$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/063FA6B25B2811F09B9A3A54C4F9AE02.roa File: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (raw, json) Hash identifier: KXiWnH7RLdD8k1bKnrw/NL0MoMgP+K3mZfrXszKRO+k= Subject key identifier: DA:BC:6E:8C:D6:63:42:23:80:B1:EB:BF:F8:9C:70:60:E1:41:88:49 Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 021E Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/063FA6B25B2811F09B9A3A54C4F9AE02.roa Signing time: Mon 03 Nov 2025 03:48:02 +0000 ROA not before: Mon 03 Nov 2025 03:48:02 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 13383 IP address blocks: 2402:be0:fffa::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Nov 3 03:48:02 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690825f1-e640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:3e:bd:80:ea:ce:1c:03:96:1f:fa:51:17: c9:10:8c:b8:d5:af:73:7b:a8:6b:f7:ac:69:bf:ef: 01:85:9f:67:9e:f5:ac:9b:38:f5:fa:57:02:5b:6a: 81:5d:73:ca:81:ef:f6:73:14:99:30:51:f5:b7:6e: 1f:99:ff:44:da:20:ad:f8:95:7c:40:56:8b:29:dd: 08:f7:1a:7e:1c:8c:63:7c:20:33:eb:37:16:70:02: 01:65:74:a6:e5:fd:f3:d8:33:fe:d2:c6:74:71:1d: 37:1b:97:3a:46:d9:75:a2:2b:1a:c5:53:f5:94:44: f7:81:82:e5:e4:f0:e4:8c:e5:11:48:55:b9:72:d5: 6b:55:af:1a:fb:e0:03:5f:f0:69:fe:c6:74:26:2a: ba:1f:15:a7:8d:57:f9:cc:f2:54:9f:40:ef:0f:3c: b2:8f:22:5c:f9:6e:9d:f5:44:69:5f:b8:88:ed:ef: 15:d0:86:d7:2d:f1:b3:29:6e:eb:90:3b:53:1c:04: 03:5e:e4:b9:25:2d:42:5b:97:e0:c4:cc:a1:b9:c5: b5:99:25:57:1a:fd:8d:e8:0a:32:98:55:f2:35:cd: 97:66:2c:4e:3c:b1:1a:87:24:4b:3b:76:ac:95:67: 60:59:7e:fb:ff:c4:24:81:71:c8:7a:3e:7f:51:8d: 51:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BC:6E:8C:D6:63:42:23:80:B1:EB:BF:F8:9C:70:60:E1:41:88:49 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/063FA6B25B2811F09B9A3A54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:be0:fffa::/47 Signature Algorithm: sha256WithRSAEncryption 01:ed:f5:3c:16:81:a1:4b:a7:5f:06:6b:10:48:b7:e5:70:fd: 21:90:88:ca:1e:06:6e:55:f2:69:28:26:d4:dd:4e:93:15:8d: ea:d1:bd:6d:8b:de:17:3f:36:98:c1:9f:51:c6:97:bd:57:68: db:aa:63:0f:59:c1:72:31:1d:6b:18:5f:6f:9e:a3:5f:10:e3: 79:40:3d:6e:0f:75:55:c4:04:e7:63:06:da:76:c6:6e:0b:b2: d2:19:ba:36:ac:9f:a7:ec:1d:35:4f:e2:66:3d:2e:5d:7c:f5: f4:cd:9a:28:a4:90:ff:57:88:72:ce:4e:8a:d1:2d:96:de:b7: 5a:b5:35:d3:08:61:6e:4c:a5:56:d1:b3:d6:76:ad:ae:9c:8d: d4:b4:f7:00:7e:df:d4:03:3f:5e:d5:4b:3b:68:0a:70:26:8d: 1e:92:d4:2e:07:24:03:10:a6:14:42:04:ea:11:d3:b0:36:08: 98:30:7e:8c:2c:e0:f7:c3:39:74:1e:20:cc:46:54:b8:5b:16: f0:5c:7a:33:69:19:23:26:d4:21:68:a9:e2:10:94:f4:0c:f0: f4:ee:d2:df:0d:21:b6:3d:8c:36:26:7e:e3:82:c2:6f:ca:c7: 0b:27:e0:53:49:71:99:60:8a:92:00:33:11:aa:56:c9:2f:b6: e7:8f:08:91 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUxMTAzMDM0ODAyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MjVmMS1lNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDA+vYDqzhwDlh/6URfJEIy41a9ze6hr96xpv+8BhZ9nnvWsmzj1+lcCW2qB XXPKge/2cxSZMFH1t24fmf9E2iCt+JV8QFaLKd0I9xp+HIxjfCAz6zcWcAIBZXSm 5f3z2DP+0sZ0cR03G5c6Rtl1oisaxVP1lET3gYLl5PDkjOURSFW5ctVrVa8a++AD X/Bp/sZ0Jiq6HxWnjVf5zPJUn0DvDzyyjyJc+W6d9URpX7iI7e8V0IbXLfGzKW7r kDtTHAQDXuS5JS1CW5fgxMyhucW1mSVXGv2N6AoymFXyNc2XZixOPLEahyRLO3as lWdgWX77/8QkgXHIej5/UY1R7QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNq8bozW Y0IjgLHrv/iccGDhQYhJMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvMDYzRkE2QjI1 QjI4MTFGMDlCOUEzQTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkAgvg//owDQYJKoZIhvcNAQELBQADggEBAAHt9TwWgaFL p18GaxBIt+Vw/SGQiMoeBm5V8mkoJtTdTpMVjerRvW2L3hc/NpjBn1HGl71XaNuq Yw9ZwXIxHWsYX2+eo18Q43lAPW4PdVXEBOdjBtp2xm4LstIZujasn6fsHTVP4mY9 Ll189fTNmiikkP9XiHLOTorRLZbet1q1NdMIYW5MpVbRs9Z2ra6cjdS09wB+39QD P17VSztoCnAmjR6S1C4HJAMQphRCBOoR07A2CJgwfows4PfDOXQeIMxGVLhbFvBc ejNpGSMm1CFoqeIQlPQM8PTu0t8NIbY9jDYmfuOCwm/Kxwsn4FNJcZlgipIAMxGq VskvtuePCJE= -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:27 2025 by rpki-client