$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/4777E5245CAC11F0AEA97F4CC4F9AE02.roa File: 4777E5245CAC11F0AEA97F4CC4F9AE02.roa (raw, json) Hash identifier: rBs6jKsXb4pJx+SYnA3vFhpQEUoRgu8wgVzo1RO1me8= Subject key identifier: 18:62:55:72:95:CC:95:13:69:FA:84:B0:BC:8C:2F:78:A3:6B:CB:08 Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Certificate serial: 88 Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/4777E5245CAC11F0AEA97F4CC4F9AE02.roa Signing time: Wed 09 Jul 2025 10:05:45 +0000 ROA not before: Wed 09 Jul 2025 10:05:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212831 IP address blocks: 2401:f860:ce00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Validity Not Before: Jul 9 10:05:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=686e3ef9-2359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:55:7c:df:5e:76:8f:ca:e5:7c:08:01:1c: b8:f8:6b:5c:20:68:81:6d:81:42:82:56:0f:13:4e: d3:f3:cb:fb:c9:55:33:40:ec:34:e7:b9:71:ae:5f: 51:d2:4d:0f:93:94:02:68:ce:0f:30:54:b2:8d:89: 22:81:e3:46:ae:ce:56:68:73:f3:30:f8:3d:3e:01: a4:b5:cc:ae:ef:4a:c6:b4:4f:46:f3:6a:c0:71:3b: 31:32:27:9b:ce:2d:b1:e0:01:1b:78:a2:15:63:0e: 30:01:29:ea:60:39:f7:4f:90:3b:15:0e:fb:c0:b8: eb:52:d4:12:bf:ed:f1:1e:f0:09:e4:2d:bb:ee:41: 1a:01:75:2f:5a:ec:72:3e:62:d5:1a:a8:99:df:95: 2c:9e:46:17:bb:8b:cc:11:a2:09:28:ef:1f:85:79: 03:cd:70:68:29:fc:2a:7f:fa:b0:1e:a5:e1:12:47: 53:3e:cf:be:c5:9b:22:37:f9:dc:ad:29:99:3e:79: 73:a8:bf:10:d0:37:02:96:1e:e1:14:3d:bc:bc:06: 92:5e:18:da:91:e7:69:f2:3d:ec:ca:02:f5:ee:ef: 6c:8f:f0:ff:9a:51:ff:18:1f:4b:58:46:56:cc:f4: ee:d4:d4:cf:c5:24:01:c6:f7:25:7b:31:f9:75:0d: 82:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:62:55:72:95:CC:95:13:69:FA:84:B0:BC:8C:2F:78:A3:6B:CB:08 X509v3 Authority Key Identifier: keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/4777E5245CAC11F0AEA97F4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:f860:ce00::/40 Signature Algorithm: sha256WithRSAEncryption 8e:99:9f:3a:bf:94:f5:65:c4:05:bc:74:d1:35:d2:d2:a3:1a: 6b:cc:87:e6:a2:16:d5:f5:f4:b7:1e:67:fe:14:87:88:f4:82: fd:76:d3:72:1f:9a:d0:ea:06:89:05:e7:74:23:f0:08:23:4a: 21:93:20:5e:5a:46:fd:67:ed:df:03:c5:73:21:f0:e2:93:dc: f0:08:d6:ea:68:5d:b9:67:ca:06:27:33:a8:34:db:1c:27:3a: 5f:1e:55:87:22:0f:55:3e:04:3a:db:b1:71:f5:aa:20:30:3a: 87:09:29:83:c1:e6:57:eb:da:13:47:4c:78:d2:cf:d7:9b:ac: ab:bd:5c:8d:dc:a3:62:60:ac:f9:e0:19:4d:22:54:c8:09:da: 67:ed:d0:41:77:b0:90:37:69:3d:d6:f3:ab:8d:47:c1:ae:79: 4f:aa:32:69:16:1c:16:02:4d:03:6c:8f:86:88:0e:b2:65:b4: 9d:4f:3b:fc:5b:d8:cc:77:c4:47:c9:47:39:12:2b:65:7a:a1: 65:2d:81:5b:e7:58:e0:c5:15:0d:6b:5b:1d:6b:6d:76:90:59: f2:f5:6f:7e:77:ce:93:c0:d7:c0:8d:6c:2a:6d:cf:3e:bf:cb: 51:a9:7a:72:8a:3e:2c:55:18:30:04:61:2a:8b:f5:b1:5e:22: 29:db:69:d8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDOTgxMTAvBgNVBAUTKEZGOENDQkU2MTg3NTVBMUY1MTk5QkQwQzgyNzYwRThF REI4Rjg1QkEwHhcNMjUwNzA5MTAwNTQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZlM2VmOS0yMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1ZVfN9edo/K5XwIARy4+GtcIGiBbYFCglYPE07T88v7yVUzQOw057lxrl9R 0k0Pk5QCaM4PMFSyjYkigeNGrs5WaHPzMPg9PgGktcyu70rGtE9G82rAcTsxMieb zi2x4AEbeKIVYw4wASnqYDn3T5A7FQ77wLjrUtQSv+3xHvAJ5C277kEaAXUvWuxy PmLVGqiZ35UsnkYXu4vMEaIJKO8fhXkDzXBoKfwqf/qwHqXhEkdTPs++xZsiN/nc rSmZPnlzqL8Q0DcClh7hFD28vAaSXhjakedp8j3sygL17u9sj/D/mlH/GB9LWEZW zPTu1NTPxSQBxvclezH5dQ2C9QIDAQABo4IClzCCApMwHQYDVR0OBBYEFBhiVXKV zJUTafqEsLyML3ija8sIMB8GA1UdIwQYMBaAFP+My+YYdVofUZm9DIJ2Do7bj4W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkM5OC9BQkFGRjVFQTA2 MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdoOVJtYjBNZ25ZT2p0dVBo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJDOTgvQUJBRkY1RUEwNjEyMTFGMDhFOUFFNTI5QzRGOUFFMDIvNDc3N0U1MjQ1 Q0FDMTFGMEFFQTk3RjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkAfhgzjANBgkqhkiG9w0BAQsFAAOCAQEAjpmfOr+U9WXE Bbx00TXS0qMaa8yH5qIW1fX0tx5n/hSHiPSC/XbTch+a0OoGiQXndCPwCCNKIZMg XlpG/Wft3wPFcyHw4pPc8AjW6mhduWfKBiczqDTbHCc6Xx5VhyIPVT4EOtuxcfWq IDA6hwkpg8HmV+vaE0dMeNLP15usq71cjdyjYmCs+eAZTSJUyAnaZ+3QQXewkDdp Pdbzq41Hwa55T6oyaRYcFgJNA2yPhogOsmW0nU87/FvYzHfER8lHORIrZXqhZS2B W+dY4MUVDWtbHWttdpBZ8vVvfnfOk8DXwI1sKm3PPr/LUal6coo+LFUYMARhKov1 sV4iKdtp2A== -----END CERTIFICATE-----Generated at Sun Jul 20 07:05:32 2025 by rpki-client