$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7857C144B87211EE98B04B19C4F9AE02.roa File: 7857C144B87211EE98B04B19C4F9AE02.roa (raw, json) Hash identifier: cXTSb3uLzYaTxqsKZNZray6rmGcDuR03NUYbJYXT+ns= Subject key identifier: 33:FA:B5:EB:18:1E:AF:91:79:77:4B:CB:94:F0:C7:E7:A5:DD:B9:83 Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Certificate serial: 0213 Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7857C144B87211EE98B04B19C4F9AE02.roa Signing time: Thu 31 Jul 2025 04:10:45 +0000 ROA not before: Thu 31 Jul 2025 04:10:45 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 211759 IP address blocks: 2401:b60:200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Validity Not Before: Jul 31 04:10:45 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688aecc4-8f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:e0:07:04:90:28:c1:b5:2c:df:f9:2e:56: 17:03:7f:90:08:cf:8a:35:83:17:11:88:b6:ec:d7: a8:ab:47:86:2b:19:c1:ab:90:ec:0c:11:ba:4f:53: b1:3d:00:88:07:04:4b:c0:16:f6:5e:ff:d4:c0:27: 37:05:c0:c9:1d:9d:22:1f:8a:03:5d:fc:3c:f2:d6: 66:94:46:ac:60:68:58:18:04:ea:bb:34:76:77:85: 8a:81:e1:83:1f:2a:ea:d2:69:61:ba:cb:40:a0:67: 4a:0c:2b:92:ff:d8:99:cb:16:6f:f8:5a:f1:2a:f2: 4f:cd:ba:99:7e:d4:40:91:ea:06:5f:f3:a7:95:0a: ba:b0:8e:59:1f:56:0d:c6:7f:26:4f:50:34:62:ee: d6:ae:65:1d:30:83:91:c2:34:58:2c:6c:2e:94:d9: 33:2b:b5:22:49:c5:92:90:35:8f:82:2e:ba:6e:92: 88:99:3f:39:48:d0:9f:0a:03:e5:fb:59:36:5c:98: 90:4d:81:07:11:62:68:68:51:2c:23:3b:af:ab:70: 31:dd:af:e7:fa:a7:29:3b:2f:e6:e9:63:40:4c:7e: 13:d1:fc:19:7f:a0:24:7c:b3:3b:0e:0d:4d:4a:59: b5:9c:43:67:75:9b:94:4c:07:a7:7b:bc:3b:80:ad: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FA:B5:EB:18:1E:AF:91:79:77:4B:CB:94:F0:C7:E7:A5:DD:B9:83 X509v3 Authority Key Identifier: keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7857C144B87211EE98B04B19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b60:200::/44 Signature Algorithm: sha256WithRSAEncryption 9b:f8:32:f2:cf:e4:5a:7f:a1:48:c9:8e:3f:30:18:10:a1:ec: e7:d9:51:be:c1:7f:8a:97:f4:a3:10:f2:b4:7c:05:83:ee:7d: 33:c2:dc:f3:88:35:a5:b5:74:77:1a:d7:ce:45:27:b7:93:06: e2:43:0a:df:77:13:32:99:8c:a5:73:f9:e3:65:d5:b9:e2:5a: bc:0e:05:32:42:db:35:99:f0:aa:1e:dc:b3:ed:a9:5d:fc:88: de:53:41:7c:5f:84:ee:58:18:74:8f:57:07:93:8b:9f:4b:9b: 5a:2e:d5:30:4c:f5:91:19:8f:27:a0:23:ef:95:8d:01:e8:b3: a4:9a:73:1d:6d:18:40:07:c9:7e:d6:b4:4c:8b:5a:56:c6:e7: 79:1d:2d:68:18:90:fb:44:09:3a:e6:66:22:d4:10:78:50:47: d9:b1:14:8f:01:54:bf:86:49:4c:90:b3:63:4f:90:9b:32:1d: 19:cc:1d:16:41:a9:66:66:eb:bb:27:88:ff:ad:bc:62:e6:cf: 24:f2:cc:a6:21:e9:fc:2d:8b:76:25:e6:84:75:f7:a9:b3:71: 19:51:76:d1:ed:3b:9c:0f:7b:40:b1:58:35:1c:79:37:e6:42: ef:6b:d6:3b:43:36:22:fb:64:2f:3d:87:bf:7b:43:83:de:24: 3f:91:2d:c1 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0 NTIzOUNDRjQwHhcNMjUwNzMxMDQxMDQ1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhZWNjNC04ZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtszgBwSQKMG1LN/5LlYXA3+QCM+KNYMXEYi27Neoq0eGKxnBq5DsDBG6T1Ox PQCIBwRLwBb2Xv/UwCc3BcDJHZ0iH4oDXfw88tZmlEasYGhYGATquzR2d4WKgeGD Hyrq0mlhustAoGdKDCuS/9iZyxZv+FrxKvJPzbqZftRAkeoGX/OnlQq6sI5ZH1YN xn8mT1A0Yu7WrmUdMIORwjRYLGwulNkzK7UiScWSkDWPgi66bpKImT85SNCfCgPl +1k2XJiQTYEHEWJoaFEsIzuvq3Ax3a/n+qcpOy/m6WNATH4T0fwZf6AkfLM7Dg1N Slm1nENndZuUTAene7w7gK2RCQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDP6tesY Hq+ReXdLy5Twx+el3bmDMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvNzg1N0MxNDRC ODcyMTFFRTk4QjA0QjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkAQtgAgAwDQYJKoZIhvcNAQELBQADggEBAJv4MvLP5Fp/ oUjJjj8wGBCh7OfZUb7Bf4qX9KMQ8rR8BYPufTPC3POINaW1dHca185FJ7eTBuJD Ct93EzKZjKVz+eNl1bniWrwOBTJC2zWZ8Koe3LPtqV38iN5TQXxfhO5YGHSPVweT i59Lm1ou1TBM9ZEZjyegI++VjQHos6Sacx1tGEAHyX7WtEyLWlbG53kdLWgYkPtE CTrmZiLUEHhQR9mxFI8BVL+GSUyQs2NPkJsyHRnMHRZBqWZm67sniP+tvGLmzyTy zKYh6fwti3Yl5oR196mzcRlRdtHtO5wPe0CxWDUceTfmQu9r1jtDNiL7ZC89h797 Q4PeJD+RLcE= -----END CERTIFICATE-----Generated at Sun Aug 10 16:13:58 2025 by rpki-client