$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/ED2948D455A211F082747A74C4F9AE02.roa File: ED2948D455A211F082747A74C4F9AE02.roa (raw, json) Hash identifier: /7RcamAv53r1tLrukD5InIvD/0V/DGXgZRLmygrC4XM= Subject key identifier: BA:1C:2F:40:B0:DE:DB:E4:8D:CA:9C:83:8D:86:70:14:38:8F:AF:63 Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 01D1 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/ED2948D455A211F082747A74C4F9AE02.roa Signing time: Mon 30 Jun 2025 11:11:10 +0000 ROA not before: Mon 30 Jun 2025 11:11:10 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 53388 IP address blocks: 2402:be0:fefc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Jun 30 11:11:10 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=686270ce-81de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:07:1a:7e:32:66:12:4b:6b:bf:e8:5d:56: e9:05:65:79:08:01:26:c6:39:60:ff:d1:35:8b:44: 7f:c1:91:05:62:63:5c:0c:ae:7c:32:7c:7e:bf:41: 63:1b:88:31:61:b7:24:8f:18:cc:ae:b5:2b:e7:66: 62:58:bf:27:22:f8:9f:8f:1f:dd:65:c6:dd:2a:5e: b8:fc:f4:e7:11:c8:bf:00:76:4b:ed:6d:05:70:3d: 60:4b:69:72:04:a0:1e:25:cf:f4:f1:e2:b7:28:84: ed:53:80:d7:0a:bc:bb:b4:61:93:fb:43:ad:16:19: e8:f3:52:d2:e2:13:d3:90:a2:d3:b2:19:c5:3d:72: f7:a8:c8:da:91:21:2e:33:99:df:4f:c2:ba:55:9f: 7d:23:e8:49:14:22:c0:77:60:06:3f:c9:d1:4a:23: 6d:97:55:54:20:de:99:c8:ed:be:06:e2:9d:4f:57: 41:c4:f3:01:84:6b:80:6f:ce:da:0d:08:29:50:ad: 88:f6:37:53:3e:ba:e3:fc:a1:f3:12:fe:39:b7:06: b9:45:96:2c:0d:59:4f:77:24:69:06:66:68:a5:52: 98:85:7c:b8:e9:d4:6c:00:a8:1e:19:c8:46:ef:6f: b9:aa:77:d9:89:1f:76:f7:c2:f9:ef:31:f6:c2:c0: 09:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1C:2F:40:B0:DE:DB:E4:8D:CA:9C:83:8D:86:70:14:38:8F:AF:63 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/ED2948D455A211F082747A74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:be0:fefc::/48 Signature Algorithm: sha256WithRSAEncryption 2f:3a:ea:3d:77:39:e5:e1:1e:f4:00:7d:77:63:9e:7d:48:1d: ce:4f:9b:a3:0f:bd:87:f0:89:da:b4:4b:6c:db:f2:1d:82:be: 36:99:1e:e6:d2:b4:29:af:a8:3b:b9:e6:4d:95:4e:f6:0f:dc: 4f:40:34:ac:dc:21:cf:97:09:3e:c9:32:d3:31:b5:f3:e0:a3: 2d:47:54:bb:fe:80:66:08:b0:af:ae:4a:3e:2e:91:b9:00:b5: 0f:98:ed:19:6e:fe:84:91:e0:a9:bd:72:1d:3c:77:2c:90:32: 6a:bb:6a:95:a4:25:64:4e:48:ae:77:7d:99:e6:66:cc:07:b7: 76:70:b9:da:63:ac:f1:b4:a6:17:93:b3:a2:39:1d:11:84:aa: 08:48:7f:75:ab:de:96:e7:1d:d1:10:db:11:0f:98:f5:2c:09: 1c:2f:1a:71:e0:a7:7c:dd:80:f2:ee:77:2d:ad:e9:44:d2:5e: b2:91:bc:66:c9:5d:04:46:1c:7e:86:69:4d:65:ab:b6:6e:4d: ec:22:8b:24:7c:b7:4c:11:df:eb:74:e8:f7:6a:07:2d:0c:0d: b2:27:18:9b:ee:06:85:c0:e0:6d:49:a0:d8:9a:b8:ef:c4:1f: 96:6c:4a:aa:9c:a3:df:46:65:0e:90:52:d5:91:5e:3b:e8:e3: 2a:3c:1f:91 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUwNjMwMTExMTEwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYyNzBjZS04MWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7wHGn4yZhJLa7/oXVbpBWV5CAEmxjlg/9E1i0R/wZEFYmNcDK58Mnx+v0Fj G4gxYbckjxjMrrUr52ZiWL8nIvifjx/dZcbdKl64/PTnEci/AHZL7W0FcD1gS2ly BKAeJc/08eK3KITtU4DXCry7tGGT+0OtFhno81LS4hPTkKLTshnFPXL3qMjakSEu M5nfT8K6VZ99I+hJFCLAd2AGP8nRSiNtl1VUIN6ZyO2+BuKdT1dBxPMBhGuAb87a DQgpUK2I9jdTPrrj/KHzEv45twa5RZYsDVlPdyRpBmZopVKYhXy46dRsAKgeGchG 72+5qnfZiR9298L57zH2wsAJoQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLocL0Cw 3tvkjcqcg42GcBQ4j69jMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvRUQyOTQ4RDQ1 NUEyMTFGMDgyNzQ3QTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAgvg/vwwDQYJKoZIhvcNAQELBQADggEBAC866j13OeXh HvQAfXdjnn1IHc5Pm6MPvYfwidq0S2zb8h2CvjaZHubStCmvqDu55k2VTvYP3E9A NKzcIc+XCT7JMtMxtfPgoy1HVLv+gGYIsK+uSj4ukbkAtQ+Y7Rlu/oSR4Km9ch08 dyyQMmq7apWkJWROSK53fZnmZswHt3ZwudpjrPG0pheTs6I5HRGEqghIf3Wr3pbn HdEQ2xEPmPUsCRwvGnHgp3zdgPLudy2t6UTSXrKRvGbJXQRGHH6GaU1lq7ZuTewi iyR8t0wR3+t06PdqBy0MDbInGJvuBoXA4G1JoNiauO/EH5ZsSqqco99GZQ6QUtWR Xjvo4yo8H5E= -----END CERTIFICATE-----Generated at Wed Jul 2 23:17:55 2025 by rpki-client