$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED91F9DA03DE11F0BF284950C4F9AE02.roa File: ED91F9DA03DE11F0BF284950C4F9AE02.roa (raw, json) Hash identifier: wJpbk0IUE3jWf7n3cWACRgoyiRJZJG0kbSlRiMYjNgY= Subject key identifier: A6:02:98:E0:9D:49:77:C1:B9:E7:10:32:40:21:88:BF:5C:15:44:42 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4DDD Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED91F9DA03DE11F0BF284950C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:56:28 +0000 ROA not before: Thu 28 Aug 2025 14:56:28 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153499 IP address blocks: 2001:df4:d5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19933 (0x4ddd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:56:28 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e1b-a78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:5a:03:92:dd:49:53:07:e6:50:4b:39:c6: 37:e7:39:46:38:3e:ef:ed:76:16:d5:f4:f1:4b:16: 6a:18:fe:40:e9:5a:5f:c5:ae:32:20:a5:f6:52:ee: eb:db:43:9f:7f:74:b0:35:08:6c:38:79:f2:45:6e: 6b:67:93:f1:5e:42:70:f4:65:5b:2a:94:bd:a8:74: 58:ed:b2:05:36:d1:58:d8:68:44:2e:94:8d:61:c0: 00:9e:b3:bd:8b:4c:0f:f1:c2:fb:ec:ad:49:85:d5: 7f:1d:1d:ed:49:78:04:54:db:a9:2f:d1:e6:c4:0e: 56:de:bc:f7:8a:b7:2f:50:e2:0e:b8:ba:1e:e6:73: 0a:f7:f2:00:f4:0f:f2:d3:b8:61:98:cc:47:51:1d: bf:37:f8:a4:d0:1d:77:5c:c0:db:92:40:93:ec:d6: b3:64:8f:97:17:bd:65:29:28:b9:06:b5:8d:8b:fd: 22:9f:9c:2c:b7:a6:54:84:25:cd:de:df:4e:4c:d7: 22:12:d0:0e:fb:39:25:db:e9:62:8c:be:27:4d:21: b5:cd:f2:cf:4c:1b:af:19:d3:a0:be:1f:18:38:84: 0f:6c:ca:b5:a9:39:0d:f9:8d:64:d7:63:f0:ec:1e: 7a:eb:d5:67:b2:56:1c:5e:a5:44:d7:9b:ee:b9:af: 8b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:02:98:E0:9D:49:77:C1:B9:E7:10:32:40:21:88:BF:5C:15:44:42 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED91F9DA03DE11F0BF284950C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:d5c0::/48 Signature Algorithm: sha256WithRSAEncryption a6:b1:42:3d:b1:51:96:a9:a2:6d:9c:a7:67:71:ea:46:a4:63: b0:42:a2:e0:55:d8:8f:ca:b3:5e:89:31:9f:66:d3:8f:ee:75: 16:c6:e4:d4:a9:50:d6:a2:7f:3b:dc:69:21:5c:2c:8c:2f:7e: a0:0c:07:22:dd:18:82:43:82:48:01:42:18:e9:b2:12:12:58: 31:25:41:56:81:53:66:c5:93:e3:d7:63:b0:c5:15:f8:ea:08: 5a:c7:5e:70:85:a4:55:15:dc:f2:db:2e:26:db:e4:fe:de:60: f1:70:fc:55:6e:07:64:ea:50:b4:fb:0e:71:42:0f:a3:10:6d: fd:c5:65:0a:52:c7:3e:58:cb:35:c4:22:41:a4:93:be:27:fe: da:c2:e2:9c:83:5d:ac:6c:29:36:d8:1d:00:14:6e:03:c6:91: c8:ce:4e:99:4a:82:9d:b6:8a:c0:c2:d2:8a:e3:ba:72:99:9d: 66:bb:90:3f:9e:d7:eb:d5:cc:bf:17:73:ce:63:60:60:3d:c9: 32:da:15:4a:96:e3:3b:99:09:e3:5c:b0:7c:23:52:70:b4:ed: 6e:33:56:10:16:00:0e:ae:67:ad:87:37:f0:fe:eb:ce:1f:52: 65:f0:60:3a:44:51:91:45:3b:47:24:cb:6c:57:bf:1d:f1:86: 4a:0f:56:e8 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICTd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjI4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmUxYi1hNzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV5aA5LdSVMH5lBLOcY35zlGOD7v7XYW1fTxSxZqGP5A6Vpfxa4yIKX2Uu7r 20Off3SwNQhsOHnyRW5rZ5PxXkJw9GVbKpS9qHRY7bIFNtFY2GhELpSNYcAAnrO9 i0wP8cL77K1JhdV/HR3tSXgEVNupL9HmxA5W3rz3ircvUOIOuLoe5nMK9/IA9A/y 07hhmMxHUR2/N/ik0B13XMDbkkCT7NazZI+XF71lKSi5BrWNi/0in5wst6ZUhCXN 3t9OTNciEtAO+zkl2+lijL4nTSG1zfLPTBuvGdOgvh8YOIQPbMq1qTkN+Y1k12Pw 7B5669VnslYcXqVE15vuua+LpwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKYCmOCd SXfBuecQMkAhiL9cFURCMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRUQ5MUY5REEw M0RFMTFGMEJGMjg0OTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ301cAwDQYJKoZIhvcNAQELBQADggEBAKaxQj2xUZap om2cp2dx6kakY7BCouBV2I/Ks16JMZ9m04/udRbG5NSpUNaifzvcaSFcLIwvfqAM ByLdGIJDgkgBQhjpshISWDElQVaBU2bFk+PXY7DFFfjqCFrHXnCFpFUV3PLbLibb 5P7eYPFw/FVuB2TqULT7DnFCD6MQbf3FZQpSxz5YyzXEIkGkk74n/trC4pyDXaxs KTbYHQAUbgPGkcjOTplKgp22isDC0orjunKZnWa7kD+e1+vVzL8Xc85jYGA9yTLa FUqW4zuZCeNcsHwjUnC07W4zVhAWAA6uZ62HN/D+684fUmXwYDpEUZFFO0cky2xX vx3xhkoPVug= -----END CERTIFICATE-----Generated at Mon Oct 20 14:20:54 2025 by rpki-client