$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/595774341B6211F0B9733473C4F9AE02.roa File: 595774341B6211F0B9733473C4F9AE02.roa (raw, json) Hash identifier: CTJ+dnaaAcT/k3VfAVX0B8BkiSPr7rVzlHNkELgf6Zk= Subject key identifier: A2:26:27:05:AB:B7:2F:33:77:64:28:A9:46:04:82:02:52:D2:7F:B4 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0325 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/595774341B6211F0B9733473C4F9AE02.roa Signing time: Tue 01 Jul 2025 02:07:58 +0000 ROA not before: Tue 01 Jul 2025 02:07:58 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 21433 IP address blocks: 2404:3d00:41c4::/47 maxlen: 47 2404:3d00:41c4::/48 maxlen: 48 2404:3d00:41c5::/48 maxlen: 48 2404:3d00:41ce::/47 maxlen: 47 2404:3d00:41ce::/48 maxlen: 48 2404:3d00:41cf::/48 maxlen: 48 2404:3d00:41d0::/47 maxlen: 47 2404:3d00:41d0::/48 maxlen: 48 2404:3d00:41d1::/48 maxlen: 48 2404:3d00:41d2::/47 maxlen: 47 2404:3d00:41d4::/47 maxlen: 47 2404:3d00:41d6::/47 maxlen: 47 2404:3d00:41e2::/47 maxlen: 47 2404:3d00:41e2::/48 maxlen: 48 2404:3d00:41e3::/48 maxlen: 48 2404:3d00:41e6::/47 maxlen: 47 2404:3d00:41e6::/48 maxlen: 48 2404:3d00:41e7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Jul 1 02:07:58 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686342fd-c7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e8:05:4e:b7:60:18:21:90:19:7f:52:9a:63: 16:cc:13:aa:bc:19:c6:3e:ca:95:62:29:aa:a2:b1: 85:d0:5a:4a:34:ae:86:cc:c7:b4:dc:f3:c0:29:b6: 7d:4e:46:14:ec:40:cf:20:9c:d8:be:3a:aa:a1:34: 10:f7:17:f9:4f:70:c4:5e:4d:3a:4a:b6:98:c2:b0: 8a:01:87:80:39:95:5d:be:e0:50:19:19:d5:04:79: 62:6f:5e:f5:eb:a6:31:9e:cf:d6:ac:33:0c:20:40: 2d:81:7d:84:ce:c0:33:10:dd:44:51:16:51:e0:50: bc:22:c0:cd:9b:9a:ee:ea:ac:c2:c1:a7:06:3a:de: 27:1e:14:3a:a6:17:4a:a1:99:70:d6:bc:19:41:58: 22:cf:17:91:ac:e1:f6:09:3f:6a:1d:f3:ad:89:e7: 2a:0f:99:3a:f8:36:1b:ca:95:5c:7f:8e:a4:da:d9: eb:f8:37:b4:39:2a:25:3d:43:e4:af:6d:15:09:8a: 16:71:98:9d:a2:48:26:3e:30:07:34:51:71:4c:d6: e2:83:29:fe:3e:e1:be:4e:a0:cb:31:8d:98:80:19: 78:12:1b:36:26:e7:30:f8:78:99:12:9b:e2:ae:4b: a1:45:31:97:9b:a2:be:4f:51:32:41:64:8e:c9:90: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:26:27:05:AB:B7:2F:33:77:64:28:A9:46:04:82:02:52:D2:7F:B4 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/595774341B6211F0B9733473C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:3d00:41c4::/47 2404:3d00:41ce::-2404:3d00:41d7:ffff:ffff:ffff:ffff:ffff 2404:3d00:41e2::/47 2404:3d00:41e6::/47 Signature Algorithm: sha256WithRSAEncryption 61:75:a7:75:a0:80:b6:0c:49:24:11:7c:6c:0b:97:76:fc:c3: 52:70:ec:eb:57:0d:4b:e6:1d:3b:63:8c:07:4b:30:32:f3:c1: 6a:49:b6:0b:37:bd:f8:1e:58:4d:ca:32:4f:45:a4:7d:76:c6: e7:95:a8:8a:72:5e:76:41:41:af:84:43:a2:db:0c:77:df:71: cf:f8:5b:a7:fa:4a:5e:7f:21:c4:fd:25:37:89:10:71:b9:84: 30:11:36:3d:54:29:19:9e:84:5a:1f:64:9b:ae:f3:a7:40:d7: 79:77:d0:ca:8b:e0:9f:aa:81:85:38:77:d2:34:ee:7b:53:a2: 03:31:4a:8f:08:62:c8:cb:56:75:65:e8:f9:2a:f5:75:ce:1c: 81:7a:39:4d:1c:7b:ee:4c:b2:1e:69:a6:23:d4:b1:86:f0:bb: 77:51:70:9c:cf:de:07:3d:be:ec:ea:35:ce:5d:23:81:7a:44: 9c:de:ab:0c:f0:78:8e:17:b9:c0:14:5e:33:6a:e1:e8:46:8f: c3:04:77:08:38:0c:08:0b:1b:2a:cd:9a:12:d5:30:54:91:4a: 73:2f:10:6d:8e:73:43:d9:57:43:cf:b6:ad:74:06:39:51:d6: 37:9b:2d:6c:7c:17:16:0b:7d:c8:ad:c5:1b:5f:42:5d:ff:47: 1f:d5:83:99 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjUwNzAxMDIwNzU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzNDJmZC1jN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+gFTrdgGCGQGX9SmmMWzBOqvBnGPsqVYimqorGF0FpKNK6GzMe03PPAKbZ9 TkYU7EDPIJzYvjqqoTQQ9xf5T3DEXk06SraYwrCKAYeAOZVdvuBQGRnVBHlib171 66Yxns/WrDMMIEAtgX2EzsAzEN1EURZR4FC8IsDNm5ru6qzCwacGOt4nHhQ6phdK oZlw1rwZQVgizxeRrOH2CT9qHfOtiecqD5k6+DYbypVcf46k2tnr+De0OSolPUPk r20VCYoWcZidokgmPjAHNFFxTNbigyn+PuG+TqDLMY2YgBl4Ehs2Jucw+HiZEpvi rkuhRTGXm6K+T1EyQWSOyZCnQQIDAQABo4ICvjCCArowHQYDVR0OBBYEFKImJwWr ty8zd2QoqUYEggJS0n+0MB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI0QUYvQ0M3QjI1NUFEQ0E5MTFFQzk0RTNFMDI5QzRGOUFFMDIvNTk1Nzc0MzQx QjYyMTFGMEI5NzMzNDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E OTA3MDUEAgACMC8DBwEkBD0AQcQwEgMHASQEPQBBzgMHAyQEPQBB0AMHASQEPQBB 4gMHASQEPQBB5jANBgkqhkiG9w0BAQsFAAOCAQEAYXWndaCAtgxJJBF8bAuXdvzD UnDs61cNS+YdO2OMB0swMvPBakm2Cze9+B5YTcoyT0WkfXbG55WoinJedkFBr4RD otsMd99xz/hbp/pKXn8hxP0lN4kQcbmEMBE2PVQpGZ6EWh9km67zp0DXeXfQyovg n6qBhTh30jTue1OiAzFKjwhiyMtWdWXo+Sr1dc4cgXo5TRx77kyyHmmmI9SxhvC7 d1FwnM/eBz2+7Oo1zl0jgXpEnN6rDPB4jhe5wBReM2rh6EaPwwR3CDgMCAsbKs2a EtUwVJFKcy8QbY5zQ9lXQ8+2rXQGOVHWN5stbHwXFgt9yK3FG19CXf9HH9WDmQ== -----END CERTIFICATE-----Generated at Tue Jul 1 06:35:37 2025 by rpki-client