$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/81C87DDE6C8311EFB20D5276C4F9AE02.roa File: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (raw, json) Hash identifier: wTzR2Kl8HLux7RLKUCKwWDVl26livIquwtiZpHpO5LA= Subject key identifier: 9F:C4:73:45:C3:7D:CD:84:3E:E6:8B:96:D4:14:3A:44:C1:97:B3:ED Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Certificate serial: C7 Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/81C87DDE6C8311EFB20D5276C4F9AE02.roa Signing time: Mon 07 Jul 2025 06:13:24 +0000 ROA not before: Mon 07 Jul 2025 06:13:24 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45691 IP address blocks: 2001:df3:f6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Validity Not Before: Jul 7 06:13:24 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686b6584-3fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:ed:0d:4a:d5:64:0f:53:ab:38:02:86:7f: cc:a2:c5:10:cc:2a:07:0d:e3:31:db:bf:42:23:bb: 8b:39:ea:86:7e:ad:04:45:da:ce:68:ec:ad:70:57: bf:ce:b4:49:35:82:9d:74:7a:77:bd:c9:c6:9a:c1: ee:bc:f6:32:c0:a6:be:ea:79:e6:cb:2b:aa:6f:81: 1e:d7:62:46:db:a2:73:75:0d:dc:04:5d:79:e5:17: 33:13:66:c4:c9:7e:e5:a4:7c:c3:8e:55:62:95:7e: 6d:19:9d:d3:76:60:01:84:e4:1f:1d:c1:bc:d9:2f: fb:37:71:5b:af:ec:f3:24:08:81:61:d5:7d:ac:0b: 45:ee:30:c0:79:0b:7f:d9:93:3e:a8:d0:25:c0:c9: 7c:b0:85:18:56:af:a5:82:d0:46:20:d0:10:ac:01: 52:ce:16:fe:ed:90:84:e8:62:75:cd:40:1b:1f:96: c7:ce:87:8a:4f:b1:b4:0a:79:dc:be:b4:97:5b:cf: 56:97:93:f7:0f:c2:82:0d:7e:bd:7b:7c:94:3f:71: 09:d4:18:02:8f:dc:c1:a6:cd:7e:a5:e4:3b:c1:e9: 6a:61:ad:8a:19:5d:16:54:b1:84:07:0f:75:ca:ad: 75:6a:2a:3a:4f:1b:da:c1:5d:71:76:0b:46:c1:a3: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C4:73:45:C3:7D:CD:84:3E:E6:8B:96:D4:14:3A:44:C1:97:B3:ED X509v3 Authority Key Identifier: keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/81C87DDE6C8311EFB20D5276C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:f6c0::/48 Signature Algorithm: sha256WithRSAEncryption 4e:d4:4e:8e:2f:f1:90:57:c7:81:d3:71:d0:ab:e4:0b:19:ea: b4:20:f8:e4:ec:dd:b4:2c:ed:40:99:54:01:03:56:ac:1c:40: a5:ee:a7:4d:70:85:b5:eb:3b:2b:e6:c4:96:ee:1f:1c:b4:3a: 91:4b:8e:3f:2f:91:23:f8:33:46:e8:ad:2d:6e:d8:b5:83:36: e8:73:21:4c:dc:50:a8:60:51:cb:e9:37:a3:95:f9:9c:f5:8b: 47:6b:1d:e7:ed:ff:9d:74:12:ec:9f:71:8b:34:8b:64:98:03: 73:ee:15:5c:fd:ab:fe:1e:02:12:ff:e1:ef:e5:c5:e7:f7:a1: 72:4a:5d:ac:10:79:87:c8:90:bb:48:53:5d:45:0f:0a:d5:cd: 39:4a:9d:3c:9b:cc:3b:1a:85:4f:8b:7b:0e:72:6f:9e:fe:51: 19:78:1e:ab:ce:6c:e3:4f:ca:ca:dc:af:a1:c6:3e:71:d2:ac: f3:a2:dc:b3:87:35:9b:7f:49:0b:f5:bd:c5:3c:20:9e:e3:88: cf:96:22:85:09:7a:e1:7c:3f:7b:4e:6a:20:2c:a1:1c:52:ba: 3b:e0:04:cb:0d:7f:72:8a:a5:07:c0:74:09:36:46:02:f1:a4: a5:bf:f6:81:6f:69:81:5b:5c:ea:c6:37:3f:32:09:01:57:a0: ab:16:ab:ba -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKDMzOTNGOUQwNzBCMkU3MDk0OUFDQTJBQUNDOEU2NUU4 OTBFNzQwOTkwHhcNMjUwNzA3MDYxMzI0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZiNjU4NC0zZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PLtDUrVZA9TqzgChn/MosUQzCoHDeMx279CI7uLOeqGfq0ERdrOaOytcFe/ zrRJNYKddHp3vcnGmsHuvPYywKa+6nnmyyuqb4Ee12JG26JzdQ3cBF155RczE2bE yX7lpHzDjlVilX5tGZ3TdmABhOQfHcG82S/7N3Fbr+zzJAiBYdV9rAtF7jDAeQt/ 2ZM+qNAlwMl8sIUYVq+lgtBGINAQrAFSzhb+7ZCE6GJ1zUAbH5bHzoeKT7G0Cnnc vrSXW89Wl5P3D8KCDX69e3yUP3EJ1BgCj9zBps1+peQ7welqYa2KGV0WVLGEBw91 yq11aio6TxvawV1xdgtGwaPJ/QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJ/Ec0XD fc2EPuaLltQUOkTBl7PtMB8GA1UdIwQYMBaAFDOT+dBwsucJSayiqsyOZeiQ50CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi84NjExRTYyRTMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3bEpyS0txekk1bDZKRG5R SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRCNzIvODYxMUU2MkUzMUY0MTFFRkFFOTFBMDBDQzRGOUFFMDIvODFDODdEREU2 QzgzMTFFRkIyMEQ1Mjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3z9sAwDQYJKoZIhvcNAQELBQADggEBAE7UTo4v8ZBX x4HTcdCr5AsZ6rQg+OTs3bQs7UCZVAEDVqwcQKXup01whbXrOyvmxJbuHxy0OpFL jj8vkSP4M0borS1u2LWDNuhzIUzcUKhgUcvpN6OV+Zz1i0drHeft/510EuyfcYs0 i2SYA3PuFVz9q/4eAhL/4e/lxef3oXJKXawQeYfIkLtIU11FDwrVzTlKnTybzDsa hU+Lew5yb57+URl4HqvObONPysrcr6HGPnHSrPOi3LOHNZt/SQv1vcU8IJ7jiM+W IoUJeuF8P3tOaiAsoRxSujvgBMsNf3KKpQfAdAk2RgLxpKW/9oFvaYFbXOrGNz8y CQFXoKsWq7o= -----END CERTIFICATE-----Generated at Sun Jul 20 14:33:49 2025 by rpki-client