$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/FBE1E73689E311EF9021CE0CC4F9AE02.roa File: FBE1E73689E311EF9021CE0CC4F9AE02.roa (raw, json) Hash identifier: zUxzk8PVVaES9EMN0VkIqcIxDvXdbV+4WJwr6H3F2mM= Subject key identifier: E8:0B:DD:37:27:B5:E7:4C:E8:20:9E:36:20:C3:E5:F0:1B:32:2D:93 Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 02E0 Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/FBE1E73689E311EF9021CE0CC4F9AE02.roa Signing time: Sun 27 Jul 2025 02:06:50 +0000 ROA not before: Sun 27 Jul 2025 02:06:50 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135602 IP address blocks: 2001:df3:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Jul 27 02:06:50 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688589ba-e38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:43:13:81:61:00:61:49:4e:db:91:a8:a5:66: 4d:48:ae:6e:93:4d:d5:bb:53:43:74:e1:71:9c:6b: b6:43:9b:62:8c:e4:5c:f3:6b:62:1f:c1:56:0e:e6: ea:28:c5:5b:e7:36:2b:c3:9c:92:ad:04:38:19:cb: b3:6e:c1:c8:30:d2:59:29:3e:93:14:b9:bc:34:d5: 7c:11:c7:c7:e5:39:98:9e:65:21:92:da:75:a2:0d: dd:dd:40:ef:f3:87:de:5a:4b:83:69:ff:e9:32:d3: cf:89:d9:85:b7:8a:32:1a:de:60:f9:6b:e8:14:6b: 7c:11:eb:58:ee:ce:64:e3:7d:c7:bd:6d:52:8c:ac: fb:33:c1:62:b7:ee:a4:21:ff:08:7d:31:60:cf:6c: 7b:ad:04:dc:46:28:25:e2:04:16:b5:3d:03:cf:22: c2:90:bc:c4:41:0d:ae:c5:48:32:73:33:1c:bd:d3: da:51:c4:0c:ff:7e:20:d5:19:de:6f:06:ec:da:2a: da:2d:77:fe:d9:e4:36:7b:53:51:a3:c7:1c:58:09: 79:02:de:08:7b:0a:6a:41:72:4d:67:fc:9c:7a:4d: 9f:99:4c:fa:36:5a:9e:1a:ac:81:ad:50:8d:3b:55: 2f:40:e2:cf:94:c5:c5:c7:95:f4:89:4b:33:f0:c1: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0B:DD:37:27:B5:E7:4C:E8:20:9E:36:20:C3:E5:F0:1B:32:2D:93 X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/FBE1E73689E311EF9021CE0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:200::/48 Signature Algorithm: sha256WithRSAEncryption 79:28:b5:f1:ae:dd:b7:ad:13:52:05:fa:ba:cc:f7:c9:fc:a7: e7:02:bb:a6:29:77:0d:4d:0e:8f:c7:dc:a3:9d:34:87:00:57: 70:6f:d6:ac:a6:d3:5f:30:dd:a1:0b:20:fe:03:62:c2:cd:65: 17:b4:26:26:e4:84:a8:cf:1d:4c:21:12:08:37:da:15:21:60: f6:b7:bf:11:e5:ad:53:be:15:a8:66:7a:45:06:0e:22:5e:03: bc:08:f4:41:00:16:df:4f:a0:7c:b3:ac:fa:7f:9f:04:4f:62: d3:1a:77:63:46:23:49:77:01:b1:ff:ae:51:1e:9c:cd:61:bd: 22:6e:0e:0e:cd:ac:87:bc:00:bf:92:ae:a0:0c:08:09:01:71: 6a:35:10:86:05:eb:a3:96:a1:7f:51:f7:2e:d4:c2:74:0c:3a: fa:69:78:1c:c8:08:17:dd:94:b2:18:3f:3e:09:5d:3a:b2:de: 25:75:73:3b:1a:be:74:e6:38:f1:47:86:33:43:5d:77:a8:6f: 89:eb:8d:dd:41:79:42:bf:eb:d3:96:eb:9e:bb:d0:03:f3:7c: 57:d2:49:de:51:94:e2:2d:3c:47:dd:aa:0b:76:0f:7d:ff:aa: 1c:15:7e:6f:c4:5a:3d:4f:72:9c:41:49:90:f9:5f:90:00:b3: 7a:aa:13:67 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjUwNzI3MDIwNjUwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg1ODliYS1lMzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUMTgWEAYUlO25GopWZNSK5uk03Vu1NDdOFxnGu2Q5tijORc82tiH8FWDubq KMVb5zYrw5ySrQQ4GcuzbsHIMNJZKT6TFLm8NNV8EcfH5TmYnmUhktp1og3d3UDv 84feWkuDaf/pMtPPidmFt4oyGt5g+WvoFGt8EetY7s5k433HvW1SjKz7M8Fit+6k If8IfTFgz2x7rQTcRigl4gQWtT0DzyLCkLzEQQ2uxUgyczMcvdPaUcQM/34g1Rne bwbs2iraLXf+2eQ2e1NRo8ccWAl5At4IewpqQXJNZ/ycek2fmUz6NlqeGqyBrVCN O1UvQOLPlMXFx5X0iUsz8MGkHwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOgL3Tcn tedM6CCeNiDD5fAbMi2TMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE0N0MvN0UwRjU4NzIwMUU5MTFFREFGOEJERTMwQzRGOUFFMDIvRkJFMUU3MzY4 OUUzMTFFRjkwMjFDRTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zAgAwDQYJKoZIhvcNAQELBQADggEBAHkotfGu3bet E1IF+rrM98n8p+cCu6Ypdw1NDo/H3KOdNIcAV3Bv1qym018w3aELIP4DYsLNZRe0 JibkhKjPHUwhEgg32hUhYPa3vxHlrVO+FahmekUGDiJeA7wI9EEAFt9PoHyzrPp/ nwRPYtMad2NGI0l3AbH/rlEenM1hvSJuDg7NrIe8AL+SrqAMCAkBcWo1EIYF66OW oX9R9y7UwnQMOvppeBzICBfdlLIYPz4JXTqy3iV1czsavnTmOPFHhjNDXXeob4nr jd1BeUK/69OW65670APzfFfSSd5RlOItPEfdqgt2D33/qhwVfm/EWj1PcpxBSZD5 X5AAs3qqE2c= -----END CERTIFICATE-----Generated at Mon Aug 11 08:53:28 2025 by rpki-client