$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/1D63B4248BB011F0A730E413C4F9AE02.roa File: 1D63B4248BB011F0A730E413C4F9AE02.roa (raw, json) Hash identifier: OyE30n/5T2aP2dUzdX/x+6s1iB5G8Z+cghgCmYn5BRE= Subject key identifier: 28:1C:D7:5F:EB:A1:4C:94:8E:1F:53:B3:65:C0:3D:A4:BE:5D:6D:35 Certificate issuer: /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A Certificate serial: 0125 Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/1D63B4248BB011F0A730E413C4F9AE02.roa Signing time: Sun 07 Sep 2025 06:01:37 +0000 ROA not before: Sun 07 Sep 2025 06:01:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152473 IP address blocks: 2001:df3:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131711, serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A Validity Not Before: Sep 7 06:01:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68bd1fc1-1142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:4b:95:dd:86:b6:df:9e:a6:9f:3d:01:8e: 31:32:3a:86:12:02:c5:99:66:bd:9f:a9:f6:37:08: 39:2e:a5:ef:bd:aa:7a:b0:83:37:1e:a7:31:72:4a: 8d:0b:b3:f5:81:93:fb:b9:f6:9c:0c:4b:24:e1:5e: 89:7d:50:08:2c:63:7a:7e:7a:26:77:b3:63:34:d4: 00:b8:1b:31:c7:92:f9:15:bb:be:e6:67:1e:35:b4: a1:1f:17:95:44:d9:d6:c6:3a:2e:c7:30:ad:60:d7: 29:59:3f:9a:3a:b4:ba:8b:2a:41:f3:a6:59:a3:cd: 38:35:d3:a8:0f:e1:a1:a8:be:4a:94:36:93:2c:09: 29:b8:55:4a:bb:d5:09:67:c1:74:58:fe:bc:01:a5: a1:a1:34:bf:1c:06:57:4f:e9:58:34:0f:ce:43:c5: ac:51:60:22:f4:9e:21:0a:45:a5:5b:43:f0:29:e9: 13:00:1d:83:63:5b:cb:e5:c5:ce:08:a1:ab:34:a0: e8:1d:be:ab:bc:c0:2f:1a:e4:ff:dd:dd:22:21:27: 68:0f:65:3f:ba:ab:2e:08:49:6e:a8:a6:67:8d:45: fd:d9:4e:6b:7a:3b:b6:df:79:52:61:b0:8f:d5:1b: d2:f7:a5:af:3a:2e:c3:21:76:b4:89:6d:6f:0e:71: 32:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1C:D7:5F:EB:A1:4C:94:8E:1F:53:B3:65:C0:3D:A4:BE:5D:6D:35 X509v3 Authority Key Identifier: keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/1D63B4248BB011F0A730E413C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 64:e3:95:3a:28:30:07:01:cb:e1:a6:0f:b3:a1:26:07:2a:e7: 89:94:01:1f:e8:d7:4a:c2:ae:d8:c0:82:eb:1f:7f:bd:ef:c6: c4:12:14:30:69:fc:2d:3f:d4:36:08:10:0c:93:b4:01:04:a9: 86:f8:49:6c:21:dd:40:a9:f8:d7:91:0d:33:f9:03:79:41:40: e7:e9:5f:0f:e0:59:8a:f3:ec:ef:31:82:74:d8:71:96:14:57: 5c:8c:40:61:6d:33:ef:df:bb:5b:07:d7:be:2d:52:1f:15:fd: 41:ff:f0:c6:1f:97:d6:29:65:dc:0b:86:18:d2:56:27:22:9a: ca:75:cf:77:4c:83:f0:25:21:7e:ed:df:ef:52:e2:28:16:32: a2:12:da:4c:5c:cb:4b:8f:76:14:9a:d3:ef:e5:69:a3:20:83: 22:1c:82:90:9b:31:15:5b:3d:cc:9c:a1:61:d4:00:86:17:f7: 3f:2a:bc:c8:18:85:a6:c7:e8:20:98:0f:78:dc:14:63:e6:07: 77:50:ec:b2:3e:f6:19:79:66:d7:5f:ac:24:6f:5a:83:6d:ef: 7d:1f:14:07:30:eb:dc:be:a4:ce:09:08:eb:e7:56:b1:ba:a4: a7:d7:53:8b:4b:2e:07:9d:23:f5:d1:c5:5d:b7:7f:92:a9:3c: 81:e8:02:c1 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3MTExMTAvBgNVBAUTKEYxQURCRDBFNzEzOTFERjIxMERFMzQ2MUU3NjU3OEI0 N0EwMTYyNEEwHhcNMjUwOTA3MDYwMTM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGJkMWZjMS0xMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJlLld2Gtt+epp89AY4xMjqGEgLFmWa9n6n2Nwg5LqXvvap6sIM3HqcxckqN C7P1gZP7ufacDEsk4V6JfVAILGN6fnomd7NjNNQAuBsxx5L5Fbu+5mceNbShHxeV RNnWxjouxzCtYNcpWT+aOrS6iypB86ZZo804NdOoD+GhqL5KlDaTLAkpuFVKu9UJ Z8F0WP68AaWhoTS/HAZXT+lYNA/OQ8WsUWAi9J4hCkWlW0PwKekTAB2DY1vL5cXO CKGrNKDoHb6rvMAvGuT/3d0iISdoD2U/uqsuCEluqKZnjUX92U5reju233lSYbCP 1RvS96WvOi7DIXa0iW1vDnEyAwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCgc11/r oUyUjh9Ts2XAPaS+XW01MB8GA1UdIwQYMBaAFPGtvQ5xOR3yEN40YedleLR6AWJK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTcxMS9BOTUwREZEQUM5 OTExMUVFODkxQkE0MTlDNEY5QUUwMi84YTI5RG5FNUhmSVEzalJoNTJWNHRIb0JZ a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhhMjlEbkU1SGZJUTNqUmg1MlY0dEhvQllrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzE3MTEvQTk1MERGREFDOTkxMTFFRTg5MUJBNDE5QzRGOUFFMDIvMUQ2M0I0MjQ4 QkIwMTFGMEE3MzBFNDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zdMAwDQYJKoZIhvcNAQELBQADggEBAGTjlTooMAcB y+GmD7OhJgcq54mUAR/o10rCrtjAgusff73vxsQSFDBp/C0/1DYIEAyTtAEEqYb4 SWwh3UCp+NeRDTP5A3lBQOfpXw/gWYrz7O8xgnTYcZYUV1yMQGFtM+/fu1sH174t Uh8V/UH/8MYfl9YpZdwLhhjSVicimsp1z3dMg/AlIX7t3+9S4igWMqIS2kxcy0uP dhSa0+/laaMggyIcgpCbMRVbPcycoWHUAIYX9z8qvMgYhabH6CCYD3jcFGPmB3dQ 7LI+9hl5ZtdfrCRvWoNt730fFAcw69y+pM4JCOvnVrG6pKfXU4tLLgedI/XRxV23 f5KpPIHoAsE= -----END CERTIFICATE-----Generated at Mon Sep 8 16:14:06 2025 by rpki-client