$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/070DB3BAFB6D11EFA5E39678C4F9AE02.roa File: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (raw, json) Hash identifier: q1x47yUs6U+uQS9ousQECTrxQCfwChHW+mjdafLrJuY= Subject key identifier: E4:97:7E:7E:14:19:E5:9C:53:8A:60:00:02:09:59:80:5E:60:5A:D4 Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Certificate serial: 04 Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/070DB3BAFB6D11EFA5E39678C4F9AE02.roa Signing time: Fri 07 Mar 2025 15:58:36 +0000 ROA not before: Fri 07 Mar 2025 15:58:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153663 IP address blocks: 2401:f460:7000::/36 maxlen: 44 2401:f460:b000::/36 maxlen: 44 2401:f460:f000::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Validity Not Before: Mar 7 15:58:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67cb17ac-acb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:73:16:1e:b1:6d:00:7b:79:2f:57:29:4c:0f: 5d:98:93:5d:05:0e:d6:54:1d:28:0a:37:fd:b2:b3: 5c:ae:aa:1f:43:d7:79:e6:54:88:5f:53:e8:fa:0d: 41:23:07:da:82:b4:ef:11:8b:8d:99:a2:b5:a6:f1: 06:1a:3b:25:d3:04:2f:94:98:51:e3:79:c7:05:ca: 1c:76:9b:ba:f8:3e:a5:c4:0c:51:1d:74:d9:91:bc: 78:fb:59:ca:64:62:fa:fd:39:12:d0:a5:b9:c2:23: 84:03:ba:2e:de:89:df:3d:4b:b2:52:06:ea:ca:4e: 94:2c:2c:44:4e:86:5d:94:a3:d5:3e:0c:de:ca:80: 5b:75:fe:9f:5c:14:1f:58:b2:4d:6c:a5:97:e1:f9: f7:06:b0:df:cf:6c:79:f0:1a:0e:5e:fa:78:f7:91: f4:b6:79:65:b9:1e:82:06:08:8e:20:90:1d:0f:e4: 93:bf:73:f4:c2:08:3d:34:3a:e4:8b:cd:d3:a7:63: bb:f2:48:21:bf:67:bc:64:5e:25:ab:3d:ad:f8:27: e5:2e:34:c3:bd:c7:a5:c2:75:49:64:d8:ae:ff:7a: b7:cf:72:35:84:61:59:61:50:b8:3c:c8:39:e6:15: 58:c2:1d:95:b9:b3:18:81:9d:96:c7:47:be:a1:f4: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:97:7E:7E:14:19:E5:9C:53:8A:60:00:02:09:59:80:5E:60:5A:D4 X509v3 Authority Key Identifier: keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/070DB3BAFB6D11EFA5E39678C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:f460:7000::/36 2401:f460:b000::/36 2401:f460:f000::/36 Signature Algorithm: sha256WithRSAEncryption b9:6d:ac:f7:e1:ec:f8:52:47:e3:ff:fb:77:f6:be:9b:ba:2b: dd:da:e5:e3:3b:e2:50:43:87:51:06:fe:56:4f:1b:a8:94:dd: 34:78:15:18:0f:0d:34:59:c0:3c:0a:01:d7:4c:72:5c:b3:75: 59:d0:c2:8b:90:09:bd:6f:ca:cd:cb:4e:13:26:16:46:ec:40: bc:06:d8:cf:dc:00:9e:0e:1f:ea:5a:6b:e1:72:01:0a:38:60: a9:48:17:dd:5e:a9:39:3b:94:cd:d4:ed:6d:4c:67:92:98:1a: 42:35:2f:e0:91:0e:b1:a0:79:22:bb:d2:4e:14:1f:34:98:1d: b5:2a:1d:a2:85:ca:bf:9a:23:4c:18:d5:2b:23:1c:f9:05:d4: f0:ed:cb:86:bb:5b:85:51:d5:3c:cf:67:b7:af:7b:3d:cd:52: e3:3c:95:3b:8d:7b:01:34:6e:97:d0:fd:d4:ba:bd:7b:dd:3c: 72:10:28:0e:e2:d6:6a:fd:61:96:06:23:c9:d7:87:88:e5:78: 83:be:a1:30:be:a2:ad:cc:44:b6:b0:65:68:05:fd:d6:4d:98: 8f:2c:3f:fd:e7:f9:c4:26:2f:3e:41:8a:9b:2b:29:28:cc:38: b9:e1:23:3e:5e:7c:99:f6:65:c0:c5:c4:1a:b7:21:22:36:cc: 5b:9c:74:6e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTgwQzExMC8GA1UEBRMoMzEyNDQwMjAxQjJFRjc0QjdDQUM2QzMxRkI4NUY0MUU5 QzQ2ODZBMDAeFw0yNTAzMDcxNTU4MzZaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Y2IxN2FjLWFjYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDicxYesW0Ae3kvVylMD12Yk10FDtZUHSgKN/2ys1yuqh9D13nmVIhfU+j6DUEj B9qCtO8Ri42ZorWm8QYaOyXTBC+UmFHjeccFyhx2m7r4PqXEDFEddNmRvHj7Wcpk Yvr9ORLQpbnCI4QDui7eid89S7JSBurKTpQsLEROhl2Uo9U+DN7KgFt1/p9cFB9Y sk1spZfh+fcGsN/PbHnwGg5e+nj3kfS2eWW5HoIGCI4gkB0P5JO/c/TCCD00OuSL zdOnY7vySCG/Z7xkXiWrPa34J+UuNMO9x6XCdUlk2K7/erfPcjWEYVlhULg8yDnm FVjCHZW5sxiBnZbHR76h9JYRAgMBAAGjggKnMIICozAdBgNVHQ4EFgQU5Jd+fhQZ 5ZxTimAAAglZgF5gWtQwHwYDVR0jBBgwFoAUMSRAIBsu90t8rGwx+4X0HpxGhqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODBDL0RFOThFQUYwRkI2 NTExRUZBMzc2RTQ0OUM0RjlBRTAyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVNSQUlCc3U5MHQ4ckd3eC00WDBIcHhHaHFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTgwQy9ERTk4RUFGMEZCNjUxMUVGQTM3NkU0NDlDNEY5QUUwMi8wNzBEQjNCQUZC NkQxMUVGQTVFMzk2NzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQi MCAwHgQCAAIwGAMGBCQB9GBwAwYEJAH0YLADBgQkAfRg8DANBgkqhkiG9w0BAQsF AAOCAQEAuW2s9+Hs+FJH4//7d/a+m7or3drl4zviUEOHUQb+Vk8bqJTdNHgVGA8N NFnAPAoB10xyXLN1WdDCi5AJvW/KzctOEyYWRuxAvAbYz9wAng4f6lpr4XIBCjhg qUgX3V6pOTuUzdTtbUxnkpgaQjUv4JEOsaB5IrvSThQfNJgdtSodooXKv5ojTBjV KyMc+QXU8O3LhrtbhVHVPM9nt697Pc1S4zyVO417ATRul9D91Lq9e908chAoDuLW av1hlgYjydeHiOV4g76hML6ircxEtrBlaAX91k2Yjyw//ef5xCYvPkGKmyspKMw4 ueEjPl58mfZlwMXEGrchIjbMW5x0bg== -----END CERTIFICATE-----Generated at Wed Nov 5 19:23:05 2025 by rpki-client