$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/EABF54FA7BC111EFA1A45E4BC4F9AE02.roa File: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (raw, json) Hash identifier: iP5vBpep621bA7XFAwnUEXsQLF6f2HgJTc6XMRta7XQ= Subject key identifier: CC:DC:10:8D:56:05:1F:8A:7F:80:48:2B:16:F4:5E:F5:D6:19:CA:89 Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: 98 Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/EABF54FA7BC111EFA1A45E4BC4F9AE02.roa Signing time: Fri 11 Jul 2025 07:13:37 +0000 ROA not before: Fri 11 Jul 2025 07:13:37 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 153042 IP address blocks: 2001:df3:fcc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=586F933176F6545435BB0697FE5F982A2093941B Validity Not Before: Jul 11 07:13:37 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6870b9a1-a6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4c:63:9e:6f:ea:e2:3d:51:6e:7e:8f:77:4d: 01:58:35:2c:14:fc:13:80:c3:be:46:f7:9a:79:5c: 00:cd:b4:f4:06:c6:78:35:87:44:4e:65:65:de:61: cd:2c:65:5e:6b:a9:6a:a9:f1:77:3f:57:b8:f6:6f: b1:75:5a:fa:46:f5:7f:39:48:e3:36:b8:01:54:97: 6a:ce:01:5d:fd:8b:3e:53:f5:d9:3f:b9:4e:4a:35: b7:07:cd:86:de:0d:ec:9d:1c:07:aa:6f:8b:41:25: 81:5e:7e:cf:fb:01:37:37:0a:d6:6d:ef:66:a4:7f: 6d:1c:a5:23:28:7d:7b:42:d7:cd:29:4a:72:7e:68: 1f:3b:28:d1:af:ac:32:a6:36:c0:16:a0:27:6e:be: 49:e0:f8:03:63:63:f6:9c:7d:5f:e6:b3:9e:d7:fe: 48:8f:06:38:82:6b:c8:81:e1:2c:a5:f4:01:af:af: d3:5f:fa:bc:11:f9:c1:1c:e9:4c:5f:36:a3:57:c2: 83:22:97:c3:7b:2c:44:32:93:2a:09:e4:49:e8:14: c3:52:b1:95:9d:8d:d6:db:a3:85:6e:58:76:01:a9: 82:c9:ac:6c:6a:a2:03:6f:04:71:b5:ad:d8:ab:8d: 01:5a:32:be:7b:f7:42:f7:d8:74:c8:01:97:40:e9: 2f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DC:10:8D:56:05:1F:8A:7F:80:48:2B:16:F4:5E:F5:D6:19:CA:89 X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/EABF54FA7BC111EFA1A45E4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:fcc0::/48 Signature Algorithm: sha256WithRSAEncryption 78:47:d7:73:a8:32:4b:cc:44:cd:3f:4d:11:3a:f3:9f:ef:ba: 52:90:f9:c6:db:55:90:30:15:89:dc:ee:2e:25:ef:30:d7:55: 9e:bb:b7:f7:19:62:c6:7a:80:07:5e:44:57:a1:b5:05:d4:2f: 1d:9f:41:04:51:21:54:fa:b7:25:15:ae:ab:26:d0:ac:7a:dc: fb:b4:f7:44:ef:d4:aa:41:4a:0d:2e:fd:ed:e6:ea:61:7e:f8: b6:92:22:a9:fd:db:0f:43:e3:e4:5b:16:37:a7:56:67:e8:49: 59:33:cf:ce:25:b1:76:fd:f1:b7:4b:d6:c2:e9:55:97:82:ca: 59:0c:2f:f7:1d:71:67:0a:36:05:0e:8d:32:cb:50:40:27:39: f7:e9:7a:51:5d:0f:e6:e2:5a:fb:f7:ee:2f:42:b3:c1:03:fe: cc:bf:b9:ae:33:75:1c:c7:e5:5f:a0:8f:bc:07:ca:4d:34:37: 5d:c2:0f:89:00:c2:8c:9e:1a:50:c6:35:86:0b:a1:46:50:52: aa:fc:7a:ae:a4:02:d6:3f:98:9f:3a:4c:bd:f7:f6:0c:41:cc: c2:e2:46:6d:7c:b8:37:6a:8b:8c:5b:e5:1b:a9:3d:c4:38:89: d1:5e:9f:0c:a4:74:af:48:65:31:d2:b4:a2:5f:26:25:c6:cb: 2f:71:26:4b -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MEQxMTAvBgNVBAUTKDU4NkY5MzMxNzZGNjU0NTQzNUJCMDY5N0ZFNUY5ODJB MjA5Mzk0MUIwHhcNMjUwNzExMDcxMzM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcwYjlhMS1hNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkxjnm/q4j1Rbn6Pd00BWDUsFPwTgMO+RveaeVwAzbT0BsZ4NYdETmVl3mHN LGVea6lqqfF3P1e49m+xdVr6RvV/OUjjNrgBVJdqzgFd/Ys+U/XZP7lOSjW3B82G 3g3snRwHqm+LQSWBXn7P+wE3NwrWbe9mpH9tHKUjKH17QtfNKUpyfmgfOyjRr6wy pjbAFqAnbr5J4PgDY2P2nH1f5rOe1/5IjwY4gmvIgeEspfQBr6/TX/q8EfnBHOlM XzajV8KDIpfDeyxEMpMqCeRJ6BTDUrGVnY3W26OFblh2AamCyaxsaqIDbwRxta3Y q40BWjK+e/dC99h0yAGXQOkvVQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMzcEI1W BR+Kf4BIKxb0XvXWGcqJMB8GA1UdIwQYMBaAFFhvkzF29lRUNbsGl/5fmCogk5Qb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUwRC9FRjhFM0RBQzdC QkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZGUTF1d2FYX2wtWUtpQ1Rs QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1MEQvRUY4RTNEQUM3QkJDMTFFRjkyRUUxQTY2QzRGOUFFMDIvRUFCRjU0RkE3 QkMxMTFFRkExQTQ1RTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3z/MAwDQYJKoZIhvcNAQELBQADggEBAHhH13OoMkvM RM0/TRE685/vulKQ+cbbVZAwFYnc7i4l7zDXVZ67t/cZYsZ6gAdeRFehtQXULx2f QQRRIVT6tyUVrqsm0Kx63Pu090Tv1KpBSg0u/e3m6mF++LaSIqn92w9D4+RbFjen VmfoSVkzz84lsXb98bdL1sLpVZeCylkML/cdcWcKNgUOjTLLUEAnOffpelFdD+bi Wvv37i9Cs8ED/sy/ua4zdRzH5V+gj7wHyk00N13CD4kAwoyeGlDGNYYLoUZQUqr8 eq6kAtY/mJ86TL339gxBzMLiRm18uDdqi4xb5RupPcQ4idFenwykdK9IZTHStKJf JiXGyy9xJks= -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:23 2025 by rpki-client