:63:cb:2a:b1:b8:35:94: cc:6e:ce:ad:19:28:e4:43:d1:c7:e8:60:b1:93:cb: e9:a3:b8:b3:3f:3b:ce:33:68:7d:6c:24:0f:80:38: 4c:77:56:02:ed:d5:d8:ad:1a:48:49:9f:61:6c:f1: ee:6c:4a:88:e7:fb:95:b9:dc:de:5f:fc:e0:16:98: 86:f5:08:dc:2d:e4:2d:25:fb:3f:a6:89:90:93:fc: 8a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:08:D2:74:B3:BA:45:13:85:68:08:19:0C:FF:48:F0:50:D7:6C:11 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8DFF3E8E736D11F0AA6D9947C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df5:e940::/48 Signature Algorithm: sha256WithRSAEncryption 0a:7f:bf:a8:9a:06:2e:ce:8c:1d:3a:84:95:dc:c3:43:4f:bb: a0:1b:ad:09:bc:20:f5:89:d4:92:df:1a:1e:98:5d:4c:67:0f: 85:f2:c6:fd:27:42:3b:d5:22:97:78:39:67:33:61:68:a7:c4: a5:fb:02:56:b0:06:62:ed:8a:cb:17:4e:44:0a:4a:41:26:29: 6c:90:0b:df:93:76:3d:e6:dc:cf:16:9c:1d:d9:3e:f9:7e:12: d3:6a:06:e1:cd:df:37:80:dd:14:3f:4d:78:11:73:0f:0e:8f: 23:b9:be:8d:fa:5e:3b:95:09:d3:b2:eb:9c:69:fc:0d:09:a8: 01:54:80:88:99:0c:6f:c9:61:71:78:60:ea:bc:f5:2b:cd:43: 6f:4d:34:a9:d3:79:bb:dd:8e:cf:80:36:22:c4:38:30:82:bd: e7:f2:14:4d:24:c9:b3:d5:48:68:c2:58:e3:f3:2c:ae:ed:f5: ed:41:f8:11:07:5e:75:ef:47:c4:ef:13:28:92:b3:11:43:13: b2:7b:f5:0e:ad:91:6a:72:24:78:15:52:e9:a3:6d:04:a4:51: bd:dd:c8:df:3f:0a:3e:de:94:09:8d:66:5c:2b:e3:21:8b:72: 1f:06:4b:61:2a:cd:26:30:0d:6a:bd:39:fb:d6:78:f1:72:67: cf:51:aa:3c -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICTBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODA3MDkwNDQyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk0NmMyYS1iZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteS/4Y1jOYejWpTlC5E4xk0zKRhQ5YA8PRS7GpX5cFpMubJPzSBqh+NbclFh 4/YCpjQL2ZTlWDkoESEZSkAve3Gd+2WyRH1fCrd7Do6foWWHudGeUKbo1lfXBSM8 jHHgDC4JhWvoj1kybx22M+37fSMjI8qsMNXFVkeEI5+RXCeGBY79XkcHFSWbnMJX /yQrW34csG7ZLhnlmzIvL4VSOGCGteuMaLt8ayvWJmPLKrG4NZTMbs6tGSjkQ9HH 6GCxk8vpo7izPzvOM2h9bCQPgDhMd1YC7dXYrRpISZ9hbPHubEqI5/uVudzeX/zg FpiG9QjcLeQtJfs/pomQk/yKoQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAsI0nSz ukUThWgIGQz/SPBQ12wRMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOERGRjNFOEU3 MzZEMTFGMEFBNkQ5OTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ316UAwDQYJKoZIhvcNAQELBQADggEBAAp/v6iaBi7O jB06hJXcw0NPu6AbrQm8IPWJ1JLfGh6YXUxnD4Xyxv0nQjvVIpd4OWczYWinxKX7 AlawBmLtissXTkQKSkEmKWyQC9+Tdj3m3M8WnB3ZPvl+EtNqBuHN3zeA3RQ/TXgR cw8OjyO5vo36XjuVCdOy65xp/A0JqAFUgIiZDG/JYXF4YOq89SvNQ29NNKnTebvd js+ANiLEODCCvefyFE0kybPVSGjCWOPzLK7t9e1B+BEHXnXvR8TvEyiSsxFDE7J7 9Q6tkWpyJHgVUumjbQSkUb3dyN8/Cj7elAmNZlwr4yGLch8GS2EqzSYwDWq9OfvW ePFyZ89Rqjw= -----END CERTIFICATE-----Generated at Thu Aug 14 11:05:54 2025 by rpki-client