$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/6E08B7E2B96111F0B44EA641C4F9AE02.roa File: 6E08B7E2B96111F0B44EA641C4F9AE02.roa (raw, json) Hash identifier: 5BoyFe6vauY5VbEjJJ7Dh4FCQg/kfYL0f9QDaipyVwo= Subject key identifier: A4:79:09:1F:E3:1D:6D:54:AE:DD:6D:65:AB:77:5F:A3:37:4E:89:5D Certificate issuer: /CN=A91E9CD4/serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62 Certificate serial: 03 Authority key identifier: 3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/6E08B7E2B96111F0B44EA641C4F9AE02.roa Signing time: Tue 04 Nov 2025 09:34:16 +0000 ROA not before: Tue 04 Nov 2025 09:34:16 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134077 IP address blocks: 2402:3760::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62 Validity Not Before: Nov 4 09:34:16 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6909c898-9547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:b7:68:b9:28:2d:d6:61:cc:50:44:7f:9d: 44:c7:93:9c:11:05:b9:7b:01:f1:58:fb:8a:e7:54: 55:18:dd:2b:0a:e4:c5:81:99:7e:56:97:73:53:de: 4d:97:d1:fd:a3:5c:d4:a5:3e:b2:21:7a:c5:3c:fc: 63:76:71:e5:a3:42:71:4f:33:68:17:b4:49:38:74: 96:ab:9e:4e:bb:69:0a:c8:de:2a:c5:f6:b4:a1:c8: 91:64:a2:37:b0:10:36:5e:17:e0:9a:5b:f4:50:2e: 25:1c:27:71:4a:ba:1a:5b:b3:8e:51:26:a0:e1:a5: 96:6e:03:08:48:49:ab:18:51:a4:6b:ea:68:50:f9: 2c:a2:b5:3c:c0:97:8e:ee:3e:49:1b:4c:fd:5e:60: ae:70:75:b8:09:9b:0a:80:22:4f:73:21:e4:22:e1: 33:0c:0e:fd:7b:ee:b4:d6:b5:3f:da:ad:b0:e3:72: 7b:60:97:29:f0:72:37:21:91:5d:c1:c5:0d:2e:1c: c8:e7:2c:4e:b6:46:c4:0a:04:7b:23:7b:8e:97:d1: 0c:7f:a2:d1:a3:cb:b3:c5:7b:57:62:41:0e:c2:51: f3:ee:53:94:19:1b:8f:7e:78:3c:df:8c:92:7c:a9: 3a:3e:01:a0:8f:76:93:55:f3:fd:94:f4:83:d7:cc: f2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:79:09:1F:E3:1D:6D:54:AE:DD:6D:65:AB:77:5F:A3:37:4E:89:5D X509v3 Authority Key Identifier: keyid:3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/6E08B7E2B96111F0B44EA641C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3760::/32 Signature Algorithm: sha256WithRSAEncryption 5b:c6:d3:3f:96:7d:dc:0e:bb:78:ae:e6:6d:27:17:a3:f2:0b: 17:e4:2d:72:67:a8:83:a5:c2:b2:35:d6:37:1a:dd:d5:06:39: da:af:c2:71:03:e3:19:6c:f7:09:2e:ba:12:d0:fd:8e:14:7e: 46:33:45:1c:67:38:1e:ef:db:c3:71:0f:4c:85:f2:fa:31:5f: 32:08:30:36:c1:a0:2e:80:71:5e:2d:80:59:2c:d9:c5:29:a5: 7a:92:e8:51:32:21:74:37:49:80:af:07:dd:0a:e0:d0:0f:d4: d7:21:3d:57:af:98:f3:a8:10:b8:57:11:9f:0a:db:50:86:f9: a2:2f:60:21:15:c3:3a:3e:2b:20:71:d6:70:e3:93:ca:07:3b: 45:63:4f:fa:73:3e:89:3f:d8:d1:dd:27:9f:1d:48:0d:59:9f: dc:ab:2b:68:ff:52:55:1e:87:f0:6a:f7:0d:cd:70:c8:d6:11: e9:d3:2f:7b:6d:bf:be:51:22:9f:53:08:ac:54:60:c9:40:49: f8:83:61:bf:29:31:0c:dd:43:d1:11:cc:42:97:83:dd:3f:42: da:74:3c:19:6e:64:1e:76:dd:f1:60:b7:aa:61:bb:14:f1:31: ef:69:62:5a:59:13:7e:93:57:fd:83:06:34:62:17:41:7b:bb: 9c:69:2d:4c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoM0Y4RjM4NjMwRjREM0Q3MEVERDlFNUM5MUUzNkVDNDhF RkI5RkQ2MjAeFw0yNTExMDQwOTM0MTZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MDljODk4LTk1NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFRLdouSgt1mHMUER/nUTHk5wRBbl7AfFY+4rnVFUY3SsK5MWBmX5Wl3NT3k2X 0f2jXNSlPrIhesU8/GN2ceWjQnFPM2gXtEk4dJarnk67aQrI3irF9rShyJFkojew EDZeF+CaW/RQLiUcJ3FKuhpbs45RJqDhpZZuAwhISasYUaRr6mhQ+SyitTzAl47u PkkbTP1eYK5wdbgJmwqAIk9zIeQi4TMMDv177rTWtT/arbDjcntglynwcjchkV3B xQ0uHMjnLE62RsQKBHsje46X0Qx/otGjy7PFe1diQQ7CUfPuU5QZG49+eDzfjJJ8 qTo+AaCPdpNV8/2U9IPXzPLtAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUpHkJH+Md bVSu3W1lq3dfozdOiV0wHwYDVR0jBBgwFoAUP484Yw9NPXDt2eXJHjbsSO+5/WIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0RFNTMxMDgwQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL1A0ODRZdzlOUFhEdDJlWEpIamJzU08tNV9X SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDQ4NFl3OU5QWER0MmVYSkhqYnNTTy01X1dJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNENC9ERTUzMTA4MEI5NTUxMUYwOUE3RjZENzFDNEY5QUUwMi82RTA4QjdFMkI5 NjExMUYwQjQ0RUE2NDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCN2AwDQYJKoZIhvcNAQELBQADggEBAFvG0z+WfdwOu3iu 5m0nF6PyCxfkLXJnqIOlwrI11jca3dUGOdqvwnED4xls9wkuuhLQ/Y4UfkYzRRxn OB7v28NxD0yF8voxXzIIMDbBoC6AcV4tgFks2cUppXqS6FEyIXQ3SYCvB90K4NAP 1NchPVevmPOoELhXEZ8K21CG+aIvYCEVwzo+KyBx1nDjk8oHO0VjT/pzPok/2NHd J58dSA1Zn9yrK2j/UlUeh/Bq9w3NcMjWEenTL3ttv75RIp9TCKxUYMlASfiDYb8p MQzdQ9ERzEKXg90/Qtp0PBluZB523fFgt6phuxTxMe9pYlpZE36TV/2DBjRiF0F7 u5xpLUw= -----END CERTIFICATE-----Generated at Wed Nov 5 12:10:03 2025 by rpki-client