$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/71DBC7BE5DBF11EFB8714857C4F9AE02.roa File: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (raw, json) Hash identifier: Ji4FnaAA41M0xkMFETxyoill5QqKNA4PIi1n5I8VonU= Subject key identifier: 8D:3D:39:56:D9:D7:67:02:3D:BD:14:35:8E:9D:B8:B2:74:74:2D:C9 Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Certificate serial: D3 Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/71DBC7BE5DBF11EFB8714857C4F9AE02.roa Signing time: Mon 29 Sep 2025 06:35:49 +0000 ROA not before: Mon 29 Sep 2025 06:35:49 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136935 IP address blocks: 2401:bc20::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Validity Not Before: Sep 29 06:35:49 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68da28c5-ac97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d6:35:60:fe:81:94:ea:fc:10:11:eb:38:7c: 01:bc:ad:e3:1b:33:b7:6d:9a:14:3c:1f:d7:06:ee: e2:ab:40:8c:34:15:46:d1:97:4e:49:d9:23:da:a7: b6:ca:50:6f:86:b1:ff:a3:35:d9:08:7e:27:29:8c: d1:27:33:cc:fd:d8:52:64:e0:12:08:a0:d1:2e:fc: 58:71:92:ba:81:25:24:ad:cf:b5:b7:9c:e6:83:34: 13:6f:b4:c8:36:9d:5b:c0:56:b3:b8:a3:b0:d3:19: c0:99:10:cd:2e:b8:aa:99:93:48:ac:20:0c:26:d4: dc:f6:84:24:26:0c:13:a6:7f:83:13:1e:10:6f:b9: 1d:79:5b:f7:b7:45:45:fa:7b:d6:76:22:0f:d5:a5: 04:7c:e5:55:8f:7b:98:70:e6:4d:d5:b7:49:e4:04: a9:39:b6:c2:77:cb:53:61:79:74:70:52:e0:21:80: fc:f5:29:24:d9:26:0c:23:a2:db:cc:84:1d:63:72: 73:a8:d9:10:71:21:6f:0e:c8:dc:bd:dc:05:4f:5e: 21:4a:2b:88:50:8a:c7:17:37:44:19:b2:96:8f:9e: 19:f9:f4:c0:e7:ff:16:9c:38:d7:1d:72:c5:e5:e3: a9:9c:69:52:34:ba:c8:63:d9:32:be:76:8e:2e:a7: 79:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3D:39:56:D9:D7:67:02:3D:BD:14:35:8E:9D:B8:B2:74:74:2D:C9 X509v3 Authority Key Identifier: keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/71DBC7BE5DBF11EFB8714857C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:bc20::/32 Signature Algorithm: sha256WithRSAEncryption 52:06:67:aa:f4:f0:62:8c:6e:9f:ca:68:4e:23:0f:01:a6:6f: 85:8d:cc:62:93:c5:cd:db:32:ca:05:fe:d3:9b:d9:fc:42:ce: 1a:2a:79:b2:b7:33:9c:da:01:89:0c:5b:46:dc:42:72:e7:e3: 9c:aa:2f:42:6a:31:bb:03:f0:fe:85:8e:ff:cd:25:06:42:87: f0:7f:25:53:2b:a1:48:9f:24:14:42:2b:38:85:a4:d7:38:0d: cc:75:99:0d:3c:91:1e:5c:8d:cc:a9:2f:af:3a:9f:36:ac:80: 23:b4:97:47:12:98:26:84:63:b9:44:b5:ad:29:c7:bb:7b:26: 57:d3:6f:b8:9d:9c:5a:a5:1b:ae:ad:f0:be:12:af:37:8d:49: 05:0f:2e:37:68:5c:64:6c:97:8d:33:45:a6:64:3c:df:9e:f1: 75:fc:96:44:ce:6a:17:b8:42:fd:27:f7:a6:3a:65:dc:c4:08: ff:e2:47:c9:3e:0f:2e:4d:79:14:d2:1e:b6:35:02:22:b9:d1: d6:bf:d8:30:f7:67:30:5e:20:90:ba:9e:9f:13:1f:df:66:a7: 9b:dd:1a:fc:bc:f9:a9:92:f2:da:b8:01:87:d4:4b:7f:7a:6b: f4:71:65:91:0a:c3:c8:9e:91:5e:97:68:2e:f1:a2:cf:99:2e: 63:36:4b:c0 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKDRDQjIxMzJBNzIzNkE2RTNCNUI5NjMwQ0EwMzAxMTQ4 NjMyODU1RjcwHhcNMjUwOTI5MDYzNTQ5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRhMjhjNS1hYzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NY1YP6BlOr8EBHrOHwBvK3jGzO3bZoUPB/XBu7iq0CMNBVG0ZdOSdkj2qe2 ylBvhrH/ozXZCH4nKYzRJzPM/dhSZOASCKDRLvxYcZK6gSUkrc+1t5zmgzQTb7TI Np1bwFazuKOw0xnAmRDNLriqmZNIrCAMJtTc9oQkJgwTpn+DEx4Qb7kdeVv3t0VF +nvWdiIP1aUEfOVVj3uYcOZN1bdJ5ASpObbCd8tTYXl0cFLgIYD89Skk2SYMI6Lb zIQdY3JzqNkQcSFvDsjcvdwFT14hSiuIUIrHFzdEGbKWj54Z+fTA5/8WnDjXHXLF 5eOpnGlSNLrIY9kyvnaOLqd53wIDAQABo4ICljCCApIwHQYDVR0OBBYEFI09OVbZ 12cCPb0UNY6duLJ0dC3JMB8GA1UdIwQYMBaAFEyyEypyNqbjtbljDKAwEUhjKFX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi8wMUVERUY5NjVE QkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1TzF1V01Nb0RBUlNHTW9W ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMSVRLbkkycHVPMXVXTU1vREFSU0dNb1ZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhGOUIvMDFFREVGOTY1REJFMTFFRjhBMDZFRDQwQzRGOUFFMDIvNzFEQkM3QkU1 REJGMTFFRkI4NzE0ODU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAbwgMA0GCSqGSIb3DQEBCwUAA4IBAQBSBmeq9PBijG6f ymhOIw8Bpm+Fjcxik8XN2zLKBf7Tm9n8Qs4aKnmytzOc2gGJDFtG3EJy5+Ocqi9C ajG7A/D+hY7/zSUGQofwfyVTK6FInyQUQis4haTXOA3MdZkNPJEeXI3MqS+vOp82 rIAjtJdHEpgmhGO5RLWtKce7eyZX02+4nZxapRuurfC+Eq83jUkFDy43aFxkbJeN M0WmZDzfnvF1/JZEzmoXuEL9J/emOmXcxAj/4kfJPg8uTXkU0h62NQIiudHWv9gw 92cwXiCQup6fEx/fZqeb3Rr8vPmpkvLauAGH1Et/emv0cWWRCsPInpFel2gu8aLP mS5jNkvA -----END CERTIFICATE-----Generated at Tue Nov 4 16:37:54 2025 by rpki-client