$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/C0C401905AE311EF90924C30C4F9AE02.roa File: C0C401905AE311EF90924C30C4F9AE02.roa (raw, json) Hash identifier: YxY/TXb7ZV7RLnxJEIm3XTlQ67ELpalTGoTZTqConuI= Subject key identifier: C1:1C:1E:6D:3C:6E:CB:34:0E:C4:90:ED:9D:A6:E1:54:F9:85:43:91 Certificate issuer: /CN=A91ED596/serialNumber=7226080E7C65252343962866B3139F023872C402 Certificate serial: B2 Authority key identifier: 72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/C0C401905AE311EF90924C30C4F9AE02.roa Signing time: Wed 23 Jul 2025 06:42:28 +0000 ROA not before: Wed 23 Jul 2025 06:42:28 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151663 IP address blocks: 2001:df4:2b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED596, serialNumber=7226080E7C65252343962866B3139F023872C402 Validity Not Before: Jul 23 06:42:28 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68808454-f899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:3c:35:18:b6:93:f0:41:0e:3b:5d:7c:31: 65:cb:4d:fd:6b:a0:f2:2c:eb:a1:90:80:5e:d3:c2: cf:c4:50:0c:1e:7c:39:96:04:37:a7:7d:6d:49:51: 4b:75:89:1f:b6:8d:ee:cd:97:78:b1:fe:02:dd:f8: 70:b9:14:09:ee:0a:98:30:cc:09:0d:4a:87:50:a2: 5a:17:f9:bf:3d:6c:8d:a3:45:36:ae:ba:5f:6e:5a: 72:d9:d8:7c:f0:2f:9f:ac:ff:a6:c2:70:c4:f8:b0: 98:27:0a:ff:17:f6:3b:38:a3:f1:33:0f:a5:5a:03: f6:1a:08:f0:35:62:12:ef:26:de:4c:fc:32:ad:8f: e7:36:46:6b:25:fd:c7:a8:c8:d7:ef:b8:67:c2:28: 52:50:4a:4a:e1:45:57:4b:2f:c7:40:3c:e0:94:81: 2c:04:f3:39:a8:1f:e6:8c:2d:f1:3c:54:24:bc:70: 21:45:c1:da:41:1e:bb:e3:50:8e:2f:6b:ec:ab:93: 5c:4e:0f:5c:4d:5f:2d:95:4e:7e:55:fe:66:1c:a6: e2:bd:d2:bf:a2:40:49:7b:d3:ef:b7:13:e6:e9:6a: 3b:ed:3b:e8:a3:54:8a:ab:7a:74:f8:ac:aa:45:82: 89:31:17:78:a6:d3:65:e6:ed:87:fb:1e:15:2e:cc: e7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1C:1E:6D:3C:6E:CB:34:0E:C4:90:ED:9D:A6:E1:54:F9:85:43:91 X509v3 Authority Key Identifier: keyid:72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/C0C401905AE311EF90924C30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:2b40::/48 Signature Algorithm: sha256WithRSAEncryption de:1a:25:8c:37:e1:d4:39:5a:31:90:34:a8:be:04:90:10:75: 42:c0:e5:1c:df:77:b1:45:d3:d9:d3:17:d6:1b:77:22:c8:cf: 4d:d2:33:29:f5:b6:99:8f:f0:79:ee:8e:06:41:e3:ed:18:0c: c8:42:6c:5e:70:8a:d7:69:4c:77:3c:39:7c:e4:01:db:05:49: a2:fc:27:94:bc:55:fb:7b:7e:1b:de:fe:60:db:d5:70:76:f3: 2a:a6:30:a6:9f:a2:ba:65:87:14:63:dc:c1:65:a0:70:c7:24: 89:e6:2a:7a:59:00:b8:01:20:46:8c:ad:c0:ec:b6:dc:bd:ba: 78:10:50:1b:3d:e8:e9:d8:c5:52:4e:cf:3c:8c:0d:5f:a0:e7: 4f:c7:45:92:23:06:a7:8a:e8:85:dc:fb:12:ad:7f:ad:12:12: 79:e1:5d:f7:96:c1:a5:9c:11:c1:01:4a:3a:00:21:28:fb:84: 1c:13:45:01:cb:13:fb:75:38:80:1f:53:53:5d:86:f1:c2:ef: c6:f2:53:72:c6:1a:a6:8e:73:42:67:63:17:38:ce:3f:16:94: fb:ca:ed:af:20:c9:82:a3:6a:24:38:3f:32:4b:04:05:6b:2d: ba:42:05:ea:11:ca:75:63:6c:2d:c9:dc:b3:93:ec:77:f4:9b: 12:7c:4a:e0 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1OTYxMTAvBgNVBAUTKDcyMjYwODBFN0M2NTI1MjM0Mzk2Mjg2NkIzMTM5RjAy Mzg3MkM0MDIwHhcNMjUwNzIzMDY0MjI4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgwODQ1NC1mODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzY08NRi2k/BBDjtdfDFly039a6DyLOuhkIBe08LPxFAMHnw5lgQ3p31tSVFL dYkfto3uzZd4sf4C3fhwuRQJ7gqYMMwJDUqHUKJaF/m/PWyNo0U2rrpfblpy2dh8 8C+frP+mwnDE+LCYJwr/F/Y7OKPxMw+lWgP2GgjwNWIS7ybeTPwyrY/nNkZrJf3H qMjX77hnwihSUEpK4UVXSy/HQDzglIEsBPM5qB/mjC3xPFQkvHAhRcHaQR6741CO L2vsq5NcTg9cTV8tlU5+Vf5mHKbivdK/okBJe9PvtxPm6Wo77Tvoo1SKq3p0+Kyq RYKJMRd4ptNl5u2H+x4VLszniQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMEcHm08 bss0DsSQ7Z2m4VT5hUORMB8GA1UdIwQYMBaAFHImCA58ZSUjQ5YoZrMTnwI4csQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wREUyM0UxNjVB RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi9jaVlJRG54bEpTTkRsaWhtc3hPZkFqaHl4 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpWUlEbnhsSlNORGxpaG1zeE9mQWpoeXhBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUQ1OTYvMERFMjNFMTY1QUUzMTFFRjkzMkMyMzJGQzRGOUFFMDIvQzBDNDAxOTA1 QUUzMTFFRjkwOTI0QzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30K0AwDQYJKoZIhvcNAQELBQADggEBAN4aJYw34dQ5 WjGQNKi+BJAQdULA5Rzfd7FF09nTF9YbdyLIz03SMyn1tpmP8HnujgZB4+0YDMhC bF5witdpTHc8OXzkAdsFSaL8J5S8Vft7fhve/mDb1XB28yqmMKaforplhxRj3MFl oHDHJInmKnpZALgBIEaMrcDstty9ungQUBs96OnYxVJOzzyMDV+g50/HRZIjBqeK 6IXc+xKtf60SEnnhXfeWwaWcEcEBSjoAISj7hBwTRQHLE/t1OIAfU1NdhvHC78by U3LGGqaOc0JnYxc4zj8WlPvK7a8gyYKjaiQ4PzJLBAVrLbpCBeoRynVjbC3J3LOT 7Hf0mxJ8SuA= -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:59 2025 by rpki-client