$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EF41F8CA5BA11F097F7337CC4F9AE02.roa File: 9EF41F8CA5BA11F097F7337CC4F9AE02.roa (raw, json) Hash identifier: Uy0ggtpV64N+XOgRoNaU5f6X30ZmqShXlEiQIDmncCw= Subject key identifier: 27:98:E9:9B:4E:B9:A0:96:75:CE:95:8E:28:D4:82:8E:C1:1F:3F:7D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4ED2 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EF41F8CA5BA11F097F7337CC4F9AE02.roa Signing time: Fri 10 Oct 2025 09:22:20 +0000 ROA not before: Fri 10 Oct 2025 09:22:20 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152986 IP address blocks: 2001:df4:3740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20178 (0x4ed2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 10 09:22:20 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68e8d04c-a80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dc:09:45:2b:ec:b7:c7:1c:1f:9d:e8:19:46: 94:a6:08:73:3f:b7:aa:f4:dc:8b:ea:ce:9b:24:62: 58:67:05:0a:43:e1:5f:ea:67:a5:22:76:63:08:f0: ad:b3:45:a2:f1:24:cd:57:4c:bd:b4:c3:b1:16:0e: 4f:d2:ef:3f:2a:b1:f9:c9:5f:96:72:32:6d:63:67: c3:df:93:c9:e1:ab:d0:8f:95:72:35:cc:38:0c:d3: 0c:c6:ee:8e:c4:67:36:4c:a1:a9:90:b3:91:06:d1: 96:7f:8a:e0:b2:68:a4:c0:c4:01:74:a7:8b:e2:2e: a4:4a:83:61:7c:cd:ca:ba:1a:3e:1e:3b:24:75:22: 91:df:f2:d3:8f:05:87:ae:00:06:61:f0:60:af:5f: b0:46:59:c4:a8:ef:a4:28:54:83:c7:e7:11:cd:93: 1f:21:ba:9d:d4:3b:b0:2e:63:23:a5:7c:de:3b:ae: 21:7c:58:64:53:53:44:dd:29:91:34:06:ac:1a:16: b8:86:da:96:10:3d:27:33:bc:0c:ba:32:6d:6a:68: 5a:6e:8e:9a:8c:37:c7:91:bb:98:a0:c2:9b:d3:39: 9e:18:7f:7e:33:9d:f0:6e:99:2d:ac:85:67:1c:c5: 0a:e6:6d:56:c9:c8:f8:d9:ca:b5:ca:97:79:7b:43: 8d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:98:E9:9B:4E:B9:A0:96:75:CE:95:8E:28:D4:82:8E:C1:1F:3F:7D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EF41F8CA5BA11F097F7337CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:3740::/48 Signature Algorithm: sha256WithRSAEncryption 00:99:96:5c:77:0b:c4:6a:34:74:8a:4c:b1:42:8b:1b:75:b3: e1:b2:79:81:36:4a:ae:2d:e4:34:80:2e:68:34:8b:90:0e:09: d5:95:e0:50:ea:e1:c8:62:34:4a:89:cb:bc:06:30:bd:42:d4: 93:56:4f:7a:89:da:b9:e6:b9:65:20:48:f9:e1:71:43:8d:fd: e7:9e:9b:bf:02:55:2d:6c:9c:fe:a6:ea:e0:71:3f:5a:05:e6: 49:d7:ed:79:f8:dd:af:6f:19:fe:4f:06:e2:8d:a3:c6:7b:52: 01:04:57:2f:18:20:bc:fe:bd:17:69:0a:c4:8d:5a:a8:f5:6b: 71:30:9f:17:f4:e9:57:50:81:6e:61:73:45:00:f8:3c:c2:97: 31:76:89:23:3e:c8:1d:d8:8f:e9:1b:c7:18:cb:ce:c2:b7:b5: 48:f8:d0:b1:17:86:f4:66:ec:ec:36:c7:24:de:f9:ab:d7:78: c2:08:81:72:25:0c:71:34:f0:57:52:9c:26:48:ee:79:f3:1b: 3e:f3:53:b1:92:b3:82:08:cf:1b:55:10:5e:31:39:ac:ce:73: b6:78:44:aa:44:5e:2f:a4:8b:02:ae:67:48:0e:f0:f0:96:0f: 98:d3:ff:b7:05:ba:ed:e8:09:d1:0e:34:cd:22:2b:0a:4d:e8: ad:0d:ea:cc -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICTtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUxMDEwMDkyMjIwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU4ZDA0Yy1hODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltwJRSvst8ccH53oGUaUpghzP7eq9NyL6s6bJGJYZwUKQ+Ff6melInZjCPCt s0Wi8STNV0y9tMOxFg5P0u8/KrH5yV+WcjJtY2fD35PJ4avQj5VyNcw4DNMMxu6O xGc2TKGpkLORBtGWf4rgsmikwMQBdKeL4i6kSoNhfM3Kuho+HjskdSKR3/LTjwWH rgAGYfBgr1+wRlnEqO+kKFSDx+cRzZMfIbqd1DuwLmMjpXzeO64hfFhkU1NE3SmR NAasGha4htqWED0nM7wMujJtamhabo6ajDfHkbuYoMKb0zmeGH9+M53wbpktrIVn HMUK5m1Wycj42cq1ypd5e0ONEQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCeY6ZtO uaCWdc6VjijUgo7BHz99MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOUVGNDFGOENB NUJBMTFGMDk3RjczMzdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30N0AwDQYJKoZIhvcNAQELBQADggEBAACZllx3C8Rq NHSKTLFCixt1s+GyeYE2Sq4t5DSALmg0i5AOCdWV4FDq4chiNEqJy7wGML1C1JNW T3qJ2rnmuWUgSPnhcUON/eeem78CVS1snP6m6uBxP1oF5knX7Xn43a9vGf5PBuKN o8Z7UgEEVy8YILz+vRdpCsSNWqj1a3Ewnxf06VdQgW5hc0UA+DzClzF2iSM+yB3Y j+kbxxjLzsK3tUj40LEXhvRm7Ow2xyTe+avXeMIIgXIlDHE08FdSnCZI7nnzGz7z U7GSs4IIzxtVEF4xOazOc7Z4RKpEXi+kiwKuZ0gO8PCWD5jT/7cFuu3oCdEONM0i KwpN6K0N6sw= -----END CERTIFICATE-----Generated at Mon Oct 20 14:23:44 2025 by rpki-client