$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/B1F01F2A025C11F0BCAB0F12C4F9AE02.roa File: B1F01F2A025C11F0BCAB0F12C4F9AE02.roa (raw, json) Hash identifier: +Ut5WlY4tLzmqYC0jkELWtzN6twFYtYwRVK0QW4TmG4= Subject key identifier: 6C:B3:8D:A7:2D:0D:67:CD:C0:72:73:A7:E3:D6:39:48:C5:22:C7:D8 Certificate issuer: /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Certificate serial: 0FA3 Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/B1F01F2A025C11F0BCAB0F12C4F9AE02.roa Signing time: Sat 30 Aug 2025 18:08:07 +0000 ROA not before: Sat 30 Aug 2025 18:08:07 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153038 IP address blocks: 2403:21c0::/32 maxlen: 32 2403:21c0::/36 maxlen: 36 2403:21c0:1000::/36 maxlen: 36 2403:21c0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4003 (0xfa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Validity Not Before: Aug 30 18:08:07 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68b33e07-0a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:1b:53:eb:56:39:c1:71:a9:5e:e0:f0:74: 80:a9:29:1b:99:f2:b5:b5:2a:f9:87:43:bf:1e:a0: 3b:7f:28:52:7e:3b:71:0d:47:2c:3d:5d:eb:cf:6b: 27:15:95:eb:07:08:47:dd:36:a5:fc:3d:44:3d:00: a3:0e:be:1d:54:e2:45:c4:c9:ca:5e:81:fd:ec:29: 7a:46:86:1d:b8:81:fe:a1:5e:90:38:1a:7e:4d:c0: 5d:57:43:e6:0d:f9:ea:98:bf:0c:99:1a:56:e9:57: fc:1b:bf:f3:87:00:87:32:46:ed:fa:58:4f:18:0d: ed:6b:13:d7:c6:54:75:98:74:94:ce:e3:c1:da:a4: 05:88:c8:c2:f5:26:e9:d2:e5:a1:b3:bb:eb:41:b6: 4b:6f:7f:ed:13:ec:a3:aa:73:d6:b1:47:90:1e:8d: c6:50:42:5a:ab:1e:ff:7f:b0:e2:13:f3:dc:94:b1: d7:24:da:aa:de:66:0a:07:f6:ee:81:f4:b5:34:91: 79:39:1d:57:9c:81:30:cb:e8:32:fe:8a:4d:ce:cb: 7f:92:8a:98:8f:b0:65:5d:04:7f:25:74:c4:df:67: 28:eb:fb:59:5a:be:0e:48:94:1f:f1:96:2a:fa:45: 31:44:a7:b5:30:54:9b:04:4e:cb:8f:c5:7d:f2:55: 92:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B3:8D:A7:2D:0D:67:CD:C0:72:73:A7:E3:D6:39:48:C5:22:C7:D8 X509v3 Authority Key Identifier: keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/B1F01F2A025C11F0BCAB0F12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:21c0::/32 Signature Algorithm: sha256WithRSAEncryption 44:b7:a0:b8:f3:90:99:6c:6e:83:5b:15:bc:00:3f:ca:5b:e9: 70:2d:e8:00:2e:b5:e3:37:8e:f8:f7:a8:0d:c9:9d:67:32:d3: e1:9c:48:7c:73:75:b4:6c:2b:7b:fc:ab:62:01:64:63:46:13: 80:20:83:0f:9f:45:b0:e3:31:17:75:8f:6c:1a:42:5c:1c:f6: b9:90:4a:c9:5f:e6:20:1e:dc:84:ec:98:ca:50:d1:df:15:75: 07:8d:ef:25:be:46:b0:68:4d:d8:fa:c1:01:24:4b:c2:b6:ad: 2a:e9:5f:c6:74:fa:9a:72:eb:a6:40:26:55:8e:df:cd:d9:f3: 06:67:f3:04:7f:bb:ce:19:18:20:03:92:a8:92:ac:a2:04:2a: 47:e9:ce:9a:f7:b9:8c:58:a2:33:e3:3a:ab:62:f1:ed:50:2c: fd:93:ca:3a:5f:cf:63:4a:f4:29:e1:84:1c:4d:a3:13:12:34: 33:08:84:89:69:ae:2a:00:24:92:ca:3a:36:5d:1e:43:49:e7: 20:8e:f6:26:0d:fa:e9:ff:b5:92:4c:e0:8f:f1:b9:17:53:fe: 36:75:53:0d:99:d3:f5:f5:ef:72:3e:7e:3b:55:1a:eb:50:f0: 4d:e0:86:0d:cd:46:5c:9a:0e:da:bc:3c:17:e0:79:28:45:34: d2:ba:b2:36 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICD6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2M0QxMTAvBgNVBAUTKEYyMjFFOTQzMkExOUYyODUwNzgzMUIxMkVEODZCQzRC QjU5NjM5ODEwHhcNMjUwODMwMTgwODA3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzM2UwNy0wYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt70bU+tWOcFxqV7g8HSAqSkbmfK1tSr5h0O/HqA7fyhSfjtxDUcsPV3rz2sn FZXrBwhH3Tal/D1EPQCjDr4dVOJFxMnKXoH97Cl6RoYduIH+oV6QOBp+TcBdV0Pm DfnqmL8MmRpW6Vf8G7/zhwCHMkbt+lhPGA3taxPXxlR1mHSUzuPB2qQFiMjC9Sbp 0uWhs7vrQbZLb3/tE+yjqnPWsUeQHo3GUEJaqx7/f7DiE/PclLHXJNqq3mYKB/bu gfS1NJF5OR1XnIEwy+gy/opNzst/koqYj7BlXQR/JXTE32co6/tZWr4OSJQf8ZYq +kUxRKe1MFSbBE7Lj8V98lWSOQIDAQABo4ICljCCApIwHQYDVR0OBBYEFGyzjact DWfNwHJzp+PWOUjFIsfYMB8GA1UdIwQYMBaAFPIh6UMqGfKFB4MbEu2GvEu1ljmB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTYzRC9GOUM5NzY2Qzcy NjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhvVUhneHNTN1lhOFM3V1dP WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpSHBReW9aOG9VSGd4c1M3WWE4UzdXV09ZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk2M0QvRjlDOTc2NkM3MjY1MTFFOThCNzFCQjM0QzRGOUFFMDIvQjFGMDFGMkEw MjVDMTFGMEJDQUIwRjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAyHAMA0GCSqGSIb3DQEBCwUAA4IBAQBEt6C485CZbG6D WxW8AD/KW+lwLegALrXjN47496gNyZ1nMtPhnEh8c3W0bCt7/KtiAWRjRhOAIIMP n0Ww4zEXdY9sGkJcHPa5kErJX+YgHtyE7JjKUNHfFXUHje8lvkawaE3Y+sEBJEvC tq0q6V/GdPqacuumQCZVjt/N2fMGZ/MEf7vOGRggA5KokqyiBCpH6c6a97mMWKIz 4zqrYvHtUCz9k8o6X89jSvQp4YQcTaMTEjQzCISJaa4qACSSyjo2XR5DSecgjvYm Dfrp/7WSTOCP8bkXU/42dVMNmdP19e9yPn47VRrrUPBN4IYNzUZcmg7avDwX4Hko RTTSurI2 -----END CERTIFICATE-----Generated at Mon Sep 8 00:08:30 2025 by rpki-client