$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/935296A6558B11F0BB2DB436C4F9AE02.roa File: 935296A6558B11F0BB2DB436C4F9AE02.roa (raw, json) Hash identifier: QdChkVX5/kDffpKHFjUpYMXDKAHSdfijGoyZP5SONNo= Subject key identifier: BB:B1:50:6D:3E:45:0A:E9:CF:3B:7D:33:D7:C2:40:6D:A1:22:AF:19 Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 01C8 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/935296A6558B11F0BB2DB436C4F9AE02.roa Signing time: Mon 30 Jun 2025 08:24:01 +0000 ROA not before: Mon 30 Jun 2025 08:24:01 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153997 IP address blocks: 2402:be0:fefe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Jun 30 08:24:01 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=686249a1-1d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:75:72:bb:7c:af:b9:dd:94:f0:63:d7:db:c0: cc:eb:0f:c6:26:cd:c3:0e:4d:b7:13:1f:f0:e1:cd: 7d:84:15:70:22:be:ac:c1:e5:1d:ae:e1:7d:84:22: f5:1a:12:3a:d7:b4:37:d6:03:2f:1f:f9:bd:bc:59: c0:bd:36:61:3d:b4:ce:96:67:cc:3b:2f:89:f6:7f: fa:e1:64:83:9b:82:bd:ee:26:b4:90:25:68:21:da: 10:fc:ec:49:11:5f:29:2c:26:ca:60:b2:7c:07:84: 97:80:69:a6:39:4c:d0:80:b4:6d:00:8a:6b:bd:5f: bc:41:de:04:6f:22:1c:97:ab:cc:5f:fb:7b:ed:07: c5:62:e6:0f:0e:19:16:e8:c7:33:88:57:87:58:45: 3d:66:ea:65:8e:d2:c8:ba:07:b4:45:77:df:8b:6e: e8:71:75:25:2b:8f:34:23:95:4e:f3:cc:1b:36:b1: f3:19:60:41:3c:2c:9d:b6:86:9e:a7:8c:bc:93:dd: 76:85:6e:6c:65:53:eb:a2:e1:1b:23:e9:df:45:83: 3e:48:e1:d4:2a:78:2d:9d:16:f1:81:71:52:a0:3f: af:8e:39:9f:2c:6a:14:a7:5c:6e:76:7a:3f:64:57: 76:5f:65:35:95:39:68:43:2a:ec:ca:9e:9c:2c:0e: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B1:50:6D:3E:45:0A:E9:CF:3B:7D:33:D7:C2:40:6D:A1:22:AF:19 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/935296A6558B11F0BB2DB436C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:be0:fefe::/48 Signature Algorithm: sha256WithRSAEncryption 90:18:24:52:f4:c3:c7:0d:87:19:36:ca:eb:8c:25:36:27:51: be:17:e5:5e:3e:53:03:55:e5:b3:e7:01:3c:af:ab:b7:b9:7b: 9e:b5:ff:94:92:1c:a2:c5:67:56:80:2a:fd:32:c7:5d:b2:31: 80:58:53:28:02:53:98:72:7f:42:3e:4e:d5:d1:62:6f:bd:06: 2b:c6:a8:0f:ba:b5:71:79:f6:f9:2e:d9:28:af:f3:cf:ab:ca: 52:f6:c4:fe:31:53:fc:86:bc:c8:d1:de:f9:eb:d5:69:0d:cb: 05:0b:ff:9f:de:b1:71:59:e7:03:8a:14:ee:6d:b6:8f:9e:16: b8:e5:9b:23:b6:13:25:57:c9:1f:6a:42:53:c3:48:28:6d:0a: c0:24:7c:e5:63:83:9d:54:9d:7e:62:c7:ac:67:0c:79:d8:3a: b9:a2:9b:0c:72:2c:b1:06:12:af:37:65:ea:bc:0a:52:ae:72: ab:30:c9:6d:89:bb:1a:d2:c2:60:84:52:01:b7:7c:0b:2c:b5: 1d:2b:f5:3e:9c:f7:d3:b4:e4:0d:97:7b:34:0d:ba:d7:13:64: 83:1e:ba:c1:b0:81:0f:17:e0:9a:85:10:38:ca:a0:8a:7d:dd: 40:49:a6:44:a1:75:7b:62:dc:10:51:c5:fa:80:8b:41:e0:64: 70:4c:f8:2f -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUwNjMwMDgyNDAxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYyNDlhMS0xZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XVyu3yvud2U8GPX28DM6w/GJs3DDk23Ex/w4c19hBVwIr6sweUdruF9hCL1 GhI617Q31gMvH/m9vFnAvTZhPbTOlmfMOy+J9n/64WSDm4K97ia0kCVoIdoQ/OxJ EV8pLCbKYLJ8B4SXgGmmOUzQgLRtAIprvV+8Qd4EbyIcl6vMX/t77QfFYuYPDhkW 6McziFeHWEU9ZupljtLIuge0RXffi27ocXUlK480I5VO88wbNrHzGWBBPCydtoae p4y8k912hW5sZVProuEbI+nfRYM+SOHUKngtnRbxgXFSoD+vjjmfLGoUp1xudno/ ZFd2X2U1lTloQyrsyp6cLA4HBwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLuxUG0+ RQrpzzt9M9fCQG2hIq8ZMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvOTM1Mjk2QTY1 NThCMTFGMEJCMkRCNDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAgvg/v4wDQYJKoZIhvcNAQELBQADggEBAJAYJFL0w8cN hxk2yuuMJTYnUb4X5V4+UwNV5bPnATyvq7e5e561/5SSHKLFZ1aAKv0yx12yMYBY UygCU5hyf0I+TtXRYm+9BivGqA+6tXF59vku2Siv88+rylL2xP4xU/yGvMjR3vnr 1WkNywUL/5/esXFZ5wOKFO5tto+eFrjlmyO2EyVXyR9qQlPDSChtCsAkfOVjg51U nX5ix6xnDHnYOrmimwxyLLEGEq83Zeq8ClKucqswyW2JuxrSwmCEUgG3fAsstR0r 9T6c99O05A2XezQNutcTZIMeusGwgQ8X4JqFEDjKoIp93UBJpkShdXti3BBRxfqA i0HgZHBM+C8= -----END CERTIFICATE-----Generated at Thu Jul 3 11:28:47 2025 by rpki-client