$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/B8201598BED111EC93B74C4FC4F9AE02.roa File: B8201598BED111EC93B74C4FC4F9AE02.roa (raw, json) Hash identifier: JdQUVUw03f+72nj/VMFdFXWPwrE8S++NWd90s/zu6jk= Subject key identifier: E1:FA:92:AB:75:8E:F2:5C:85:10:FB:CC:C4:46:7A:52:D3:0E:67:47 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 34B4 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/B8201598BED111EC93B74C4FC4F9AE02.roa Signing time: Tue 12 Aug 2025 15:21:16 +0000 ROA not before: Tue 12 Aug 2025 15:21:16 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45172 IP address blocks: 2405:9400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13492 (0x34b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Aug 12 15:21:16 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689b5beb-0bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:79:d7:bf:06:6f:32:95:25:e3:10:7e:29: 1b:82:be:9c:65:ad:34:8e:45:2d:96:5d:78:33:19: bb:66:60:a4:b9:4c:18:a4:48:38:ac:7f:14:30:a7: a7:37:cd:98:34:dc:07:56:55:da:11:07:47:68:3b: c3:59:e1:4d:cf:3c:f9:8c:81:dd:e9:7a:fa:28:a8: 83:8c:50:47:ce:69:a2:4d:03:86:b5:52:c5:f1:ec: 72:b6:8b:3b:92:89:d0:9b:c1:bb:84:23:af:69:d0: d6:dc:16:1f:20:74:45:a8:1d:de:3c:b3:7e:eb:22: 01:5c:4d:03:84:7c:7b:de:bd:ed:d0:04:33:0c:f2: 65:95:74:0f:62:6e:8d:2e:9a:92:2b:31:fa:95:c3: 27:5b:39:eb:7d:ae:56:c4:e1:c9:27:c5:6d:f7:6d: 96:31:e5:ce:41:34:ee:a9:24:90:4f:26:c0:8b:87: 86:c8:98:4d:d7:91:4a:3e:c3:cc:a8:cd:91:de:c0: 60:ef:ac:25:7d:52:cc:67:af:d9:f0:c0:62:19:59: 8b:40:61:0c:76:5e:85:81:2a:dd:c2:48:ae:01:bf: 57:d1:5a:84:c5:5b:eb:4e:d1:ea:04:40:ed:f5:0e: 6e:31:2b:5c:b9:b3:a3:4a:57:82:84:e5:42:8f:c8: 6f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FA:92:AB:75:8E:F2:5C:85:10:FB:CC:C4:46:7A:52:D3:0E:67:47 X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/B8201598BED111EC93B74C4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:9400::/32 Signature Algorithm: sha256WithRSAEncryption b8:17:f6:c9:eb:00:5b:ac:62:7a:c9:55:46:10:e3:88:69:56: 0c:86:5e:a9:ce:1b:85:c7:50:fc:dc:2f:4d:d1:f0:a2:70:03: 5d:8f:8f:a4:7f:51:0f:53:b9:ac:3e:d3:80:cb:12:b1:b2:d4: e2:6a:88:39:90:5e:a5:44:be:02:29:bb:d7:d8:a4:b7:30:3a: e7:e4:c2:e8:38:45:7f:dc:9d:8a:74:d4:78:12:f6:b1:c3:13: 6a:83:f2:cc:5c:05:a1:26:0f:7f:99:bb:ab:50:46:47:2f:d8: 47:e4:77:73:46:7b:6e:3c:08:6e:6d:04:fe:f5:5b:da:10:52: 8d:ed:f6:fc:a5:5c:47:24:f9:0e:75:7c:de:9b:cc:ae:9c:47: d6:8a:17:c8:0f:97:40:ca:a5:e0:16:7d:91:cb:a1:c0:d8:f1: 65:51:26:fe:ce:3c:9f:8c:4a:38:af:8e:4f:7b:4a:f2:80:44: af:48:9c:80:36:28:3f:e4:7a:5b:f6:35:f1:ef:81:97:cd:c3: 94:e4:38:bd:a3:ad:e4:0a:9b:04:80:44:b2:a2:56:b0:60:07: 6f:40:24:45:6f:b0:a2:0b:12:7f:4b:e9:4e:72:de:44:36:04: c3:fc:ec:91:9c:fa:5b:e2:a7:ba:6f:06:af:62:6d:93:3b:10: 46:f9:a8:4c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICNLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjUwODEyMTUyMTE2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODliNWJlYi0wYmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZZ5178GbzKVJeMQfikbgr6cZa00jkUtll14Mxm7ZmCkuUwYpEg4rH8UMKen N82YNNwHVlXaEQdHaDvDWeFNzzz5jIHd6Xr6KKiDjFBHzmmiTQOGtVLF8exytos7 konQm8G7hCOvadDW3BYfIHRFqB3ePLN+6yIBXE0DhHx73r3t0AQzDPJllXQPYm6N LpqSKzH6lcMnWznrfa5WxOHJJ8Vt922WMeXOQTTuqSSQTybAi4eGyJhN15FKPsPM qM2R3sBg76wlfVLMZ6/Z8MBiGVmLQGEMdl6FgSrdwkiuAb9X0VqExVvrTtHqBEDt 9Q5uMStcubOjSleChOVCj8hvJQIDAQABo4ICljCCApIwHQYDVR0OBBYEFOH6kqt1 jvJchRD7zMRGelLTDmdHMB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyOEMvNTJGQ0M2NDgxREEwMTFFMkI2RDg3MDkxMDhCMDJDRDIvQjgyMDE1OThC RUQxMTFFQzkzQjc0QzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBZQAMA0GCSqGSIb3DQEBCwUAA4IBAQC4F/bJ6wBbrGJ6 yVVGEOOIaVYMhl6pzhuFx1D83C9N0fCicANdj4+kf1EPU7msPtOAyxKxstTiaog5 kF6lRL4CKbvX2KS3MDrn5MLoOEV/3J2KdNR4EvaxwxNqg/LMXAWhJg9/mburUEZH L9hH5HdzRntuPAhubQT+9VvaEFKN7fb8pVxHJPkOdXzem8yunEfWihfID5dAyqXg Fn2Ry6HA2PFlUSb+zjyfjEo4r45Pe0rygESvSJyANig/5Hpb9jXx74GXzcOU5Di9 o63kCpsEgESyolawYAdvQCRFb7CiCxJ/S+lOct5ENgTD/OyRnPpb4qe6bwavYm2T OxBG+ahM -----END CERTIFICATE-----Generated at Sat Aug 23 20:10:21 2025 by rpki-client