$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/E17B507E25DF11F0B111A515C4F9AE02.roa File: E17B507E25DF11F0B111A515C4F9AE02.roa (raw, json) Hash identifier: 5/aPav0hnKaVORmHzg6d5/te9kJtJygeFIvna6mHtc0= Subject key identifier: 30:F2:07:C4:A1:C7:49:49:35:32:17:01:20:DC:79:54:3F:A2:E7:33 Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Certificate serial: 0211 Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/E17B507E25DF11F0B111A515C4F9AE02.roa Signing time: Thu 31 Jul 2025 04:10:43 +0000 ROA not before: Thu 31 Jul 2025 04:10:43 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 17433 IP address blocks: 2401:b60:e202::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 03:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Validity Not Before: Jul 31 04:10:43 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688aecc3-0f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:e7:93:e3:e6:cf:47:76:85:7b:44:b6:ae: 06:f5:22:17:f0:08:27:54:c7:f4:dd:73:be:eb:3e: dc:e8:af:b4:69:f1:62:40:54:dc:b8:bf:20:ce:92: 22:64:07:01:1d:22:07:3f:00:e8:8c:96:4e:bc:92: f7:48:c0:a9:62:db:6c:ac:ac:4d:f8:17:05:43:1d: 07:f1:bd:1b:75:33:4a:a5:9d:0d:f7:0c:12:8b:b4: 4c:70:f6:21:93:38:ee:7d:2a:f8:b1:6c:a3:94:4a: 13:84:0d:3b:a1:b7:c6:2e:f6:c0:5c:c9:3d:a0:e9: 85:fa:b2:62:f3:af:9a:f9:59:5a:a5:9d:60:4c:99: b1:8d:20:81:b8:f9:75:46:28:ff:57:7f:9a:3b:73: 43:1b:7d:e8:15:63:39:28:86:1d:69:4c:30:3b:34: 97:de:85:19:12:09:9a:8a:a2:41:b9:d7:9c:74:e6: 6c:f3:eb:95:6d:30:9a:b3:83:d6:01:bc:eb:e5:6f: 59:04:18:fc:21:ee:d3:31:a1:6a:ff:8f:7b:96:fd: 4b:a8:ab:96:58:27:9c:5b:c3:7a:da:58:34:85:d3: 70:9e:f8:9c:8e:35:bb:86:1a:00:83:6d:08:48:8a: 97:18:33:21:64:dd:16:27:0f:7c:df:0f:34:60:84: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F2:07:C4:A1:C7:49:49:35:32:17:01:20:DC:79:54:3F:A2:E7:33 X509v3 Authority Key Identifier: keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/E17B507E25DF11F0B111A515C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b60:e202::/48 Signature Algorithm: sha256WithRSAEncryption 62:4f:e4:6b:05:65:c8:de:12:68:f8:2c:ab:8c:d6:2b:65:94: 2b:03:df:6c:15:17:68:e4:6c:aa:3d:2d:0d:18:de:b0:9a:c4: dd:0d:79:8f:68:6a:1f:79:58:32:59:20:95:a5:fc:13:8c:cd: 21:0e:f2:17:fe:43:42:47:4d:45:f6:cd:4b:db:cd:35:67:7c: 9f:69:a6:59:ff:6a:69:c6:7b:df:4b:94:a0:da:4c:f1:8c:bb: ef:4a:c7:b7:46:44:05:17:08:9d:3f:c6:29:96:34:8d:69:57: 19:a0:5b:55:62:0d:55:86:69:a5:0a:ac:3c:b9:3f:82:fe:8d: a0:23:95:9d:b3:02:4d:72:0a:dd:ba:77:fc:0e:26:24:c6:00: b0:8d:4c:1d:db:ef:14:65:65:f4:e0:90:ed:f5:63:14:2e:07: d0:17:a6:19:37:48:a4:56:45:47:8b:5e:65:53:d6:da:c3:14: 5e:03:86:0a:d3:48:0e:ba:fd:d9:c2:2d:3b:f7:01:01:62:75: 9f:d8:ee:98:eb:31:ae:ca:d3:ab:5b:cd:ab:29:de:14:f7:8f: 57:b2:77:f5:68:1e:1e:54:11:42:d2:3e:18:dc:80:6d:2c:5e: a3:e6:2f:7b:71:8e:fe:de:ea:23:80:1a:df:58:c5:ee:ab:6d: 39:74:d5:4f -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0 NTIzOUNDRjQwHhcNMjUwNzMxMDQxMDQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhZWNjMy0wZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsfnk+Pmz0d2hXtEtq4G9SIX8AgnVMf03XO+6z7c6K+0afFiQFTcuL8gzpIi ZAcBHSIHPwDojJZOvJL3SMCpYttsrKxN+BcFQx0H8b0bdTNKpZ0N9wwSi7RMcPYh kzjufSr4sWyjlEoThA07obfGLvbAXMk9oOmF+rJi86+a+VlapZ1gTJmxjSCBuPl1 Rij/V3+aO3NDG33oFWM5KIYdaUwwOzSX3oUZEgmaiqJBudecdOZs8+uVbTCas4PW Abzr5W9ZBBj8Ie7TMaFq/497lv1LqKuWWCecW8N62lg0hdNwnvicjjW7hhoAg20I SIqXGDMhZN0WJw983w80YIR/QwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDDyB8Sh x0lJNTIXASDceVQ/ouczMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvRTE3QjUwN0Uy NURGMTFGMEIxMTFBNTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAQtg4gIwDQYJKoZIhvcNAQELBQADggEBAGJP5GsFZcje Emj4LKuM1itllCsD32wVF2jkbKo9LQ0Y3rCaxN0NeY9oah95WDJZIJWl/BOMzSEO 8hf+Q0JHTUX2zUvbzTVnfJ9ppln/amnGe99LlKDaTPGMu+9Kx7dGRAUXCJ0/ximW NI1pVxmgW1ViDVWGaaUKrDy5P4L+jaAjlZ2zAk1yCt26d/wOJiTGALCNTB3b7xRl ZfTgkO31YxQuB9AXphk3SKRWRUeLXmVT1trDFF4DhgrTSA66/dnCLTv3AQFidZ/Y 7pjrMa7K06tbzasp3hT3j1eyd/VoHh5UEULSPhjcgG0sXqPmL3txjv7e6iOAGt9Y xe6rbTl01U8= -----END CERTIFICATE-----Generated at Wed Aug 13 05:53:02 2025 by rpki-client