$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B6D7E1547EEE11EF8B38A43BC4F9AE02.roa File: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (raw, json) Hash identifier: cTr3m6jhSldGceNeNs9qUPTOBPhnI4QANoh1eGzuDWM= Subject key identifier: F5:63:A6:A3:11:A6:06:6D:6A:BA:66:39:FE:EF:E6:D1:37:F2:B1:6E Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 278D Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B6D7E1547EEE11EF8B38A43BC4F9AE02.roa Signing time: Tue 08 Apr 2025 15:53:40 +0000 ROA not before: Tue 08 Apr 2025 15:53:40 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152891 IP address blocks: 203.213.202.0/24 maxlen: 24 2001:4457:5b7b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10125 (0x278d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 8 15:53:40 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f54684-6bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:9c:58:c0:1d:a5:81:40:b1:3a:38:71:c6: b0:72:70:b5:20:21:db:3a:48:63:ca:4f:dc:87:83: 30:4a:4a:4e:b8:17:34:10:d7:50:17:c0:21:cd:b9: ac:83:77:66:5f:9b:05:c9:05:5e:71:97:26:0c:2b: ca:04:4d:6c:1e:82:98:48:a1:19:7f:e2:5f:a0:35: ea:5d:c2:b6:fb:bb:f0:d1:3f:18:10:03:71:1b:90: 04:27:09:35:6a:0a:f9:2f:7b:88:4e:bd:ba:5d:30: e4:1d:9a:e6:c0:a3:19:0f:5d:68:e0:28:f7:56:4b: 84:38:1d:78:9e:eb:b8:a5:52:bb:76:f3:3c:3b:ea: a0:42:06:da:57:67:ec:44:09:5a:d0:02:d0:c5:9b: 10:02:01:2a:0d:7b:b3:29:e7:4a:ed:e0:28:6a:9b: cb:be:8a:21:2d:64:cd:8f:32:82:ed:96:01:9e:c5: d0:d9:b9:21:c0:fb:a8:64:62:25:4e:86:e2:07:12: f8:fa:a1:a3:68:92:51:b5:a2:11:7e:c4:bd:9b:7e: a4:bb:d7:48:85:35:f0:f7:1b:94:b7:c2:e8:87:da: 0c:b6:70:0f:38:bb:78:47:70:23:da:40:e2:81:99: ad:3a:3d:10:c2:86:4f:ce:16:5f:a0:3c:f7:5a:55: 94:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:63:A6:A3:11:A6:06:6D:6A:BA:66:39:FE:EF:E6:D1:37:F2:B1:6E X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B6D7E1547EEE11EF8B38A43BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.213.202.0/24 IPv6: 2001:4457:5b7b::/48 Signature Algorithm: sha256WithRSAEncryption 0f:e3:b5:39:f1:32:ea:62:0c:d4:a7:f6:b4:4a:0b:e8:69:f2: 9d:34:e4:83:de:db:6c:cc:1e:5d:bf:bd:00:2b:a0:5b:30:69: e5:f3:b6:32:a3:cf:4e:77:17:c3:ff:e4:82:c3:b0:63:2e:62: f6:bd:2d:4f:03:d0:bf:00:78:61:10:7e:d8:95:7f:80:05:f8: fd:c5:77:60:7a:22:18:55:85:c3:2d:c7:20:fd:12:9c:f2:42: 81:e3:ce:11:ca:dd:61:80:5e:46:23:84:6a:47:f6:b6:8f:d9: 9f:bf:67:9f:45:9b:13:00:54:c6:28:d1:88:4d:5a:e2:83:70: a7:2d:f7:cb:23:7d:af:b7:5a:92:d6:55:8d:59:7d:13:88:76: 5f:3c:0e:5e:0c:84:e7:16:da:aa:be:9b:6e:6a:ec:31:d5:4d: 02:1a:4b:ec:5f:d9:1c:2e:d9:6e:01:35:e2:91:8e:6f:8a:58: cb:cf:27:20:2f:59:96:36:ba:2f:db:38:bd:ee:97:97:50:59: fe:2d:54:e9:cf:2b:e0:03:54:af:20:5c:aa:93:56:af:68:9b: f4:de:98:5d:52:3e:cc:16:1f:0f:8c:75:b3:c9:61:3e:c8:3a: 33:8d:ab:2f:23:ab:71:c0:4c:7f:1c:30:0b:38:34:59:06:51: 47:3c:f1:c5 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICJ40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUwNDA4MTU1MzQwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y1NDY4NC02YmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvacWMAdpYFAsTo4ccawcnC1ICHbOkhjyk/ch4MwSkpOuBc0ENdQF8Ahzbms g3dmX5sFyQVecZcmDCvKBE1sHoKYSKEZf+JfoDXqXcK2+7vw0T8YEANxG5AEJwk1 agr5L3uITr26XTDkHZrmwKMZD11o4Cj3VkuEOB14nuu4pVK7dvM8O+qgQgbaV2fs RAla0ALQxZsQAgEqDXuzKedK7eAoapvLvoohLWTNjzKC7ZYBnsXQ2bkhwPuoZGIl TobiBxL4+qGjaJJRtaIRfsS9m36ku9dIhTXw9xuUt8Loh9oMtnAPOLt4R3Aj2kDi gZmtOj0QwoZPzhZfoDz3WlWUUQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPVjpqMR pgZtarpmOf7v5tE38rFuMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvQjZEN0UxNTQ3 RUVFMTFFRjhCMzhBNDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADL1cowDwQCAAIwCQMHACABRFdbezANBgkqhkiG9w0BAQsF AAOCAQEAD+O1OfEy6mIM1Kf2tEoL6GnynTTkg97bbMweXb+9ACugWzBp5fO2MqPP TncXw//kgsOwYy5i9r0tTwPQvwB4YRB+2JV/gAX4/cV3YHoiGFWFwy3HIP0SnPJC gePOEcrdYYBeRiOEakf2to/Zn79nn0WbEwBUxijRiE1a4oNwpy33yyN9r7daktZV jVl9E4h2XzwOXgyE5xbaqr6bbmrsMdVNAhpL7F/ZHC7ZbgE14pGOb4pYy88nIC9Z lja6L9s4ve6Xl1BZ/i1U6c8r4ANUryBcqpNWr2ib9N6YXVI+zBYfD4x1s8lhPsg6 M42rLyOrccBMfxwwCzg0WQZRRzzxxQ== -----END CERTIFICATE-----Generated at Wed Nov 5 07:54:14 2025 by rpki-client