$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/87C9E3FE3F6D11F0951BB23CC4F9AE02.roa File: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (raw, json) Hash identifier: cZ6PZrYDDvwfg8CUMPN9ghZZSt3c2YnNiECXmtMGmPE= Subject key identifier: F5:B8:82:D8:08:F8:48:78:46:A9:1F:99:50:AF:0A:76:B4:08:94:2F Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Certificate serial: 10C0 Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/87C9E3FE3F6D11F0951BB23CC4F9AE02.roa Signing time: Mon 02 Jun 2025 04:53:31 +0000 ROA not before: Mon 02 Jun 2025 04:53:31 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 775 IP address blocks: 2001:fd8:29f8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4288 (0x10c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Validity Not Before: Jun 2 04:53:31 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=683d2e4b-9c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:24:b0:67:c2:20:28:07:71:bc:28:a4:18:bf: 70:b6:19:ba:a3:4e:49:67:00:7b:46:75:8c:9e:db: dd:ce:12:e1:89:0e:77:a6:3f:7f:53:89:32:f8:cd: 1d:8e:f0:f9:e6:f2:03:09:63:f4:a7:bb:c3:31:64: 79:e9:35:a5:82:65:1c:3f:0a:72:70:53:ba:19:a9: 5a:0d:03:cc:cf:1e:18:ce:18:32:1e:53:a2:7a:2f: 1a:11:b9:59:43:6d:ad:8d:fc:d2:e0:8c:9d:9c:37: b2:46:a0:bb:87:7c:b8:7e:1d:1b:e9:14:58:5f:5d: ca:01:84:59:5f:dd:69:5f:b5:9f:f7:f8:fd:62:23: 74:14:d7:33:60:f4:50:a4:36:e1:29:a2:fc:82:b6: d3:3c:23:dc:bb:b1:c3:10:39:e2:e9:5a:89:b1:b7: e9:fe:08:ec:bd:42:fc:85:46:54:03:ba:16:79:0a: f8:98:9e:6a:19:21:f9:ee:f2:75:34:a1:32:13:b2: ef:5a:e5:0c:db:9b:18:08:38:98:dd:8a:3d:c3:2d: 16:60:1e:b6:38:eb:a3:33:4f:1d:d8:5f:24:7b:9a: 31:f3:4b:cc:72:d7:76:01:77:0d:ac:6b:63:21:d4: ce:9e:70:42:5c:62:43:41:fe:9e:42:2a:1a:1e:dd: 8a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B8:82:D8:08:F8:48:78:46:A9:1F:99:50:AF:0A:76:B4:08:94:2F X509v3 Authority Key Identifier: keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/87C9E3FE3F6D11F0951BB23CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:fd8:29f8::/46 Signature Algorithm: sha256WithRSAEncryption 8d:c3:7c:f4:e6:3f:20:50:b4:bc:ce:bd:dd:c0:11:6b:87:fa: 62:17:0f:8a:c9:51:f0:69:90:6f:b9:71:66:b9:25:b8:f5:2f: db:b8:f2:ab:c4:66:3c:85:5f:69:28:e7:d0:f8:08:59:69:0c: db:c3:a5:76:4e:62:27:56:f7:36:5d:19:e5:9a:86:6e:a3:f2: b9:5d:44:a4:32:f8:12:7a:b3:36:c7:3d:11:9b:e4:ea:72:d2: 0e:a7:58:f7:3f:c2:83:2e:d6:f6:99:5f:6c:04:0f:c0:63:31: dd:d5:50:8d:1f:84:8f:17:73:84:7a:43:9b:a0:e8:8c:79:9f: 9c:e9:5f:18:89:53:52:35:7c:f3:3d:40:d1:88:00:1c:a1:d6: e1:d2:0a:6a:aa:24:9e:5e:7c:34:15:58:b5:f7:31:74:9a:46: 3b:d5:00:cd:22:4f:7e:d2:22:16:d5:9e:70:a7:22:ee:8d:d4: a1:fa:66:ff:d4:a3:5e:96:70:be:6e:4f:cc:0a:07:26:7b:b4: 31:49:bf:59:fb:71:c1:0a:b1:5d:02:07:af:f6:9c:46:c1:44: 6a:94:4a:35:2e:50:bc:cd:32:bd:be:72:68:a4:52:77:d4:3d: 29:8e:81:22:12:66:2c:01:c7:cf:ce:3a:91:04:82:59:c2:90: b7:3b:1d:6b -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICEMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0RDExMTAvBgNVBAUTKDE4RUY0MzI3OEQ0NjMzMUU5QUFGMEZENzcyQTczMjgw RDEzQUFBNTIwHhcNMjUwNjAyMDQ1MzMxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNkMmU0Yi05Yzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSSwZ8IgKAdxvCikGL9wthm6o05JZwB7RnWMntvdzhLhiQ53pj9/U4ky+M0d jvD55vIDCWP0p7vDMWR56TWlgmUcPwpycFO6GalaDQPMzx4YzhgyHlOiei8aEblZ Q22tjfzS4IydnDeyRqC7h3y4fh0b6RRYX13KAYRZX91pX7Wf9/j9YiN0FNczYPRQ pDbhKaL8grbTPCPcu7HDEDni6VqJsbfp/gjsvUL8hUZUA7oWeQr4mJ5qGSH57vJ1 NKEyE7LvWuUM25sYCDiY3Yo9wy0WYB62OOujM08d2F8ke5ox80vMctd2AXcNrGtj IdTOnnBCXGJDQf6eQioaHt2KbQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFPW4gtgI +Eh4RqkfmVCvCna0CJQvMB8GA1UdIwQYMBaAFBjvQyeNRjMemq8P13KnMoDROqpS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDREMS9FRjA5NThFRTQ0 NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014NmFyd19YY3FjeWdORTZx bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPOURKNDFHTXg2YXJ3X1hjcWN5Z05FNnFsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTA0RDEvRUYwOTU4RUU0NDVFMTFFOTkyOTI0RDg3QzRGOUFFMDIvODdDOUUzRkUz RjZEMTFGMDk1MUJCMjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwIgAQ/YKfgwDQYJKoZIhvcNAQELBQADggEBAI3DfPTmPyBQ tLzOvd3AEWuH+mIXD4rJUfBpkG+5cWa5Jbj1L9u48qvEZjyFX2ko59D4CFlpDNvD pXZOYidW9zZdGeWahm6j8rldRKQy+BJ6szbHPRGb5Opy0g6nWPc/woMu1vaZX2wE D8BjMd3VUI0fhI8Xc4R6Q5ug6Ix5n5zpXxiJU1I1fPM9QNGIAByh1uHSCmqqJJ5e fDQVWLX3MXSaRjvVAM0iT37SIhbVnnCnIu6N1KH6Zv/Uo16WcL5uT8wKByZ7tDFJ v1n7ccEKsV0CB6/2nEbBRGqUSjUuULzNMr2+cmikUnfUPSmOgSISZiwBx8/OOpEE glnCkLc7HWs= -----END CERTIFICATE-----Generated at Fri Jul 4 14:17:34 2025 by rpki-client