$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA0AE43CF6D811EE99425F2EC4F9AE02.roa File: BA0AE43CF6D811EE99425F2EC4F9AE02.roa (raw, json) Hash identifier: EQnzOROnVacoPDjHkqYp7leGJowf43ScBVKkqp7fvII= Subject key identifier: DD:9F:4F:43:CF:7A:5E:A2:F1:FB:F7:C9:4B:17:C8:CB:F5:5F:B2:2D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4DB3 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA0AE43CF6D811EE99425F2EC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:55:51 +0000 ROA not before: Thu 28 Aug 2025 14:55:51 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151903 IP address blocks: 2001:df3:63c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19891 (0x4db3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:55:51 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06df7-bf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:f9:5d:d0:bd:cd:32:98:65:0d:6f:77:74: b3:03:b1:5a:c1:d5:32:43:4d:d3:ae:a7:5e:7b:8d: 68:e2:67:8a:80:0a:fd:cf:c0:d7:eb:92:06:bd:4e: 3c:53:8e:2f:85:27:0e:7b:5a:d2:0b:a2:7c:3c:76: 60:87:e3:82:da:57:87:75:4b:2f:3a:6c:b7:d8:e5: 62:3c:61:33:d8:2d:9b:e4:e2:4e:28:76:b8:7e:3f: e8:bd:c4:7d:2c:35:32:1b:66:0c:20:39:a0:1a:63: 3b:f6:21:47:3f:2c:07:55:ec:10:41:59:73:f0:36: fc:b1:29:76:3b:39:a4:6d:a6:c8:2c:98:f8:58:ac: 68:77:78:13:96:0f:32:2b:76:a4:14:61:27:65:3e: 9c:db:e5:01:27:9d:e3:58:c4:a6:14:b9:e4:f7:cc: 7f:fd:9c:04:ce:7d:45:ed:13:1d:23:86:65:92:ae: ad:77:c0:55:a9:a1:10:91:d3:0d:23:fd:ec:8e:a3: c0:c8:e6:14:ff:29:e5:45:4b:48:64:51:61:85:21: 9e:3b:e8:5b:cc:55:0f:79:86:ab:52:58:57:ec:06: 5b:bf:48:7d:95:b5:0d:fe:1f:f1:d3:38:b4:18:39: b1:af:aa:78:74:10:d9:cc:55:0a:c1:e0:e3:d1:98: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9F:4F:43:CF:7A:5E:A2:F1:FB:F7:C9:4B:17:C8:CB:F5:5F:B2:2D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA0AE43CF6D811EE99425F2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:63c0::/48 Signature Algorithm: sha256WithRSAEncryption 68:25:84:fe:c8:79:56:29:1d:1f:e0:07:d0:55:fe:1e:56:29: 50:52:30:ff:74:8a:45:96:61:f0:99:7b:5d:24:69:95:3f:f0: 9d:50:4a:09:b1:54:b9:26:5c:57:f9:86:1d:4a:2a:4a:0b:42: 4b:36:b5:97:12:a0:02:de:73:44:9b:d5:ee:be:c8:b3:fb:22: d5:0b:b1:48:90:0c:ed:53:a7:fa:09:7b:ef:ba:20:96:56:cf: f3:b4:1f:19:47:c6:d2:ea:82:0c:88:88:3a:e7:15:e3:8e:8e: e4:84:46:77:ce:e9:c5:ab:6c:f0:2c:64:01:61:b7:8a:89:45: 36:ba:31:69:d6:eb:5e:77:0a:78:d0:7d:c8:cb:70:ff:b5:65: fe:f0:6b:db:ce:25:27:e1:28:96:ac:64:ba:c0:b9:61:fb:5d: 04:d0:70:05:fc:a2:09:57:28:3d:0f:38:93:5b:af:28:22:d4: 87:cd:d1:6d:38:aa:eb:bb:2c:d1:9c:10:be:1e:7c:30:b7:9a: 97:7a:e3:3e:87:21:f9:80:06:8a:ac:44:df:15:08:68:f6:1b: fb:ff:8c:3a:92:e7:00:70:d8:77:57:46:42:7a:df:15:50:e4: 71:64:78:a1:2b:37:ef:19:7e:0d:bc:9c:32:15:e3:d6:df:87: 38:2b:e9:d7 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICTbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NTUxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmRmNy1iZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJf5XdC9zTKYZQ1vd3SzA7FawdUyQ03Trqdee41o4meKgAr9z8DX65IGvU48 U44vhScOe1rSC6J8PHZgh+OC2leHdUsvOmy32OViPGEz2C2b5OJOKHa4fj/ovcR9 LDUyG2YMIDmgGmM79iFHPywHVewQQVlz8Db8sSl2OzmkbabILJj4WKxod3gTlg8y K3akFGEnZT6c2+UBJ53jWMSmFLnk98x//ZwEzn1F7RMdI4Zlkq6td8BVqaEQkdMN I/3sjqPAyOYU/ynlRUtIZFFhhSGeO+hbzFUPeYarUlhX7AZbv0h9lbUN/h/x0zi0 GDmxr6p4dBDZzFUKweDj0ZhEMwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFN2fT0PP el6i8fv3yUsXyMv1X7ItMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkEwQUU0M0NG NkQ4MTFFRTk5NDI1RjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zY8AwDQYJKoZIhvcNAQELBQADggEBAGglhP7IeVYp HR/gB9BV/h5WKVBSMP90ikWWYfCZe10kaZU/8J1QSgmxVLkmXFf5hh1KKkoLQks2 tZcSoALec0Sb1e6+yLP7ItULsUiQDO1Tp/oJe++6IJZWz/O0HxlHxtLqggyIiDrn FeOOjuSERnfO6cWrbPAsZAFht4qJRTa6MWnW6153CnjQfcjLcP+1Zf7wa9vOJSfh KJasZLrAuWH7XQTQcAX8oglXKD0POJNbrygi1IfN0W04quu7LNGcEL4efDC3mpd6 4z6HIfmABoqsRN8VCGj2G/v/jDqS5wBw2HdXRkJ63xVQ5HFkeKErN+8Zfg28nDIV 49bfhzgr6dc= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:05 2025 by rpki-client