$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/C9848396CD1711ED898C311FC4F9AE02.roa File: C9848396CD1711ED898C311FC4F9AE02.roa (raw, json) Hash identifier: 90bUXqg3cX6TcPrG0r+8gEIwyzz7y27hAZ4AHHGnSac= Subject key identifier: E1:C9:89:F6:4F:8C:AA:36:64:F0:A8:FD:D8:0B:2F:42:5F:02:20:B9 Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 267C Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/C9848396CD1711ED898C311FC4F9AE02.roa Signing time: Tue 02 Sep 2025 16:04:12 +0000 ROA not before: Tue 02 Sep 2025 16:04:12 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 24429 IP address blocks: 2404:8d02:28c8::/48 maxlen: 48 2404:8d02:4881::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9852 (0x267c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Sep 2 16:04:12 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b7157c-3ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:e9:a2:17:b6:5e:f5:ea:c1:86:4d:cc:b6: 81:c7:a6:25:43:8b:a4:48:e3:d2:fa:fe:67:b4:8a: 98:01:0c:94:95:fe:59:75:bf:69:35:72:0d:9a:9f: 7b:50:ea:5c:34:88:21:d0:e6:96:e4:7d:0e:05:54: 0c:77:06:73:b2:38:f3:d7:db:02:b2:f5:78:c8:03: ca:96:fc:4e:4b:c1:7d:72:aa:64:a9:54:ed:16:a2: ed:0f:15:83:68:93:66:03:ba:b7:73:c6:9e:a7:df: 37:be:60:f7:f6:47:87:19:0e:1d:e1:54:57:c7:14: 06:7e:b3:8f:39:1a:f9:9e:d3:2b:b3:03:c1:36:a7: 5a:02:ad:1e:9f:8c:bd:f2:97:0f:f9:4f:98:fd:80: 9a:03:b4:94:b8:8b:32:5f:a0:3a:3b:57:21:fe:a5: 85:81:76:15:b1:92:05:47:da:b2:71:8b:2b:31:39: 74:91:a6:92:a6:9d:88:5e:d7:4d:2c:8a:37:9e:00: 97:8b:51:67:18:f0:3e:6c:a6:99:de:f6:ea:0e:a9: 1c:2c:9d:20:c0:3f:b4:ef:db:a7:4f:4b:f4:82:4a: 3d:77:3d:4d:10:d0:4a:22:57:3f:72:ce:43:01:e8: ed:ac:bf:36:f5:a5:59:bd:6a:91:18:2d:89:d4:b8: dd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:89:F6:4F:8C:AA:36:64:F0:A8:FD:D8:0B:2F:42:5F:02:20:B9 X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/C9848396CD1711ED898C311FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:8d02:28c8::/48 2404:8d02:4881::/48 Signature Algorithm: sha256WithRSAEncryption 7f:ff:75:6f:86:94:a1:a2:fb:f6:3d:ac:86:c9:44:bc:58:14: ee:90:cf:4f:97:80:31:ef:20:67:be:95:e8:38:c5:17:b7:f5: 15:34:bb:48:39:23:73:14:5e:3a:24:68:a8:a1:65:fe:8e:81: c5:d9:e9:ce:ca:12:66:84:cc:d3:7c:a8:3d:5e:1e:86:4b:d3: 34:d8:d2:84:bf:d3:0a:82:21:0a:d4:04:81:9a:18:ea:14:6b: 9e:76:ef:c4:09:15:21:a9:42:fb:f2:df:52:51:25:da:8b:3b: a4:67:7f:97:05:81:bf:aa:16:78:bf:12:2c:d6:25:65:6e:46: 79:a8:ab:6b:30:a4:aa:47:9f:a7:f6:a3:3f:ff:7d:a8:8f:26: 1f:34:9c:d3:18:ed:76:5b:cd:c7:70:6b:4b:16:8a:af:eb:17: f6:29:b4:d2:2a:a4:3b:be:d0:1e:cf:c9:e6:64:85:57:a2:b6: 25:7c:d6:03:b3:2c:a7:1a:48:c4:2a:5d:5a:0f:15:f4:62:56: b7:12:82:29:6f:04:b7:d0:ad:ab:67:d2:1b:de:1c:b7:05:ca: c1:dc:2d:76:cf:99:2c:ee:ac:67:74:e3:39:f1:9f:10:53:65: 74:e7:cb:6f:6c:33:a9:c6:43:25:8c:a3:8f:47:a7:74:79:30: 75:8d:ce:82 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICJnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjUwOTAyMTYwNDEyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MTU3Yy0zY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWfpohe2XvXqwYZNzLaBx6YlQ4ukSOPS+v5ntIqYAQyUlf5Zdb9pNXINmp97 UOpcNIgh0OaW5H0OBVQMdwZzsjjz19sCsvV4yAPKlvxOS8F9cqpkqVTtFqLtDxWD aJNmA7q3c8aep983vmD39keHGQ4d4VRXxxQGfrOPORr5ntMrswPBNqdaAq0en4y9 8pcP+U+Y/YCaA7SUuIsyX6A6O1ch/qWFgXYVsZIFR9qycYsrMTl0kaaSpp2IXtdN LIo3ngCXi1FnGPA+bKaZ3vbqDqkcLJ0gwD+079unT0v0gko9dz1NENBKIlc/cs5D AejtrL829aVZvWqRGC2J1Ljd+wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFOHJifZP jKo2ZPCo/dgLL0JfAiC5MB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvQzk4NDgzOTZD RDE3MTFFRDg5OEMzMTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkBI0CKMgDBwAkBI0CSIEwDQYJKoZIhvcNAQELBQADggEB AH//dW+GlKGi+/Y9rIbJRLxYFO6Qz0+XgDHvIGe+leg4xRe39RU0u0g5I3MUXjok aKihZf6OgcXZ6c7KEmaEzNN8qD1eHoZL0zTY0oS/0wqCIQrUBIGaGOoUa55278QJ FSGpQvvy31JRJdqLO6Rnf5cFgb+qFni/EizWJWVuRnmoq2swpKpHn6f2oz//faiP Jh80nNMY7XZbzcdwa0sWiq/rF/YptNIqpDu+0B7PyeZkhVeitiV81gOzLKcaSMQq XVoPFfRiVrcSgilvBLfQratn0hveHLcFysHcLXbPmSzurGd04znxnxBTZXTny29s M6nGQyWMo49Hp3R5MHWNzoI= -----END CERTIFICATE-----Generated at Mon Oct 20 00:22:45 2025 by rpki-client