$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/234A6D0E6E8911F0AEEA0B14C4F9AE02.roa File: 234A6D0E6E8911F0AEEA0B14C4F9AE02.roa (raw, json) Hash identifier: rZBaMYyqsgdUbj2Kc1VUQWs/4+3J/zfoVLydL5l2mZM= Subject key identifier: 84:9D:92:60:E7:35:42:99:D9:29:46:A7:55:D9:4E:F7:11:9C:32:E3 Certificate issuer: /CN=A91A6F56/serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77 Certificate serial: 02 Authority key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/234A6D0E6E8911F0AEEA0B14C4F9AE02.roa Signing time: Fri 01 Aug 2025 03:39:33 +0000 ROA not before: Fri 01 Aug 2025 03:39:33 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153529 IP address blocks: 2001:df4:efc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77 Validity Not Before: Aug 1 03:39:33 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=688c36f5-88e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:e2:c7:5f:4a:5a:83:c2:19:be:73:de:22: 39:6c:c4:f2:14:d0:c9:cd:0d:14:4c:9f:ed:75:3c: 00:73:18:2f:6d:b0:f3:b1:9b:91:7e:17:c7:3b:a5: aa:b4:5a:81:d5:a7:7d:85:dd:b8:45:ae:78:68:43: 1e:9a:3c:b6:cf:e0:9d:ec:55:37:11:2e:54:29:cc: 1b:47:78:ed:91:bf:cc:79:e1:e4:ff:3c:93:3c:9f: 61:8b:d1:4e:27:a7:dc:c4:f6:d9:0d:41:b5:7c:7b: 27:20:25:62:0b:f6:22:4d:51:ef:8a:85:8c:b2:b3: 8a:41:71:5b:ed:ab:e5:f5:5e:ff:2c:02:7b:d0:6c: 15:41:9e:26:22:0e:17:a7:bf:11:59:f9:17:32:e9: 8d:7c:f5:14:b4:5c:08:05:8b:06:e5:dc:67:58:a6: 0e:26:26:8a:c1:bf:b0:31:39:2e:56:81:3e:63:4a: a2:42:05:82:79:83:a3:21:cf:cc:d0:b1:da:29:0a: d9:78:a6:3b:8d:cf:93:03:4f:35:99:e2:0e:5c:8b: ef:8b:c0:01:57:b1:99:1a:28:38:ab:5b:8c:77:0a: e8:11:cd:7b:e2:94:29:28:71:7e:d5:2a:3f:54:b1: 4e:57:7e:7b:87:a3:1a:c7:d9:03:da:51:6c:72:49: c9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9D:92:60:E7:35:42:99:D9:29:46:A7:55:D9:4E:F7:11:9C:32:E3 X509v3 Authority Key Identifier: keyid:6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/234A6D0E6E8911F0AEEA0B14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:efc0::/48 Signature Algorithm: sha256WithRSAEncryption a2:34:fa:cd:4f:44:f5:89:03:c9:1e:c8:60:35:a9:b6:0a:61: b5:e4:23:4c:dd:f7:86:4d:d6:79:46:f6:eb:18:ed:01:d5:05: a4:79:a3:c8:21:5c:8b:83:4c:36:e1:cc:55:7f:71:11:83:77: 89:24:21:34:16:a5:95:90:5d:e7:bf:2e:23:f7:a5:25:00:9b: 91:f9:77:06:bb:e2:c3:91:a1:86:0a:a4:8c:ee:66:fa:eb:c8: 77:45:df:ee:99:72:21:54:5b:5e:d6:39:10:bd:04:a2:57:90: a2:57:3f:7b:d4:2b:b8:3e:c7:fe:89:ba:31:bc:c1:4f:45:f6: f2:4a:b5:e4:82:db:b5:4e:29:3c:1e:8c:5b:f1:6d:64:cb:37: 17:e0:e4:58:f6:da:9c:75:d5:a7:42:93:95:95:b2:91:cf:e2: 59:5b:c0:0b:60:d4:b5:97:23:3e:b2:54:3f:75:2d:35:98:12: 0f:aa:c0:05:11:38:7b:fb:a5:77:d6:ca:06:d4:ab:27:bb:d1: 6d:7f:9c:ff:0a:18:fb:7b:ee:cd:0e:76:24:85:0d:e2:a0:38: 6b:7f:6b:e9:33:78:86:fc:b8:a3:d8:11:bf:6b:c3:ac:8a:2e: 03:f9:eb:6d:e6:1c:1a:20:1e:8f:8e:0d:5c:03:56:6e:fa:42: be:a9:04:fd -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY1NjExMC8GA1UEBRMoNkFDQTExMjlCMjM4QzdBMUYxNzkxQjc1Q0Q0OUFENkJE NkFERkE3NzAeFw0yNTA4MDEwMzM5MzNaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4OGMzNmY1LTg4ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC40uLHX0pag8IZvnPeIjlsxPIU0MnNDRRMn+11PABzGC9tsPOxm5F+F8c7paq0 WoHVp32F3bhFrnhoQx6aPLbP4J3sVTcRLlQpzBtHeO2Rv8x54eT/PJM8n2GL0U4n p9zE9tkNQbV8eycgJWIL9iJNUe+KhYyys4pBcVvtq+X1Xv8sAnvQbBVBniYiDhen vxFZ+Rcy6Y189RS0XAgFiwbl3GdYpg4mJorBv7AxOS5WgT5jSqJCBYJ5g6Mhz8zQ sdopCtl4pjuNz5MDTzWZ4g5ci++LwAFXsZkaKDirW4x3CugRzXvilCkocX7VKj9U sU5XfnuHoxrH2QPaUWxyScl1AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUhJ2SYOc1 QpnZKUanVdlO9xGcMuMwHwYDVR0jBBgwFoAUasoRKbI4x6HxeRt1zUmta9at+ncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2LzkxM0NBNkU4NkU4 ODExRjBBRDVEMUExMkM0RjlBRTAyL2Fzb1JLYkk0eDZIeGVSdDF6VW10YTlhdC1u Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXNvUktiSTR4Nkh4ZVJ0MXpVbXRhOWF0LW5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkY1Ni85MTNDQTZFODZFODgxMUYwQUQ1RDFBMTJDNEY5QUUwMi8yMzRBNkQwRTZF ODkxMUYwQUVFQTBCMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfTvwDANBgkqhkiG9w0BAQsFAAOCAQEAojT6zU9E9YkD yR7IYDWptgphteQjTN33hk3WeUb26xjtAdUFpHmjyCFci4NMNuHMVX9xEYN3iSQh NBallZBd578uI/elJQCbkfl3Brviw5GhhgqkjO5m+uvId0Xf7plyIVRbXtY5EL0E oleQolc/e9QruD7H/om6MbzBT0X28kq15ILbtU4pPB6MW/FtZMs3F+DkWPbanHXV p0KTlZWykc/iWVvAC2DUtZcjPrJUP3UtNZgSD6rABRE4e/uld9bKBtSrJ7vRbX+c /woY+3vuzQ52JIUN4qA4a39r6TN4hvy4o9gRv2vDrIouA/nrbeYcGiAej44NXANW bvpCvqkE/Q== -----END CERTIFICATE-----Generated at Thu Nov 6 01:53:21 2025 by rpki-client