$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/08A0FFEA511A11F0BDB3AF65C4F9AE02.roa File: 08A0FFEA511A11F0BDB3AF65C4F9AE02.roa (raw, json) Hash identifier: 5zeDRYT+veCZo1QxNJOyqL/lEy08PtB3k3JE9hg5cHY= Subject key identifier: 8C:63:2F:9B:7D:D7:A1:08:80:D9:30:F3:03:A5:6D:BE:14:48:6A:2C Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Certificate serial: 0C96 Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/08A0FFEA511A11F0BDB3AF65C4F9AE02.roa Signing time: Tue 24 Jun 2025 16:41:10 +0000 ROA not before: Tue 24 Jun 2025 16:41:10 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137703 IP address blocks: 2404:76c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3222 (0xc96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Validity Not Before: Jun 24 16:41:10 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=685ad526-9815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9b:2f:d7:7c:48:3d:98:34:f6:63:66:29:ff: 2f:ed:04:8f:13:70:28:90:8e:b0:26:35:f5:0b:76: 03:11:68:67:5d:9f:e4:f1:dc:eb:c9:a5:c7:5f:8f: 37:c7:ba:4d:7f:9f:5a:85:9e:ce:d5:f3:7b:c1:ed: 22:b5:01:76:55:b4:82:f6:f0:17:ed:31:a8:72:03: 0d:96:4c:cd:9c:a6:b9:08:97:5a:a5:51:69:aa:76: ec:93:f4:92:25:79:35:7a:6c:ca:5a:b9:a2:e7:ee: ce:ef:15:e0:84:53:09:c4:56:d7:ee:65:56:05:bb: 7f:8a:b6:e0:73:f0:1e:c4:be:1d:c3:9a:34:07:55: 4e:2a:24:f0:11:e8:7f:a3:cf:0f:9c:2a:2a:fe:4f: 07:af:23:22:74:33:2b:4a:a8:c6:52:aa:99:8f:e3: 6f:90:3e:79:c5:64:cc:98:54:34:45:a8:16:f8:70: 0c:6e:51:bd:0a:d6:37:92:2c:b0:b7:07:c0:26:03: 3c:ae:eb:2b:a1:58:71:88:c5:cf:b9:21:b5:9d:bb: cf:65:cd:21:f5:63:ea:97:43:d6:62:b1:88:ab:83: e9:6f:17:77:16:77:21:e4:94:bd:d1:b3:fa:c2:f8: 1d:2d:f6:7e:f3:ce:c5:72:ea:27:b8:81:b3:29:21: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:63:2F:9B:7D:D7:A1:08:80:D9:30:F3:03:A5:6D:BE:14:48:6A:2C X509v3 Authority Key Identifier: keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/08A0FFEA511A11F0BDB3AF65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:76c0::/48 Signature Algorithm: sha256WithRSAEncryption 64:fe:07:d9:1a:9f:bc:95:e0:32:d9:78:6f:15:18:e4:ba:7a: 10:aa:58:fa:61:91:e9:29:b7:ca:fd:c7:18:1d:99:01:0c:8b: 7c:56:47:98:ef:c7:08:29:32:45:93:4e:16:15:33:5f:c7:54: db:32:ac:65:a4:f7:ca:71:b0:ec:d2:c6:96:3e:91:81:7d:51: 61:c9:ce:e2:2a:b6:ca:b0:e1:5e:0d:ca:a3:85:ad:3d:b6:06: 71:2e:01:c0:c3:21:c2:98:cb:24:40:73:33:ca:4a:c0:a5:82: b0:ad:80:ee:c8:6e:1d:51:4c:0c:61:7b:fe:30:90:88:7f:b5: 33:e1:d4:a0:54:7a:23:11:8c:f0:ed:e3:6d:cb:2e:e3:9e:f7: cd:81:7c:d3:7d:84:42:d0:9f:7e:5a:ad:b3:c8:b5:b5:20:dc: c1:47:6d:03:d3:e5:f7:95:c9:96:f0:05:46:37:31:6d:99:b7: 41:b9:8d:c7:da:a0:cd:a8:ee:eb:c9:56:27:39:5f:4e:db:ca: 13:74:24:d7:31:8f:98:f5:97:16:c7:03:1b:79:82:e4:e3:c6: 62:47:c2:67:ae:08:bc:a2:6c:9c:e1:5d:20:a1:0d:67:10:e4: ed:1c:e6:d4:87:dc:1b:3f:fe:12:d4:72:eb:4f:02:c9:7a:e5: 9d:17:a1:44 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzRUUxMTAvBgNVBAUTKEZDNTZFN0UwNzZGN0ZEMEE4NEJFQ0M5QzNFMjI5MTQy QTA5MDFGRUMwHhcNMjUwNjI0MTY0MTEwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVhZDUyNi05ODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25sv13xIPZg09mNmKf8v7QSPE3AokI6wJjX1C3YDEWhnXZ/k8dzryaXHX483 x7pNf59ahZ7O1fN7we0itQF2VbSC9vAX7TGocgMNlkzNnKa5CJdapVFpqnbsk/SS JXk1emzKWrmi5+7O7xXghFMJxFbX7mVWBbt/irbgc/AexL4dw5o0B1VOKiTwEeh/ o88PnCoq/k8HryMidDMrSqjGUqqZj+NvkD55xWTMmFQ0RagW+HAMblG9CtY3kiyw twfAJgM8rusroVhxiMXPuSG1nbvPZc0h9WPql0PWYrGIq4Ppbxd3Fnch5JS90bP6 wvgdLfZ+887FcuonuIGzKSEHjwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIxjL5t9 16EIgNkw8wOlbb4USGosMB8GA1UdIwQYMBaAFPxW5+B29/0KhL7MnD4ikUKgkB/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTNFRS82ODU4RjY4ODBF MDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19RcUV2c3ljUGlLUlFxQ1FI LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19GYm40SGIzX1FxRXZzeWNQaUtSUXFDUUgtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzRUUvNjg1OEY2ODgwRTAyMTFFQUE5QjFEQjY1QzRGOUFFMDIvMDhBMEZGRUE1 MTFBMTFGMEJEQjNBRjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBHbAAAAwDQYJKoZIhvcNAQELBQADggEBAGT+B9kan7yV 4DLZeG8VGOS6ehCqWPphkekpt8r9xxgdmQEMi3xWR5jvxwgpMkWTThYVM1/HVNsy rGWk98pxsOzSxpY+kYF9UWHJzuIqtsqw4V4NyqOFrT22BnEuAcDDIcKYyyRAczPK SsClgrCtgO7Ibh1RTAxhe/4wkIh/tTPh1KBUeiMRjPDt423LLuOe982BfNN9hELQ n35arbPItbUg3MFHbQPT5feVyZbwBUY3MW2Zt0G5jcfaoM2o7uvJVic5X07byhN0 JNcxj5j1lxbHAxt5guTjxmJHwmeuCLyibJzhXSChDWcQ5O0c5tSH3Bs//hLUcutP Asl65Z0XoUQ= -----END CERTIFICATE-----Generated at Thu Jul 3 13:37:47 2025 by rpki-client