$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/2F5B1648B62311F0A558E184C4F9AE02.roa File: 2F5B1648B62311F0A558E184C4F9AE02.roa (raw, json) Hash identifier: K6eGXo3Vijm55v1VXh8nvzzF5i7OhAZe7582+PIuLlc= Subject key identifier: 14:7F:FD:6B:F7:1F:98:8E:EC:92:4F:48:61:A4:76:FD:1D:1B:6B:3B Certificate issuer: /CN=A91C78A7/serialNumber=33263EB246F54D4CA3FC9089F4C03705EEEA2C86 Certificate serial: 04 Authority key identifier: 33:26:3E:B2:46:F5:4D:4C:A3:FC:90:89:F4:C0:37:05:EE:EA:2C:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MyY-skb1TUyj_JCJ9MA3Be7qLIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/2F5B1648B62311F0A558E184C4F9AE02.roa Signing time: Fri 31 Oct 2025 06:31:08 +0000 ROA not before: Fri 31 Oct 2025 06:31:08 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154332 IP address blocks: 2402:35e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/MyY-skb1TUyj_JCJ9MA3Be7qLIY.crl rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/MyY-skb1TUyj_JCJ9MA3Be7qLIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MyY-skb1TUyj_JCJ9MA3Be7qLIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C78A7, serialNumber=33263EB246F54D4CA3FC9089F4C03705EEEA2C86 Validity Not Before: Oct 31 06:31:08 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690457ac-7c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1f:b7:24:50:42:a9:1a:77:5c:28:02:f3:55: 4d:23:87:2a:97:48:33:da:17:1e:f7:4a:95:01:62: 0e:77:93:2d:ed:34:dd:ca:f0:47:72:b4:73:88:19: 05:ab:32:05:80:db:5d:93:49:f9:4e:6e:c6:c1:0d: 66:70:60:4e:1d:53:33:3a:cb:22:d9:ab:1f:db:af: b2:75:7b:e0:01:dd:c4:22:fc:3b:af:94:aa:ae:2d: 6b:c3:c1:e0:00:c1:6b:16:ef:7e:2d:29:34:05:aa: 3e:86:8d:91:ed:59:c0:02:e9:fb:7e:84:bb:27:ef: 6c:0d:38:2c:ca:c7:2e:01:1f:c9:53:d5:a2:f2:3f: 22:40:58:17:4a:5b:84:68:c6:4f:eb:16:f1:15:9f: 93:28:ae:68:c9:1b:39:bf:94:12:cd:6e:02:20:51: 67:94:74:38:9c:59:72:36:68:57:05:35:0d:b2:30: f9:d8:a2:7c:31:ef:46:8e:34:50:1e:93:df:bf:bd: 50:06:d3:ba:1b:af:33:41:c2:80:93:47:39:f7:d3: 8e:1d:e9:33:5f:5b:f7:f3:51:23:ce:30:e7:20:af: b4:44:15:81:25:b8:67:7c:9b:94:78:f5:3e:cc:ea: b0:49:ba:c3:ec:c5:bb:68:02:20:19:2d:ee:d0:f1: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7F:FD:6B:F7:1F:98:8E:EC:92:4F:48:61:A4:76:FD:1D:1B:6B:3B X509v3 Authority Key Identifier: keyid:33:26:3E:B2:46:F5:4D:4C:A3:FC:90:89:F4:C0:37:05:EE:EA:2C:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/MyY-skb1TUyj_JCJ9MA3Be7qLIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MyY-skb1TUyj_JCJ9MA3Be7qLIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/2F5B1648B62311F0A558E184C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:35e0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:95:c1:a4:4c:1e:8c:47:f3:1a:21:b7:b0:f7:85:cf:68:a9: fe:7f:6a:77:95:fa:c3:c4:71:24:ac:99:66:38:66:6d:c8:1b: 1f:57:c4:00:23:81:d7:da:8f:99:94:30:50:ea:8f:53:3b:b9: 1b:f0:29:86:46:77:6a:a7:4a:e5:12:ff:46:86:e2:6c:b2:d0: c6:d6:90:52:0a:b8:44:1e:70:72:a8:d6:3d:e4:15:a9:87:59: 7b:f1:13:e5:6a:bc:69:71:c2:f1:80:eb:46:43:91:52:bd:ec: bd:3a:bd:9e:32:2a:32:df:23:85:54:5f:e4:1d:a5:b0:ce:35: 34:33:fe:7c:e4:f9:13:39:a1:cf:bd:c4:c2:82:57:4a:39:aa: dc:7b:5e:c9:ac:74:32:ac:fa:db:79:27:2f:d8:60:0f:3f:e9: ee:48:ba:73:51:95:d7:08:75:be:a1:c4:42:20:c7:b5:7b:2d: cb:18:98:54:0a:ac:27:0a:85:26:3a:da:72:e7:6a:e0:b0:d9: f5:d9:7e:21:2f:25:cb:58:be:f7:7b:71:4f:c1:24:3a:6a:7e: d4:1f:12:8a:37:46:28:06:ad:ca:b8:a3:a0:e4:6f:89:a2:b2: 6d:ae:27:ba:aa:d4:63:8e:88:5f:07:67:c2:7a:74:3b:06:35: 0b:6f:b4:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzhBNzExMC8GA1UEBRMoMzMyNjNFQjI0NkY1NEQ0Q0EzRkM5MDg5RjRDMDM3MDVF RUVBMkM4NjAeFw0yNTEwMzEwNjMxMDhaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MDQ1N2FjLTdjMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZH7ckUEKpGndcKALzVU0jhyqXSDPaFx73SpUBYg53ky3tNN3K8EdytHOIGQWr MgWA212TSflObsbBDWZwYE4dUzM6yyLZqx/br7J1e+AB3cQi/DuvlKquLWvDweAA wWsW734tKTQFqj6GjZHtWcAC6ft+hLsn72wNOCzKxy4BH8lT1aLyPyJAWBdKW4Ro xk/rFvEVn5MormjJGzm/lBLNbgIgUWeUdDicWXI2aFcFNQ2yMPnYonwx70aONFAe k9+/vVAG07obrzNBwoCTRzn3044d6TNfW/fzUSPOMOcgr7REFYEluGd8m5R49T7M 6rBJusPsxbtoAiAZLe7Q8VgjAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUFH/9a/cf mI7skk9IYaR2/R0bazswHwYDVR0jBBgwFoAUMyY+skb1TUyj/JCJ9MA3Be7qLIYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3OEE3LzA0NjcxOEE4QjYy MTExRjBBNzQ5MjExRkM0RjlBRTAyL015WS1za2IxVFV5al9KQ0o5TUEzQmU3cUxJ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTXlZLXNrYjFUVXlqX0pDSjlNQTNCZTdxTElZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzhBNy8wNDY3MThBOEI2MjExMUYwQTc0OTIxMUZDNEY5QUUwMi8yRjVCMTY0OEI2 MjMxMUYwQTU1OEUxODRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCNeAwDQYJKoZIhvcNAQELBQADggEBAA6VwaRMHoxH8xoh t7D3hc9oqf5/aneV+sPEcSSsmWY4Zm3IGx9XxAAjgdfaj5mUMFDqj1M7uRvwKYZG d2qnSuUS/0aG4myy0MbWkFIKuEQecHKo1j3kFamHWXvxE+VqvGlxwvGA60ZDkVK9 7L06vZ4yKjLfI4VUX+QdpbDONTQz/nzk+RM5oc+9xMKCV0o5qtx7XsmsdDKs+tt5 Jy/YYA8/6e5IunNRldcIdb6hxEIgx7V7LcsYmFQKrCcKhSY62nLnauCw2fXZfiEv JctYvvd7cU/BJDpqftQfEoo3RigGrcq4o6Dkb4mism2uJ7qq1GOOiF8HZ8J6dDsG NQtvtFM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:39:12 2025 by rpki-client