$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C4A85FD48FE811E98B967A66C4F9AE02.roa File: C4A85FD48FE811E98B967A66C4F9AE02.roa (raw, json) Hash identifier: r1Xk8MicSL+bI7AGfAkoa/toS5kHIpFMuCE8DDnU/Kg= Subject key identifier: A2:B3:8E:72:31:4A:C7:E2:EA:FE:82:FF:78:48:00:CB:5C:F1:D5:E0 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 116D Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C4A85FD48FE811E98B967A66C4F9AE02.roa Signing time: Wed 20 Aug 2025 17:57:34 +0000 ROA not before: Wed 20 Aug 2025 17:57:34 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 24239 IP address blocks: 2404:f4c0:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4461 (0x116d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 20 17:57:34 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a60c8e-f614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:ab:d1:14:e0:c2:2c:a9:e9:81:15:72:c2: f2:9b:bd:13:dc:3c:dd:24:45:01:5a:d0:4f:b1:0a: 56:64:0e:bd:58:20:ca:b7:b9:c3:40:c6:4a:8f:79: 73:0b:f1:45:40:b5:fe:53:8a:d4:6e:42:71:cf:df: 0a:fd:11:e1:0c:04:d3:b6:05:6b:b0:45:a4:02:08: cb:4f:f7:48:e5:6e:d0:77:08:04:f5:7f:31:3d:23: f8:6e:c7:5e:c3:5c:44:10:1e:7c:3c:d2:55:a2:da: 78:7c:82:d4:58:1b:d7:f9:39:c6:f2:be:3c:6b:98: c1:dd:e7:62:91:8d:e8:34:3e:2a:97:ab:5f:2c:42: 2f:7b:7d:88:e1:a2:9d:4e:d5:e9:cd:0a:a9:73:5e: 74:4b:2c:ad:7f:b2:7a:78:53:2c:77:03:c9:8a:0d: 48:e4:12:9a:e6:ba:75:d4:ea:24:e9:c3:6e:5f:f6: a7:60:71:6a:e6:5c:12:e4:1e:3a:e3:28:65:a4:91: 9c:b8:5c:cb:48:3f:48:46:15:72:a0:42:57:8c:6d: c2:22:6b:ea:30:b9:26:c7:0e:eb:95:b5:90:55:9b: cd:35:b9:b1:1e:bd:7f:6d:68:b6:05:6e:ef:46:ae: 2c:78:41:4d:c4:82:06:be:04:34:0f:a5:54:02:70: bf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B3:8E:72:31:4A:C7:E2:EA:FE:82:FF:78:48:00:CB:5C:F1:D5:E0 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C4A85FD48FE811E98B967A66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f4c0:f000::/44 Signature Algorithm: sha256WithRSAEncryption a0:97:1c:e1:b5:14:ee:18:89:ec:a2:b9:83:f5:bb:b0:a3:17: 5d:4d:14:c2:be:53:7e:b8:94:c5:95:1a:bb:fc:6e:b9:50:3a: 2b:4e:50:0b:6d:7d:24:e5:a6:b7:c9:28:47:d1:91:13:98:d9: f4:d4:3e:8c:99:7d:35:e2:7f:2e:d4:62:e3:91:2b:3f:a7:6e: 45:e7:76:65:1c:80:9a:e0:84:51:7b:bc:f6:66:60:7d:18:a5: c0:a7:cc:80:00:51:e8:4b:8c:b4:d1:93:be:56:9f:05:d6:51: 35:66:e6:ec:3e:1f:83:36:e3:fc:ee:50:98:9f:1d:23:1d:0a: b6:51:2b:d9:84:a8:52:73:78:be:d0:8f:0b:6e:98:11:4d:11: c9:76:18:2b:5f:9a:71:8f:32:e2:50:20:35:63:94:1d:e3:14: 77:f6:6e:c1:09:90:34:67:16:d0:49:90:1c:6f:25:7b:94:2a: 64:ca:b8:68:dc:23:04:4a:c2:4a:d6:01:e0:85:cc:a6:fd:f6: b6:38:44:bb:95:9c:f2:67:3b:e7:18:23:58:82:a7:13:9a:4d: 94:e8:dd:e6:72:0f:c0:76:c6:a0:ab:b4:ce:1e:b9:cc:07:6f: 55:2e:b2:6e:12:43:ff:01:5b:37:ed:8c:d9:21:05:9f:e6:88: c6:48:ab:49 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICEW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjUwODIwMTc1NzM0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2MGM4ZS1mNjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg+r0RTgwiyp6YEVcsLym70T3DzdJEUBWtBPsQpWZA69WCDKt7nDQMZKj3lz C/FFQLX+U4rUbkJxz98K/RHhDATTtgVrsEWkAgjLT/dI5W7QdwgE9X8xPSP4bsde w1xEEB58PNJVotp4fILUWBvX+TnG8r48a5jB3edikY3oND4ql6tfLEIve32I4aKd TtXpzQqpc150Syytf7J6eFMsdwPJig1I5BKa5rp11Ook6cNuX/anYHFq5lwS5B46 4yhlpJGcuFzLSD9IRhVyoEJXjG3CImvqMLkmxw7rlbWQVZvNNbmxHr1/bWi2BW7v Rq4seEFNxIIGvgQ0D6VUAnC/ewIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKKzjnIx Ssfi6v6C/3hIAMtc8dXgMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvQzRBODVGRDQ4 RkU4MTFFOThCOTY3QTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBPTA8AAwDQYJKoZIhvcNAQELBQADggEBAKCXHOG1FO4Y ieyiuYP1u7CjF11NFMK+U364lMWVGrv8brlQOitOUAttfSTlprfJKEfRkROY2fTU PoyZfTXify7UYuORKz+nbkXndmUcgJrghFF7vPZmYH0YpcCnzIAAUehLjLTRk75W nwXWUTVm5uw+H4M24/zuUJifHSMdCrZRK9mEqFJzeL7QjwtumBFNEcl2GCtfmnGP MuJQIDVjlB3jFHf2bsEJkDRnFtBJkBxvJXuUKmTKuGjcIwRKwkrWAeCFzKb99rY4 RLuVnPJnO+cYI1iCpxOaTZTo3eZyD8B2xqCrtM4eucwHb1Uusm4SQ/8BWzftjNkh BZ/miMZIq0k= -----END CERTIFICATE-----Generated at Sat Aug 23 14:28:34 2025 by rpki-client