$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/ADB02E5C5CB411F0BE8D2465C4F9AE02.roa File: ADB02E5C5CB411F0BE8D2465C4F9AE02.roa (raw, json) Hash identifier: OcNbuxa2ZSSG1bMP1PQ4GkM3WfcX4kd/s4GUQn4/jaI= Subject key identifier: E3:14:9B:C3:53:76:D4:6F:33:CD:C5:3C:40:68:58:42:64:D6:61:76 Certificate issuer: /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Certificate serial: 0155 Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/ADB02E5C5CB411F0BE8D2465C4F9AE02.roa Signing time: Wed 09 Jul 2025 11:05:53 +0000 ROA not before: Wed 09 Jul 2025 11:05:53 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 55470 IP address blocks: 2401:4260:fff1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Validity Not Before: Jul 9 11:05:53 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=686e4d10-ea40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:93:18:52:d7:1e:16:ab:f5:67:bf:d2:88: a9:b1:ec:56:1a:37:32:14:12:78:c6:08:d0:50:5e: a9:92:45:d0:c8:31:aa:57:6e:33:9e:b7:d2:9e:35: be:30:57:72:79:07:54:a9:d4:9d:1d:69:c5:f2:98: 0f:17:f1:34:57:22:e7:34:1c:c9:39:78:d3:d2:91: b6:5a:7c:f0:2a:9b:29:2c:32:17:4b:2e:29:c4:3e: 51:3d:b2:1c:69:d0:ee:fb:17:4f:4e:a0:30:00:45: 3e:1f:cf:70:1d:05:b3:2f:a4:d8:7d:f9:28:25:56: 5c:f7:df:4a:20:1d:89:25:96:3c:19:63:ed:bb:01: ad:4e:aa:f4:4a:9d:b3:58:6e:a6:c3:b4:f4:3b:70: a9:31:d9:84:06:9c:90:21:e4:80:72:31:75:d4:c3: ec:39:de:f9:f1:7b:8d:d9:03:4d:4a:1b:2f:ec:65: 75:c0:a9:78:11:ca:6b:98:cd:f8:b4:f5:f5:6d:64: 87:5a:df:a0:fe:fb:bf:06:72:e6:3a:09:7f:3f:b8: 88:5f:e0:21:ac:73:8c:7b:e7:d6:2f:14:d4:42:44: b8:a0:88:e3:33:7d:8e:54:85:cf:d8:4c:32:39:6b: 4d:be:2b:b0:d3:f3:ac:b4:55:1a:88:b1:20:11:3d: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:14:9B:C3:53:76:D4:6F:33:CD:C5:3C:40:68:58:42:64:D6:61:76 X509v3 Authority Key Identifier: keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/ADB02E5C5CB411F0BE8D2465C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:4260:fff1::/48 Signature Algorithm: sha256WithRSAEncryption b1:4c:46:47:1a:73:36:c8:1b:54:4f:98:c6:2b:54:f1:c9:0a: 07:24:a5:14:81:96:16:53:0a:5b:7e:e4:b8:a2:26:79:86:7d: d3:c1:6e:53:70:e5:9c:af:35:2b:7e:7d:c5:9e:30:60:a3:93: 09:48:0c:e0:3c:b4:a8:69:9f:24:50:fc:bf:fd:d1:98:a9:ed: ea:10:55:85:7c:eb:51:38:bf:4b:aa:be:82:e9:2f:1d:08:6f: f6:e1:16:47:8c:51:49:04:cf:9e:90:9c:c2:2a:4e:23:ea:d7: 30:6f:c6:02:c9:d8:d7:4e:fc:e5:ac:bb:48:81:00:42:c6:ee: bb:d2:0f:e0:76:cf:4a:f1:e8:1f:32:67:47:65:bc:9d:bf:3e: 5b:f8:87:41:1f:fb:dc:52:2c:91:62:b4:c5:8a:d9:77:85:1d: ac:69:c7:e8:2b:25:8f:16:88:4f:3a:a9:ae:a7:e0:ca:62:d6: 59:ea:72:be:55:ff:9d:21:77:f1:17:d1:30:dc:cb:f0:d5:e7: fd:e0:7c:07:5a:ed:13:a0:06:96:ed:2c:b4:1b:b4:e6:8e:79: 4c:4e:a0:27:c5:89:8e:44:e0:68:c9:0e:17:ef:88:a1:de:8b: 5f:d3:af:e1:b5:9d:a9:fb:4c:76:80:b6:99:84:ae:3d:37:4a: 56:f4:fb:d1 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCN0ExMTAvBgNVBAUTKDg3QkZFRUM4RkY5RkIyNjg4MDIwREI1OUE2MjJDMTNB MTVFNUFGMjAwHhcNMjUwNzA5MTEwNTUzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZlNGQxMC1lYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJuTGFLXHhar9We/0oipsexWGjcyFBJ4xgjQUF6pkkXQyDGqV24znrfSnjW+ MFdyeQdUqdSdHWnF8pgPF/E0VyLnNBzJOXjT0pG2WnzwKpspLDIXSy4pxD5RPbIc adDu+xdPTqAwAEU+H89wHQWzL6TYffkoJVZc999KIB2JJZY8GWPtuwGtTqr0Sp2z WG6mw7T0O3CpMdmEBpyQIeSAcjF11MPsOd758XuN2QNNShsv7GV1wKl4EcprmM34 tPX1bWSHWt+g/vu/BnLmOgl/P7iIX+AhrHOMe+fWLxTUQkS4oIjjM32OVIXP2Ewy OWtNviuw0/OstFUaiLEgET2nuwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOMUm8NT dtRvM83FPEBoWEJk1mF2MB8GA1UdIwQYMBaAFIe/7sj/n7JogCDbWaYiwToV5a8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI3QS8wNkExOTYwMjY0 NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNtaUFJTnRacGlMQk9oWGxy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3X3V5UC1mc21pQUlOdFpwaUxCT2hYbHJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzJCN0EvMDZBMTk2MDI2NDREMTFFRTg0RDQwMzRGQzRGOUFFMDIvQURCMDJFNUM1 Q0I0MTFGMEJFOEQyNDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAUJg//EwDQYJKoZIhvcNAQELBQADggEBALFMRkcaczbI G1RPmMYrVPHJCgckpRSBlhZTClt+5LiiJnmGfdPBblNw5ZyvNSt+fcWeMGCjkwlI DOA8tKhpnyRQ/L/90Zip7eoQVYV861E4v0uqvoLpLx0Ib/bhFkeMUUkEz56QnMIq TiPq1zBvxgLJ2NdO/OWsu0iBAELG7rvSD+B2z0rx6B8yZ0dlvJ2/Plv4h0Ef+9xS LJFitMWK2XeFHaxpx+grJY8WiE86qa6n4Mpi1lnqcr5V/50hd/EX0TDcy/DV5/3g fAda7ROgBpbtLLQbtOaOeUxOoCfFiY5E4GjJDhfviKHei1/Tr+G1nan7THaAtpmE rj03Slb0+9E= -----END CERTIFICATE-----Generated at Sun Jul 20 07:34:20 2025 by rpki-client