$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa File: 9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (raw, json) Hash identifier: qjbaR5DPgSKsm7fnzDHbXrkez/bN/PhLzRqIXdA5oKI= Subject key identifier: 6E:9C:18:EB:5C:A3:31:14:2C:8A:AB:A1:77:AE:DA:1C:24:DB:E3:6B Certificate issuer: /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Certificate serial: 0C Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa Signing time: Thu 17 Jul 2025 06:59:47 +0000 ROA not before: Thu 17 Jul 2025 06:59:47 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 135060 IP address blocks: 2001:df5:df40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Validity Not Before: Jul 17 06:59:47 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68789f62-683b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ba:ab:16:8c:cd:0b:4a:56:78:cb:45:37:14: 44:b3:5b:d7:6d:a5:b3:7e:b4:7c:88:e0:d0:47:02: fd:b3:b4:d6:e1:b5:9b:d0:cc:14:1f:86:38:89:9e: de:1c:3f:d7:b4:e9:e9:d8:72:92:ca:09:6e:6b:bb: 23:38:45:11:38:12:74:a3:b3:ec:75:8a:a9:33:76: 77:fd:29:7c:7b:39:02:fd:2e:b4:54:66:ef:bd:2c: 23:b2:06:82:33:ea:a5:d3:b0:fe:c7:b3:8b:4c:82: 64:87:c6:e8:61:e8:4c:a6:c6:ab:f0:5d:d5:03:e9: 36:ea:24:22:ee:c3:5a:01:fe:f4:aa:a5:28:fd:dd: 9d:e9:64:04:04:97:b1:b9:27:0c:56:31:a2:f5:98: 76:4b:2b:ae:7a:46:c3:f8:58:2c:a4:d7:78:e6:32: ed:85:f3:90:de:71:c9:65:b2:f1:a4:55:1a:00:47: 64:f3:39:02:67:03:66:69:0e:2c:9c:56:44:da:92: 58:3f:e5:36:eb:9a:c4:1d:c2:bb:2e:11:41:82:92: 15:c8:08:c8:2d:c1:19:a2:52:b6:f6:49:bf:3e:d4: d0:7f:7f:be:2a:83:06:c3:3e:52:69:e5:87:c5:36: 8f:68:80:3d:e6:a7:72:76:06:8b:66:29:1b:d9:25: a4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9C:18:EB:5C:A3:31:14:2C:8A:AB:A1:77:AE:DA:1C:24:DB:E3:6B X509v3 Authority Key Identifier: keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df5:df40::/48 Signature Algorithm: sha256WithRSAEncryption 5e:01:c1:e3:c5:21:33:8b:d9:56:6c:3f:b5:84:13:38:fe:f0: c4:8c:f7:6c:f7:92:37:74:39:09:57:80:7c:5b:9d:39:dc:81: a1:7e:84:f4:36:cc:a4:55:2b:d1:9f:53:7a:a6:0d:75:1c:b9: 1b:30:2b:bd:f9:53:ab:31:87:a7:1e:c3:b9:6c:35:ae:d4:01: 40:63:55:38:cd:5d:ef:9e:e1:69:55:cb:f6:b3:17:ea:d3:85: 3a:33:3a:3d:9f:eb:c5:c2:8d:5e:c1:a8:79:4f:fe:ab:15:ee: 54:33:03:3c:09:a1:84:c0:e2:87:18:16:48:d2:be:5b:b4:4a: 3c:55:85:b3:36:a8:50:fe:c9:ad:23:0b:1c:13:fa:c7:1f:24: 80:5f:78:cd:a2:36:97:e7:32:de:50:b9:9a:07:d0:2b:f2:8a: 05:f0:5e:98:69:60:04:6c:b5:56:bf:6f:b1:2a:ad:bd:92:a3: 5e:5a:6d:dc:3a:87:bf:45:e3:b4:2e:2e:1a:61:96:d2:71:2c: c0:54:70:09:68:08:28:d5:c3:29:f0:09:89:31:a2:c1:29:6c: b2:f0:d4:ec:4e:64:82:84:1f:9b:0c:64:3a:e2:b0:50:5e:e3: 91:74:db:c3:a9:27:a4:d9:b4:9f:37:c7:00:98:72:b2:29:91: 9f:ab:73:a6 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzE4QzExMC8GA1UEBRMoQkU0MzAxRTJBNDBCNEY2QTQ3RTE4NUE2NzU3RDlBNkU4 RDdDNzQ0MjAeFw0yNTA3MTcwNjU5NDdaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4Nzg5ZjYyLTY4M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiuqsWjM0LSlZ4y0U3FESzW9dtpbN+tHyI4NBHAv2ztNbhtZvQzBQfhjiJnt4c P9e06enYcpLKCW5ruyM4RRE4EnSjs+x1iqkzdnf9KXx7OQL9LrRUZu+9LCOyBoIz 6qXTsP7Hs4tMgmSHxuhh6EymxqvwXdUD6TbqJCLuw1oB/vSqpSj93Z3pZAQEl7G5 JwxWMaL1mHZLK656RsP4WCyk13jmMu2F85DeccllsvGkVRoAR2TzOQJnA2ZpDiyc VkTaklg/5TbrmsQdwrsuEUGCkhXICMgtwRmiUrb2Sb8+1NB/f74qgwbDPlJp5YfF No9ogD3mp3J2BotmKRvZJaQvAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUbpwY61yj MRQsiquhd67aHCTb42swHwYDVR0jBBgwFoAUvkMB4qQLT2pH4YWmdX2abo18dEIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMThDL0NFOUIwOUVFNjE1 NDExRjBCQjUwRkEzN0M0RjlBRTAyL3ZrTUI0cVFMVDJwSDRZV21kWDJhYm8xOGRF SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmtNQjRxUUxUMnBINFlXbWRYMmFibzE4ZEVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzE4Qy9DRTlCMDlFRTYxNTQxMUYwQkI1MEZBMzdDNEY5QUUwMi85RkI0Q0Q5NDYy REIxMUYwQjhBNEZFNTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfXfQDANBgkqhkiG9w0BAQsFAAOCAQEAXgHB48UhM4vZ Vmw/tYQTOP7wxIz3bPeSN3Q5CVeAfFudOdyBoX6E9DbMpFUr0Z9TeqYNdRy5GzAr vflTqzGHpx7DuWw1rtQBQGNVOM1d757haVXL9rMX6tOFOjM6PZ/rxcKNXsGoeU/+ qxXuVDMDPAmhhMDihxgWSNK+W7RKPFWFszaoUP7JrSMLHBP6xx8kgF94zaI2l+cy 3lC5mgfQK/KKBfBemGlgBGy1Vr9vsSqtvZKjXlpt3DqHv0XjtC4uGmGW0nEswFRw CWgIKNXDKfAJiTGiwSlssvDU7E5kgoQfmwxkOuKwUF7jkXTbw6knpNm0nzfHAJhy simRn6tzpg== -----END CERTIFICATE-----Generated at Sun Jul 20 13:59:20 2025 by rpki-client