$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/C155660E492B11EF8EF0D04FC4F9AE02.roa File: C155660E492B11EF8EF0D04FC4F9AE02.roa (raw, json) Hash identifier: p1Kd4l2BGto3TUE6P+Iwqb8Y4agcHwTbtFw10TWcSis= Subject key identifier: 83:81:46:ED:C5:3A:7A:60:3F:7D:A1:2E:8B:91:A4:E1:AA:08:EF:6A Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Certificate serial: C2 Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/C155660E492B11EF8EF0D04FC4F9AE02.roa Signing time: Fri 01 Aug 2025 07:43:09 +0000 ROA not before: Fri 01 Aug 2025 07:43:09 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135418 IP address blocks: 2001:df4:1ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 06:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Validity Not Before: Aug 1 07:43:09 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=688c700d-f347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:ad:d3:96:2a:3c:86:84:1b:29:17:9e:f0: 4b:b5:63:29:3c:3a:c5:30:94:32:f4:01:1d:d1:24: 08:82:2e:2b:fa:0e:c0:dd:4a:86:21:aa:bd:99:e3: 90:14:c5:52:f1:b0:d7:38:91:8d:92:ab:bd:42:d9: dd:22:07:47:68:7b:50:6e:8d:46:da:c3:5c:20:be: 90:89:67:9f:b3:68:4e:ec:a4:73:1d:19:c5:0c:71: 03:b2:18:77:38:93:96:f3:1c:aa:51:68:cc:30:08: b5:a4:6c:cf:e9:c6:f4:9a:7b:f4:7b:43:f0:c2:c6: 9c:e3:5a:55:ea:0b:3f:36:46:28:51:48:32:57:f9: 66:b2:9f:62:b9:f6:d5:6c:a7:7b:e4:e2:8d:45:89: 99:5e:c3:a6:2b:e9:d3:1c:a5:c0:8c:7b:e3:fe:38: 32:19:bc:58:6a:77:55:2d:85:bb:44:18:f7:a0:9c: 34:c6:02:56:2a:9e:e3:bb:72:30:55:c5:81:dd:06: cd:46:6e:b4:41:d7:c9:9b:37:36:1a:a4:3e:2c:1d: 5e:ca:ae:23:5a:88:ac:b7:01:04:36:e2:f9:f6:bf: e1:08:ec:72:22:c6:e4:23:4f:c7:b8:9a:5e:80:7e: 86:7d:79:38:26:0b:de:27:8d:f7:2d:7f:73:c4:90: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:81:46:ED:C5:3A:7A:60:3F:7D:A1:2E:8B:91:A4:E1:AA:08:EF:6A X509v3 Authority Key Identifier: keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/C155660E492B11EF8EF0D04FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:1ac0::/48 Signature Algorithm: sha256WithRSAEncryption b6:5c:88:ee:62:7a:dd:fa:4e:2a:87:b1:54:f1:bf:bc:b3:ae: 2e:bc:2d:ce:13:1f:3e:86:33:1e:07:7c:76:b9:b3:d2:a3:49: fd:2d:59:fb:60:c0:e3:60:66:b3:05:f8:2f:b0:b0:d3:59:e6: f8:d9:67:e5:aa:d3:2b:51:21:96:d5:45:dd:e6:c7:6d:d0:13: 13:d2:b6:b1:eb:a7:71:35:04:86:c1:fa:cd:19:ea:29:96:44: db:fd:a6:83:2e:c0:11:2f:c2:7c:3f:ae:91:fe:0d:26:73:62: 47:ca:0c:67:16:11:ad:44:4a:f3:7c:a7:0f:bc:d5:fc:f2:f8: f1:11:8b:16:87:78:74:21:13:08:f0:dc:55:50:c4:4a:54:45: eb:9c:0c:34:0d:80:4b:5b:4a:df:8b:9c:cb:5f:e4:aa:5c:41: b8:40:cd:f0:83:15:0e:20:0b:8f:a6:34:19:8e:c9:fc:e1:67: ef:5f:48:5d:68:0f:f4:50:9f:84:77:62:27:e8:4c:ea:78:7f: ca:0b:a9:88:95:99:50:db:b0:ec:e0:80:21:0d:1e:a8:93:e7: cf:99:2e:b4:e5:ce:79:9d:39:98:eb:dc:48:6c:8b:ef:59:00: b0:d8:60:1c:29:1e:ca:58:43:b0:50:d1:40:bd:31:66:55:99: 77:82:5e:61 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKENCQkJCQjI0QjIyQjQzNUQxQ0E0OTNBOUQ2M0RDQTc3 OUJFMDc5NkEwHhcNMjUwODAxMDc0MzA5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjNzAwZC1mMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrKt05YqPIaEGykXnvBLtWMpPDrFMJQy9AEd0SQIgi4r+g7A3UqGIaq9meOQ FMVS8bDXOJGNkqu9QtndIgdHaHtQbo1G2sNcIL6QiWefs2hO7KRzHRnFDHEDshh3 OJOW8xyqUWjMMAi1pGzP6cb0mnv0e0Pwwsac41pV6gs/NkYoUUgyV/lmsp9iufbV bKd75OKNRYmZXsOmK+nTHKXAjHvj/jgyGbxYandVLYW7RBj3oJw0xgJWKp7ju3Iw VcWB3QbNRm60QdfJmzc2GqQ+LB1eyq4jWoistwEENuL59r/hCOxyIsbkI0/HuJpe gH6GfXk4JgveJ433LX9zxJDWtQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIOBRu3F OnpgP32hLouRpOGqCO9qMB8GA1UdIwQYMBaAFMu7uySyK0NdHKSTqdY9yneb4Hlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS81MzhDMTk2MDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclExMGNwSk9wMWozS2Q1dmdl V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBDRjUvNTM4QzE5NjA0OTJCMTFFRkJFMTAxODRGQzRGOUFFMDIvQzE1NTY2MEU0 OTJCMTFFRjhFRjBEMDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30GsAwDQYJKoZIhvcNAQELBQADggEBALZciO5iet36 TiqHsVTxv7yzri68Lc4THz6GMx4HfHa5s9KjSf0tWftgwONgZrMF+C+wsNNZ5vjZ Z+Wq0ytRIZbVRd3mx23QExPStrHrp3E1BIbB+s0Z6imWRNv9poMuwBEvwnw/rpH+ DSZzYkfKDGcWEa1ESvN8pw+81fzy+PERixaHeHQhEwjw3FVQxEpUReucDDQNgEtb St+LnMtf5KpcQbhAzfCDFQ4gC4+mNBmOyfzhZ+9fSF1oD/RQn4R3YifoTOp4f8oL qYiVmVDbsOzggCENHqiT58+ZLrTlznmdOZjr3Ehsi+9ZALDYYBwpHspYQ7BQ0UC9 MWZVmXeCXmE= -----END CERTIFICATE-----Generated at Wed Aug 13 17:57:49 2025 by rpki-client