$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/7152252C37D111EF99A8011CC4F9AE02.roa File: 7152252C37D111EF99A8011CC4F9AE02.roa (raw, json) Hash identifier: qhoMwiHCkLg+1nceUxGKr0G4jwDK8ySCQp1HaHpIIeY= Subject key identifier: 6B:2A:F2:92:1A:7D:0B:87:F2:D0:C3:EE:AB:F8:F9:DE:31:15:95:AE Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Certificate serial: C9 Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/7152252C37D111EF99A8011CC4F9AE02.roa Signing time: Fri 25 Jul 2025 06:13:35 +0000 ROA not before: Fri 25 Jul 2025 06:13:35 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 153045 IP address blocks: 2001:df4:140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Validity Not Before: Jul 25 06:13:35 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6883208f-92a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:46:14:e6:2b:37:4a:43:83:02:bc:cc:8e:c2: 09:60:a6:83:8d:49:49:b4:93:b4:e0:73:e2:ae:a9: 88:3b:5a:20:df:bc:e1:f6:38:49:e0:b8:82:f7:90: 77:cf:9a:24:69:5f:9a:19:29:ed:05:62:39:e7:d5: 88:67:6f:6e:b6:64:d5:e0:47:76:16:ce:79:eb:18: 5b:ee:09:cb:f5:b9:2d:00:90:cd:11:06:8d:a7:1f: 3e:15:f3:b4:be:2a:0c:d3:ae:bc:78:71:b3:55:5a: bb:a1:95:a5:04:af:b2:a6:84:35:c2:10:ef:7c:8c: 34:2b:8b:75:f1:b5:90:2c:7e:7f:df:d0:26:44:bc: 0b:04:ab:2f:cb:29:cb:ab:a4:ee:e5:28:03:ef:f5: f3:54:bc:c7:e5:a0:61:f9:0a:c9:28:14:a7:32:56: bd:01:0a:2e:2e:86:a7:73:fb:d6:c3:10:77:2d:c2: 30:fa:26:ad:54:f4:75:23:bb:32:3e:7f:08:9a:13: 82:cf:89:4a:22:ca:55:6b:09:f7:0d:e6:02:1e:f2: 1f:5c:4e:58:c1:5e:b1:09:a2:e0:f7:0e:8f:8f:01: 6c:7f:c4:70:79:59:b0:ad:41:bf:4f:e9:80:58:ed: 59:62:f1:cb:e0:35:dc:ef:bb:23:4a:a0:5c:33:bb: 82:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2A:F2:92:1A:7D:0B:87:F2:D0:C3:EE:AB:F8:F9:DE:31:15:95:AE X509v3 Authority Key Identifier: keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/7152252C37D111EF99A8011CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:140::/48 Signature Algorithm: sha256WithRSAEncryption 47:55:24:bb:1f:35:2b:52:eb:47:95:98:0e:a6:93:89:49:0b: c8:83:25:10:bf:5a:89:49:2d:c9:ed:82:a7:b9:23:29:da:f0: 94:0d:2f:5a:a8:3b:d9:ff:5f:e6:d9:dd:e1:b2:61:0d:f7:ee: 26:b3:c0:cd:39:bb:4a:37:42:f3:cf:ec:3c:4a:c9:ea:a8:97: 6f:9d:f9:c6:06:f2:b9:54:9f:3d:70:0d:1e:ea:fc:53:b0:ae: c0:95:9a:9a:4f:83:24:18:82:e1:32:53:0c:e9:d5:9b:f1:a7: 7c:1b:d3:08:e8:e3:63:ea:1a:2b:98:67:b7:8a:53:94:ec:14: 19:2d:4a:0e:fc:05:e0:5e:b9:ea:d2:d4:f8:9b:5c:25:a0:0c: 2b:8b:e1:a3:5f:41:ff:3e:dd:7b:b5:6a:26:52:3f:ee:3e:fd: ea:14:6b:d9:fc:6b:03:86:27:b6:d5:37:6b:e0:7f:a9:6a:db: 6e:c7:d2:00:d5:33:e1:98:37:61:02:55:b7:9b:68:4d:30:0c: dd:fc:07:86:b7:57:c1:c5:ca:3a:9d:a1:22:eb:32:b2:ff:23: e0:b6:e9:11:e6:02:5d:69:63:df:98:c6:03:fa:5a:8a:4d:12: 7e:de:65:91:0b:fd:0b:49:5f:95:ec:fb:c9:7b:ce:f5:8f:2f: c1:7f:04:43 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc5NDgxMTAvBgNVBAUTKEFDOTMwQjYyNUQ4MzlDNTY4REE4MTk5RTM4RkY5REI3 RTM3ODMzQkQwHhcNMjUwNzI1MDYxMzM1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgzMjA4Zi05MmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9kYU5is3SkODArzMjsIJYKaDjUlJtJO04HPirqmIO1og37zh9jhJ4LiC95B3 z5okaV+aGSntBWI559WIZ29utmTV4Ed2Fs556xhb7gnL9bktAJDNEQaNpx8+FfO0 vioM0668eHGzVVq7oZWlBK+ypoQ1whDvfIw0K4t18bWQLH5/39AmRLwLBKsvyynL q6Tu5SgD7/XzVLzH5aBh+QrJKBSnMla9AQouLoanc/vWwxB3LcIw+iatVPR1I7sy Pn8ImhOCz4lKIspVawn3DeYCHvIfXE5YwV6xCaLg9w6PjwFsf8RweVmwrUG/T+mA WO1ZYvHL4DXc77sjSqBcM7uCZQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGsq8pIa fQuH8tDD7qv4+d4xFZWuMB8GA1UdIwQYMBaAFKyTC2Jdg5xWjagZnjj/nbfjeDO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk0OC80Rjk3NkRGODM3 RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5GYU5xQm1lT1AtZHQtTjRN NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKTUxZbDJEbkZhTnFCbWVPUC1kdC1ONE03MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjc5NDgvNEY5NzZERjgzN0QwMTFFRjg5NDU0NzFBQzRGOUFFMDIvNzE1MjI1MkMz N0QxMTFFRjk5QTgwMTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30AUAwDQYJKoZIhvcNAQELBQADggEBAEdVJLsfNStS 60eVmA6mk4lJC8iDJRC/WolJLcntgqe5Iyna8JQNL1qoO9n/X+bZ3eGyYQ337iaz wM05u0o3QvPP7DxKyeqol2+d+cYG8rlUnz1wDR7q/FOwrsCVmppPgyQYguEyUwzp 1Zvxp3wb0wjo42PqGiuYZ7eKU5TsFBktSg78BeBeuerS1PibXCWgDCuL4aNfQf8+ 3Xu1aiZSP+4+/eoUa9n8awOGJ7bVN2vgf6lq227H0gDVM+GYN2ECVbebaE0wDN38 B4a3V8HFyjqdoSLrMrL/I+C26RHmAl1pY9+YxgP6WopNEn7eZZEL/QtJX5Xs+8l7 zvWPL8F/BEM= -----END CERTIFICATE-----Generated at Sun Aug 10 04:51:07 2025 by rpki-client