$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BAC878D0799511F098E98265C4F9AE02.roa File: BAC878D0799511F098E98265C4F9AE02.roa (raw, json) Hash identifier: DOKXlcoim3mGT1/5T41gtrSkQeSIUWzOdLmQqGxlYWw= Subject key identifier: 10:56:D0:2B:73:3F:59:C9:30:CC:EA:BE:31:D6:16:84:77:68:0E:DA Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Certificate serial: 02 Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BAC878D0799511F098E98265C4F9AE02.roa Signing time: Fri 15 Aug 2025 05:07:24 +0000 ROA not before: Fri 15 Aug 2025 05:07:24 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 14618 IP address blocks: 2001:df5:fd40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Validity Not Before: Aug 15 05:07:24 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=689ec08c-2d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:a6:54:10:83:25:0d:a2:5d:2c:5d:48:b9: c4:a1:f8:ed:12:5e:bb:a1:0d:68:50:18:dd:2a:dc: c7:42:58:b8:8a:57:c0:7a:8d:74:9f:40:76:d3:6e: e6:54:d3:f1:2c:1f:bd:68:ac:ae:22:1e:a0:01:e3: ac:15:2f:96:fd:fa:b9:06:0d:1a:87:78:8e:39:55: 4d:20:e1:df:93:fd:d9:e5:21:d6:63:45:35:aa:37: 9d:fe:fe:9e:34:52:b8:e7:fb:b2:c9:b9:f6:d0:1e: 22:2c:e3:33:a4:ce:a1:d6:65:a7:06:77:82:fe:d0: 83:04:8c:3f:97:06:20:77:b1:ff:c7:ea:89:9b:b7: c4:8c:9d:65:a9:d5:93:86:e8:06:cf:8d:9a:98:b4: 7e:7f:38:c8:a2:29:ae:d9:63:cb:ac:11:e7:3b:ac: 57:96:a5:a7:34:48:6d:eb:c7:5b:58:d0:db:45:0c: 9b:25:35:e1:ef:03:a1:fc:a7:aa:c0:f0:f7:48:df: 4f:aa:4b:90:31:9c:86:da:50:e7:b9:00:8d:61:5f: 87:db:99:d2:16:a0:56:69:ed:7b:82:8e:07:b4:a8: d7:c2:0a:a2:25:36:b5:94:58:1f:31:22:98:c8:6b: 05:8b:52:16:28:80:7a:09:35:b3:cc:22:91:5a:6e: 15:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:56:D0:2B:73:3F:59:C9:30:CC:EA:BE:31:D6:16:84:77:68:0E:DA X509v3 Authority Key Identifier: keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BAC878D0799511F098E98265C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df5:fd40::/48 Signature Algorithm: sha256WithRSAEncryption 88:62:2f:05:b1:65:87:01:c8:63:e5:af:c6:ca:e5:20:3d:7f: 7d:f5:e1:34:b7:c5:5c:1a:79:93:8c:82:13:e5:d0:84:69:b6: c7:6e:67:7b:46:66:06:0c:00:c1:19:4e:6c:43:2d:47:31:e5: 59:94:1d:d2:83:ff:37:55:0a:1c:6d:74:ce:ce:59:d3:de:8a: 7c:ee:bc:a5:a8:00:4e:11:7c:15:e9:8b:69:41:ee:04:d6:51: 52:3c:fb:53:6f:b8:3d:7f:90:61:b9:55:0b:2a:fb:6f:e2:09: 7a:c0:17:85:5c:08:2a:8d:52:27:23:da:74:7b:20:86:7d:ec: dd:4b:5b:e6:a7:2f:34:a0:2b:e7:cb:11:a2:44:65:03:59:27: 66:04:a9:b5:f3:9b:6b:5f:a1:f9:5a:e8:cb:8e:03:0a:6b:21: 80:9a:04:3d:90:e8:30:e5:e4:8b:e3:93:a3:19:8f:3d:a8:43: 9f:8c:32:e4:64:4d:df:0c:b7:89:94:fc:f9:70:b8:97:04:c8: 17:fc:07:1c:5c:57:c6:f5:49:a6:5b:a8:1d:ee:8e:4f:42:c9: 5b:36:48:a3:a8:e3:1f:74:c3:71:4d:00:f2:8e:af:2e:b7:74: b6:fe:82:79:65:d7:86:c4:1f:5e:49:6d:2b:37:a9:a2:16:14: d0:47:3c:e9 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzY0RjExMC8GA1UEBRMoNzQ1M0Q4ODEzQkM4RUY3MjkwQjExMDIzMjM1ODg5NEM3 N0M0REIzNzAeFw0yNTA4MTUwNTA3MjRaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4OWVjMDhjLTJkMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi/aZUEIMlDaJdLF1IucSh+O0SXruhDWhQGN0q3MdCWLiKV8B6jXSfQHbTbuZU 0/EsH71orK4iHqAB46wVL5b9+rkGDRqHeI45VU0g4d+T/dnlIdZjRTWqN53+/p40 Urjn+7LJufbQHiIs4zOkzqHWZacGd4L+0IMEjD+XBiB3sf/H6ombt8SMnWWp1ZOG 6AbPjZqYtH5/OMiiKa7ZY8usEec7rFeWpac0SG3rx1tY0NtFDJslNeHvA6H8p6rA 8PdI30+qS5AxnIbaUOe5AI1hX4fbmdIWoFZp7XuCjge0qNfCCqIlNrWUWB8xIpjI awWLUhYogHoJNbPMIpFabhVTAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUEFbQK3M/ WckwzOq+MdYWhHdoDtowHwYDVR0jBBgwFoAUdFPYgTvI73KQsRAjI1iJTHfE2zcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDNjRGLzM2MENBMTdBNzk5 NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEZQWWdUdkk3M0tRc1JBakkxaUpUSGZFMnpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzY0Ri8zNjBDQTE3QTc5OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9CQUM4NzhEMDc5 OTUxMUYwOThFOTgyNjVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfX9QDANBgkqhkiG9w0BAQsFAAOCAQEAiGIvBbFlhwHI Y+WvxsrlID1/ffXhNLfFXBp5k4yCE+XQhGm2x25ne0ZmBgwAwRlObEMtRzHlWZQd 0oP/N1UKHG10zs5Z096KfO68pagAThF8FemLaUHuBNZRUjz7U2+4PX+QYblVCyr7 b+IJesAXhVwIKo1SJyPadHsghn3s3Utb5qcvNKAr58sRokRlA1knZgSptfOba1+h +Vroy44DCmshgJoEPZDoMOXki+OToxmPPahDn4wy5GRN3wy3iZT8+XC4lwTIF/wH HFxXxvVJpluoHe6OT0LJWzZIo6jjH3TDcU0A8o6vLrd0tv6CeWXXhsQfXkltKzep ohYU0Ec86Q== -----END CERTIFICATE-----Generated at Sat Aug 23 07:06:57 2025 by rpki-client