$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/D0F8C1B2558E11F0AA71D85AC4F9AE02.roa File: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (raw, json) Hash identifier: HvV48I109s9+Qsv4Wno42zSr43P6rFtI4uz1VW60NvA= Subject key identifier: C9:49:9E:3D:2F:E5:CD:13:9A:F6:62:EA:86:54:C2:BA:97:00:4D:A2 Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 0222 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/D0F8C1B2558E11F0AA71D85AC4F9AE02.roa Signing time: Mon 03 Nov 2025 03:48:05 +0000 ROA not before: Mon 03 Nov 2025 03:48:05 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 151349 IP address blocks: 2402:be0:fefd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Nov 3 03:48:05 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690825f5-dd96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:55:1e:80:48:d3:ff:92:bc:27:7d:04:0d:ef: 4e:3e:72:f9:a7:c3:5f:8a:7d:a8:56:a6:35:e1:ba: 3c:09:5c:08:63:53:d6:cc:73:c7:1b:f5:ca:83:c3: 87:ad:7d:a3:76:5e:41:78:eb:80:18:47:30:87:c0: 32:d7:a4:14:8e:25:76:39:4a:f9:08:7f:29:3a:7d: 97:0c:52:44:6f:ed:b9:05:a1:d6:37:06:2c:b8:5c: 4b:0e:c6:2c:73:b8:b9:e2:64:58:4d:6e:99:e0:24: f3:4f:62:cb:e4:f4:9b:19:84:92:6b:81:8d:a7:3b: cf:1c:c5:26:9a:c6:35:da:fd:9e:a2:a3:dd:cf:d3: 26:72:f3:bb:f5:59:b8:20:4c:60:09:cc:9b:87:0a: ee:fa:df:7b:bd:75:10:31:3a:80:c3:98:7b:fc:d9: ff:a6:c7:f9:bf:07:5d:98:6f:ec:a2:f4:c1:29:12: 2f:2f:61:2c:7a:63:28:a2:a5:61:3d:a9:66:d0:45: 71:ba:20:b3:42:99:4f:fc:72:b3:3c:3e:d5:e2:ad: d1:19:27:6e:70:55:f2:de:ed:fe:ab:37:03:ab:a8: 22:1e:8f:bd:a3:5c:e1:6b:e5:98:89:fc:28:62:c5: 49:0d:f1:d6:bc:6f:2f:b2:95:55:59:54:00:9a:cb: 3d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:49:9E:3D:2F:E5:CD:13:9A:F6:62:EA:86:54:C2:BA:97:00:4D:A2 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/D0F8C1B2558E11F0AA71D85AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:be0:fefd::/48 Signature Algorithm: sha256WithRSAEncryption 05:3f:63:04:ed:a7:91:2d:a1:28:81:d2:1c:f7:21:77:c5:f7: 69:a8:cd:56:57:27:8e:67:b3:d3:16:8e:c7:dc:dc:e8:38:1c: 16:c2:6b:51:7e:26:51:54:51:f0:d1:08:be:d6:45:f6:ab:bc: 42:eb:e0:45:15:cc:ab:cc:a3:c5:02:c2:90:10:fd:09:8b:07: 78:12:e9:c7:fd:bd:29:c0:ed:54:bd:51:d6:1e:ea:7c:e3:6b: 4f:85:65:eb:e1:5c:3b:a7:46:b9:52:b5:2b:b7:23:e9:c8:97: ce:f5:90:1f:74:3e:9b:28:1f:d9:73:9e:df:eb:de:76:db:af: 3c:6e:b9:c3:4c:ad:6b:7f:9e:00:e9:5e:b3:27:2f:15:e5:1b: a3:33:a4:59:f4:e8:53:c3:18:66:5f:d4:bf:55:c2:53:6e:bb: ef:dd:e9:f7:25:35:64:94:25:7e:e4:47:65:fe:71:fa:77:1e: 63:c1:1b:43:13:24:99:6f:41:a7:df:cf:78:15:8e:94:13:60: 50:0f:30:74:63:d1:68:9a:eb:ac:43:ce:76:8d:81:fd:57:cb: 04:fd:c5:a6:f4:64:7f:e5:74:de:ce:c4:be:b0:67:82:61:f5: e1:b3:5b:a3:bc:0b:bd:5d:e2:10:aa:af:2e:a6:b8:dc:22:2b: b7:8e:22:e4 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUxMTAzMDM0ODA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MjVmNS1kZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA71UegEjT/5K8J30EDe9OPnL5p8Nfin2oVqY14bo8CVwIY1PWzHPHG/XKg8OH rX2jdl5BeOuAGEcwh8Ay16QUjiV2OUr5CH8pOn2XDFJEb+25BaHWNwYsuFxLDsYs c7i54mRYTW6Z4CTzT2LL5PSbGYSSa4GNpzvPHMUmmsY12v2eoqPdz9MmcvO79Vm4 IExgCcybhwru+t97vXUQMTqAw5h7/Nn/psf5vwddmG/sovTBKRIvL2EsemMooqVh Palm0EVxuiCzQplP/HKzPD7V4q3RGSducFXy3u3+qzcDq6giHo+9o1zha+WYifwo YsVJDfHWvG8vspVVWVQAmss9CwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMlJnj0v 5c0TmvZi6oZUwrqXAE2iMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvRDBGOEMxQjI1 NThFMTFGMEFBNzFEODVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAgvg/v0wDQYJKoZIhvcNAQELBQADggEBAAU/YwTtp5Et oSiB0hz3IXfF92mozVZXJ45ns9MWjsfc3Og4HBbCa1F+JlFUUfDRCL7WRfarvELr 4EUVzKvMo8UCwpAQ/QmLB3gS6cf9vSnA7VS9UdYe6nzja0+FZevhXDunRrlStSu3 I+nIl871kB90PpsoH9lznt/r3nbbrzxuucNMrWt/ngDpXrMnLxXlG6MzpFn06FPD GGZf1L9VwlNuu+/d6fclNWSUJX7kR2X+cfp3HmPBG0MTJJlvQaffz3gVjpQTYFAP MHRj0Wia66xDznaNgf1XywT9xab0ZH/ldN7OxL6wZ4Jh9eGzW6O8C71d4hCqry6m uNwiK7eOIuQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:37 2025 by rpki-client