$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/4FAF60B433A411EFB7A29C24C4F9AE02.roa File: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (raw, json) Hash identifier: H9iBAev1i2fVG9Su0JRgr3VpHwr3qa10u8oippD4Mno= Subject key identifier: 81:6A:AA:22:C5:CB:E2:25:AF:D8:CA:F6:65:EB:3E:8F:79:FA:81:27 Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Certificate serial: CB Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/4FAF60B433A411EFB7A29C24C4F9AE02.roa Signing time: Wed 23 Jul 2025 06:13:33 +0000 ROA not before: Wed 23 Jul 2025 06:13:33 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 153037 IP address blocks: 2001:df3:fa40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Validity Not Before: Jul 23 06:13:33 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68807d8d-fec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:26:0e:a9:30:73:3e:a4:d6:f6:37:5c:bc: 34:6f:ad:24:31:10:6a:1a:cc:b4:36:4f:63:dd:8b: 61:fe:89:ab:06:e6:b2:da:00:f9:cc:8e:aa:ec:e3: 76:e1:06:57:dc:14:77:24:90:2f:0c:59:ec:ee:ba: 32:1b:fa:d5:b5:cf:85:cf:40:07:77:cc:a9:38:08: 34:d4:79:4b:20:0c:93:eb:86:46:fe:4e:7b:4d:5f: ba:e0:83:2d:55:eb:a7:e2:14:88:27:de:52:16:9c: 7a:6c:7a:1c:83:69:01:8a:b7:67:a9:13:b5:59:62: 71:c5:97:ae:7e:15:5f:ca:af:6b:f5:ff:f2:4c:1a: d7:9c:f7:7e:6c:12:73:5e:fe:80:59:46:ba:ad:95: 96:00:8f:91:ab:56:00:bb:04:51:f0:65:ab:a2:f0: c1:aa:93:94:3c:62:b2:00:85:e9:2c:6f:5a:d4:ec: 3c:0f:16:0c:76:7c:81:5f:0c:2d:3e:c0:20:bb:ab: 29:50:d6:a1:aa:74:61:9b:45:a1:72:59:69:63:0a: 3e:89:42:42:fd:de:94:0d:f1:8f:b0:34:73:02:0d: 63:1a:48:b7:10:1e:7e:0b:cb:02:42:38:fc:ca:76: 76:1c:be:f3:0b:c1:b1:a8:bf:95:57:89:b6:53:aa: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6A:AA:22:C5:CB:E2:25:AF:D8:CA:F6:65:EB:3E:8F:79:FA:81:27 X509v3 Authority Key Identifier: keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/4FAF60B433A411EFB7A29C24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:fa40::/48 Signature Algorithm: sha256WithRSAEncryption 9a:ea:99:7f:69:ce:ac:7c:34:59:6d:75:99:82:3c:2d:0a:0a: 46:c7:ca:15:85:a3:85:7d:72:26:45:68:3b:47:13:a4:f2:5a: 66:b6:b1:9f:40:a2:3e:60:9b:fa:1d:b0:41:aa:c2:7e:3d:34: 8a:04:dc:a3:73:28:82:e2:28:bb:0f:df:19:88:f4:71:13:43: cc:0f:32:0e:bc:19:03:7d:80:c8:3d:bb:14:da:58:7d:2a:d1: 43:ab:32:e4:54:d0:16:8a:46:6f:ee:1a:98:61:1f:c4:e8:f9: 5b:ef:6e:0a:dc:aa:a8:25:64:e7:b2:74:27:2f:24:35:42:b9: 11:05:86:c9:64:6c:b1:e0:b1:55:49:bb:9f:da:15:f8:a5:88: 54:b7:2e:00:be:70:c9:73:74:6a:3b:8a:30:47:15:8f:18:11: a4:e9:65:bb:37:29:8b:3e:ad:24:82:e0:c4:06:10:ed:65:ec: 02:3d:5e:73:06:4c:9f:e0:90:f3:3d:2c:5b:64:79:fd:1e:3d: 34:a3:e9:4e:26:57:db:8d:2f:2e:aa:54:1f:61:1e:66:8a:8e: ab:82:d3:c6:d9:62:a4:51:ea:70:d7:77:7d:ff:1e:13:9b:c7: 7d:9e:e2:ee:da:b6:42:4c:05:e0:7a:93:45:9c:0c:d9:6f:29: a3:2a:fe:52 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RDRTM5MTQ5RkM2 MEY5NjE0OTkwHhcNMjUwNzIzMDYxMzMzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgwN2Q4ZC1mZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKEmDqkwcz6k1vY3XLw0b60kMRBqGsy0Nk9j3Yth/omrBuay2gD5zI6q7ON2 4QZX3BR3JJAvDFns7royG/rVtc+Fz0AHd8ypOAg01HlLIAyT64ZG/k57TV+64IMt Veun4hSIJ95SFpx6bHocg2kBirdnqRO1WWJxxZeufhVfyq9r9f/yTBrXnPd+bBJz Xv6AWUa6rZWWAI+Rq1YAuwRR8GWrovDBqpOUPGKyAIXpLG9a1Ow8DxYMdnyBXwwt PsAgu6spUNahqnRhm0WhcllpYwo+iUJC/d6UDfGPsDRzAg1jGki3EB5+C8sCQjj8 ynZ2HL7zC8GxqL+VV4m2U6pLmwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIFqqiLF y+Ilr9jK9mXrPo95+oEnMB8GA1UdIwQYMBaAFHhOwPD/nW2A3J99zjkUn8YPlhSZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9DNjY1REYyMjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZRGNuMzNPT1JTZnhnLVdG SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFN0E4UC1kYllEY24zM09PUlNmeGctV0ZKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE2OUYvQzY2NURGMjIzM0EzMTFFRkE1QjQ5QjIzQzRGOUFFMDIvNEZBRjYwQjQz M0E0MTFFRkI3QTI5QzI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3z+kAwDQYJKoZIhvcNAQELBQADggEBAJrqmX9pzqx8 NFltdZmCPC0KCkbHyhWFo4V9ciZFaDtHE6TyWma2sZ9Aoj5gm/odsEGqwn49NIoE 3KNzKILiKLsP3xmI9HETQ8wPMg68GQN9gMg9uxTaWH0q0UOrMuRU0BaKRm/uGphh H8To+VvvbgrcqqglZOeydCcvJDVCuREFhslkbLHgsVVJu5/aFfiliFS3LgC+cMlz dGo7ijBHFY8YEaTpZbs3KYs+rSSC4MQGEO1l7AI9XnMGTJ/gkPM9LFtkef0ePTSj 6U4mV9uNLy6qVB9hHmaKjquC08bZYqRR6nDXd33/HhObx32e4u7atkJMBeB6k0Wc DNlvKaMq/lI= -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:46 2025 by rpki-client