$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D3FFD0E0592111EF9A271B30C4F9AE02.roa File: D3FFD0E0592111EF9A271B30C4F9AE02.roa (raw, json) Hash identifier: IZyhnISP/Zcovvoszsr/1i7TidL7ZTVNa7xrHhNA3mU= Subject key identifier: 62:6C:9B:9C:6D:3D:1C:6B:42:71:3A:04:D2:EF:1C:8E:B5:A3:F1:E4 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4DC1 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D3FFD0E0592111EF9A271B30C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:56:03 +0000 ROA not before: Thu 28 Aug 2025 14:56:03 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152966 IP address blocks: 2001:df4:21c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19905 (0x4dc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:56:03 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e02-2a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a0:51:e7:fb:6c:c7:df:7e:6e:d9:59:51:34: 5b:48:e2:7b:04:23:d0:cf:4b:63:b1:ba:25:96:d3: 7a:11:89:46:52:01:9d:ad:c6:bb:df:80:1a:f4:01: ee:dd:90:c3:37:22:f6:3c:0b:b7:b3:3b:2d:01:26: 0a:84:68:b3:18:27:63:fb:25:55:c0:a9:b6:c0:1c: 44:32:14:82:99:38:15:f4:cc:97:34:89:3e:24:da: cb:05:3d:19:51:b2:9a:56:19:17:6c:5e:91:ec:8b: 01:ea:17:4d:ff:8e:68:ae:df:79:3e:1e:fa:7c:98: ee:ae:8d:0b:cc:1b:28:47:b1:c9:56:d3:fa:48:ad: 6f:fb:91:4c:65:47:71:48:71:77:79:cf:61:bf:8e: 67:3e:5b:82:85:72:cd:b5:4d:92:2f:69:d9:43:ac: 45:0b:bd:ce:8f:25:ac:e0:3e:d4:18:a9:99:10:8e: a4:33:36:04:de:67:b2:6a:8e:f6:ba:2a:ed:0e:26: f2:3c:0a:72:8f:47:a9:f3:e1:f2:7e:43:fa:55:0c: 38:c3:c2:d1:4f:52:cc:5f:7b:f2:f6:40:f0:da:4e: 73:8e:d6:e3:18:35:3b:e4:eb:e9:c2:e4:e7:6f:e9: f6:0b:7b:9d:60:00:81:a6:dc:11:2a:f6:4d:a0:eb: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6C:9B:9C:6D:3D:1C:6B:42:71:3A:04:D2:EF:1C:8E:B5:A3:F1:E4 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D3FFD0E0592111EF9A271B30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:21c0::/48 Signature Algorithm: sha256WithRSAEncryption 4a:43:ac:a7:7b:52:b7:92:b4:7b:03:62:6e:ae:b5:23:f2:86: d5:cd:f7:dd:b0:a5:f7:77:40:d8:a2:90:7c:08:e2:53:00:49: b1:3f:a3:75:5b:a0:73:77:af:90:20:84:45:91:b9:47:c1:ab: 70:6b:de:2e:37:4f:50:60:1b:42:d8:f2:6a:81:9c:51:7b:3b: fe:1d:31:a4:26:f3:f3:2f:97:28:67:3b:de:02:62:f0:1d:eb: ac:66:ca:dd:ef:09:0f:1e:a3:c2:19:01:73:9c:20:4a:c1:4a: 3a:e3:75:2f:93:ac:4c:b1:c4:c5:6d:e2:1b:cc:8d:34:a3:16: d6:69:89:21:0b:5d:20:4b:70:18:0b:54:c8:6a:8a:3d:5d:99: ba:55:e6:54:19:6f:fd:f7:a4:e8:b6:d3:06:a5:30:54:cd:b0: 6f:ac:71:43:b6:9c:00:6a:c7:b7:ec:f3:bf:b0:9a:42:b6:5c: 19:7d:3e:ff:c9:ab:95:1d:d5:5a:16:ae:3e:e4:06:51:b1:8d: c1:b5:89:a8:76:f2:80:7e:de:13:30:7a:e6:38:49:7f:66:b5: 32:ef:e5:88:49:18:c7:73:13:b9:ba:36:39:e4:7a:c8:11:9c: 63:25:79:6f:26:f4:15:65:28:9e:b6:53:f4:31:b7:6b:6f:e3: 52:4e:b3:da -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICTcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjAzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmUwMi0yYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKBR5/tsx99+btlZUTRbSOJ7BCPQz0tjsbolltN6EYlGUgGdrca734Aa9AHu 3ZDDNyL2PAu3szstASYKhGizGCdj+yVVwKm2wBxEMhSCmTgV9MyXNIk+JNrLBT0Z UbKaVhkXbF6R7IsB6hdN/45ort95Ph76fJjuro0LzBsoR7HJVtP6SK1v+5FMZUdx SHF3ec9hv45nPluChXLNtU2SL2nZQ6xFC73OjyWs4D7UGKmZEI6kMzYE3meyao72 uirtDibyPApyj0ep8+HyfkP6VQw4w8LRT1LMX3vy9kDw2k5zjtbjGDU75OvpwuTn b+n2C3udYACBptwRKvZNoOvV6wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGJsm5xt PRxrQnE6BNLvHI61o/HkMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDNGRkQwRTA1 OTIxMTFFRjlBMjcxQjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30IcAwDQYJKoZIhvcNAQELBQADggEBAEpDrKd7UreS tHsDYm6utSPyhtXN992wpfd3QNiikHwI4lMASbE/o3VboHN3r5AghEWRuUfBq3Br 3i43T1BgG0LY8mqBnFF7O/4dMaQm8/MvlyhnO94CYvAd66xmyt3vCQ8eo8IZAXOc IErBSjrjdS+TrEyxxMVt4hvMjTSjFtZpiSELXSBLcBgLVMhqij1dmbpV5lQZb/33 pOi20walMFTNsG+scUO2nABqx7fs87+wmkK2XBl9Pv/Jq5Ud1VoWrj7kBlGxjcG1 iah28oB+3hMweuY4SX9mtTLv5YhJGMdzE7m6NjnkesgRnGMleW8m9BVlKJ62U/Qx t2tv41JOs9o= -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:51 2025 by rpki-client