$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/18F61C18939B11F0820C0E13C4F9AE02.roa File: 18F61C18939B11F0820C0E13C4F9AE02.roa (raw, json) Hash identifier: ae013xkxRm4STP9eAV3GvXY0KERGUolzleZ5rTQwKpA= Subject key identifier: 76:FA:11:76:89:44:EB:45:91:34:8F:A7:38:BB:9D:7D:55:A9:64:57 Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD Certificate serial: 02 Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/18F61C18939B11F0820C0E13C4F9AE02.roa Signing time: Wed 17 Sep 2025 07:51:20 +0000 ROA not before: Wed 17 Sep 2025 07:51:20 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132883 IP address blocks: 2407:a980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD Validity Not Before: Sep 17 07:51:20 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68ca6877-2913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:4c:b5:5d:4b:d1:15:d3:0d:05:6f:21:64: f0:da:27:9c:7a:cd:2d:59:16:78:cc:5d:5f:93:21: 34:ab:86:37:3e:19:a6:68:e3:94:b9:ad:8f:d0:7e: 08:0f:0a:46:89:df:27:b2:3c:de:bf:85:81:68:41: 69:56:14:c3:6b:dc:bb:9e:85:f7:93:6d:f8:51:97: cd:bb:1f:c8:1b:ae:dd:77:1a:f2:e1:d0:36:98:e3: 15:44:02:f8:b3:23:02:cc:2f:69:98:e4:c7:dc:e0: 25:c4:92:a2:55:8d:30:37:5e:e6:3a:80:8f:37:7f: 98:80:78:83:31:ea:ed:3f:f5:bd:0c:b0:7c:23:3f: 60:97:23:f6:dd:ee:b9:0c:bc:0f:1d:be:5a:87:fc: 54:80:17:e0:7d:7d:ca:74:85:d8:73:36:90:da:cf: 71:29:22:c4:ff:63:f9:f7:3a:a9:d2:f5:fa:9e:2a: ab:a1:89:32:dd:25:c2:b0:b9:db:0b:3a:b9:90:da: 1f:54:b7:cc:be:a1:a7:45:d3:d2:d6:86:e7:db:0d: df:20:60:db:94:38:38:48:55:f7:55:2a:08:55:e4: 87:c2:53:01:66:36:32:7b:05:bf:a3:70:33:56:e2: 5a:74:3d:30:a7:6d:4e:95:d2:ea:94:7d:89:cf:a2: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FA:11:76:89:44:EB:45:91:34:8F:A7:38:BB:9D:7D:55:A9:64:57 X509v3 Authority Key Identifier: keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/18F61C18939B11F0820C0E13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:a980::/32 Signature Algorithm: sha256WithRSAEncryption 2a:e6:49:4a:71:70:6d:18:eb:3a:47:04:58:80:8c:7b:25:c3: 7a:f0:f9:73:39:3b:d6:51:02:85:8b:cc:ba:d1:66:c0:31:e0: e4:01:a3:8e:a3:d5:d0:af:08:0b:0a:5a:f0:b1:8b:ca:e7:a8: d6:b0:aa:35:06:4c:ce:4f:ce:08:c2:30:0e:b5:ee:74:64:74: a8:6b:41:e7:0a:13:b2:df:de:eb:e8:f0:fb:ab:32:c1:a1:87: 9e:df:27:60:b9:a0:63:c3:16:f2:72:73:64:22:87:b6:ec:b8: ce:00:4d:ee:f4:b3:6b:3d:c7:39:44:4d:09:39:5b:a5:f9:cc: 17:9b:5a:04:66:af:9d:d4:ac:3d:0a:f0:e4:90:0c:3c:af:77: f8:68:8b:2e:e9:f0:a4:2a:15:d6:29:25:e2:e1:59:8e:f9:bd: bf:08:99:67:d7:ad:c9:05:f7:1a:57:51:1a:27:19:a3:40:b7: a0:09:0f:85:5b:37:48:18:03:de:c3:2f:d2:5a:a1:ca:ea:0a: 1d:30:8a:ab:7f:48:7f:00:30:b6:8e:47:5a:67:2f:e5:16:d7: c2:e6:03:89:0d:35:23:18:a0:46:03:c3:8e:48:74:d1:67:c8: 91:84:c0:3c:7e:c0:d9:27:5a:92:e0:23:57:f4:09:96:19:52: 21:9d:06:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjE0RDExMC8GA1UEBRMoNjQzNzdFODcxODY2REQzNzRFQzU5RTIzODNCQTEwRkE2 QTMxRkZGRDAeFw0yNTA5MTcwNzUxMjBaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4Y2E2ODc3LTI5MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7i0y1XUvRFdMNBW8hZPDaJ5x6zS1ZFnjMXV+TITSrhjc+GaZo45S5rY/QfggP CkaJ3yeyPN6/hYFoQWlWFMNr3LuehfeTbfhRl827H8gbrt13GvLh0DaY4xVEAviz IwLML2mY5Mfc4CXEkqJVjTA3XuY6gI83f5iAeIMx6u0/9b0MsHwjP2CXI/bd7rkM vA8dvlqH/FSAF+B9fcp0hdhzNpDaz3EpIsT/Y/n3OqnS9fqeKquhiTLdJcKwudsL OrmQ2h9Ut8y+oadF09LWhufbDd8gYNuUODhIVfdVKghV5IfCUwFmNjJ7Bb+jcDNW 4lp0PTCnbU6V0uqUfYnPorCBAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUdvoRdolE 60WRNI+nOLudfVWpZFcwHwYDVR0jBBgwFoAUZDd+hxhm3TdOxZ4jg7oQ+mox//0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMTRELzkzNTJDRDVFOTM5 QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1RkT3haNGpnN29RLW1veF9f MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkRkLWh4aG0zVGRPeFo0amc3b1EtbW94X18wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE0RC85MzUyQ0Q1RTkzOUExMUYwOThCODJDMEVDNEY5QUUwMi8xOEY2MUMxODkz OUIxMUYwODIwQzBFMTNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQHqYAwDQYJKoZIhvcNAQELBQADggEBACrmSUpxcG0Y6zpH BFiAjHslw3rw+XM5O9ZRAoWLzLrRZsAx4OQBo46j1dCvCAsKWvCxi8rnqNawqjUG TM5PzgjCMA617nRkdKhrQecKE7Lf3uvo8PurMsGhh57fJ2C5oGPDFvJyc2Qih7bs uM4ATe70s2s9xzlETQk5W6X5zBebWgRmr53UrD0K8OSQDDyvd/hoiy7p8KQqFdYp JeLhWY75vb8ImWfXrckF9xpXURonGaNAt6AJD4VbN0gYA97DL9JaocrqCh0wiqt/ SH8AMLaOR1pnL+UW18LmA4kNNSMYoEYDw45IdNFnyJGEwDx+wNknWpLgI1f0CZYZ UiGdBhY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:13:58 2025 by rpki-client