$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/E07CB68455A211F0B55F5674C4F9AE02.roa File: E07CB68455A211F0B55F5674C4F9AE02.roa (raw, json) Hash identifier: EN9le6O09Kb0iq4iN/kD7cySPcZbryI877AWUndMCII= Subject key identifier: 65:3D:58:88:4A:C1:FA:FD:45:79:51:35:B6:F1:7B:53:E9:15:F2:C9 Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 01CF Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/E07CB68455A211F0B55F5674C4F9AE02.roa Signing time: Mon 30 Jun 2025 11:10:49 +0000 ROA not before: Mon 30 Jun 2025 11:10:49 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 151810 IP address blocks: 2402:be0::/34 maxlen: 42 2402:be0:4000::/34 maxlen: 42 2402:be0:8000::/34 maxlen: 42 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Jun 30 11:10:49 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=686270b9-c506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d7:a8:6b:23:b1:37:2f:85:c6:2d:d5:c4:09: 95:e6:20:7f:61:72:92:80:7e:0c:9a:28:19:3e:29: da:6f:d7:0c:a0:59:aa:16:fc:67:c7:1e:a6:6d:40: 02:21:a3:8a:e9:b8:5f:3f:a9:e9:ed:cc:12:fb:c2: d0:1f:b6:5d:db:91:ff:6b:1b:e9:5f:d8:bd:db:fa: f0:ef:be:3e:b8:05:81:c1:28:6a:d1:c4:bf:72:3d: ab:2b:ce:6c:41:ab:4a:6b:4d:db:1a:e1:ff:7d:87: 95:8c:41:e1:6d:56:6e:a9:33:43:0f:71:2c:18:d3: fa:5e:0e:77:3b:67:9c:47:1a:a9:95:58:53:b7:28: 02:eb:98:05:0f:bd:7e:e3:8f:92:50:48:7f:ec:85: 5b:1c:6d:b9:79:59:a8:09:5a:ab:41:6b:43:4b:84: 4c:ee:9f:a0:5c:0d:80:fb:c2:ac:51:38:70:ed:4a: a9:70:d4:a8:2a:42:48:42:c0:67:97:e2:0a:7b:92: 46:3e:8c:2d:a9:7e:8e:e8:94:e9:c4:e3:62:ab:35: 14:2f:0b:f9:0e:ab:ae:e3:58:b6:5d:41:ea:1a:7e: e1:e0:42:bd:7c:fb:ca:e3:aa:cb:53:81:f5:28:12: fc:71:76:7f:d7:c7:b9:25:43:60:53:24:9a:1e:f7: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3D:58:88:4A:C1:FA:FD:45:79:51:35:B6:F1:7B:53:E9:15:F2:C9 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/E07CB68455A211F0B55F5674C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:be0::-2402:be0:bfff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7e:6e:c3:dc:a2:96:11:3b:52:8d:f5:e0:35:84:df:51:b1:3e: 92:ec:d1:1d:a6:0b:07:43:7f:13:cd:d7:c9:16:3c:7b:96:aa: 88:c2:ca:13:c0:c4:ca:2d:a8:55:a1:c9:67:7f:40:81:21:52: 37:21:07:39:d1:95:dd:1f:ce:0c:d9:13:01:5e:77:eb:57:1e: 4e:b5:89:5c:51:81:ff:e1:7b:83:96:5f:2f:c7:1a:ff:70:db: c6:9e:33:23:3b:8b:3c:55:be:8d:43:d0:27:9f:b4:c7:f0:cf: c4:06:69:8f:7c:aa:b7:84:08:e1:67:3d:24:28:25:c0:b7:4c: c4:38:e4:32:61:59:3a:f6:e8:71:e6:ca:86:5d:0d:ed:d2:d4: e6:bb:22:53:3c:7d:c6:20:0e:91:2d:fd:83:8e:d1:dc:21:ce: ea:9e:70:b3:6e:26:fb:f4:83:a0:e7:5d:22:8f:6d:48:03:3c: 23:c1:5d:14:d0:19:79:0d:c1:66:06:73:4f:e6:36:c6:92:2e: 83:8d:84:9b:88:ce:8b:f6:59:d9:50:1c:e3:cb:f5:52:07:2c: 1b:b7:89:e3:8d:2e:c9:01:44:73:31:b1:55:72:a0:80:b4:51: 7a:ac:73:a1:84:f9:fd:e9:6b:24:95:ef:c8:fb:f9:26:d3:32: 4a:a3:f4:31 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUwNjMwMTExMDQ5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYyNzBiOS1jNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdeoayOxNy+Fxi3VxAmV5iB/YXKSgH4MmigZPinab9cMoFmqFvxnxx6mbUAC IaOK6bhfP6np7cwS+8LQH7Zd25H/axvpX9i92/rw774+uAWBwShq0cS/cj2rK85s QatKa03bGuH/fYeVjEHhbVZuqTNDD3EsGNP6Xg53O2ecRxqplVhTtygC65gFD71+ 44+SUEh/7IVbHG25eVmoCVqrQWtDS4RM7p+gXA2A+8KsUThw7UqpcNSoKkJIQsBn l+IKe5JGPowtqX6O6JTpxONiqzUULwv5Dquu41i2XUHqGn7h4EK9fPvK46rLU4H1 KBL8cXZ/18e5JUNgUySaHveR+QIDAQABo4ICoDCCApwwHQYDVR0OBBYEFGU9WIhK wfr9RXlRNbbxe1PpFfLJMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvRTA3Q0I2ODQ1 NUEyMTFGMEI1NUY1Njc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKgYIKwYBBQUHAQcBAf8E GzAZMBcEAgACMBEwDwMFBSQCC+ADBgYkAgvggDANBgkqhkiG9w0BAQsFAAOCAQEA fm7D3KKWETtSjfXgNYTfUbE+kuzRHaYLB0N/E83XyRY8e5aqiMLKE8DEyi2oVaHJ Z39AgSFSNyEHOdGV3R/ODNkTAV5361ceTrWJXFGB/+F7g5ZfL8ca/3Dbxp4zIzuL PFW+jUPQJ5+0x/DPxAZpj3yqt4QI4Wc9JCglwLdMxDjkMmFZOvbocebKhl0N7dLU 5rsiUzx9xiAOkS39g47R3CHO6p5ws24m+/SDoOddIo9tSAM8I8FdFNAZeQ3BZgZz T+Y2xpIug42Em4jOi/ZZ2VAc48v1UgcsG7eJ440uyQFEczGxVXKggLRReqxzoYT5 /elrJJXvyPv5JtMySqP0MQ== -----END CERTIFICATE-----Generated at Thu Jul 3 09:16:15 2025 by rpki-client