$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/D24B5EDE93C911F09C542E6EC4F9AE02.roa File: D24B5EDE93C911F09C542E6EC4F9AE02.roa (raw, json) Hash identifier: tlZH4+U+/czJd2gewk6CoHNSlqFgULLAe9q38ySSPEA= Subject key identifier: BA:AE:BE:F0:E3:21:35:D7:89:7E:38:E1:78:8D:DE:95:29:E7:33:21 Certificate issuer: /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405 Certificate serial: 28 Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/D24B5EDE93C911F09C542E6EC4F9AE02.roa Signing time: Wed 17 Sep 2025 13:25:47 +0000 ROA not before: Wed 17 Sep 2025 13:25:47 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154010 IP address blocks: 2402:1460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 07:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405 Validity Not Before: Sep 17 13:25:47 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68cab6db-e80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:92:39:b0:c7:21:5e:52:85:d5:23:70:14: b4:63:a9:f5:e5:b2:62:54:a9:af:bc:68:84:fe:9d: 75:37:d0:b5:d6:8d:b3:2c:41:4b:c0:d1:6f:54:72: a5:9e:d7:9f:b6:d5:24:54:d4:47:02:ae:69:15:76: 77:aa:e8:db:cb:2e:b6:21:2d:1d:10:ed:18:bf:af: fd:c2:53:d3:cc:ef:67:f7:48:9f:ae:ca:42:b8:b7: 16:fd:23:17:d6:db:6a:8a:f8:d9:48:08:cd:9c:b6: b4:2a:f9:c7:cb:ab:05:ff:cc:7a:43:1e:82:d0:e8: 44:7e:e9:06:d8:86:82:4b:65:48:45:68:a2:ad:6b: 4e:e1:ff:2b:c3:6a:0d:a3:83:55:b3:75:9f:f7:bb: 3b:66:68:c3:46:07:fb:bc:5c:3c:9a:38:02:74:a9: 1a:bd:5e:b1:0b:21:43:f8:fe:d4:ad:5a:47:70:65: b8:2e:46:a2:f3:96:02:58:71:2f:0f:9c:9c:fa:95: 57:56:1f:5c:8d:0f:5d:06:de:3b:a3:24:59:d5:db: a7:be:85:d0:7c:ec:7b:c1:4b:8a:de:de:2f:27:3e: b7:80:b0:f2:e8:fb:46:c8:e3:67:fb:94:32:f2:b5: f6:44:c5:1a:15:d3:ca:e5:5c:a4:22:9a:a9:58:4d: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AE:BE:F0:E3:21:35:D7:89:7E:38:E1:78:8D:DE:95:29:E7:33:21 X509v3 Authority Key Identifier: keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/D24B5EDE93C911F09C542E6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:1460::/32 Signature Algorithm: sha256WithRSAEncryption 04:8f:b9:75:f7:68:a3:0f:58:37:e9:34:1d:6d:3a:11:ff:14: db:aa:d1:a8:6c:c9:86:dc:80:5d:eb:72:f5:14:a0:f5:42:c1: 1d:e7:17:bc:f7:c5:66:b6:d2:da:b3:66:5d:79:76:86:27:6e: f0:56:45:da:04:8e:bc:9d:39:95:c2:a0:a1:a6:71:dd:57:58: c9:49:05:07:35:74:8f:f8:70:47:72:c1:9e:56:2e:d4:ea:6b: 08:c7:ba:f8:a5:0b:c6:17:c9:6e:f4:bc:3d:ea:bd:1b:15:2b: d3:f2:3c:36:34:38:84:92:61:e3:75:36:32:2e:42:11:8b:e2: 58:50:12:23:c2:dd:22:e5:bd:e2:0f:e9:92:23:75:bd:af:c1: 32:d5:8d:70:73:23:78:dd:10:93:23:b4:06:b4:6d:8c:dd:e1: fc:af:e3:f3:38:ef:6a:95:f7:50:79:5f:08:3c:3f:ec:80:2f: 5a:78:b4:4c:54:8f:9e:aa:bf:21:f1:0d:7a:37:12:a7:d7:74: c5:6e:8f:70:a8:8b:31:c2:d0:b1:d8:37:4d:19:fc:d9:32:95: 19:b8:6a:db:82:d7:4c:90:c7:95:ad:cc:b0:ed:ba:33:56:d8: 1b:81:d3:7b:e7:84:21:0b:33:1d:b0:3b:3f:0d:a2:23:e4:9b: 9b:b2:8f:2d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REY1NjExMC8GA1UEBRMoNjQ5M0IxOUY3Q0JGREYxOTA0QkM3NTJBQThFNEEzNDMw NjI2NTQwNTAeFw0yNTA5MTcxMzI1NDdaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4Y2FiNmRiLWU4MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMJZI5sMchXlKF1SNwFLRjqfXlsmJUqa+8aIT+nXU30LXWjbMsQUvA0W9UcqWe 15+21SRU1EcCrmkVdneq6NvLLrYhLR0Q7Ri/r/3CU9PM72f3SJ+uykK4txb9IxfW 22qK+NlICM2ctrQq+cfLqwX/zHpDHoLQ6ER+6QbYhoJLZUhFaKKta07h/yvDag2j g1WzdZ/3uztmaMNGB/u8XDyaOAJ0qRq9XrELIUP4/tStWkdwZbguRqLzlgJYcS8P nJz6lVdWH1yND10G3jujJFnV26e+hdB87HvBS4re3i8nPreAsPLo+0bI42f7lDLy tfZExRoV08rlXKQimqlYTaQ3AgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUuq6+8OMh NdeJfjjheI3elSnnMyEwHwYDVR0jBBgwFoAUZJOxn3y/3xkEvHUqqOSjQwYmVAUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2Lzc2RjgyMDUwNUJE MjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hrRXZIVXFxT1NqUXdZbVZB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkpPeG4zeV8zeGtFdkhVcXFPU2pRd1ltVkFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REY1Ni83NkY4MjA1MDVCRDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9EMjRCNUVERTkz QzkxMUYwOUM1NDJFNkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCFGAwDQYJKoZIhvcNAQELBQADggEBAASPuXX3aKMPWDfp NB1tOhH/FNuq0ahsyYbcgF3rcvUUoPVCwR3nF7z3xWa20tqzZl15doYnbvBWRdoE jrydOZXCoKGmcd1XWMlJBQc1dI/4cEdywZ5WLtTqawjHuvilC8YXyW70vD3qvRsV K9PyPDY0OISSYeN1NjIuQhGL4lhQEiPC3SLlveIP6ZIjdb2vwTLVjXBzI3jdEJMj tAa0bYzd4fyv4/M472qV91B5Xwg8P+yAL1p4tExUj56qvyHxDXo3EqfXdMVuj3Co izHC0LHYN00Z/NkylRm4atuC10yQx5WtzLDtujNW2BuB03vnhCELMx2wOz8NoiPk m5uyjy0= -----END CERTIFICATE-----Generated at Sun Nov 2 10:21:00 2025 by rpki-client