$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/24AB7D08271F11EF81086430C4F9AE02.roa File: 24AB7D08271F11EF81086430C4F9AE02.roa (raw, json) Hash identifier: 2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18= Subject key identifier: B0:CE:DA:D5:71:A4:F1:20:87:35:28:0F:9B:4F:41:EA:23:96:F3:2B Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: C8 Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/24AB7D08271F11EF81086430C4F9AE02.roa Signing time: Wed 25 Jun 2025 05:39:29 +0000 ROA not before: Wed 25 Jun 2025 05:39:29 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152906 IP address blocks: 2401:a5a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Jun 25 05:39:29 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685b8b91-317d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:00:29:ae:b9:c4:c4:b4:a1:a9:50:89:5e: 54:5b:20:26:76:72:16:e6:5a:3f:11:75:13:a1:fe: 8f:dc:ee:51:d1:be:9e:25:2d:b0:86:a6:08:24:b5: 86:b1:07:50:f8:9d:e5:75:49:c8:d1:30:4a:a3:3e: 5d:e1:bc:b6:fd:7d:88:95:1a:5c:cb:83:9f:c2:a4: 06:d3:25:8c:bf:c8:be:84:f3:a1:e8:3b:60:64:82: 63:78:77:f0:e7:dc:46:b0:ef:0d:44:f7:c8:fb:52: 68:91:3d:27:0f:b4:71:c8:28:69:84:5b:fb:d9:3f: 53:c3:a3:db:f2:53:cc:9a:e6:a6:62:18:e2:21:ae: c3:7d:2d:c6:af:b6:66:e1:50:92:59:68:91:44:c3: 36:25:4c:dd:cf:5e:13:c9:f8:cc:cd:22:c3:71:c6: 06:af:8f:2a:0f:c8:6c:93:4d:4c:d7:0a:72:b6:82: 81:9d:1c:f2:91:d3:c2:36:ab:0c:24:61:0b:7e:6a: c7:85:7e:d6:16:55:60:87:b6:98:a3:43:e6:6a:1d: 37:34:53:7c:b5:69:22:9b:16:d4:f1:a1:6d:3b:67: 54:a5:5f:c0:a5:98:4b:03:1f:18:a9:41:9d:2c:e3: de:23:74:cf:51:44:30:d5:3f:3b:b2:2b:62:47:bc: 2b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CE:DA:D5:71:A4:F1:20:87:35:28:0F:9B:4F:41:EA:23:96:F3:2B X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/24AB7D08271F11EF81086430C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:a5a0::/32 Signature Algorithm: sha256WithRSAEncryption 14:77:e7:c4:f9:82:50:ec:e2:08:f0:0a:9b:07:07:3f:8d:23: 3b:e5:8b:d0:3f:d7:38:f6:f8:ff:59:8e:c9:7a:35:96:f0:59: fa:f0:d2:a5:d7:d8:8f:7f:b0:cc:b7:9c:37:25:28:59:9b:42: 62:ab:37:b2:1e:c2:e5:4a:a3:6c:88:06:e6:90:74:2a:d3:cc: d2:a1:5e:fd:16:8e:e0:36:c8:9a:59:7e:c0:55:f6:88:6e:3d: d1:17:19:64:3d:a4:1b:89:85:0f:c4:2d:d5:67:15:88:01:69: 8e:a4:fe:53:7e:1f:90:6c:c1:dd:36:25:ef:79:c1:00:5a:c2: 4c:a9:19:02:76:e6:cd:b7:96:51:c2:8d:f1:b3:f4:2d:1c:60: a8:11:20:c4:6a:6b:b4:e1:3a:4b:a0:c3:ce:2e:ab:9c:e4:08: dd:a5:9a:18:62:91:7c:c3:61:d7:ba:98:26:75:d4:92:d5:b9: 82:b0:22:f9:08:3f:3a:ed:0c:d2:ec:07:f0:a6:56:50:5c:7f: b7:bd:40:73:d4:d4:28:5d:59:80:01:a4:3e:61:98:5c:19:df: ca:0b:95:fa:4a:e4:c9:35:91:30:ea:ad:e0:6f:b9:88:88:0e: f2:c4:ea:1a:a0:3d:1f:ab:47:9c:da:1f:8a:0a:d5:b7:5b:12: a2:76:ba:43 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjUwNjI1MDUzOTI5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViOGI5MS0zMTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqX0AKa65xMS0oalQiV5UWyAmdnIW5lo/EXUTof6P3O5R0b6eJS2whqYIJLWG sQdQ+J3ldUnI0TBKoz5d4by2/X2IlRpcy4OfwqQG0yWMv8i+hPOh6DtgZIJjeHfw 59xGsO8NRPfI+1JokT0nD7RxyChphFv72T9Tw6Pb8lPMmuamYhjiIa7DfS3Gr7Zm 4VCSWWiRRMM2JUzdz14TyfjMzSLDccYGr48qD8hsk01M1wpytoKBnRzykdPCNqsM JGELfmrHhX7WFlVgh7aYo0Pmah03NFN8tWkimxbU8aFtO2dUpV/ApZhLAx8YqUGd LOPeI3TPUUQw1T87sitiR7wrtwIDAQABo4ICljCCApIwHQYDVR0OBBYEFLDO2tVx pPEghzUoD5tPQeojlvMrMB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjgzREMvQTM5N0EzRTQyNkVEMTFFRkI0QzlCQTI4QzRGOUFFMDIvMjRBQjdEMDgy NzFGMTFFRjgxMDg2NDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAaWgMA0GCSqGSIb3DQEBCwUAA4IBAQAUd+fE+YJQ7OII 8AqbBwc/jSM75YvQP9c49vj/WY7JejWW8Fn68NKl19iPf7DMt5w3JShZm0Jiqzey HsLlSqNsiAbmkHQq08zSoV79Fo7gNsiaWX7AVfaIbj3RFxlkPaQbiYUPxC3VZxWI AWmOpP5Tfh+QbMHdNiXvecEAWsJMqRkCdubNt5ZRwo3xs/QtHGCoESDEamu04TpL oMPOLquc5AjdpZoYYpF8w2HXupgmddSS1bmCsCL5CD867QzS7AfwplZQXH+3vUBz 1NQoXVmAAaQ+YZhcGd/KC5X6SuTJNZEw6q3gb7mIiA7yxOoaoD0fq0ec2h+KCtW3 WxKidrpD -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:26 2025 by rpki-client