$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/ECC41AD2748A11ED80EF3436C4F9AE02.roa File: ECC41AD2748A11ED80EF3436C4F9AE02.roa (raw, json) Hash identifier: lryulomcME0BsK3AXyNXRm2nMBB1IJZ7jhxbXIWaJ7w= Subject key identifier: 84:D9:83:53:4A:D8:60:93:9F:F6:24:8A:D5:10:35:6D:FB:0F:BE:DC Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 0632 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/ECC41AD2748A11ED80EF3436C4F9AE02.roa Signing time: Mon 03 Nov 2025 00:14:15 +0000 ROA not before: Mon 03 Nov 2025 00:14:15 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 0 IP address blocks: 2400:5200:402::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1586 (0x632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Nov 3 00:14:15 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=6907f3d7-ee25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:3e:f5:73:7a:37:13:6f:c9:75:9a:f2:d3:3f: db:55:af:b1:57:8c:cc:17:54:8d:63:8e:10:51:d6: cb:ca:fe:3f:fb:21:ff:7d:47:24:95:9e:82:a4:20: 1c:73:93:8b:ab:78:71:fc:c9:b2:92:21:d7:eb:c3: 78:ac:0e:36:87:86:40:b0:18:45:62:eb:cf:18:9d: ed:23:fe:f7:64:58:76:9d:3b:87:cd:13:2f:ed:eb: f1:f5:57:4e:ed:85:0a:a2:1e:19:07:73:31:3e:1c: 1a:2d:c0:93:9d:18:9d:af:75:a5:0a:f8:57:70:75: f8:6b:6f:8a:f9:80:da:4d:8e:44:07:eb:3d:44:04: 57:37:10:97:12:38:4c:8b:a5:cc:fe:e3:4b:9d:a3: 40:c5:a7:f7:43:fd:c5:b0:9e:0d:37:a4:a2:7e:a3: 85:9e:b1:cc:ae:04:ae:1d:7c:df:fc:3b:6f:c5:7d: fd:49:80:42:a5:2c:8d:bb:29:98:df:11:7d:c9:0d: 5a:ab:f5:42:cc:d5:aa:4a:28:be:13:7d:75:b5:20: 76:3b:47:ee:76:4b:bc:0a:87:5b:49:3a:a7:b8:68: 3e:b4:91:14:45:24:36:8f:69:62:49:57:01:22:34: 39:df:2d:32:53:89:78:18:11:0b:f7:b0:aa:d3:59: 04:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D9:83:53:4A:D8:60:93:9F:F6:24:8A:D5:10:35:6D:FB:0F:BE:DC X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/ECC41AD2748A11ED80EF3436C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:5200:402::/48 Signature Algorithm: sha256WithRSAEncryption 25:20:a8:4c:28:04:da:f5:e7:d9:6f:c8:2c:e4:05:7a:c7:94: 82:fb:26:2c:ea:20:49:93:29:d2:e7:2d:35:2a:a1:ea:25:9a: 01:c8:c1:58:c8:cc:a8:dc:54:d2:ad:52:e1:02:73:e1:13:38: 0c:97:e2:f4:3f:03:79:f9:60:60:58:e1:20:4f:8e:ff:66:ce: 5c:80:1c:c8:ac:15:6d:20:86:98:d6:1d:64:10:26:5f:8e:cc: f6:97:73:4d:14:83:94:55:0f:6c:7f:1e:09:47:23:e3:ea:fc: 8f:4f:5c:fe:a9:55:f1:53:b5:3f:0a:c4:cd:13:3b:a8:70:f4: 87:0b:18:55:2d:8c:8c:af:90:07:71:65:42:c2:4c:30:51:e7: 66:63:c6:f3:6d:b0:24:23:08:10:4a:56:30:05:75:ea:06:19: ef:30:86:7d:ee:67:f2:62:ae:39:96:7b:53:47:53:c3:2b:37: db:7e:22:5c:91:af:70:ba:99:9f:24:e4:e8:33:f0:65:2e:2a: 0d:20:85:87:63:bb:47:33:bf:7d:29:b8:68:e5:9f:79:95:94: ca:42:41:09:48:36:41:1c:f6:59:32:a7:4c:12:e8:e7:7c:3a: 0d:6f:32:2e:c3:65:0f:bc:de:c4:40:4f:93:c4:85:9b:33:a7: ee:2b:e3:03 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUxMTAzMDAxNDE1WhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ZjNkNy1lZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/T71c3o3E2/JdZry0z/bVa+xV4zMF1SNY44QUdbLyv4/+yH/fUcklZ6CpCAc c5OLq3hx/MmykiHX68N4rA42h4ZAsBhFYuvPGJ3tI/73ZFh2nTuHzRMv7evx9VdO 7YUKoh4ZB3MxPhwaLcCTnRidr3WlCvhXcHX4a2+K+YDaTY5EB+s9RARXNxCXEjhM i6XM/uNLnaNAxaf3Q/3FsJ4NN6SifqOFnrHMrgSuHXzf/DtvxX39SYBCpSyNuymY 3xF9yQ1aq/VCzNWqSii+E311tSB2O0fudku8CodbSTqnuGg+tJEURSQ2j2liSVcB IjQ53y0yU4l4GBEL97Cq01kEzwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFITZg1NK 2GCTn/YkitUQNW37D77cMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvRUNDNDFBRDI3 NDhBMTFFRDgwRUYzNDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAFIABAIwDQYJKoZIhvcNAQELBQADggEBACUgqEwoBNr1 59lvyCzkBXrHlIL7JizqIEmTKdLnLTUqoeolmgHIwVjIzKjcVNKtUuECc+ETOAyX 4vQ/A3n5YGBY4SBPjv9mzlyAHMisFW0ghpjWHWQQJl+OzPaXc00Ug5RVD2x/HglH I+Pq/I9PXP6pVfFTtT8KxM0TO6hw9IcLGFUtjIyvkAdxZULCTDBR52ZjxvNtsCQj CBBKVjAFdeoGGe8whn3uZ/JirjmWe1NHU8MrN9t+IlyRr3C6mZ8k5Ogz8GUuKg0g hYdju0czv30puGjln3mVlMpCQQlINkEc9lkyp0wS6Od8Og1vMi7DZQ+83sRAT5PE hZszp+4r4wM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:38:04 2025 by rpki-client