$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/AD0C045C8C8511F0B59F1C60C4F9AE02.roa File: AD0C045C8C8511F0B59F1C60C4F9AE02.roa (raw, json) Hash identifier: ZZF37Hfq3LjjYT+YFdLOw5WGtyeL8yUS6RmDGMnnQ7o= Subject key identifier: 2C:4D:9E:17:5E:CF:C9:B1:B1:68:3F:D5:96:B7:39:92:BE:8C:3C:13 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 016E Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/AD0C045C8C8511F0B59F1C60C4F9AE02.roa Signing time: Mon 08 Sep 2025 07:30:21 +0000 ROA not before: Mon 08 Sep 2025 07:30:21 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152147 IP address blocks: 2001:df3:4240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Sep 8 07:30:21 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68be860d-3060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:df:14:cd:b8:b3:b9:38:7e:e1:1e:67:ac: e0:d7:bd:2a:00:28:d9:13:7a:00:c8:33:e8:1e:05: d9:d4:87:1f:c1:2e:0d:42:d1:e0:7f:2f:fd:37:d9: 4b:81:7b:f6:16:44:0a:30:2a:07:6e:dc:6d:6a:8d: cc:fc:67:8d:ae:3f:26:ca:21:d6:49:a1:79:b3:3f: d9:ec:a6:15:16:9f:2c:0d:9e:1c:8f:67:45:7a:4e: 3d:35:e6:59:a9:51:ef:ad:38:01:5b:04:32:f7:bc: 19:a8:f2:91:97:05:a9:6c:5b:be:96:fd:49:5b:7f: 84:8d:a1:37:4e:60:83:4b:89:bf:9f:91:bf:c4:9a: 9d:c8:50:05:d3:21:52:d5:8b:2e:3b:cf:1c:1a:33: 08:0c:c9:b8:7a:4d:2e:15:4a:5d:56:89:7a:37:fe: 1d:41:5a:2f:b5:d9:8d:7e:3f:37:c6:ef:b1:e5:2f: 25:8b:d9:13:7d:96:cf:4d:fe:4b:ef:b6:3d:e7:9c: a6:21:5b:ae:34:52:c9:9c:a9:b0:d1:54:99:79:57: 46:8a:f2:95:7b:64:01:3f:e2:80:43:1f:65:ea:37: 41:43:92:65:19:37:fb:a4:4b:9a:14:a6:e7:7e:7b: 2b:ab:49:bd:64:02:31:4c:b6:96:84:9f:69:4a:e6: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4D:9E:17:5E:CF:C9:B1:B1:68:3F:D5:96:B7:39:92:BE:8C:3C:13 X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/AD0C045C8C8511F0B59F1C60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:4240::/48 Signature Algorithm: sha256WithRSAEncryption e9:f5:fd:28:21:98:d0:5e:ad:30:98:59:49:05:90:32:09:94: 52:06:8d:2e:02:11:0b:ca:a2:1d:fd:63:f6:99:66:3e:43:a8: 51:7e:77:44:00:15:bd:78:e0:c2:46:5e:4e:41:30:aa:30:d9: 2b:06:f4:56:03:e3:e4:36:6f:6e:6e:79:56:51:bf:87:62:52: 9c:23:81:70:15:36:40:bc:63:9c:e1:d2:9c:16:4e:d3:2a:28: 15:11:85:33:05:7d:06:12:51:28:ff:74:fa:16:47:85:c5:0d: 06:1e:70:6a:7c:85:29:9b:fd:51:1d:0a:25:5c:ce:9e:84:17: c6:71:cc:eb:59:1f:19:dc:fa:3d:0a:24:32:c5:c4:93:bf:d2: f4:2d:6b:76:9b:02:43:9c:9a:b9:2b:09:ad:3c:56:ed:9a:bf: b0:a3:99:72:69:3a:33:1a:2f:ca:49:59:89:34:7b:1e:31:d0: 9f:5a:e8:64:bb:bd:38:22:82:d3:70:eb:8b:da:42:d3:81:bf: b2:b6:95:9f:81:aa:19:c6:6a:61:9c:ec:98:55:45:a8:7c:61: a1:c9:4e:7e:40:13:78:e5:42:e5:37:fb:79:f9:51:5c:4e:49: a5:37:41:d8:e2:17:5c:27:88:22:02:5e:08:19:25:90:7e:ed: 8b:21:e2:bb -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjUwOTA4MDczMDIxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJlODYwZC0zMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0vfFM24s7k4fuEeZ6zg170qACjZE3oAyDPoHgXZ1IcfwS4NQtHgfy/9N9lL gXv2FkQKMCoHbtxtao3M/GeNrj8myiHWSaF5sz/Z7KYVFp8sDZ4cj2dFek49NeZZ qVHvrTgBWwQy97wZqPKRlwWpbFu+lv1JW3+EjaE3TmCDS4m/n5G/xJqdyFAF0yFS 1YsuO88cGjMIDMm4ek0uFUpdVol6N/4dQVovtdmNfj83xu+x5S8li9kTfZbPTf5L 77Y955ymIVuuNFLJnKmw0VSZeVdGivKVe2QBP+KAQx9l6jdBQ5JlGTf7pEuaFKbn fnsrq0m9ZAIxTLaWhJ9pSuZzPQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCxNnhde z8mxsWg/1Za3OZK+jDwTMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzA5QzUvNzRCMTZDNzY5NTk5MTFFRUJBM0NCMjc1QzRGOUFFMDIvQUQwQzA0NUM4 Qzg1MTFGMEI1OUYxQzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zQkAwDQYJKoZIhvcNAQELBQADggEBAOn1/SghmNBe rTCYWUkFkDIJlFIGjS4CEQvKoh39Y/aZZj5DqFF+d0QAFb144MJGXk5BMKow2SsG 9FYD4+Q2b25ueVZRv4diUpwjgXAVNkC8Y5zh0pwWTtMqKBURhTMFfQYSUSj/dPoW R4XFDQYecGp8hSmb/VEdCiVczp6EF8ZxzOtZHxnc+j0KJDLFxJO/0vQta3abAkOc mrkrCa08Vu2av7CjmXJpOjMaL8pJWYk0ex4x0J9a6GS7vTgigtNw64vaQtOBv7K2 lZ+BqhnGamGc7JhVRah8YaHJTn5AE3jlQuU3+3n5UVxOSaU3QdjiF1wniCICXggZ JZB+7Ysh4rs= -----END CERTIFICATE-----Generated at Mon Oct 20 14:53:15 2025 by rpki-client