$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/2EFFC95471DC11F0B648E61EC4F9AE02.roa File: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (raw, json) Hash identifier: IrKqf3WwcP3c1t/kdOeFbTBkd7MIU0BN08Rqrji/qUU= Subject key identifier: CF:A2:AB:49:EB:72:A3:8B:5B:32:73:76:44:92:B9:AC:60:D9:DD:09 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 0FF5 Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/2EFFC95471DC11F0B648E61EC4F9AE02.roa Signing time: Tue 05 Aug 2025 15:55:23 +0000 ROA not before: Tue 05 Aug 2025 15:55:23 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 14618 IP address blocks: 2401:df00:301::/48 maxlen: 48 2401:df00:331::/48 maxlen: 48 2401:df00:341::/48 maxlen: 48 2401:df00:351::/48 maxlen: 48 2401:df00:421::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4085 (0xff5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Aug 5 15:55:23 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6892296b-4094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:a0:fa:e3:34:23:5b:da:94:2c:90:05:4e: de:be:5c:cc:45:1b:32:87:3a:52:e5:6e:7b:cc:1b: 88:39:96:3e:96:93:2c:a5:b3:c6:c0:45:a4:07:10: 6a:e9:7d:94:23:62:07:ab:65:59:28:f3:2b:43:60: 6c:db:4d:f0:87:8c:55:fd:ba:a3:33:b3:13:40:dc: b0:76:1d:1c:45:2e:4d:35:fa:33:b0:c2:62:4a:67: 3d:d2:6d:76:4e:52:eb:ef:b3:05:ff:ea:dd:dc:98: 16:fe:a8:64:2f:f0:b6:9b:a7:e8:09:1e:63:fa:af: bd:c9:30:4f:af:6f:1b:46:58:d5:f7:6a:8e:ff:75: 67:14:91:5b:b5:a3:19:11:73:79:44:51:d9:b0:d8: f3:37:6c:02:8f:ac:0c:69:90:44:db:05:28:8e:f4: d3:ce:66:04:5d:af:e6:2c:41:87:d7:a0:46:5c:66: db:f5:18:bc:4f:22:c5:b6:ef:55:eb:de:18:3c:49: 72:03:0d:fe:47:ff:97:85:40:e1:53:0e:f7:a2:e6: ca:a7:6e:6b:24:09:fa:6a:90:01:0d:13:6d:32:ef: 7b:00:98:f1:6f:aa:9c:71:72:6a:55:68:c9:97:07: 5d:3f:c9:c6:b6:a0:f9:a7:aa:1b:e7:b7:28:6a:48: 6d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A2:AB:49:EB:72:A3:8B:5B:32:73:76:44:92:B9:AC:60:D9:DD:09 X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/2EFFC95471DC11F0B648E61EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:df00:301::/48 2401:df00:331::/48 2401:df00:341::/48 2401:df00:351::/48 2401:df00:421::/48 Signature Algorithm: sha256WithRSAEncryption 81:a1:9d:3b:3d:3b:e1:9f:b8:1d:5c:5b:e9:0f:67:ab:f5:36: 42:a6:99:12:6c:2c:fa:3d:0d:00:a9:70:af:e7:1c:f6:3b:3d: 0b:20:5e:bd:9c:69:63:f1:a4:4f:52:96:f9:03:8b:39:ad:c9: cc:74:b0:5d:2f:11:04:fc:60:70:43:03:44:e0:01:19:5c:8f: 0e:c4:b8:76:87:ab:6e:13:59:13:c9:cf:40:09:3c:b7:0e:96: a1:e4:7c:26:c7:0f:63:90:b5:9c:b0:aa:cd:be:05:60:be:e4: a5:53:1b:e8:20:83:b1:af:f5:69:68:cf:b8:21:88:36:b5:c4: d5:19:25:fc:d9:2a:dd:bd:18:3f:9a:23:8b:c4:d5:22:32:0b: d6:28:4d:22:60:91:db:d7:c5:e0:fb:eb:0d:55:3a:d6:ba:e5: 94:68:f3:d9:95:53:41:08:ef:6e:62:9f:eb:e9:c3:79:92:43: fa:52:42:c9:16:f7:50:d1:42:ea:30:57:68:bd:77:92:98:4f: b3:08:49:d4:32:10:13:04:30:b7:12:22:54:89:b1:af:47:c9: 86:6f:34:d5:fb:d2:1b:ad:9a:3e:72:1e:20:3a:f8:47:a5:fd: bc:09:97:b5:10:1f:e7:ee:6d:c7:ba:9b:e8:c6:0a:98:c0:a2: e4:51:5c:44 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICD/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjUwODA1MTU1NTIzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODkyMjk2Yi00MDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubqg+uM0I1valCyQBU7evlzMRRsyhzpS5W57zBuIOZY+lpMspbPGwEWkBxBq 6X2UI2IHq2VZKPMrQ2Bs203wh4xV/bqjM7MTQNywdh0cRS5NNfozsMJiSmc90m12 TlLr77MF/+rd3JgW/qhkL/C2m6foCR5j+q+9yTBPr28bRljV92qO/3VnFJFbtaMZ EXN5RFHZsNjzN2wCj6wMaZBE2wUojvTTzmYEXa/mLEGH16BGXGbb9Ri8TyLFtu9V 694YPElyAw3+R/+XhUDhUw73oubKp25rJAn6apABDRNtMu97AJjxb6qccXJqVWjJ lwddP8nGtqD5p6ob57coakht/wIDAQABo4ICvDCCArgwHQYDVR0OBBYEFM+iq0nr cqOLWzJzdkSSuaxg2d0JMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzJDQzcvNzkxQzZBMzQ3QjM4MTFFOUJDMEQzQjMyQzRGOUFFMDIvMkVGRkM5NTQ3 MURDMTFGMEI2NDhFNjFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MDMEAgACMC0DBwAkAd8AAwEDBwAkAd8AAzEDBwAkAd8AA0EDBwAkAd8AA1ED BwAkAd8ABCEwDQYJKoZIhvcNAQELBQADggEBAIGhnTs9O+GfuB1cW+kPZ6v1NkKm mRJsLPo9DQCpcK/nHPY7PQsgXr2caWPxpE9SlvkDizmtycx0sF0vEQT8YHBDA0Tg ARlcjw7EuHaHq24TWRPJz0AJPLcOlqHkfCbHD2OQtZywqs2+BWC+5KVTG+ggg7Gv 9Wloz7ghiDa1xNUZJfzZKt29GD+aI4vE1SIyC9YoTSJgkdvXxeD76w1VOta65ZRo 89mVU0EI725in+vpw3mSQ/pSQskW91DRQuowV2i9d5KYT7MISdQyEBMEMLcSIlSJ sa9HyYZvNNX70hutmj5yHiA6+Eel/bwJl7UQH+fubce6m+jGCpjAouRRXEQ= -----END CERTIFICATE-----Generated at Mon Aug 11 04:30:33 2025 by rpki-client