$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A069EA0C8EE911EE8698A64FC4F9AE02.roa File: A069EA0C8EE911EE8698A64FC4F9AE02.roa (raw, json) Hash identifier: KnQ67jxRd2r4K6SCZNe0nZs2NQzYLUias1vgx76E3mE= Subject key identifier: 45:AD:7C:87:64:7B:66:15:C4:6A:06:47:2B:75:D1:BA:32:2C:AA:34 Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Certificate serial: 0217 Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A069EA0C8EE911EE8698A64FC4F9AE02.roa Signing time: Thu 31 Jul 2025 04:10:49 +0000 ROA not before: Thu 31 Jul 2025 04:10:49 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 23470 IP address blocks: 2401:b60:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Validity Not Before: Jul 31 04:10:49 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688aecc8-9785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:1e:12:06:32:7e:0e:16:e9:1d:8c:b5:89: 09:f9:e2:3e:b6:72:dd:51:6d:dc:e5:b9:96:b7:8b: 1c:a8:c7:56:c3:bb:df:7e:03:1f:52:7e:80:d7:5d: 27:7c:81:1f:51:e2:3e:41:22:69:18:8c:91:8e:15: 8d:34:f9:29:3a:ab:09:97:08:54:6f:86:c1:a8:98: 95:64:0a:6a:bc:1c:26:37:9d:d6:bb:0f:10:37:8a: 36:25:67:97:88:11:dd:ce:79:da:dd:d0:ed:ed:c4: 75:40:06:85:a3:43:e7:21:72:81:d7:eb:f4:80:7b: f8:1c:60:a7:73:b1:e7:20:66:9e:2d:67:aa:e5:b2: 38:67:04:1e:69:3f:43:83:23:4c:04:cd:62:48:59: a6:c9:03:ed:72:eb:09:5d:7d:b0:9a:b6:32:c2:a4: bf:07:08:9d:2b:23:dc:0d:70:ca:08:cf:5a:31:85: f9:dc:e1:0c:44:81:2e:cf:ce:c7:eb:5e:8e:22:6f: 06:ef:9a:a4:83:5b:87:10:45:33:a8:68:cc:e2:3c: b1:d2:28:b6:99:94:56:d6:62:9b:4d:ee:de:6f:56: 08:16:24:8a:d4:cc:f9:0e:8a:03:59:f9:f6:88:98: 0c:1c:7e:eb:33:cd:21:f1:5b:a3:31:c2:e6:75:fa: c5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AD:7C:87:64:7B:66:15:C4:6A:06:47:2B:75:D1:BA:32:2C:AA:34 X509v3 Authority Key Identifier: keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A069EA0C8EE911EE8698A64FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b60:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 91:4b:9c:fc:8c:28:43:1f:ab:dc:89:c4:8b:ae:bc:10:e1:59: 81:53:64:2f:d2:27:37:da:c5:82:1c:60:4c:00:6e:55:80:d8: 3e:2a:a7:36:89:ed:34:3b:68:30:71:35:5d:7c:f7:3b:41:21: 1a:37:17:ad:07:96:cb:00:bd:f1:e6:36:47:30:41:1e:0f:ef: fc:15:37:a6:25:6a:40:1f:e6:10:27:62:8e:04:35:5d:f6:9c: 79:e7:c3:2c:6e:1e:d1:1a:fc:40:01:8c:1b:c2:2f:42:0a:b6: 81:c3:88:ac:30:c9:cd:11:28:51:52:56:4f:ce:4c:1e:5d:a8: 4c:06:a2:85:33:3b:83:c6:1a:1e:07:f5:33:e3:ea:df:35:8a: b8:91:85:8c:3b:89:37:23:bd:c4:99:95:45:ce:e6:cf:e0:30: 44:ed:4a:5e:43:09:94:b5:38:86:1b:be:84:e2:14:85:d1:f0: 45:1a:cb:0c:7e:cb:2a:01:ae:19:b9:51:f2:2e:7f:a9:25:6d: 3c:3a:76:e3:f2:4c:a6:9c:8b:89:c5:ae:1b:e1:42:50:a9:cf: bc:b9:ff:81:ee:23:95:b1:82:5d:19:74:92:16:ce:81:62:28: 45:58:11:43:0a:55:76:b2:dd:27:f0:5c:da:34:29:08:54:61: 40:1a:eb:fa -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0 NTIzOUNDRjQwHhcNMjUwNzMxMDQxMDQ5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhZWNjOC05Nzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0a8eEgYyfg4W6R2MtYkJ+eI+tnLdUW3c5bmWt4scqMdWw7vffgMfUn6A110n fIEfUeI+QSJpGIyRjhWNNPkpOqsJlwhUb4bBqJiVZApqvBwmN53Wuw8QN4o2JWeX iBHdznna3dDt7cR1QAaFo0PnIXKB1+v0gHv4HGCnc7HnIGaeLWeq5bI4ZwQeaT9D gyNMBM1iSFmmyQPtcusJXX2wmrYywqS/BwidKyPcDXDKCM9aMYX53OEMRIEuz87H 616OIm8G75qkg1uHEEUzqGjM4jyx0ii2mZRW1mKbTe7eb1YIFiSK1Mz5DooDWfn2 iJgMHH7rM80h8VujMcLmdfrF5QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEWtfIdk e2YVxGoGRyt10boyLKo0MB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvQTA2OUVBMEM4 RUU5MTFFRTg2OThBNjRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAQtg//8wDQYJKoZIhvcNAQELBQADggEBAJFLnPyMKEMf q9yJxIuuvBDhWYFTZC/SJzfaxYIcYEwAblWA2D4qpzaJ7TQ7aDBxNV189ztBIRo3 F60HlssAvfHmNkcwQR4P7/wVN6YlakAf5hAnYo4ENV32nHnnwyxuHtEa/EABjBvC L0IKtoHDiKwwyc0RKFFSVk/OTB5dqEwGooUzO4PGGh4H9TPj6t81iriRhYw7iTcj vcSZlUXO5s/gMETtSl5DCZS1OIYbvoTiFIXR8EUaywx+yyoBrhm5UfIuf6klbTw6 duPyTKaci4nFrhvhQlCpz7y5/4HuI5Wxgl0ZdJIWzoFiKEVYEUMKVXay3SfwXNo0 KQhUYUAa6/o= -----END CERTIFICATE-----Generated at Sat Aug 9 23:09:04 2025 by rpki-client