$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa File: 8862654086CF11EF901ED838C4F9AE02.roa (raw, json) Hash identifier: QJ73SV3HUxiMHD1BwLZHaARqW2cgpkHD/1ytDEtE9zg= Subject key identifier: 16:FC:51:DD:C4:FD:E1:42:08:3E:41:BF:5A:05:8D:94:2D:16:1E:2C Certificate issuer: /CN=A91106C7/serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7 Certificate serial: EC Authority key identifier: 78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa Signing time: Mon 15 Sep 2025 06:13:55 +0000 ROA not before: Mon 15 Sep 2025 06:13:55 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152928 IP address blocks: 2001:df3:f640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91106C7, serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7 Validity Not Before: Sep 15 06:13:55 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68c7aea3-c4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:6a:bb:49:eb:b5:d4:7f:21:fe:13:58:17: ae:e3:32:c1:89:57:2a:a3:07:21:06:be:a3:1c:e5: 7f:b9:5e:9b:db:42:19:89:42:a8:b3:92:f6:fc:d7: 37:50:ce:fa:7c:c8:73:3b:82:81:73:a3:2b:2b:bc: 3d:dd:eb:b8:f7:3e:f0:e8:ec:59:37:cc:2d:6b:6a: 6e:8a:aa:11:e9:b4:96:35:c9:11:b2:e3:a7:f2:23: 88:81:2e:ab:77:9b:b8:20:1f:4e:aa:1c:cd:e9:e9: f6:8e:df:1e:ea:67:7a:f3:22:05:ba:33:d0:23:8b: 59:50:88:b7:f6:be:39:b6:6f:00:21:3b:32:21:72: 95:ad:74:e5:85:a2:af:93:0d:dc:7a:c0:b5:3e:a8: cb:47:ff:b5:2d:25:d9:90:b2:71:67:15:6b:8b:85: 33:be:f8:06:7d:cc:e2:85:e9:b0:00:79:e1:43:a3: f3:a4:d5:f3:dc:0b:f7:3e:6b:43:e1:69:14:1a:87: a3:2c:fc:19:60:e6:e7:da:f1:8c:6c:e6:04:91:e0: 2f:a2:70:41:f4:67:ee:55:fd:9c:a1:86:1d:99:d3: fd:23:0d:20:e1:1b:a8:48:bc:2e:56:a5:e5:27:ab: b6:00:cd:8b:41:48:21:50:b9:38:fa:55:43:19:0d: 35:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FC:51:DD:C4:FD:E1:42:08:3E:41:BF:5A:05:8D:94:2D:16:1E:2C X509v3 Authority Key Identifier: keyid:78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:f640::/48 Signature Algorithm: sha256WithRSAEncryption 76:1c:cf:84:1f:0a:0b:ff:89:1f:76:49:c2:03:90:44:11:f0: 8a:cb:0c:15:95:05:f2:c4:7f:bf:84:d9:40:64:ce:7d:54:6c: 78:6b:5f:41:6f:d3:8b:45:fd:2b:3f:71:3e:b1:78:5b:2a:df: 56:e5:02:91:9d:43:19:d8:04:f2:37:3b:3e:11:9c:6b:c9:27: cb:eb:66:b3:56:b2:74:4a:14:1e:5c:3b:bc:d3:55:48:8a:c5: a0:89:ca:f2:30:91:81:c1:38:08:07:8f:d8:64:e1:e3:8d:3a: a1:bb:ba:04:29:a9:03:05:58:1f:70:9d:d8:62:74:34:f2:61: 45:49:9a:d8:9d:91:27:12:c7:cf:da:24:83:a6:02:88:65:74: b5:23:d3:df:58:30:0c:2b:29:b7:5d:17:80:15:f1:09:7b:02: ea:87:0e:b7:d1:42:43:ea:9b:e9:bd:b4:c6:62:b8:65:8e:c9: 7c:16:1e:3c:9f:d5:41:46:fd:52:1b:53:33:26:e2:86:af:2c: 34:b8:93:d6:2a:2f:d3:ed:42:68:69:7f:ac:1f:ce:32:ff:aa: bd:c6:51:14:a3:2f:72:dd:31:9f:53:50:d1:0a:5a:ca:cd:5a: 01:15:9a:f7:f1:67:be:59:eb:91:82:98:97:aa:8a:5e:dc:30: 9f:6f:85:97 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA2QzcxMTAvBgNVBAUTKDc4RkJGQ0Q4RDUzMkJGQkJBQjdENzlDNTFBNzczOEVB NDk0QzI2QjcwHhcNMjUwOTE1MDYxMzU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM3YWVhMy1jNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozxqu0nrtdR/If4TWBeu4zLBiVcqowchBr6jHOV/uV6b20IZiUKos5L2/Nc3 UM76fMhzO4KBc6MrK7w93eu49z7w6OxZN8wta2puiqoR6bSWNckRsuOn8iOIgS6r d5u4IB9OqhzN6en2jt8e6md68yIFujPQI4tZUIi39r45tm8AITsyIXKVrXTlhaKv kw3cesC1PqjLR/+1LSXZkLJxZxVri4UzvvgGfczihemwAHnhQ6PzpNXz3Av3PmtD 4WkUGoejLPwZYObn2vGMbOYEkeAvonBB9GfuVf2coYYdmdP9Iw0g4RuoSLwuVqXl J6u2AM2LQUghULk4+lVDGQ01GQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBb8Ud3E /eFCCD5Bv1oFjZQtFh4sMB8GA1UdIwQYMBaAFHj7/NjVMr+7q315xRp3OOpJTCa3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDZDNy83N0I2OTQzNDMy MEUxMUVGQjZFMERBNzZDNEY5QUUwMi9lUHY4Mk5VeXY3dXJmWG5GR25jNDZrbE1K cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VQdjgyTlV5djd1cmZYbkZHbmM0NmtsTUpyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTA2QzcvNzdCNjk0MzQzMjBFMTFFRkI2RTBEQTc2QzRGOUFFMDIvODg2MjY1NDA4 NkNGMTFFRjkwMUVEODM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3z9kAwDQYJKoZIhvcNAQELBQADggEBAHYcz4QfCgv/ iR92ScIDkEQR8IrLDBWVBfLEf7+E2UBkzn1UbHhrX0Fv04tF/Ss/cT6xeFsq31bl ApGdQxnYBPI3Oz4RnGvJJ8vrZrNWsnRKFB5cO7zTVUiKxaCJyvIwkYHBOAgHj9hk 4eONOqG7ugQpqQMFWB9wndhidDTyYUVJmtidkScSx8/aJIOmAohldLUj099YMAwr KbddF4AV8Ql7AuqHDrfRQkPqm+m9tMZiuGWOyXwWHjyf1UFG/VIbUzMm4oavLDS4 k9YqL9PtQmhpf6wfzjL/qr3GURSjL3LdMZ9TUNEKWsrNWgEVmvfxZ75Z65GCmJeq il7cMJ9vhZc= -----END CERTIFICATE-----Generated at Tue Oct 21 02:37:43 2025 by rpki-client