$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/6E44CE88597B11EDB603273AC4F9AE02.roa File: 6E44CE88597B11EDB603273AC4F9AE02.roa (raw, json) Hash identifier: dKPGvO7USSf0Gvl/Kq6maRursYdlv2phLnH5EYaGXWM= Subject key identifier: A7:2D:AD:34:02:66:EB:B6:AE:39:23:96:BB:D4:0B:25:A2:89:AF:E9 Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A Certificate serial: 1AAB Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/6E44CE88597B11EDB603273AC4F9AE02.roa Signing time: Wed 06 Aug 2025 16:54:33 +0000 ROA not before: Wed 06 Aug 2025 16:54:33 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 16509 IP address blocks: 2401:1d80:3000::/40 maxlen: 48 2401:1d80:3100::/40 maxlen: 46 2401:1d80:3200::/40 maxlen: 46 2401:1d80:3300::/40 maxlen: 46 2401:1d80:4000::/40 maxlen: 46 2401:1d80:4100::/40 maxlen: 46 2401:1d80:4200::/40 maxlen: 46 2401:1d80:4300::/40 maxlen: 46 2401:1d80:5000::/40 maxlen: 46 2401:1d80:5100::/40 maxlen: 46 2401:1d80:5200::/40 maxlen: 46 2401:1d80:5300::/40 maxlen: 46 2401:1d80:5800::/40 maxlen: 46 2401:1d80:5900::/40 maxlen: 46 2401:1d80:5a00::/40 maxlen: 46 2401:1d80:5b00::/40 maxlen: 46 2401:1d80:6000::/40 maxlen: 46 2401:1d80:6100::/40 maxlen: 46 2401:1d80:6200::/40 maxlen: 46 2401:1d80:6300::/40 maxlen: 46 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6827 (0x1aab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A Validity Not Before: Aug 6 16:54:33 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=689388c9-2227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a4:87:03:06:63:09:15:f7:1e:4e:cb:6b:26: 92:39:07:3b:b5:75:ed:8d:93:e0:b7:27:12:71:81: c2:29:07:83:f9:36:bb:51:e2:3e:d1:33:0e:9c:f8: 87:af:cd:d3:02:93:2c:32:94:39:44:d5:7f:e7:0e: 9d:85:4e:7c:eb:dd:e5:fd:65:b6:79:ab:33:75:dd: f0:84:8d:18:36:c6:42:ec:a8:cf:71:0a:5e:ab:19: 3e:1f:d3:6f:30:06:ab:0c:dc:3d:0f:e5:14:bc:f5: 75:b0:13:30:9a:93:c3:21:b9:95:41:0c:9a:45:12: a9:ee:de:16:03:78:45:61:c5:21:18:8f:6d:a6:aa: a7:08:20:5d:fc:85:89:5e:50:13:db:0c:8d:08:95: c7:fd:c3:b7:90:a2:eb:91:6c:e7:0e:7d:1c:8b:4c: 3e:e7:b9:e9:6f:64:2a:32:de:b0:99:d9:83:1c:62: 3a:61:f3:ab:3c:b2:a2:51:86:cd:9b:ed:40:43:38: c0:0e:9e:ed:73:de:30:ab:f5:d9:9d:e8:47:29:c6: 91:e6:35:1b:1c:c6:88:36:b5:61:93:d7:1c:b6:42: 85:d2:19:82:df:5a:9c:31:f5:02:92:3d:59:d8:87: 16:95:62:45:46:78:8b:5f:ec:98:64:ef:44:70:7f: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2D:AD:34:02:66:EB:B6:AE:39:23:96:BB:D4:0B:25:A2:89:AF:E9 X509v3 Authority Key Identifier: keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/6E44CE88597B11EDB603273AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:1d80:3000::/38 2401:1d80:4000::/38 2401:1d80:5000::/38 2401:1d80:5800::/38 2401:1d80:6000::/38 Signature Algorithm: sha256WithRSAEncryption 9b:90:1a:b9:b9:98:f8:65:56:d4:a9:ad:7b:0b:3c:47:61:39: d3:58:cd:45:da:37:6a:b9:79:01:7a:91:46:16:a6:00:af:bc: 6a:9b:e5:68:4f:4f:2b:18:9d:39:60:81:3c:c9:64:99:63:5d: e6:0d:e2:12:3e:76:e9:41:d3:23:ed:f1:f8:3b:df:09:cf:86: 12:9a:66:f9:90:b1:f5:a2:e2:a1:14:bc:22:61:73:90:83:73: 09:14:6f:be:c6:f0:11:96:39:30:0c:9e:1d:c2:34:3a:8d:f8: fd:a1:68:01:c6:e6:0e:bf:f1:d2:2c:46:88:68:ee:3b:ba:ae: fc:4e:f2:77:64:2e:36:f5:a3:d7:13:51:ac:1e:d2:7b:8c:10: 1a:85:56:eb:64:b9:cb:12:ef:88:22:cd:c0:2a:33:c0:b1:14: 3b:f1:4f:02:f8:26:7e:c7:b7:0f:3b:91:50:1e:4e:e5:b1:31: c2:1d:0e:68:2d:7f:6d:42:2d:ef:c2:27:16:66:09:6e:12:22: b7:b0:d2:07:7c:61:4f:ce:72:7e:48:0c:cd:4d:cf:aa:40:04: b5:90:66:cc:08:44:e8:06:37:81:9a:bd:4e:bd:77:7f:a6:14: f4:65:34:58:53:0f:58:73:b2:d2:27:14:5f:4b:95:0f:a5:91: 92:ec:4e:dd -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICGqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwNzcxMTAvBgNVBAUTKDM4NkY2RjhBQTFFNjZDNTI1NEVBMUU0Nzg4OEMxMDNG NDUzNjIyMkEwHhcNMjUwODA2MTY1NDMzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkzODhjOS0yMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26SHAwZjCRX3Hk7LayaSOQc7tXXtjZPgtycScYHCKQeD+Ta7UeI+0TMOnPiH r83TApMsMpQ5RNV/5w6dhU58693l/WW2easzdd3whI0YNsZC7KjPcQpeqxk+H9Nv MAarDNw9D+UUvPV1sBMwmpPDIbmVQQyaRRKp7t4WA3hFYcUhGI9tpqqnCCBd/IWJ XlAT2wyNCJXH/cO3kKLrkWznDn0ci0w+57npb2QqMt6wmdmDHGI6YfOrPLKiUYbN m+1AQzjADp7tc94wq/XZnehHKcaR5jUbHMaINrVhk9cctkKF0hmC31qcMfUCkj1Z 2IcWlWJFRniLX+yYZO9EcH937wIDAQABo4ICtzCCArMwHQYDVR0OBBYEFKctrTQC Zuu2rjkjlrvUCyWiia/pMB8GA1UdIwQYMBaAFDhvb4qh5mxSVOoeR4iMED9FNiIq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA3Ny9EQjdCNzAwNjQ4 MjQxMUU3OTQwNDFEMkRDNEY5QUUwMi9PRzl2aXFIbWJGSlU2aDVIaUl3UVAwVTJJ aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HOXZpcUhtYkZKVTZoNUhpSXdRUDBVMklpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIwNzcvREI3QjcwMDY0ODI0MTFFNzk0MDQxRDJEQzRGOUFFMDIvNkU0NENFODg1 OTdCMTFFREI2MDMyNzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgACMCgDBgIkAR2AMAMGAiQBHYBAAwYCJAEdgFADBgIkAR2AWAMGAiQB HYBgMA0GCSqGSIb3DQEBCwUAA4IBAQCbkBq5uZj4ZVbUqa17CzxHYTnTWM1F2jdq uXkBepFGFqYAr7xqm+VoT08rGJ05YIE8yWSZY13mDeISPnbpQdMj7fH4O98Jz4YS mmb5kLH1ouKhFLwiYXOQg3MJFG++xvARljkwDJ4dwjQ6jfj9oWgBxuYOv/HSLEaI aO47uq78TvJ3ZC429aPXE1GsHtJ7jBAahVbrZLnLEu+IIs3AKjPAsRQ78U8C+CZ+ x7cPO5FQHk7lsTHCHQ5oLX9tQi3vwicWZgluEiK3sNIHfGFPznJ+SAzNTc+qQAS1 kGbMCEToBjeBmr1OvXd/phT0ZTRYUw9Yc7LSJxRfS5UPpZGS7E7d -----END CERTIFICATE-----Generated at Sat Aug 9 15:18:03 2025 by rpki-client