$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/11763FC8648D11F0950AB94BC4F9AE02.roa File: 11763FC8648D11F0950AB94BC4F9AE02.roa (raw, json) Hash identifier: A4sHQNLm53WkHUfkAR92GeqCH5PTVPwr29Q4OBZl+0s= Subject key identifier: FC:65:BB:40:63:E3:9C:1A:5D:8B:DE:76:FF:7C:CD:98:EA:4D:FA:C7 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: B1 Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/11763FC8648D11F0950AB94BC4F9AE02.roa Signing time: Sat 19 Jul 2025 10:42:29 +0000 ROA not before: Sat 19 Jul 2025 10:42:29 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 136461 IP address blocks: 2401:b6a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 10:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Jul 19 10:42:29 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=687b7695-8920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:64:a7:02:c4:fb:2a:68:9a:bd:38:45:66: 1d:9c:b5:1b:6a:df:41:ee:dc:7e:df:2f:e8:e0:9c: f4:10:56:71:e0:50:69:2a:ba:df:3a:89:b7:ac:39: af:72:43:a5:ec:49:34:0a:a5:31:b7:5e:f0:3a:62: 90:7a:5a:51:eb:7e:21:10:6d:0e:59:76:d2:19:db: 68:df:f0:87:bb:00:ee:19:50:6b:53:96:d0:b4:95: e9:d2:90:8c:99:27:ff:67:40:93:da:ef:91:5e:35: a6:bf:46:27:f8:51:af:d9:e9:09:f4:06:dc:3b:cf: 9e:59:0f:35:75:72:c3:77:4c:36:f2:09:11:78:1a: 5b:56:4b:8d:13:d3:48:52:ae:d9:7d:d5:e7:14:24: 28:a8:8e:16:2f:34:87:27:bd:31:f4:02:ac:23:e1: 08:11:03:77:cf:62:b4:1f:ac:7a:fa:32:c9:2a:fe: ce:d7:3e:43:82:8a:21:4c:fd:cc:c2:7f:44:de:3f: f3:d1:10:0a:e8:ef:8a:8d:d2:1f:37:98:54:c9:d5: 27:fb:e1:5b:48:0b:cb:f9:28:97:84:cf:e7:cc:56: eb:38:c7:a4:28:19:12:30:e4:95:1d:af:6b:41:7d: d4:e8:99:fe:3a:43:a7:f8:44:e1:4c:0b:00:65:c8: 14:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:65:BB:40:63:E3:9C:1A:5D:8B:DE:76:FF:7C:CD:98:EA:4D:FA:C7 X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/11763FC8648D11F0950AB94BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b6a0::/32 Signature Algorithm: sha256WithRSAEncryption bd:88:f4:fa:e1:bc:c3:e8:e6:d3:41:61:75:a6:96:2c:18:48: 9e:f5:e8:94:68:f5:06:82:f5:4d:79:5c:43:94:b4:91:ac:44: d2:09:f7:25:6f:e6:db:95:e5:2b:da:01:de:bc:3f:48:c1:52: b7:40:64:11:5c:9a:8d:21:79:a1:a1:86:09:e1:96:86:e5:f1: fb:77:95:a6:a4:37:e1:e8:72:ab:45:43:d9:9d:3a:04:1a:3f: ef:46:60:f4:b1:89:b3:59:77:56:59:20:f2:db:2d:0e:3b:91: 96:22:7f:c2:01:e9:e6:c4:6f:81:0c:cb:ed:fd:b8:4d:60:7e: 7b:39:8d:a2:31:4c:f8:d2:e8:26:cf:04:24:76:03:a5:7e:37: f2:07:51:60:37:29:ef:1e:78:6f:0f:34:df:0d:95:5e:13:44: 09:5d:bb:0f:e9:e4:9b:24:c2:67:06:a3:25:be:b8:b4:2a:7e: fa:23:c0:b8:65:e8:89:03:d8:1a:5a:87:06:9a:ea:b8:c4:c7: 36:8f:8e:bf:32:de:cf:b1:a8:d3:1c:55:e8:80:68:b7:0a:44: 7f:94:d7:01:27:0b:03:06:88:74:e5:48:66:05:62:e2:2f:10: 9e:00:b9:53:69:20:55:7f:8a:ab:4f:da:6c:22:9f:a4:26:1d: 23:43:a6:4e -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjUwNzE5MTA0MjI5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdiNzY5NS04OTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZpkpwLE+ypomr04RWYdnLUbat9B7tx+3y/o4Jz0EFZx4FBpKrrfOom3rDmv ckOl7Ek0CqUxt17wOmKQelpR634hEG0OWXbSGdto3/CHuwDuGVBrU5bQtJXp0pCM mSf/Z0CT2u+RXjWmv0Yn+FGv2ekJ9AbcO8+eWQ81dXLDd0w28gkReBpbVkuNE9NI Uq7ZfdXnFCQoqI4WLzSHJ70x9AKsI+EIEQN3z2K0H6x6+jLJKv7O1z5DgoohTP3M wn9E3j/z0RAK6O+KjdIfN5hUydUn++FbSAvL+SiXhM/nzFbrOMekKBkSMOSVHa9r QX3U6Jn+OkOn+EThTAsAZcgUgwIDAQABo4ICljCCApIwHQYDVR0OBBYEFPxlu0Bj 45waXYvedv98zZjqTfrHMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzNCQjAvQzEyRTg0MkM1NjY4MTFFRjhFNkE3NzVEQzRGOUFFMDIvMTE3NjNGQzg2 NDhEMTFGMDk1MEFCOTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAbagMA0GCSqGSIb3DQEBCwUAA4IBAQC9iPT64bzD6ObT QWF1ppYsGEie9eiUaPUGgvVNeVxDlLSRrETSCfclb+bbleUr2gHevD9IwVK3QGQR XJqNIXmhoYYJ4ZaG5fH7d5WmpDfh6HKrRUPZnToEGj/vRmD0sYmzWXdWWSDy2y0O O5GWIn/CAenmxG+BDMvt/bhNYH57OY2iMUz40ugmzwQkdgOlfjfyB1FgNynvHnhv DzTfDZVeE0QJXbsP6eSbJMJnBqMlvri0Kn76I8C4ZeiJA9gaWocGmuq4xMc2j46/ Mt7PsajTHFXogGi3CkR/lNcBJwsDBoh05UhmBWLiLxCeALlTaSBVf4qrT9psIp+k Jh0jQ6ZO -----END CERTIFICATE-----Generated at Sun Jul 20 16:39:18 2025 by rpki-client