$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/D77C5AC003E611F0A9F5535FC4F9AE02.roa File: D77C5AC003E611F0A9F5535FC4F9AE02.roa (raw, json) Hash identifier: C3dI3f47oUkTpODJD7lPzsLlPec49Cck1X3kjiuVXDM= Subject key identifier: 4E:9B:46:2F:B6:89:72:6D:D6:C1:57:B9:EB:DA:75:75:C3:6F:63:DB Certificate issuer: /CN=A91E4ED1/serialNumber=E45F61EFBCB2E7B1E414B2CBDC3450F7F846189D Certificate serial: 0BF9 Authority key identifier: E4:5F:61:EF:BC:B2:E7:B1:E4:14:B2:CB:DC:34:50:F7:F8:46:18:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/D77C5AC003E611F0A9F5535FC4F9AE02.roa Signing time: Tue 18 Mar 2025 10:50:44 +0000 ROA not before: Tue 18 Mar 2025 10:50:44 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 23532 IP address blocks: 2001:df0:26c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3065 (0xbf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4ED1, serialNumber=E45F61EFBCB2E7B1E414B2CBDC3450F7F846189D Validity Not Before: Mar 18 10:50:44 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67d95004-5634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0b:aa:c1:30:32:ba:95:c4:a1:86:d0:7b:47: 56:d0:5d:1b:13:29:f0:96:bc:c8:bc:87:75:cd:d4: 1a:88:60:55:90:8c:4f:bb:0e:a6:4c:51:aa:7f:ce: 2e:3a:53:5e:5f:74:50:fc:16:c9:84:ed:39:b7:07: 27:b1:e0:f1:25:8b:d3:65:b5:86:71:33:46:4e:a6: af:e9:25:e0:4b:39:3d:2e:f5:91:6f:d8:75:86:44: 9b:38:07:b9:0d:57:d9:06:ed:d2:96:91:b6:6e:87: d6:10:6a:51:ba:d1:9e:7e:69:30:ad:d1:ae:47:59: ee:5c:71:a6:bb:dc:17:b1:af:f6:07:54:e8:4e:83: 47:1b:2e:fd:a7:89:11:72:da:19:d9:7e:8f:13:5a: ac:fd:c6:86:3b:d9:dc:d5:8a:f8:52:30:a6:0a:86: 53:ab:22:2a:10:57:99:f7:e6:b7:2e:12:1e:42:87: 6e:d1:2b:ca:89:21:fb:c7:85:32:db:2c:c5:e2:04: d7:c0:b7:a8:91:d2:c7:3a:4d:62:ba:62:13:ab:14: 01:94:63:57:5b:f1:a9:2d:33:68:cc:0a:29:1e:b8: 35:b8:50:c5:f0:f3:5d:20:f9:63:1e:f2:65:3c:80: 38:cb:ac:83:57:fe:53:31:bb:8c:c2:f2:be:66:2d: 0e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9B:46:2F:B6:89:72:6D:D6:C1:57:B9:EB:DA:75:75:C3:6F:63:DB X509v3 Authority Key Identifier: keyid:E4:5F:61:EF:BC:B2:E7:B1:E4:14:B2:CB:DC:34:50:F7:F8:46:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/D77C5AC003E611F0A9F5535FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:26c0::/48 Signature Algorithm: sha256WithRSAEncryption 67:42:ba:90:e7:98:56:68:6d:5c:6d:80:ca:4b:6b:94:4f:7b: fa:a2:d9:a4:b3:c8:0c:85:da:0f:f0:a7:7a:16:e2:16:c1:e0: ba:a2:f9:a3:dd:b0:96:62:7f:1a:c5:f4:cb:20:8c:09:74:91: 0e:f5:a6:44:6e:ee:e6:0d:cf:90:96:a7:a1:4f:47:ad:2d:09: a4:28:d7:07:2e:70:9a:f9:32:84:ac:7b:36:10:9a:1f:dd:b2: 71:4d:68:e7:fd:4e:e7:6d:2c:7b:c8:ab:ac:b5:34:24:75:99: 0b:c9:c9:11:30:79:4f:6f:54:68:1e:77:35:57:55:a4:7b:a3: 08:ca:e6:df:0f:f3:e1:d5:ff:37:3d:3c:24:18:86:24:f7:10: e8:c0:3d:84:1b:d0:27:a9:b0:a1:d9:a7:1a:8f:b7:53:0b:2b: 2a:b8:48:3a:83:d7:0f:6e:13:52:75:96:a5:e6:e9:55:21:16: 0a:93:16:5a:bf:27:06:69:d3:f9:3d:6a:c3:66:19:9d:39:e4: 41:3b:a8:fc:be:d3:e6:93:cd:14:e7:4c:6a:81:20:0b:61:df: 0f:41:5e:4f:e5:1a:23:93:83:e8:8c:d3:69:4f:43:93:69:5e: 51:d3:13:47:81:83:75:a3:6e:66:16:b5:58:22:cc:51:32:fa: 7a:de:c3:d7 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICC/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRDExMTAvBgNVBAUTKEU0NUY2MUVGQkNCMkU3QjFFNDE0QjJDQkRDMzQ1MEY3 Rjg0NjE4OUQwHhcNMjUwMzE4MTA1MDQ0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q5NTAwNC01NjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QuqwTAyupXEoYbQe0dW0F0bEynwlrzIvId1zdQaiGBVkIxPuw6mTFGqf84u OlNeX3RQ/BbJhO05twcnseDxJYvTZbWGcTNGTqav6SXgSzk9LvWRb9h1hkSbOAe5 DVfZBu3SlpG2bofWEGpRutGefmkwrdGuR1nuXHGmu9wXsa/2B1ToToNHGy79p4kR ctoZ2X6PE1qs/caGO9nc1Yr4UjCmCoZTqyIqEFeZ9+a3LhIeQodu0SvKiSH7x4Uy 2yzF4gTXwLeokdLHOk1iumITqxQBlGNXW/GpLTNozAopHrg1uFDF8PNdIPljHvJl PIA4y6yDV/5TMbuMwvK+Zi0OrwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFE6bRi+2 iXJt1sFXuevadXXDb2PbMB8GA1UdIwQYMBaAFORfYe+8suex5BSyy9w0UPf4Rhid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVEMS81RkRENzhCMjBC NjQxMUVBOTA5MjMwNjZDNEY5QUUwMi81RjloNzd5eTU3SGtGTExMM0RSUTlfaEdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVGOWg3N3l5NTdIa0ZMTEwzRFJROV9oR0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRFRDEvNUZERDc4QjIwQjY0MTFFQTkwOTIzMDY2QzRGOUFFMDIvRDc3QzVBQzAw M0U2MTFGMEE5RjU1MzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3wJsAwDQYJKoZIhvcNAQELBQADggEBAGdCupDnmFZo bVxtgMpLa5RPe/qi2aSzyAyF2g/wp3oW4hbB4Lqi+aPdsJZifxrF9MsgjAl0kQ71 pkRu7uYNz5CWp6FPR60tCaQo1wcucJr5MoSsezYQmh/dsnFNaOf9TudtLHvIq6y1 NCR1mQvJyREweU9vVGgedzVXVaR7owjK5t8P8+HV/zc9PCQYhiT3EOjAPYQb0Cep sKHZpxqPt1MLKyq4SDqD1w9uE1J1lqXm6VUhFgqTFlq/JwZp0/k9asNmGZ055EE7 qPy+0+aTzRTnTGqBIAth3w9BXk/lGiOTg+iM02lPQ5NpXlHTE0eBg3WjbmYWtVgi zFEy+nrew9c= -----END CERTIFICATE-----Generated at Wed Nov 5 16:44:04 2025 by rpki-client