$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/CDD43C182FFB11F099B57A7CC4F9AE02.roa File: CDD43C182FFB11F099B57A7CC4F9AE02.roa (raw, json) Hash identifier: 7fW7uEIf5Uxrex5CiNo83dZcK5fiFFBbbMhh8zy3jv8= Subject key identifier: A5:B1:48:64:08:60:39:FC:A8:D7:CB:07:58:96:55:26:1C:9C:91:F9 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: DA Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/CDD43C182FFB11F099B57A7CC4F9AE02.roa Signing time: Mon 03 Nov 2025 05:50:53 +0000 ROA not before: Mon 03 Nov 2025 05:50:53 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 138558 IP address blocks: 2001:df4:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Nov 3 05:50:53 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=690842bd-21aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:8d:b1:8d:f5:f1:5c:3b:40:ba:fc:fc:3b: 27:87:16:da:a2:bc:b9:20:40:59:cb:e8:b0:93:c5: 60:8a:72:e6:15:86:da:6d:a4:50:b5:82:8c:e8:23: c1:d3:3b:21:1b:22:84:34:1f:0f:7a:89:0a:08:2c: d9:6c:83:72:6b:c1:c8:74:e8:b6:ae:f4:b6:41:26: be:68:e1:c5:d0:44:5c:17:56:fe:d0:48:69:2c:56: 98:e3:6c:1e:05:70:74:b7:d0:3d:e9:f0:e2:ce:f0: db:a8:c2:ba:2e:bc:ff:e7:b7:3e:2d:78:37:15:25: de:2c:57:1b:a8:85:42:07:15:b4:42:c7:6f:85:18: 1d:08:4d:6b:64:7d:68:5f:17:8b:85:e8:9d:c2:42: 43:9e:08:90:2e:46:2f:72:42:99:8a:1f:0f:d9:8b: a5:80:23:d2:76:c5:ac:bf:d5:fa:33:56:6b:68:d8: ed:5f:29:49:8a:f4:dd:41:63:42:d1:ae:9d:3e:2a: 6a:33:be:45:7a:aa:61:c3:df:da:3b:c4:a3:03:91: 21:5d:d9:de:2d:bc:a9:4d:1c:d7:09:f0:25:81:9d: 3a:3f:df:d4:14:4d:b3:2f:13:8d:c9:ee:a9:a3:9a: c9:b7:e8:b6:2a:07:62:1f:71:da:5d:be:eb:53:22: 1a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B1:48:64:08:60:39:FC:A8:D7:CB:07:58:96:55:26:1C:9C:91:F9 X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/CDD43C182FFB11F099B57A7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:3440::/48 Signature Algorithm: sha256WithRSAEncryption b4:8f:09:c8:f3:25:40:66:86:5e:bf:46:e2:f1:6f:c8:9e:da: 10:7d:09:ec:ca:54:ad:9d:30:ed:60:38:e0:d3:56:9f:fb:6a: 55:55:ba:61:a6:28:2b:c8:7c:a7:a7:c0:3f:67:d5:b1:e6:df: 14:da:5d:00:e6:42:a7:d9:5b:db:db:52:c7:a0:08:2b:16:09: 1b:e8:2d:7b:8e:04:cc:0b:15:bc:b1:f5:bb:4c:bc:c3:ca:ea: 00:77:12:3b:b6:95:b0:5c:70:79:f5:86:a7:27:97:c9:6d:13: d8:a3:a8:0f:ef:af:e2:cf:eb:04:48:a0:77:5f:99:23:0e:00: 10:52:ae:a3:a3:7a:c8:c1:14:ed:6d:32:c2:8b:15:c8:ed:33: e9:19:84:8a:06:d1:85:ef:7b:54:e0:66:a5:3e:27:62:d8:ff: 61:0b:8c:a0:73:47:01:2d:3c:52:28:30:ab:54:4e:83:db:d6: 8a:00:53:90:dc:f7:47:c3:6e:98:7b:d7:54:5d:72:65:83:17: 7d:0e:f0:96:10:06:80:48:39:5f:27:58:6a:ad:84:f9:40:d8: 50:d7:10:cc:5c:0e:be:de:48:05:ed:12:74:f1:31:a6:c4:fe: 8c:05:60:aa:bd:39:67:cd:6d:f6:2d:b1:2e:0d:1b:51:ca:74: a9:64:35:0c -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjUxMTAzMDU1MDUzWhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4NDJiZC0yMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYuNsY318Vw7QLr8/Dsnhxbaory5IEBZy+iwk8VginLmFYbabaRQtYKM6CPB 0zshGyKENB8PeokKCCzZbINya8HIdOi2rvS2QSa+aOHF0ERcF1b+0EhpLFaY42we BXB0t9A96fDizvDbqMK6Lrz/57c+LXg3FSXeLFcbqIVCBxW0QsdvhRgdCE1rZH1o XxeLheidwkJDngiQLkYvckKZih8P2YulgCPSdsWsv9X6M1ZraNjtXylJivTdQWNC 0a6dPipqM75Feqphw9/aO8SjA5EhXdneLbypTRzXCfAlgZ06P9/UFE2zLxONye6p o5rJt+i2KgdiH3HaXb7rUyIaCQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKWxSGQI YDn8qNfLB1iWVSYcnJH5MB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5RDkvRjU2MDM3QTY2RjVDMTFFRjgzNUE3QjY2QzRGOUFFMDIvQ0RENDNDMTgy RkZCMTFGMDk5QjU3QTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30NEAwDQYJKoZIhvcNAQELBQADggEBALSPCcjzJUBm hl6/RuLxb8ie2hB9CezKVK2dMO1gOODTVp/7alVVumGmKCvIfKenwD9n1bHm3xTa XQDmQqfZW9vbUsegCCsWCRvoLXuOBMwLFbyx9btMvMPK6gB3Eju2lbBccHn1hqcn l8ltE9ijqA/vr+LP6wRIoHdfmSMOABBSrqOjesjBFO1tMsKLFcjtM+kZhIoG0YXv e1TgZqU+J2LY/2ELjKBzRwEtPFIoMKtUToPb1ooAU5Dc90fDbph711RdcmWDF30O 8JYQBoBIOV8nWGqthPlA2FDXEMxcDr7eSAXtEnTxMabE/owFYKq9OWfNbfYtsS4N G1HKdKlkNQw= -----END CERTIFICATE-----Generated at Wed Nov 5 23:50:30 2025 by rpki-client