$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/F5BDCB88768A11F081B6114EC4F9AE02.roa File: F5BDCB88768A11F081B6114EC4F9AE02.roa (raw, json) Hash identifier: JZDrvt3y2uOvt6jcah8n1eAk+/ZZD32CSv6lmYScC9c= Subject key identifier: 97:E7:5F:2D:81:AE:2F:D2:D8:B4:4B:A2:84:01:2B:3E:46:FB:1B:D7 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 34D3 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/F5BDCB88768A11F081B6114EC4F9AE02.roa Signing time: Mon 11 Aug 2025 08:12:45 +0000 ROA not before: Mon 11 Aug 2025 08:12:45 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 395403 IP address blocks: 2402:cf80:1001::/48 maxlen: 48 2402:cf80:1002::/48 maxlen: 48 2402:cf80:6259::/48 maxlen: 48 2402:cf80:7ffe::/48 maxlen: 48 2402:cf80:7fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 11 08:12:45 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6899a5fd-7331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:14:3c:f0:e9:a4:3b:9c:d4:84:11:1b:82:ee: 44:28:fd:d2:b2:83:25:8f:32:11:61:a8:75:bf:31: a0:b4:64:8d:39:99:67:94:c5:06:2f:17:d3:a2:26: 17:fb:69:b7:35:e1:e9:03:33:f8:42:c4:a2:a9:13: cb:8d:61:2d:e4:53:a5:27:ad:3a:96:bd:59:77:b1: 51:bf:f2:06:49:e2:f2:0e:85:54:6d:1d:2c:24:92: a7:ff:88:9f:91:e9:c6:98:be:c5:17:9d:b0:d7:89: e7:cf:78:0f:89:0f:99:ca:1e:f8:d8:8f:19:9c:32: ff:85:30:bc:84:ab:2a:c9:b8:e7:e6:2a:1f:79:e1: f6:7e:de:5c:c8:d9:41:4c:ac:9b:b8:f6:af:d2:5e: ec:a6:23:a8:60:50:79:02:5f:90:97:dc:1b:a8:d4: 37:11:9a:9a:f1:40:4c:d8:9c:e2:df:55:76:df:0b: cd:c7:e2:6d:7a:9a:c5:55:2f:cd:20:e2:59:eb:a9: 6e:10:90:ba:88:00:ff:2b:aa:31:5f:2f:32:6a:30: 50:40:94:79:87:e4:23:a9:ff:58:8e:31:78:c3:ab: 1f:eb:1c:86:e9:8f:9f:ee:39:8c:e4:d6:4a:90:f5: 32:e9:46:87:9f:ac:2a:f6:8e:62:16:9c:bb:af:3e: f0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E7:5F:2D:81:AE:2F:D2:D8:B4:4B:A2:84:01:2B:3E:46:FB:1B:D7 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/F5BDCB88768A11F081B6114EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:cf80:1001::-2402:cf80:1002:ffff:ffff:ffff:ffff:ffff 2402:cf80:6259::/48 2402:cf80:7ffe::/47 Signature Algorithm: sha256WithRSAEncryption 94:92:95:49:ac:fb:0f:3d:57:33:85:85:1b:c8:16:e3:5b:13: 64:f3:f3:1f:38:60:84:29:e1:a2:7f:90:61:a9:49:83:bf:12: 7b:df:f2:e4:d5:56:5b:7f:5d:e2:cc:67:ce:fb:96:08:35:83: c0:44:59:8d:45:0e:88:da:2b:2b:bc:d6:e5:f2:d5:0c:9e:c7: 6b:b4:70:37:9f:75:31:6f:f5:d9:b3:da:11:e6:62:2e:0e:79: 9d:12:76:14:25:ee:10:ce:2c:45:d1:51:c1:50:64:82:92:89: 3c:f1:50:8d:0e:de:e9:9d:73:97:53:33:a4:e2:66:9d:6f:3a: ff:88:b4:8d:a2:0e:df:d1:a4:d1:2e:89:77:a2:44:ce:1f:a0: 52:ca:7b:32:f4:14:0d:3c:d6:80:ee:f7:58:b2:de:63:64:54: a4:6e:7a:ee:6f:dc:84:f9:44:78:b5:9c:ba:d3:63:02:59:b5: 03:bb:99:c5:db:89:4a:61:21:ae:b6:21:6b:36:af:e1:37:62: cd:aa:1f:16:45:9b:a5:af:d7:6c:a7:ad:43:41:37:18:37:c0: 25:b8:03:38:b5:5e:ae:a9:e6:19:a0:51:4f:b5:c6:4f:12:b5: 2c:29:75:17:52:52:5d:9a:27:d8:3b:32:2e:a9:6e:08:b4:c1: 94:fe:c7:ff -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUwODExMDgxMjQ1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk5YTVmZC03MzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmhQ88OmkO5zUhBEbgu5EKP3SsoMljzIRYah1vzGgtGSNOZlnlMUGLxfToiYX +2m3NeHpAzP4QsSiqRPLjWEt5FOlJ606lr1Zd7FRv/IGSeLyDoVUbR0sJJKn/4if kenGmL7FF52w14nnz3gPiQ+Zyh742I8ZnDL/hTC8hKsqybjn5iofeeH2ft5cyNlB TKybuPav0l7spiOoYFB5Al+Ql9wbqNQ3EZqa8UBM2Jzi31V23wvNx+JteprFVS/N IOJZ66luEJC6iAD/K6oxXy8yajBQQJR5h+Qjqf9YjjF4w6sf6xyG6Y+f7jmM5NZK kPUy6UaHn6wq9o5iFpy7rz7wowIDAQABo4ICtTCCArEwHQYDVR0OBBYEFJfnXy2B ri/S2LRLooQBKz5G+xvXMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzNTAvMzkxM0JDQTAxRDg3MTFFMkI0MkIwMkRGMDhCMDJDRDIvRjVCRENCODg3 NjhBMTFGMDgxQjYxMTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgACMCYwEgMHACQCz4AQAQMHACQCz4AQAgMHACQCz4BiWQMHASQCz4B/ /jANBgkqhkiG9w0BAQsFAAOCAQEAlJKVSaz7Dz1XM4WFG8gW41sTZPPzHzhghCnh on+QYalJg78Se9/y5NVWW39d4sxnzvuWCDWDwERZjUUOiNorK7zW5fLVDJ7Ha7Rw N591MW/12bPaEeZiLg55nRJ2FCXuEM4sRdFRwVBkgpKJPPFQjQ7e6Z1zl1MzpOJm nW86/4i0jaIO39Gk0S6Jd6JEzh+gUsp7MvQUDTzWgO73WLLeY2RUpG567m/chPlE eLWcutNjAlm1A7uZxduJSmEhrrYhazav4TdizaofFkWbpa/XbKetQ0E3GDfAJbgD OLVerqnmGaBRT7XGTxK1LCl1F1JSXZon2DsyLqluCLTBlP7H/w== -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:17 2025 by rpki-client