$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/CA9C62B6011911F0A7636250C4F9AE02.roa File: CA9C62B6011911F0A7636250C4F9AE02.roa (raw, json) Hash identifier: 7ysdJMJMSfwY+oJifcqCNWD3yAzN5pEUaePQMVaSij8= Subject key identifier: 85:34:87:6E:26:07:0E:D9:04:F6:10:7F:C3:D0:C3:4E:50:06:66:2A Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0B8B Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/CA9C62B6011911F0A7636250C4F9AE02.roa Signing time: Thu 28 Aug 2025 19:40:46 +0000 ROA not before: Thu 28 Aug 2025 19:40:46 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55569 IP address blocks: 2400:8800:1002::/48 maxlen: 48 2400:8800:1003::/48 maxlen: 48 2400:8800:1004::/48 maxlen: 48 2400:8800:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2955 (0xb8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Aug 28 19:40:46 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68b0b0be-3fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:83:6b:70:06:f6:d7:a6:0b:ed:16:91:bf: a6:c8:49:15:37:38:ec:f4:a6:ef:41:23:5d:62:57: 0e:3f:9c:d3:d6:1a:82:ed:3b:ea:37:7f:2b:4c:a2: 6c:11:d2:33:10:49:a4:fe:a3:e0:92:8d:0f:8c:a9: 75:30:36:44:c3:6d:77:b9:47:be:7e:1b:b4:f3:58: d7:9b:18:fe:36:8f:ee:64:cc:5d:18:75:ec:76:a1: 99:76:07:d0:5c:e7:7d:db:9d:37:c3:ae:3c:81:53: e9:a6:97:d6:48:74:3c:b6:56:bd:86:35:6b:5c:e2: 27:cd:d1:75:ff:2f:5e:4f:61:7b:96:2a:aa:25:13: f4:f6:3a:f2:0c:99:a3:fa:10:1f:76:5b:74:67:6a: dd:1d:de:0f:6c:1e:20:00:1d:7f:b1:56:f0:9d:85: c1:62:34:b2:17:95:2d:95:ea:9e:6e:a2:aa:63:5a: be:d3:a5:c0:99:f0:38:81:74:ee:15:86:87:7d:c0: f1:6b:87:47:5d:cc:cf:76:75:0d:18:d3:b8:7b:ab: 94:c6:dc:3d:22:09:7a:1c:df:4b:a5:e5:a4:c1:fe: dd:72:d1:36:3e:5c:8a:8f:51:c9:5b:90:4b:91:ff: f8:f6:ed:13:d2:4f:a7:4c:82:40:7a:69:23:bb:a8: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:34:87:6E:26:07:0E:D9:04:F6:10:7F:C3:D0:C3:4E:50:06:66:2A X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/CA9C62B6011911F0A7636250C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8800:1002::-2400:8800:1005:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 39:f2:21:3d:8b:45:28:a0:57:35:fa:06:00:c3:55:0b:40:43: 76:38:6c:d5:82:95:9c:58:13:20:02:52:7f:64:02:56:38:61: bf:c4:7b:52:73:72:26:86:a3:e2:9d:f9:a5:5d:32:f6:fc:24: e0:2d:e7:79:37:d2:3d:4a:c0:02:78:51:08:d6:aa:cb:5d:4e: b5:a4:e5:4c:cb:b7:53:26:f2:d9:f2:90:8b:b8:b5:5c:43:bf: df:4c:44:f6:6c:9a:1a:f7:47:b8:3c:7c:fa:d5:01:2b:89:f5: 99:65:20:46:19:6e:12:a1:63:40:f5:07:d4:a9:dc:1a:b8:45: ac:02:9d:76:4b:4b:ea:8b:43:6e:49:d9:99:b4:3a:9c:1a:3f: d7:5f:6c:f1:d0:c8:8e:62:65:7f:05:e1:6e:82:52:a7:64:8c: 60:e8:f0:5c:30:85:51:12:51:d0:6a:dc:bd:f7:de:1d:3e:72: 63:c3:2d:ae:f7:79:dd:00:09:45:0d:03:bd:d5:9d:30:70:c4: 4d:02:d8:0a:74:00:72:cb:ea:bc:a6:44:27:88:a9:d2:14:c8: 13:49:cc:e1:1d:d9:b6:ec:3f:63:88:bc:0c:9a:d7:7a:be:06: f6:a3:1f:65:6a:95:79:ed:ba:63:f6:2c:8f:7b:e1:94:f0:15: 8a:4c:ee:5d -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICC4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUwODI4MTk0MDQ2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwYjBiZS0zZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvmDa3AG9temC+0Wkb+myEkVNzjs9KbvQSNdYlcOP5zT1hqC7TvqN38rTKJs EdIzEEmk/qPgko0PjKl1MDZEw213uUe+fhu081jXmxj+No/uZMxdGHXsdqGZdgfQ XOd92503w648gVPpppfWSHQ8tla9hjVrXOInzdF1/y9eT2F7liqqJRP09jryDJmj +hAfdlt0Z2rdHd4PbB4gAB1/sVbwnYXBYjSyF5UtleqebqKqY1q+06XAmfA4gXTu FYaHfcDxa4dHXczPdnUNGNO4e6uUxtw9Igl6HN9LpeWkwf7dctE2PlyKj1HJW5BL kf/49u0T0k+nTIJAemkju6iOnQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFIU0h24m Bw7ZBPYQf8PQw05QBmYqMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvQTM3NEExQjY0NjcxMTFFQTgxQUJCMjVGQzRGOUFFMDIvQ0E5QzYyQjYw MTE5MTFGMEE3NjM2MjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgACMBQwEgMHASQAiAAQAgMHASQAiAAQBDANBgkqhkiG9w0BAQsFAAOC AQEAOfIhPYtFKKBXNfoGAMNVC0BDdjhs1YKVnFgTIAJSf2QCVjhhv8R7UnNyJoaj 4p35pV0y9vwk4C3neTfSPUrAAnhRCNaqy11OtaTlTMu3Uyby2fKQi7i1XEO/30xE 9myaGvdHuDx8+tUBK4n1mWUgRhluEqFjQPUH1KncGrhFrAKddktL6otDbknZmbQ6 nBo/119s8dDIjmJlfwXhboJSp2SMYOjwXDCFURJR0GrcvffeHT5yY8Mtrvd53QAJ RQ0DvdWdMHDETQLYCnQAcsvqvKZEJ4ip0hTIE0nM4R3Ztuw/Y4i8DJrXer4G9qMf ZWqVee26Y/Ysj3vhlPAVikzuXQ== -----END CERTIFICATE-----Generated at Tue Sep 9 06:41:44 2025 by rpki-client