$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/792023A8E0DD11EE86DB926AC4F9AE02.roa File: 792023A8E0DD11EE86DB926AC4F9AE02.roa (raw, json) Hash identifier: GOy9OboZpKQbKQnVi7OFhab7NMhnYhuV2h2uNtdNUpY= Subject key identifier: 8F:5C:EF:BA:B0:0C:D0:14:D5:A1:B4:94:EB:E8:EB:8E:F8:98:95:E8 Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Certificate serial: 12E1 Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/792023A8E0DD11EE86DB926AC4F9AE02.roa Signing time: Sat 02 Aug 2025 14:50:23 +0000 ROA not before: Sat 02 Aug 2025 14:50:23 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38255 IP address blocks: 2001:255::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4833 (0x12e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Validity Not Before: Aug 2 14:50:23 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688e25af-95a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:c5:ee:17:84:bf:3a:2d:53:8d:54:af:b9: 08:3f:0a:15:c9:f5:15:c1:45:10:c2:32:24:71:f3: 05:4f:90:9e:f7:27:fc:bf:ee:f1:56:7f:de:f9:c2: 15:52:04:e0:f8:c3:ed:ef:38:4a:98:62:04:db:40: a1:30:6e:77:d8:2a:ab:9d:16:52:47:40:60:37:bf: 54:88:8c:95:53:ed:28:5d:13:e6:0d:9f:b2:82:21: 6e:51:12:ad:31:50:39:e6:75:4d:45:f4:88:50:4f: ae:2f:c7:fd:de:e5:49:20:42:a9:8e:ba:42:f5:59: cc:31:4e:f2:3d:e7:3b:43:70:0a:53:e4:33:15:f8: 88:cc:a3:d9:cd:0e:77:84:0c:47:df:cd:d6:93:f3: fb:a0:c1:11:83:4d:e0:ff:45:1a:6a:ae:91:b6:28: d1:fb:8e:d5:6e:2c:63:6e:76:63:ad:a8:02:ce:eb: 26:2f:30:7f:66:15:05:71:87:9b:a6:01:79:f4:00: 44:7e:e5:a3:e9:4b:d8:d7:4d:77:82:c8:ab:44:31: c8:01:81:04:a6:09:2e:48:b7:8c:b2:e1:b4:15:78: c6:9d:b0:f3:00:b6:be:25:a5:68:43:a9:57:46:98: 52:1d:fb:52:2d:95:f3:41:23:c7:5f:56:f6:9f:ed: 8f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5C:EF:BA:B0:0C:D0:14:D5:A1:B4:94:EB:E8:EB:8E:F8:98:95:E8 X509v3 Authority Key Identifier: keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/792023A8E0DD11EE86DB926AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:255::/32 Signature Algorithm: sha256WithRSAEncryption 7c:40:e8:0c:3e:57:95:0e:6b:53:98:fd:b8:71:2f:23:0e:78: 4b:c2:99:5c:22:10:40:bb:be:a7:c0:d9:33:19:6a:b5:0d:b1: a1:ea:62:6a:6b:22:97:6c:7d:cd:d0:d4:9b:8b:c3:ca:dd:89: 1d:d4:9d:d9:1b:ed:c2:8a:26:05:b7:e3:0b:8e:c1:72:01:3f: cd:0d:6b:b6:f6:bd:06:35:f8:84:f8:8c:81:8e:27:8d:29:e4: d3:95:95:94:ee:46:32:cd:7e:79:91:d2:4c:dc:3d:78:bf:05: 38:26:cd:e6:e7:c5:8a:55:45:12:50:41:9b:3d:38:5d:4a:29: b7:64:7b:66:cf:30:9d:66:4b:a5:d1:74:99:cb:73:96:e2:2a: fc:dc:38:4a:21:d3:4c:96:2a:d7:9e:c0:bd:f3:b3:f4:a9:b8: 76:5a:38:47:b2:be:1c:28:39:4f:e6:55:d7:b3:57:be:d0:a1: 84:86:0c:fa:7d:28:de:3d:b3:e1:0f:cd:f9:97:f0:32:50:c4: 42:17:70:02:be:3b:0e:a3:7c:ea:11:91:34:a2:cb:a2:1b:78: bb:04:aa:f2:03:d6:02:79:41:6f:ec:8b:30:3c:f6:9d:1c:6d: 79:3f:f7:2d:bd:20:cf:27:3c:19:a4:bf:ab:97:35:2a:28:cd: de:ec:bd:4f -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICEuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0 NjI0QjlGQ0QwHhcNMjUwODAyMTQ1MDIzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMjVhZi05NWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmHF7heEvzotU41Ur7kIPwoVyfUVwUUQwjIkcfMFT5Ce9yf8v+7xVn/e+cIV UgTg+MPt7zhKmGIE20ChMG532CqrnRZSR0BgN79UiIyVU+0oXRPmDZ+ygiFuURKt MVA55nVNRfSIUE+uL8f93uVJIEKpjrpC9VnMMU7yPec7Q3AKU+QzFfiIzKPZzQ53 hAxH383Wk/P7oMERg03g/0Uaaq6RtijR+47VbixjbnZjragCzusmLzB/ZhUFcYeb pgF59ABEfuWj6UvY1013gsirRDHIAYEEpgkuSLeMsuG0FXjGnbDzALa+JaVoQ6lX RphSHftSLZXzQSPHX1b2n+2PaQIDAQABo4ICljCCApIwHQYDVR0OBBYEFI9c77qw DNAU1aG0lOvo6474mJXoMB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTVENjEvMEM2QTBDOUUxRDc5MTFFMjg3OUUzOEM1MDhCMDJDRDIvNzkyMDIzQThF MEREMTFFRTg2REI5MjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAgAQJVMA0GCSqGSIb3DQEBCwUAA4IBAQB8QOgMPleVDmtT mP24cS8jDnhLwplcIhBAu76nwNkzGWq1DbGh6mJqayKXbH3N0NSbi8PK3Ykd1J3Z G+3CiiYFt+MLjsFyAT/NDWu29r0GNfiE+IyBjieNKeTTlZWU7kYyzX55kdJM3D14 vwU4Js3m58WKVUUSUEGbPThdSim3ZHtmzzCdZkul0XSZy3OW4ir83DhKIdNMlirX nsC987P0qbh2WjhHsr4cKDlP5lXXs1e+0KGEhgz6fSjePbPhD835l/AyUMRCF3AC vjsOo3zqEZE0osuiG3i7BKryA9YCeUFv7IswPPadHG15P/ctvSDPJzwZpL+rlzUq KM3e7L1P -----END CERTIFICATE-----Generated at Sun Aug 10 21:11:01 2025 by rpki-client