$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/610856EC638A11F08BC2A840C4F9AE02.roa File: 610856EC638A11F08BC2A840C4F9AE02.roa (raw, json) Hash identifier: mM2/OSyuyrdTMbuzL984YaUAfl+IdF87FO8qvYOz9Co= Subject key identifier: 7F:75:9D:7E:D2:3E:42:83:E3:B4:11:FD:AC:D0:28:E0:56:07:4D:8A Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C Certificate serial: 0C97 Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/610856EC638A11F08BC2A840C4F9AE02.roa Signing time: Fri 18 Jul 2025 03:50:43 +0000 ROA not before: Fri 18 Jul 2025 03:50:43 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 132680 IP address blocks: 2407:e700:1::/48 maxlen: 48 2407:e700:2::/48 maxlen: 48 2407:e700:3::/48 maxlen: 48 2407:e700:12::/48 maxlen: 48 2407:e700:13::/48 maxlen: 48 2407:e700:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3223 (0xc97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C Validity Not Before: Jul 18 03:50:43 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6879c493-ece8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:b0:0e:82:67:29:4f:0a:c7:cd:82:5a:f7: 0c:e2:7e:c7:24:bb:0f:0e:3b:87:e9:da:82:da:83: 18:ce:c1:d5:7b:14:a0:a8:a2:bc:05:01:05:01:13: 18:be:61:d0:d7:9f:ef:b3:f0:01:f5:df:47:c4:9e: 1c:b2:32:76:68:3d:18:92:a8:8c:3b:78:87:32:5c: 89:55:10:04:8b:fe:b4:19:8c:4d:96:df:ee:70:2c: 77:5d:40:06:4f:24:b6:ad:65:a4:8f:58:53:2f:23: 92:0e:7d:28:09:b1:e7:17:ab:b3:a6:8a:84:42:07: 56:df:aa:d2:e7:31:5b:06:12:ca:b6:77:8e:aa:48: ce:8a:97:bf:2c:02:09:69:de:c5:52:f1:d7:49:d6: b1:68:0e:2b:c4:46:cc:35:a8:b6:d1:1a:5d:5d:79: 0b:54:67:fa:ee:0e:19:d9:24:38:65:02:87:47:9d: 47:c2:85:83:83:30:1e:ad:3d:d3:59:9a:7f:ba:f2: 34:e1:0d:80:92:8a:ce:d5:52:2b:4e:00:d6:38:08: ed:41:6e:94:d2:1d:96:f5:6c:0c:8d:16:f5:89:d1: c6:25:2f:15:65:4a:bd:68:82:a2:6c:5c:9d:2c:5b: 2d:00:c7:04:2e:b1:44:27:96:89:df:b1:91:f6:e8: 02:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:75:9D:7E:D2:3E:42:83:E3:B4:11:FD:AC:D0:28:E0:56:07:4D:8A X509v3 Authority Key Identifier: keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/610856EC638A11F08BC2A840C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:e700:1::-2407:e700:3:ffff:ffff:ffff:ffff:ffff 2407:e700:12::/47 2407:e700:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 5a:07:d7:e7:46:8f:5d:d0:53:d1:aa:fb:c8:bc:92:ce:53:91: 64:a3:65:a6:47:3e:9c:33:43:61:86:42:4f:b9:10:63:6f:cc: c2:b7:33:5b:78:9d:17:a9:fc:1c:f5:ce:1a:73:99:83:4a:78: c5:b3:9c:36:00:57:e7:70:64:48:48:bd:17:7f:74:68:cc:a6: 96:37:cb:4d:63:0e:de:da:45:b8:11:ef:8e:b8:a9:0e:0a:c0: ab:42:b6:cd:94:77:a0:2e:e4:70:b3:9c:49:e1:10:73:72:27: c2:bb:be:98:35:26:d3:d8:ee:cd:46:ea:dd:1a:85:85:b5:41: 44:78:26:2a:c7:7c:73:80:4d:cd:3b:38:3a:c1:aa:99:23:60: 00:36:4e:2c:e6:a2:2f:8a:f4:cc:74:5b:7c:10:7f:47:01:1a: 0a:e1:80:f9:c7:84:bd:e2:59:35:02:d2:58:4e:d7:31:14:77: 57:b5:cb:de:c3:b0:ca:bf:50:57:88:61:56:e3:0a:22:69:e5: 14:26:03:5b:28:37:46:e0:cf:9b:8e:fa:38:23:dd:d7:bc:5e: 5b:a6:81:ed:c1:98:46:c6:10:b3:7f:8d:a1:d0:a1:c0:19:51: 29:b8:9c:ad:3d:30:e9:20:a2:ab:78:a4:8c:49:e7:7f:a0:4d: d5:fc:2e:74 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKEI0QjEwRTZDQjM4RDUzNjVEMDU0RThEQkU5MEYzNEYy QzM4OEIxMEMwHhcNMjUwNzE4MDM1MDQzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc5YzQ5My1lY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthWwDoJnKU8Kx82CWvcM4n7HJLsPDjuH6dqC2oMYzsHVexSgqKK8BQEFARMY vmHQ15/vs/AB9d9HxJ4csjJ2aD0YkqiMO3iHMlyJVRAEi/60GYxNlt/ucCx3XUAG TyS2rWWkj1hTLyOSDn0oCbHnF6uzpoqEQgdW36rS5zFbBhLKtneOqkjOipe/LAIJ ad7FUvHXSdaxaA4rxEbMNai20RpdXXkLVGf67g4Z2SQ4ZQKHR51HwoWDgzAerT3T WZp/uvI04Q2AkorO1VIrTgDWOAjtQW6U0h2W9WwMjRb1idHGJS8VZUq9aIKibFyd LFstAMcELrFEJ5aJ37GR9ugCMQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFH91nX7S PkKD47QR/azQKOBWB02KMB8GA1UdIwQYMBaAFLSxDmyzjVNl0FTo2+kPNPLDiLEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8yMDkxREM4RTA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUyWFFWT2piNlE4MDhzT0lz UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMRU9iTE9OVTJYUVZPamI2UTgwOHNPSXNRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0UzQTMvMjA5MURDOEUwNTAxMTFFQUJEOUIyMDJDQzRGOUFFMDIvNjEwODU2RUM2 MzhBMTFGMDhCQzJBODQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgACMCYwEgMHACQH5wAAAQMHAiQH5wAAAAMHASQH5wAAEgMHACQH5wD/ /jANBgkqhkiG9w0BAQsFAAOCAQEAWgfX50aPXdBT0ar7yLySzlORZKNlpkc+nDND YYZCT7kQY2/MwrczW3idF6n8HPXOGnOZg0p4xbOcNgBX53BkSEi9F390aMymljfL TWMO3tpFuBHvjripDgrAq0K2zZR3oC7kcLOcSeEQc3Inwru+mDUm09juzUbq3RqF hbVBRHgmKsd8c4BNzTs4OsGqmSNgADZOLOaiL4r0zHRbfBB/RwEaCuGA+ceEveJZ NQLSWE7XMRR3V7XL3sOwyr9QV4hhVuMKImnlFCYDWyg3RuDPm476OCPd17xeW6aB 7cGYRsYQs3+NodChwBlRKbicrT0w6SCiq3ikjEnnf6BN1fwudA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:03 2025 by rpki-client