$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/BF71D9D0F26811EFBC446868C4F9AE02.roa File: BF71D9D0F26811EFBC446868C4F9AE02.roa (raw, json) Hash identifier: 2f3u95lJSNskCNREu+ioXj6oMF+zHFPqIr2DagPPIWc= Subject key identifier: 42:50:DA:2D:50:1D:87:A2:8D:92:ED:CE:15:9D:6A:59:37:40:26:4D Certificate issuer: /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1 Certificate serial: B9 Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/BF71D9D0F26811EFBC446868C4F9AE02.roa Signing time: Fri 03 Oct 2025 06:33:30 +0000 ROA not before: Fri 03 Oct 2025 06:33:30 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153363 IP address blocks: 2001:df4:68c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1 Validity Not Before: Oct 3 06:33:30 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68df6e3a-45bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:92:e6:23:8f:36:60:2b:9b:ba:24:a7:af: d0:96:f2:9c:80:45:c5:9f:b5:b5:b4:eb:f9:4b:3a: 09:ac:ea:ad:70:20:9a:11:3c:b4:1f:17:cb:40:4c: 8b:53:49:ed:54:41:75:74:45:77:fc:74:fb:f7:71: 91:2d:bb:f6:e8:73:35:0f:1d:d9:d9:f7:a1:1c:ea: 60:0a:84:97:65:fa:44:2a:2d:2b:35:4c:22:ed:6c: 54:3c:68:74:d0:47:26:41:72:7c:7d:8f:66:a6:90: 99:9a:9d:4b:2c:6e:0e:b8:47:c8:4d:59:be:fc:2c: 45:28:59:6e:9f:5a:58:fc:c2:d9:90:b6:f0:ba:21: e4:b1:9d:9d:e4:27:50:ab:37:38:22:5c:3a:a1:16: 81:49:25:bd:d1:8c:53:2d:4b:4e:58:10:14:c2:ed: ab:39:a7:38:84:88:e9:37:27:dd:82:f6:ed:1e:43: c8:1c:05:99:0d:eb:8b:c0:95:d7:6d:12:25:48:ba: 4b:e9:c1:0f:53:2e:08:e7:15:bb:6e:02:07:de:92: 96:cb:50:29:c3:9c:63:b0:66:ee:30:48:f5:6e:eb: 7e:8d:bc:df:b6:a8:e5:25:9d:c8:f0:b0:41:de:2f: 85:2d:fb:fb:41:4b:1b:d7:86:57:05:e4:bd:a8:30: c4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:50:DA:2D:50:1D:87:A2:8D:92:ED:CE:15:9D:6A:59:37:40:26:4D X509v3 Authority Key Identifier: keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/BF71D9D0F26811EFBC446868C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:68c0::/48 Signature Algorithm: sha256WithRSAEncryption be:be:88:b8:4f:31:e4:2c:57:c0:32:8a:f4:2d:3b:ec:a3:b5: 8c:db:14:f0:00:6d:74:0b:2e:ee:3b:85:25:ae:b3:4d:d0:0f: 49:88:1f:bf:6d:39:7b:b4:80:20:56:fa:d1:3f:c7:9b:d6:0f: 3f:3c:dc:f0:95:a5:5d:e3:20:82:55:a8:68:4d:c4:13:c1:18: e2:a1:dd:34:7e:5c:68:6a:6b:52:41:4e:5e:aa:2b:bf:79:42: fe:16:e5:7b:5a:76:04:8f:c7:ef:85:73:6d:aa:d1:26:06:7e: 96:04:43:93:bc:4f:aa:46:79:19:08:6f:ac:38:04:2a:10:93: 0c:3b:30:29:ff:0a:78:13:b6:20:18:00:4d:33:24:1a:9c:1a: fb:ab:e4:77:f5:9f:b1:0b:7e:53:47:2e:54:cf:72:b4:60:7c: 8b:5d:e4:6c:be:c6:84:a9:92:57:62:42:e7:3d:37:c0:c8:36: 66:74:ad:3e:75:e7:ca:c9:9d:cb:72:09:82:e7:bd:6c:48:df: e0:43:16:bf:cb:91:68:95:8f:a1:90:a2:4b:3a:87:ce:19:27: 3c:dd:fd:aa:07:b2:e4:46:45:de:61:2a:a9:cd:a5:6d:29:66: 5b:91:bb:d0:2c:39:07:94:35:af:39:03:ab:42:20:11:57:b9: 29:41:d9:de -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDZDMTk0Njk3ODE2RjlCMTMwQkE1M0NGNEJFRTY3NjAx NTk0RThDQjEwHhcNMjUxMDAzMDYzMzMwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRmNmUzYS00NWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW2S5iOPNmArm7okp6/QlvKcgEXFn7W1tOv5SzoJrOqtcCCaETy0HxfLQEyL U0ntVEF1dEV3/HT793GRLbv26HM1Dx3Z2fehHOpgCoSXZfpEKi0rNUwi7WxUPGh0 0EcmQXJ8fY9mppCZmp1LLG4OuEfITVm+/CxFKFlun1pY/MLZkLbwuiHksZ2d5CdQ qzc4Ilw6oRaBSSW90YxTLUtOWBAUwu2rOac4hIjpNyfdgvbtHkPIHAWZDeuLwJXX bRIlSLpL6cEPUy4I5xW7bgIH3pKWy1Apw5xjsGbuMEj1but+jbzftqjlJZ3I8LBB 3i+FLfv7QUsb14ZXBeS9qDDEBQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEJQ2i1Q HYeijZLtzhWdalk3QCZNMB8GA1UdIwQYMBaAFGwZRpeBb5sTC6U89L7mdgFZToyx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wOUMwRDM2NjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9iQmxHbDRGdm14TUxwVHowdnVaMkFWbE9q TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbEdsNEZ2bXhNTHBUejB2dVoyQVZsT2pMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0NBRjEvMDlDMEQzNjY4QUFEMTFFRkJFRjkxNjZBQzRGOUFFMDIvQkY3MUQ5RDBG MjY4MTFFRkJDNDQ2ODY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30aMAwDQYJKoZIhvcNAQELBQADggEBAL6+iLhPMeQs V8AyivQtO+yjtYzbFPAAbXQLLu47hSWus03QD0mIH79tOXu0gCBW+tE/x5vWDz88 3PCVpV3jIIJVqGhNxBPBGOKh3TR+XGhqa1JBTl6qK795Qv4W5XtadgSPx++Fc22q 0SYGfpYEQ5O8T6pGeRkIb6w4BCoQkww7MCn/CngTtiAYAE0zJBqcGvur5Hf1n7EL flNHLlTPcrRgfItd5Gy+xoSpkldiQuc9N8DINmZ0rT5158rJnctyCYLnvWxI3+BD Fr/LkWiVj6GQoks6h84ZJzzd/aoHsuRGRd5hKqnNpW0pZluRu9AsOQeUNa85A6tC IBFXuSlB2d4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:46:13 2025 by rpki-client