$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/B969078EB94B11EB8CFABC23C4F9AE02.roa File: B969078EB94B11EB8CFABC23C4F9AE02.roa (raw, json) Hash identifier: wbAxf5dVXXEiIwKKpLqE+cuBbqEoiTYyCWdfX3OjWk8= Subject key identifier: 25:74:06:BA:D6:66:03:B8:08:1F:8C:C3:90:E0:5B:A9:E9:8B:E6:B5 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 1166 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/B969078EB94B11EB8CFABC23C4F9AE02.roa Signing time: Wed 20 Aug 2025 17:57:27 +0000 ROA not before: Wed 20 Aug 2025 17:57:27 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142282 IP address blocks: 2404:f4c0:fa80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4454 (0x1166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 20 17:57:27 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a60c87-4965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:11:20:b5:fc:43:ac:d9:0e:b7:c1:d7:ac: 10:15:32:56:b9:ad:34:46:bf:1b:e5:d3:ed:d5:5a: 4f:84:26:52:22:20:04:45:6f:20:8d:8b:c6:47:11: ac:ca:2d:a6:0b:e7:9d:d3:58:8f:59:b1:c7:d9:67: 68:94:b3:31:78:32:8d:30:fd:95:fa:e0:f1:1c:83: 57:4c:00:eb:e6:de:aa:12:ca:fd:e1:4a:20:e1:48: c3:ab:f1:eb:ec:53:29:94:5b:f3:c9:ac:89:7a:34: 8c:5c:94:88:fe:d0:a1:9c:e3:5e:8d:27:cc:3f:ce: be:41:22:c2:5d:c9:a1:77:4c:32:1f:2d:07:0c:e8: 4c:3f:b5:9b:3f:c7:12:a9:99:2e:56:44:94:13:77: 78:d0:f0:b7:37:4f:67:02:95:8d:03:29:50:23:ef: ed:c9:5f:d7:32:6e:93:37:c4:40:94:a1:a2:f4:a1: 11:73:0f:5d:37:c3:53:57:20:be:65:ad:a4:b9:48: a0:30:4a:0c:04:c9:04:9e:b7:aa:1b:5c:64:28:24: a2:f5:0e:c1:21:19:4f:44:01:3e:a9:35:e4:c3:d4: 0b:9c:7a:fa:64:ff:ac:9a:34:25:dc:c7:64:27:03: ce:2f:32:5e:4f:95:9b:23:5f:e2:01:6e:88:12:77: ac:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:74:06:BA:D6:66:03:B8:08:1F:8C:C3:90:E0:5B:A9:E9:8B:E6:B5 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/B969078EB94B11EB8CFABC23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f4c0:fa80::/44 Signature Algorithm: sha256WithRSAEncryption 57:09:f4:ed:6c:28:4d:26:43:bc:22:3a:19:87:d5:d1:53:bd: dc:5b:2d:68:75:38:b7:13:60:5f:ec:38:e5:ec:e4:d9:62:e2: 80:68:37:38:54:f2:9e:e2:9c:a3:00:00:0e:c8:08:ac:bf:d2: e7:1c:ce:0f:a1:27:2a:2a:95:e0:a4:c9:9f:2b:7a:2f:36:ce: 35:cd:39:3e:45:17:28:ea:50:2d:a9:a5:7c:c8:18:83:0e:2d: 90:ef:05:27:b5:e4:33:ff:04:e2:31:16:7c:0e:27:ad:45:10: 55:42:ca:c0:1d:e5:bc:57:9e:8e:47:9e:1e:de:54:90:cd:e8: 3b:6d:00:5e:b7:a2:ac:41:88:1a:af:94:de:4b:9e:15:d5:53: be:4d:ee:74:df:8b:b4:93:c3:25:95:42:13:59:87:42:83:74: 67:50:01:5c:19:ea:18:01:29:71:a7:9f:a4:03:52:de:98:d9: 17:1f:c5:66:23:71:87:30:d5:e2:8a:85:e5:22:43:57:7b:cc: f9:73:aa:c4:7a:c7:72:61:71:12:27:97:ee:14:48:b2:d3:12: 8d:55:05:62:36:b7:91:18:5b:c7:3c:b7:0c:c3:12:64:b8:39: 03:8f:5e:fa:b5:4b:c4:8b:52:0b:7e:b2:f3:a5:50:80:49:be: e6:df:b9:fc -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICEWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjUwODIwMTc1NzI3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2MGM4Ny00OTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6ERILX8Q6zZDrfB16wQFTJWua00Rr8b5dPt1VpPhCZSIiAERW8gjYvGRxGs yi2mC+ed01iPWbHH2WdolLMxeDKNMP2V+uDxHINXTADr5t6qEsr94Uog4UjDq/Hr 7FMplFvzyayJejSMXJSI/tChnONejSfMP86+QSLCXcmhd0wyHy0HDOhMP7WbP8cS qZkuVkSUE3d40PC3N09nApWNAylQI+/tyV/XMm6TN8RAlKGi9KERcw9dN8NTVyC+ Za2kuUigMEoMBMkEnreqG1xkKCSi9Q7BIRlPRAE+qTXkw9QLnHr6ZP+smjQl3Mdk JwPOLzJeT5WbI1/iAW6IEnesLQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCV0BrrW ZgO4CB+Mw5DgW6npi+a1MB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvQjk2OTA3OEVC OTRCMTFFQjhDRkFCQzIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBPTA+oAwDQYJKoZIhvcNAQELBQADggEBAFcJ9O1sKE0m Q7wiOhmH1dFTvdxbLWh1OLcTYF/sOOXs5Nli4oBoNzhU8p7inKMAAA7ICKy/0ucc zg+hJyoqleCkyZ8rei82zjXNOT5FFyjqUC2ppXzIGIMOLZDvBSe15DP/BOIxFnwO J61FEFVCysAd5bxXno5Hnh7eVJDN6DttAF63oqxBiBqvlN5LnhXVU75N7nTfi7ST wyWVQhNZh0KDdGdQAVwZ6hgBKXGnn6QDUt6Y2RcfxWYjcYcw1eKKheUiQ1d7zPlz qsR6x3JhcRInl+4USLLTEo1VBWI2t5EYW8c8twzDEmS4OQOPXvq1S8SLUgt+svOl UIBJvubfufw= -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:45 2025 by rpki-client