$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/B9E0D3EA716711EFBF91272AC4F9AE02.roa File: B9E0D3EA716711EFBF91272AC4F9AE02.roa (raw, json) Hash identifier: D2fBQ+WzSpKBrrM3Q6Z8cohOSpLekw4Ya8dTg5S7nEc= Subject key identifier: CD:E4:50:AD:DC:40:71:5E:96:3A:CF:0A:78:38:6A:98:34:01:C9:69 Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Certificate serial: 1062 Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/B9E0D3EA716711EFBF91272AC4F9AE02.roa Signing time: Wed 30 Apr 2025 17:26:43 +0000 ROA not before: Wed 30 Apr 2025 17:26:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 2402:2a80:100::/40 maxlen: 48 2402:2a80:200::/40 maxlen: 48 2402:2a80:300::/40 maxlen: 48 2402:2a80:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4194 (0x1062) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Validity Not Before: Apr 30 17:26:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68125d53-3234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4a:d0:5e:17:e2:42:29:47:cc:94:f0:3a:bd: 44:52:39:0f:e5:f0:24:3c:09:61:20:00:f2:63:3f: ba:ce:06:fb:48:05:36:1d:83:38:07:35:83:ad:b1: 4a:0e:a1:d0:a2:0e:64:46:53:63:b7:d3:bc:67:92: ad:3c:a7:d7:e8:d7:1a:a2:05:78:6c:13:d8:c3:18: 03:58:86:11:22:15:62:83:01:dc:23:32:96:c5:9b: 37:d4:93:d8:71:76:10:b4:01:86:5f:20:ee:d2:37: 11:04:9f:12:2b:df:56:0a:73:4d:1d:38:d4:64:57: 4f:14:64:e8:4a:f5:79:d8:2e:a8:19:dc:ca:b2:55: 57:d9:b3:42:c4:0c:6e:b3:a2:45:54:b1:e3:27:d7: 5e:f2:72:46:ad:e2:cc:ca:0b:ad:ee:00:18:27:00: 54:b3:ab:6a:15:8c:c9:ca:be:45:35:ce:44:9b:e1: 8f:71:d5:e1:5e:dc:97:34:de:8c:7a:a9:31:9d:b8: fc:c9:1c:ea:5e:3e:7c:87:cf:9d:c4:78:4e:c7:c0: 58:3e:96:de:99:68:93:5a:bd:d5:b8:20:bf:5a:18: 4b:83:97:e5:bb:c9:b7:13:29:c0:2a:69:77:56:69: 45:e8:8e:69:fc:2f:6a:54:f8:9d:54:54:5a:06:12: 93:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E4:50:AD:DC:40:71:5E:96:3A:CF:0A:78:38:6A:98:34:01:C9:69 X509v3 Authority Key Identifier: keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/B9E0D3EA716711EFBF91272AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2a80:100::-2402:2a80:4ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 59:a3:ac:1d:b5:2c:ed:53:1c:e3:42:ca:99:a7:df:a2:22:ed: 5f:c1:37:1d:14:f4:80:bf:d3:05:d7:e9:59:25:37:9d:89:79: a3:7f:71:0c:1a:18:7d:8e:0b:a2:81:52:a3:2c:f0:a2:9b:4f: 1a:81:f1:8a:b8:c9:12:79:e6:2d:c6:55:3e:2d:b5:39:ed:c3: 09:36:7d:6f:d4:b8:62:86:97:f5:a4:19:ec:1e:4d:a4:8b:2c: f8:7a:13:a1:c3:69:89:b7:9c:b7:48:2b:7d:02:67:f4:6d:70: 20:44:d4:00:b9:e3:c1:c3:d4:3f:e8:77:88:16:af:3f:fa:d2: 4a:82:5d:90:da:c9:8f:5b:48:25:a8:f3:97:85:fc:e7:55:81: b5:53:76:e6:9d:bb:df:e6:e3:8c:b9:1d:de:58:ac:dc:32:d9: 7d:51:55:16:b9:c3:23:01:67:46:72:9a:bc:22:9f:eb:a5:34: 9a:3c:32:7b:c7:c4:80:c5:10:70:c1:55:39:aa:d7:40:51:93: 02:e3:b7:73:1a:6f:65:e0:ac:b4:d1:e3:38:20:7d:0a:49:49: 97:81:28:e8:39:4b:87:2d:c1:fb:f0:71:cc:4c:e6:b0:95:35: ef:73:8f:e1:eb:f5:6f:6d:4d:28:50:b2:04:c7:b3:28:11:34: 67:69:73:bc -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICEGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx RkI5QTVGMkEwHhcNMjUwNDMwMTcyNjQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNWQ1My0zMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20rQXhfiQilHzJTwOr1EUjkP5fAkPAlhIADyYz+6zgb7SAU2HYM4BzWDrbFK DqHQog5kRlNjt9O8Z5KtPKfX6NcaogV4bBPYwxgDWIYRIhVigwHcIzKWxZs31JPY cXYQtAGGXyDu0jcRBJ8SK99WCnNNHTjUZFdPFGToSvV52C6oGdzKslVX2bNCxAxu s6JFVLHjJ9de8nJGreLMygut7gAYJwBUs6tqFYzJyr5FNc5Em+GPcdXhXtyXNN6M eqkxnbj8yRzqXj58h8+dxHhOx8BYPpbemWiTWr3VuCC/WhhLg5flu8m3EynAKml3 VmlF6I5p/C9qVPidVFRaBhKTUQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFM3kUK3c QHFeljrPCng4apg0AclpMB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5 MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM1NTgvMEYyMTIxNEUzOTA1MTFFOTlBMzMwMjMzQzRGOUFFMDIvQjlFMEQzRUE3 MTY3MTFFRkJGOTEyNzJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIwEAMGACQCKoABAwYAJAIqgAQwDQYJKoZIhvcNAQELBQADggEB AFmjrB21LO1THONCypmn36Ii7V/BNx0U9IC/0wXX6VklN52JeaN/cQwaGH2OC6KB UqMs8KKbTxqB8Yq4yRJ55i3GVT4ttTntwwk2fW/UuGKGl/WkGeweTaSLLPh6E6HD aYm3nLdIK30CZ/RtcCBE1AC548HD1D/od4gWrz/60kqCXZDayY9bSCWo85eF/OdV gbVTduadu9/m44y5Hd5YrNwy2X1RVRa5wyMBZ0Zymrwin+ulNJo8MnvHxIDFEHDB VTmq10BRkwLjt3Mab2XgrLTR4zggfQpJSZeBKOg5S4ctwfvwccxM5rCVNe9zj+Hr 9W9tTShQsgTHsygRNGdpc7w= -----END CERTIFICATE-----Generated at Wed Nov 5 15:49:41 2025 by rpki-client