$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/FBB6EA4E558B11F082FD5637C4F9AE02.roa File: FBB6EA4E558B11F082FD5637C4F9AE02.roa (raw, json) Hash identifier: t1t5ERQK21Czu6UgrAaBph2clA23SD9Ihs9VsoqVI8k= Subject key identifier: 84:99:48:73:32:0E:79:23:CA:18:D4:93:BA:74:56:2D:4B:89:C6:7A Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 021F Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/FBB6EA4E558B11F082FD5637C4F9AE02.roa Signing time: Mon 03 Nov 2025 03:48:03 +0000 ROA not before: Mon 03 Nov 2025 03:48:03 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139311 IP address blocks: 2402:be0:feff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Nov 3 03:48:03 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690825f3-22b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8e:64:f4:17:a9:1a:c0:88:6d:db:6b:56:d0: 79:15:44:79:b5:9c:5d:0e:37:14:80:d4:5e:bf:b4: fe:4f:23:45:c3:b6:60:e0:de:37:43:db:a1:6b:ab: b9:67:a5:b9:22:aa:2f:b0:0d:99:3a:68:a1:33:c6: a2:ca:e7:4d:51:ac:ab:6e:91:84:2a:57:cd:d3:c0: 51:45:c6:cc:5e:49:76:33:dc:85:78:f7:08:52:39: 53:11:09:a9:8d:a7:15:ac:62:73:03:d1:a7:23:af: 0d:c0:81:ba:8f:49:9c:27:59:0d:a8:0a:e5:69:32: 44:79:15:c6:63:c6:f2:8f:cd:09:cb:83:38:32:36: 52:cf:0e:1c:4a:09:8a:ea:fa:c8:c8:24:1e:30:01: 0b:c8:03:35:b4:67:f0:d3:09:3f:7c:ec:57:5e:fb: 50:ac:2f:4b:fa:bc:0a:06:61:60:23:18:ee:08:1c: be:ed:d7:f7:03:3d:8c:3d:83:50:5d:c7:7e:e3:90: 68:6f:59:a8:b1:a3:d4:fd:ef:de:4d:66:67:58:96: e4:d8:13:9b:13:d1:f0:b3:e7:37:a3:25:a0:81:24: 94:d8:16:d0:cd:dc:a0:7f:6d:d3:e3:ed:45:6f:61: 2f:d3:98:15:4e:de:86:45:f3:a4:24:14:ba:2b:6f: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:99:48:73:32:0E:79:23:CA:18:D4:93:BA:74:56:2D:4B:89:C6:7A X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/FBB6EA4E558B11F082FD5637C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:be0:feff::/48 Signature Algorithm: sha256WithRSAEncryption 7a:5d:6c:ec:a8:ae:5a:1f:6f:8f:38:dc:d8:61:21:ef:84:b2: f8:e3:4a:78:3f:32:8c:3d:56:e0:cc:77:d0:5e:3b:ff:db:dc: 43:5c:2f:b5:f4:4b:22:53:74:ec:fd:42:9e:63:fd:6b:ce:e6: fe:0f:78:2d:6b:12:fb:7b:ad:ca:5a:af:d8:14:a2:95:bd:64: c8:3e:65:dc:80:9f:db:37:36:30:4b:00:32:9b:76:6e:6b:15: c7:c3:8b:6c:e7:40:98:02:34:ce:df:97:93:0d:84:6f:69:dd: 67:ac:6c:4c:b0:a9:86:6f:7a:a0:fd:93:b7:d0:ee:f5:6b:9f: 28:32:ae:c5:aa:25:48:35:81:22:75:c7:81:f1:8f:0c:2a:bd: b1:6f:40:58:b3:f8:b6:39:b9:7a:d3:7d:f5:79:a9:3f:e4:af: c6:24:1a:4f:ec:d0:ec:c3:1a:e1:5b:73:a9:63:07:ab:f3:99: ce:b8:83:80:6c:28:8e:15:75:e7:22:28:bd:49:2a:5d:2c:e6: 58:a2:82:19:fa:b7:b4:2c:97:1f:fa:93:39:a7:a9:67:3b:dc: 1d:a3:5c:6f:b3:34:15:f5:e3:be:be:9b:ac:81:3e:14:98:ea: 3e:76:b4:dc:f7:91:6e:9a:93:1a:46:7f:df:6b:04:8b:91:65: 8e:81:ed:d9 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUxMTAzMDM0ODAzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MjVmMy0yMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2I5k9BepGsCIbdtrVtB5FUR5tZxdDjcUgNRev7T+TyNFw7Zg4N43Q9uha6u5 Z6W5IqovsA2ZOmihM8aiyudNUayrbpGEKlfN08BRRcbMXkl2M9yFePcIUjlTEQmp jacVrGJzA9GnI68NwIG6j0mcJ1kNqArlaTJEeRXGY8byj80Jy4M4MjZSzw4cSgmK 6vrIyCQeMAELyAM1tGfw0wk/fOxXXvtQrC9L+rwKBmFgIxjuCBy+7df3Az2MPYNQ Xcd+45Bob1mosaPU/e/eTWZnWJbk2BObE9Hws+c3oyWggSSU2BbQzdygf23T4+1F b2Ev05gVTt6GRfOkJBS6K2+wqQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFISZSHMy DnkjyhjUk7p0Vi1LicZ6MB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvRkJCNkVBNEU1 NThCMTFGMDgyRkQ1NjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAgvg/v8wDQYJKoZIhvcNAQELBQADggEBAHpdbOyorlof b4843NhhIe+EsvjjSng/Mow9VuDMd9BeO//b3ENcL7X0SyJTdOz9Qp5j/WvO5v4P eC1rEvt7rcpar9gUopW9ZMg+ZdyAn9s3NjBLADKbdm5rFcfDi2znQJgCNM7fl5MN hG9p3WesbEywqYZveqD9k7fQ7vVrnygyrsWqJUg1gSJ1x4HxjwwqvbFvQFiz+LY5 uXrTffV5qT/kr8YkGk/s0OzDGuFbc6ljB6vzmc64g4BsKI4VdeciKL1JKl0s5lii ghn6t7Qslx/6kzmnqWc73B2jXG+zNBX1476+m6yBPhSY6j52tNz3kW6akxpGf99r BIuRZY6B7dk= -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:01 2025 by rpki-client