$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/6C897E54597B11EDB603273AC4F9AE02.roa File: 6C897E54597B11EDB603273AC4F9AE02.roa (raw, json) Hash identifier: mlfmqDTHF8r4WiB66Nr0P3hrVzV24v6mqRzRLKrnHpE= Subject key identifier: 0A:C9:DE:67:1E:78:66:13:56:54:6F:87:B6:49:E6:11:2C:4D:76:86 Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A Certificate serial: 1AAA Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/6C897E54597B11EDB603273AC4F9AE02.roa Signing time: Wed 06 Aug 2025 16:54:33 +0000 ROA not before: Wed 06 Aug 2025 16:54:33 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 14618 IP address blocks: 2401:1d80:3000::/40 maxlen: 48 2401:1d80:3100::/40 maxlen: 46 2401:1d80:3200::/40 maxlen: 46 2401:1d80:3300::/40 maxlen: 46 2401:1d80:4000::/40 maxlen: 46 2401:1d80:4100::/40 maxlen: 46 2401:1d80:4200::/40 maxlen: 46 2401:1d80:4300::/40 maxlen: 46 2401:1d80:5000::/40 maxlen: 46 2401:1d80:5100::/40 maxlen: 46 2401:1d80:5200::/40 maxlen: 46 2401:1d80:5300::/40 maxlen: 46 2401:1d80:5800::/40 maxlen: 46 2401:1d80:5900::/40 maxlen: 46 2401:1d80:5a00::/40 maxlen: 46 2401:1d80:5b00::/40 maxlen: 46 2401:1d80:6000::/40 maxlen: 46 2401:1d80:6100::/40 maxlen: 46 2401:1d80:6200::/40 maxlen: 46 2401:1d80:6300::/40 maxlen: 46 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6826 (0x1aaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A Validity Not Before: Aug 6 16:54:33 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=689388c8-01c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:f4:bd:27:9e:75:25:34:a0:9d:80:77:dc: 55:de:6d:27:bf:48:5a:f4:4c:2e:8c:d8:93:dc:0f: 58:0c:82:8b:36:ad:9f:f2:47:cc:59:b3:21:0a:5b: ed:41:1e:42:17:60:6f:9b:62:e0:9a:78:cd:b4:91: 42:98:65:b0:88:44:88:6f:f7:c3:05:48:b8:fc:44: 1b:4d:e5:07:50:e3:e9:7f:1b:00:27:24:0b:d4:26: 21:67:23:2f:c9:94:ca:41:d7:58:bd:a5:36:cd:7d: 1a:f7:19:88:d2:87:60:2d:87:75:73:c7:cf:8b:0d: 10:ef:9b:3a:df:d9:1b:18:0b:ab:ef:a7:69:66:b5: be:d9:45:49:5c:82:99:51:62:dc:b6:3a:10:69:83: 08:cf:b9:71:4e:c2:31:4d:31:2e:44:4c:fe:36:79: 58:26:c0:45:40:fe:36:95:23:44:50:36:1c:b2:ea: 86:08:5a:19:b0:94:60:6f:40:04:17:92:99:97:b4: 55:5b:ae:a8:f2:0f:2d:2d:0a:1b:2b:4a:76:ea:ea: 0d:1d:a7:7b:15:da:a6:7d:3d:ed:b3:85:bd:59:49: 83:f1:16:95:5f:e4:a5:7f:a3:b3:86:1c:ec:bf:ab: bb:b6:0e:13:d4:58:84:aa:58:fd:f1:f8:da:7e:68: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C9:DE:67:1E:78:66:13:56:54:6F:87:B6:49:E6:11:2C:4D:76:86 X509v3 Authority Key Identifier: keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/6C897E54597B11EDB603273AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:1d80:3000::/38 2401:1d80:4000::/38 2401:1d80:5000::/38 2401:1d80:5800::/38 2401:1d80:6000::/38 Signature Algorithm: sha256WithRSAEncryption 8b:c6:1d:ec:9d:1d:3b:52:8d:24:bd:19:2e:b2:02:81:e3:00: 65:88:df:3a:54:47:6d:e1:ba:5d:60:f4:74:6f:24:67:f9:ba: c7:52:c9:6d:2a:3c:6f:4e:10:28:c4:38:c9:23:1c:09:f6:a4: 63:b2:65:d7:cd:ae:0e:52:37:40:86:f1:6f:cf:92:38:57:a0: 74:45:f2:e8:0d:a3:b8:68:2b:76:86:2d:c1:ad:ad:04:74:b8: 66:d4:19:ef:a6:56:4d:4c:43:59:8f:a0:fe:b2:0d:10:d6:c8: 69:4f:2a:19:a4:4a:6e:be:ef:7b:36:c4:01:05:15:51:68:14: 86:f6:c5:ff:b0:b5:e5:d8:2f:43:1b:f0:63:38:a9:81:ce:0f: e0:98:0e:9e:8d:8a:cb:f9:41:e5:6b:f2:d1:3d:77:dd:12:f5: 11:db:70:d8:98:82:1e:bf:7e:ac:ad:05:30:4c:38:5f:54:fd: 7f:62:3d:31:a2:3d:bd:cf:c2:c4:b1:63:92:7a:1b:ae:d8:cf: f5:b0:be:32:2c:36:cd:f9:57:3e:82:5f:ea:ea:0b:65:68:3d: d0:fe:74:c0:3d:91:64:43:55:39:cf:ab:c2:f0:ac:56:b7:25: 16:86:f3:5f:09:87:14:dd:28:92:ab:c3:f6:22:32:06:98:cd: 4f:30:a7:fc -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICGqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwNzcxMTAvBgNVBAUTKDM4NkY2RjhBQTFFNjZDNTI1NEVBMUU0Nzg4OEMxMDNG NDUzNjIyMkEwHhcNMjUwODA2MTY1NDMzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkzODhjOC0wMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXH0vSeedSU0oJ2Ad9xV3m0nv0ha9EwujNiT3A9YDIKLNq2f8kfMWbMhClvt QR5CF2Bvm2LgmnjNtJFCmGWwiESIb/fDBUi4/EQbTeUHUOPpfxsAJyQL1CYhZyMv yZTKQddYvaU2zX0a9xmI0odgLYd1c8fPiw0Q75s639kbGAur76dpZrW+2UVJXIKZ UWLctjoQaYMIz7lxTsIxTTEuREz+NnlYJsBFQP42lSNEUDYcsuqGCFoZsJRgb0AE F5KZl7RVW66o8g8tLQobK0p26uoNHad7FdqmfT3ts4W9WUmD8RaVX+Slf6Ozhhzs v6u7tg4T1FiEqlj98fjafmjbXwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFArJ3mce eGYTVlRvh7ZJ5hEsTXaGMB8GA1UdIwQYMBaAFDhvb4qh5mxSVOoeR4iMED9FNiIq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA3Ny9EQjdCNzAwNjQ4 MjQxMUU3OTQwNDFEMkRDNEY5QUUwMi9PRzl2aXFIbWJGSlU2aDVIaUl3UVAwVTJJ aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HOXZpcUhtYkZKVTZoNUhpSXdRUDBVMklpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIwNzcvREI3QjcwMDY0ODI0MTFFNzk0MDQxRDJEQzRGOUFFMDIvNkM4OTdFNTQ1 OTdCMTFFREI2MDMyNzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgACMCgDBgIkAR2AMAMGAiQBHYBAAwYCJAEdgFADBgIkAR2AWAMGAiQB HYBgMA0GCSqGSIb3DQEBCwUAA4IBAQCLxh3snR07Uo0kvRkusgKB4wBliN86VEdt 4bpdYPR0byRn+brHUsltKjxvThAoxDjJIxwJ9qRjsmXXza4OUjdAhvFvz5I4V6B0 RfLoDaO4aCt2hi3Bra0EdLhm1BnvplZNTENZj6D+sg0Q1shpTyoZpEpuvu97NsQB BRVRaBSG9sX/sLXl2C9DG/BjOKmBzg/gmA6ejYrL+UHla/LRPXfdEvUR23DYmIIe v36srQUwTDhfVP1/Yj0xoj29z8LEsWOSehuu2M/1sL4yLDbN+Vc+gl/q6gtlaD3Q /nTAPZFkQ1U5z6vC8KxWtyUWhvNfCYcU3SiSq8P2IjIGmM1PMKf8 -----END CERTIFICATE-----Generated at Fri Aug 8 19:27:49 2025 by rpki-client