$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8C0868D0C9DC11EE8B24C55EC4F9AE02.roa File: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (raw, json) Hash identifier: Mm2/BkteGaDDz+jKCOQ2/1mPEBu0lMlfQI/ZFwneEPA= Subject key identifier: 93:7D:47:25:68:F0:EA:78:5A:94:9E:DE:B5:7F:45:40:FA:84:97:67 Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Certificate serial: 0A68 Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8C0868D0C9DC11EE8B24C55EC4F9AE02.roa Signing time: Wed 26 Mar 2025 19:59:58 +0000 ROA not before: Wed 26 Mar 2025 19:59:58 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 3949 IP address blocks: 2001:218:2008::/48 maxlen: 48 2001:218:3001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Validity Not Before: Mar 26 19:59:58 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e45cbe-b04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:2a:9a:f6:ae:39:46:9f:bd:70:ef:40:a1: 4b:e0:25:38:29:d5:a2:cc:38:80:6f:e1:f6:21:31: d4:ef:6a:45:bd:f7:79:92:17:c8:af:8d:64:63:98: 9e:79:f4:ec:9c:46:c5:f6:30:97:4d:c0:2e:c9:47: 6f:ec:bc:f5:a9:98:3b:e8:c2:bb:65:5e:3e:75:a4: 2e:3f:23:30:29:07:07:5f:01:48:45:fe:53:bf:d6: 09:3d:d4:ae:41:22:26:41:5c:74:aa:70:2e:a5:0f: 59:a2:9f:ae:fb:42:d2:94:75:9c:34:58:1c:e6:b5: 63:70:48:05:70:d4:d6:39:64:85:93:72:24:71:42: a9:b8:60:6a:68:42:ab:5e:b9:9e:52:4a:ea:1d:d4: f1:3f:9f:e8:21:f9:86:f0:eb:72:3f:b7:87:87:c2: 04:5d:c5:af:36:de:5c:32:99:86:3c:c6:e9:25:79: 2b:26:7d:e4:26:00:8f:31:f6:81:18:5a:49:92:b1: 1a:89:6e:be:0e:14:78:63:ad:da:0b:cb:76:70:25: aa:96:51:f0:df:3f:9e:fa:7b:8c:1f:b0:22:00:be: c1:22:a3:77:46:14:1b:4c:92:9f:c6:49:9b:d1:b7: 4c:b8:9d:c6:95:4a:bc:70:15:fb:2a:66:d9:5a:eb: d0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7D:47:25:68:F0:EA:78:5A:94:9E:DE:B5:7F:45:40:FA:84:97:67 X509v3 Authority Key Identifier: keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8C0868D0C9DC11EE8B24C55EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:218:2008::/48 2001:218:3001::/48 Signature Algorithm: sha256WithRSAEncryption 97:e1:93:bd:f6:4e:63:84:cb:d4:9e:36:9a:1a:ab:3e:53:46: f3:4d:b2:10:31:4c:39:47:77:a8:39:a6:01:d8:69:11:9d:d8: f4:3a:99:9d:72:3a:8c:17:7f:b2:ac:fa:1a:16:5a:83:71:08: e9:62:40:01:b9:4e:45:ab:d8:61:fd:8d:a0:1f:0a:e7:1a:ac: 65:49:7c:98:86:dc:e2:b7:ba:65:4c:8a:66:5a:6b:97:29:b1: ad:0e:5a:bb:00:3e:4b:da:55:00:00:6d:97:cf:14:99:e3:84: b5:d7:a3:25:23:7f:4f:dc:a9:f4:3e:10:f4:14:f8:44:c4:e5: f7:3a:e4:3b:08:74:84:44:d8:60:9b:23:bf:4b:51:0e:be:85: 9e:25:1f:94:ce:8f:a6:a8:d8:eb:1d:1b:55:9f:3c:4b:6f:b4: 26:31:67:bd:9d:81:b7:14:be:84:d1:0c:c5:0a:87:d2:34:2a: b4:c3:1d:1d:55:00:f4:55:db:45:e2:16:74:84:9b:b5:c8:ae: 5f:ec:09:26:ea:18:59:a4:0c:20:f7:1f:2f:a2:65:27:09:69: 6a:e5:de:f9:f9:3c:f3:3c:0b:ac:4f:38:d9:1b:14:f4:0c:75: c0:63:80:a4:e2:c0:ee:ee:33:06:e2:a9:fb:bd:a4:8b:de:e9: 06:eb:54:11 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4 M0NCRTE4NjcwHhcNMjUwMzI2MTk1OTU4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0NWNiZS1iMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZcqmvauOUafvXDvQKFL4CU4KdWizDiAb+H2ITHU72pFvfd5khfIr41kY5ie efTsnEbF9jCXTcAuyUdv7Lz1qZg76MK7ZV4+daQuPyMwKQcHXwFIRf5Tv9YJPdSu QSImQVx0qnAupQ9Zop+u+0LSlHWcNFgc5rVjcEgFcNTWOWSFk3IkcUKpuGBqaEKr XrmeUkrqHdTxP5/oIfmG8OtyP7eHh8IEXcWvNt5cMpmGPMbpJXkrJn3kJgCPMfaB GFpJkrEaiW6+DhR4Y63aC8t2cCWqllHw3z+e+nuMH7AiAL7BIqN3RhQbTJKfxkmb 0bdMuJ3GlUq8cBX7KmbZWuvQ6wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJN9RyVo 8Op4WpSe3rV/RUD6hJdnMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4 RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI0OTMvNUZDQUI2NzI2OEYzMTFFQTgzMkREQjM3QzRGOUFFMDIvOEMwODY4RDBD OURDMTFFRThCMjRDNTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAgAQIYIAgDBwAgAQIYMAEwDQYJKoZIhvcNAQELBQADggEB AJfhk732TmOEy9SeNpoaqz5TRvNNshAxTDlHd6g5pgHYaRGd2PQ6mZ1yOowXf7Ks +hoWWoNxCOliQAG5TkWr2GH9jaAfCucarGVJfJiG3OK3umVMimZaa5cpsa0OWrsA PkvaVQAAbZfPFJnjhLXXoyUjf0/cqfQ+EPQU+ETE5fc65DsIdIRE2GCbI79LUQ6+ hZ4lH5TOj6ao2OsdG1WfPEtvtCYxZ72dgbcUvoTRDMUKh9I0KrTDHR1VAPRV20Xi FnSEm7XIrl/sCSbqGFmkDCD3Hy+iZScJaWrl3vn5PPM8C6xPONkbFPQMdcBjgKTi wO7uMwbiqfu9pIve6QbrVBE= -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:39 2025 by rpki-client