$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EB6C27AF0E011EF80FCA362C4F9AE02.roa File: 9EB6C27AF0E011EF80FCA362C4F9AE02.roa (raw, json) Hash identifier: QyKb9b/tFC479hu/p+oQFWkWugtyy0tMLt+qZIzwsio= Subject key identifier: 60:CD:A5:F3:54:ED:48:7E:31:E5:52:CB:66:FE:F3:C7:BD:B1:9B:03 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4DD8 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EB6C27AF0E011EF80FCA362C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:56:24 +0000 ROA not before: Thu 28 Aug 2025 14:56:24 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153429 IP address blocks: 2001:df4:a940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19928 (0x4dd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:56:24 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e18-5f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:6f:d5:97:29:3d:e3:e7:ae:60:77:78:d4: 2a:5a:cb:aa:96:88:20:88:3b:5e:cd:ef:0a:0d:fb: 22:42:d1:48:03:5b:27:ba:89:c5:4a:46:e7:9d:1e: 79:5a:0e:2a:66:72:31:27:46:3c:98:28:71:4c:82: 30:59:9e:e7:ec:2c:f2:64:af:99:e3:28:62:d6:1a: 84:29:0c:51:2c:4a:c4:5b:a2:d2:5b:0b:d4:5d:92: 85:e4:17:b1:bd:ad:dd:20:6f:99:4e:9b:88:2f:9a: 77:c2:ca:54:2a:86:45:2c:74:e8:c6:05:d4:6e:ec: bf:89:1e:0e:21:50:bb:c1:7d:13:76:cf:5c:22:cf: 6d:63:c9:3a:46:80:92:af:63:cb:b7:ad:e6:45:d0: 30:29:4d:a0:b2:e9:9b:54:4c:f5:af:bf:31:cb:d6: 3f:3a:bb:43:97:8e:e9:06:1e:ba:40:64:c7:9a:d7: d1:aa:27:96:ff:fb:1c:03:31:89:6f:a4:99:d4:ad: 76:71:2e:6f:50:04:45:91:2f:21:85:71:81:ca:03: 53:27:d9:34:55:a3:ac:7f:3d:90:6c:43:ae:6a:0b: 59:69:86:49:13:e3:c2:a8:cf:65:86:d1:10:97:2d: cf:98:d1:34:a1:ee:0a:d3:41:88:b9:49:87:e6:9e: 87:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CD:A5:F3:54:ED:48:7E:31:E5:52:CB:66:FE:F3:C7:BD:B1:9B:03 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EB6C27AF0E011EF80FCA362C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:a940::/48 Signature Algorithm: sha256WithRSAEncryption 34:76:77:44:15:be:60:7a:76:62:d1:ed:da:72:66:d7:65:b2: 78:f7:b7:f4:72:11:d6:7c:e1:03:f6:43:ae:33:60:30:d2:25: cf:75:1b:ee:8c:3e:18:99:94:eb:28:7d:b6:6a:81:ea:99:7d: 46:41:1f:07:93:05:ce:d6:30:b3:6d:1c:cd:fa:10:75:c2:d4: 89:a4:4c:43:d9:d5:8e:77:5c:a3:86:ca:73:1d:8c:1b:89:71: f2:19:e0:67:a7:e9:34:1f:77:47:87:91:a0:78:6c:7d:f6:a9: 72:f3:d3:ef:f6:26:6c:b5:4d:c0:63:6b:46:f0:8e:26:e5:b4: 77:a9:2c:82:b3:29:8f:27:d5:69:31:62:22:df:83:0d:e7:5e: 90:79:33:ca:9e:4c:6e:84:4a:49:9e:26:e6:06:ca:3a:4f:9d: 7e:fe:c5:d9:2a:c2:ef:d2:bd:4c:e4:58:7f:5d:30:dd:ed:91: c3:f6:15:10:1e:2e:aa:71:5a:70:a0:64:d3:bd:78:90:5a:e7: 0f:97:92:dc:57:01:74:0b:3a:15:4c:bc:fb:92:8c:f6:f8:22: ce:02:22:65:a0:9c:20:1f:53:f0:2e:cc:f7:58:01:22:cd:e4: db:95:91:75:ed:f4:f4:6f:b4:03:44:ab:57:2c:01:60:11:5c: 66:5e:d6:3d -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICTdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjI0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmUxOC01ZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEpv1ZcpPePnrmB3eNQqWsuqloggiDteze8KDfsiQtFIA1snuonFSkbnnR55 Wg4qZnIxJ0Y8mChxTIIwWZ7n7CzyZK+Z4yhi1hqEKQxRLErEW6LSWwvUXZKF5Bex va3dIG+ZTpuIL5p3wspUKoZFLHToxgXUbuy/iR4OIVC7wX0Tds9cIs9tY8k6RoCS r2PLt63mRdAwKU2gsumbVEz1r78xy9Y/OrtDl47pBh66QGTHmtfRqieW//scAzGJ b6SZ1K12cS5vUARFkS8hhXGBygNTJ9k0VaOsfz2QbEOuagtZaYZJE+PCqM9lhtEQ ly3PmNE0oe4K00GIuUmH5p6HXwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGDNpfNU 7Uh+MeVSy2b+88e9sZsDMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOUVCNkMyN0FG MEUwMTFFRjgwRkNBMzYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30qUAwDQYJKoZIhvcNAQELBQADggEBADR2d0QVvmB6 dmLR7dpyZtdlsnj3t/RyEdZ84QP2Q64zYDDSJc91G+6MPhiZlOsofbZqgeqZfUZB HweTBc7WMLNtHM36EHXC1ImkTEPZ1Y53XKOGynMdjBuJcfIZ4Gen6TQfd0eHkaB4 bH32qXLz0+/2Jmy1TcBja0bwjibltHepLIKzKY8n1WkxYiLfgw3nXpB5M8qeTG6E SkmeJuYGyjpPnX7+xdkqwu/SvUzkWH9dMN3tkcP2FRAeLqpxWnCgZNO9eJBa5w+X ktxXAXQLOhVMvPuSjPb4Is4CImWgnCAfU/AuzPdYASLN5NuVkXXt9PRvtANEq1cs AWARXGZe1j0= -----END CERTIFICATE-----Generated at Tue Oct 21 04:46:01 2025 by rpki-client