$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa File: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (raw, json) Hash identifier: ujpDZE0rtz85q7uwV7sU5TuMp06iiTTbccCeJk/Lbuo= Subject key identifier: F6:F5:61:B6:11:A9:70:5B:8E:31:D9:65:62:67:CF:D6:C0:37:C7:18 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 0634 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa Signing time: Mon 03 Nov 2025 00:14:17 +0000 ROA not before: Mon 03 Nov 2025 00:14:17 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 16625 IP address blocks: 2400:5200:402::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1588 (0x634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Nov 3 00:14:17 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=6907f3d9-4b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:84:63:f1:fb:65:11:96:c0:b6:68:42:c5: 39:ac:d7:41:42:5f:86:94:a5:41:db:9b:a5:4f:83: 8c:00:8a:48:28:c4:23:a0:dc:26:1c:5a:ad:54:c8: 74:6c:9c:4e:9c:dd:8b:dc:bb:bc:fc:e9:81:39:58: 86:cd:70:1b:15:b7:08:e3:94:cd:af:0e:3b:8a:ad: ef:c0:a4:eb:52:37:3b:53:36:06:78:76:06:93:89: a7:12:79:12:4e:e6:25:51:e8:99:53:5d:a8:51:fc: ef:10:75:ca:38:8a:8c:25:6f:a8:c2:dd:f9:f6:54: 4e:ed:bb:2c:5c:2f:71:43:f7:b4:ab:c9:5c:a6:91: 36:05:1e:c2:d6:0e:39:54:18:0c:c2:00:48:70:0c: f4:fb:d8:9d:92:1b:70:87:e8:64:f5:d3:d3:e8:bf: a0:9a:a5:24:e1:4e:a8:3c:54:61:72:1e:45:03:08: 13:a1:4f:19:09:37:a2:29:71:01:cb:67:5e:1e:bb: bf:28:02:b3:0e:bb:c4:d5:4a:7a:0d:2b:e8:cb:a1: 3c:f2:c6:bb:36:4e:6a:69:f5:75:f5:c4:26:07:7c: bf:eb:25:1e:d7:17:21:90:41:40:7a:6d:aa:38:03: 3f:34:91:31:7c:03:c4:e0:d7:d0:1d:8e:c2:4d:41: e5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F5:61:B6:11:A9:70:5B:8E:31:D9:65:62:67:CF:D6:C0:37:C7:18 X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:5200:402::/48 Signature Algorithm: sha256WithRSAEncryption a7:da:42:1b:e5:99:12:e3:f5:9b:64:f9:eb:ff:22:b5:aa:6a: b2:16:ae:70:02:84:c0:cb:d2:ec:27:ef:77:a7:54:74:59:e7: 37:27:71:30:65:df:89:a0:cd:69:c2:fa:44:9b:e0:ec:7a:c6: cd:34:9f:11:13:5f:9f:0b:9f:f4:c0:60:ae:d2:00:49:1c:bf: d4:12:10:af:0e:3a:47:bb:40:09:9b:c1:58:a7:66:a9:18:fa: 5c:18:bd:d6:ed:b0:1d:b8:e7:fe:39:0b:9c:3a:5c:68:02:ed: f4:66:5d:25:84:9a:b8:aa:70:09:ba:57:55:a0:49:84:7e:f9: 91:2f:92:95:51:7f:f0:99:e8:47:44:99:aa:18:e3:d4:55:35: 92:c3:13:f4:b2:97:45:ec:fd:67:c7:70:1d:8b:e4:47:60:51: 2b:43:e6:30:17:be:64:49:7c:c0:6a:8d:68:e8:2f:53:ee:63: 2f:6d:4d:46:13:98:33:33:13:50:f5:64:44:31:a5:d7:30:e4: 1b:fe:ee:88:aa:36:1f:cb:4b:bd:c1:d4:dd:e9:e5:4e:57:fd: 55:c6:a3:85:e2:9c:4f:fa:34:06:0e:b0:9e:1f:d5:42:e8:7e: fb:bc:c6:1f:1e:4a:96:84:5e:4d:c9:de:36:fc:ee:99:65:ab: 5a:17:4c:e1 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUxMTAzMDAxNDE3WhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ZjNkOS00YjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaGEY/H7ZRGWwLZoQsU5rNdBQl+GlKVB25ulT4OMAIpIKMQjoNwmHFqtVMh0 bJxOnN2L3Lu8/OmBOViGzXAbFbcI45TNrw47iq3vwKTrUjc7UzYGeHYGk4mnEnkS TuYlUeiZU12oUfzvEHXKOIqMJW+owt359lRO7bssXC9xQ/e0q8lcppE2BR7C1g45 VBgMwgBIcAz0+9idkhtwh+hk9dPT6L+gmqUk4U6oPFRhch5FAwgToU8ZCTeiKXEB y2deHru/KAKzDrvE1Up6DSvoy6E88sa7Nk5qafV19cQmB3y/6yUe1xchkEFAem2q OAM/NJExfAPE4NfQHY7CTUHliQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFPb1YbYR qXBbjjHZZWJnz9bAN8cYMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMEM1RURDREE3 MTY5MTFFREEwM0Q0QTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAFIABAIwDQYJKoZIhvcNAQELBQADggEBAKfaQhvlmRLj 9Ztk+ev/IrWqarIWrnAChMDL0uwn73enVHRZ5zcncTBl34mgzWnC+kSb4Ox6xs00 nxETX58Ln/TAYK7SAEkcv9QSEK8OOke7QAmbwVinZqkY+lwYvdbtsB245/45C5w6 XGgC7fRmXSWEmriqcAm6V1WgSYR++ZEvkpVRf/CZ6EdEmaoY49RVNZLDE/Syl0Xs /WfHcB2L5EdgUStD5jAXvmRJfMBqjWjoL1PuYy9tTUYTmDMzE1D1ZEQxpdcw5Bv+ 7oiqNh/LS73B1N3p5U5X/VXGo4XinE/6NAYOsJ4f1ULofvu8xh8eSpaEXk3J3jb8 7pllq1oXTOE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:22 2025 by rpki-client