$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/A63484760E7511F0B651A474C4F9AE02.roa File: A63484760E7511F0B651A474C4F9AE02.roa (raw, json) Hash identifier: E5E7M+KU38t2hoCZnvux4qAliD8ibl/Vp9X6gykPlbI= Subject key identifier: 4E:01:93:ED:90:D9:A1:AB:47:F4:17:27:E4:F1:C4:8B:38:E5:4B:E9 Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1EC7 Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/A63484760E7511F0B651A474C4F9AE02.roa Signing time: Mon 31 Mar 2025 21:18:11 +0000 ROA not before: Mon 31 Mar 2025 21:18:11 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 142601 IP address blocks: 2400:c760:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7879 (0x1ec7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Mar 31 21:18:11 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67eb0693-64e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:c2:5b:54:cf:70:14:47:5f:ca:96:f4:95: 11:55:d6:2d:a8:10:14:77:18:9e:d9:6f:02:6e:3a: 3d:41:fb:13:c2:0e:0f:bc:5f:6b:f0:24:06:c1:78: 5c:72:3a:bb:de:cf:9e:ff:5c:51:ef:53:83:fa:81: 29:6f:ba:51:c6:70:82:40:87:c6:d8:72:80:b4:2e: bb:2c:98:c2:09:aa:a7:40:08:c2:1a:43:68:55:7e: 96:fc:62:4b:75:3e:b7:0e:4d:e7:38:d1:1d:a6:46: 38:5e:66:b1:b8:1b:2f:23:78:a5:85:47:d3:3d:8c: 66:5a:f0:37:b2:bd:0a:44:c8:5d:81:55:24:0c:5f: 8b:ef:fa:d2:16:d5:f0:c6:7a:cb:88:89:1b:b2:21: 34:d5:5d:d7:44:07:29:56:d2:9f:8c:03:2a:18:9b: f1:a4:9c:1c:31:8f:06:d9:98:56:b3:69:4e:d6:a4: a5:1b:c2:2d:83:6b:b6:fb:bd:b6:2f:c5:3d:7c:45: 60:0d:06:00:a8:ed:2c:62:f1:0b:63:a0:e8:a1:55: 62:51:ff:2f:76:2f:ab:04:b2:78:cd:93:c3:fa:c0: cc:53:cf:c6:c1:fb:bc:9e:61:c2:a3:cf:9d:e2:74: 4b:e0:fa:af:ec:ab:f3:68:41:85:1a:98:03:1b:67: 6f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:01:93:ED:90:D9:A1:AB:47:F4:17:27:E4:F1:C4:8B:38:E5:4B:E9 X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/A63484760E7511F0B651A474C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:c760:21::/48 Signature Algorithm: sha256WithRSAEncryption 3e:6e:50:4d:c2:0d:b3:be:d1:eb:74:9a:a2:64:d2:58:5b:e6: e2:4b:84:de:87:2f:1f:c6:15:ee:8a:31:12:78:55:bb:93:83: c2:89:f8:1d:9a:9e:fa:0b:47:d2:7b:d1:84:e0:15:93:6d:31: 0b:1c:48:28:93:5a:85:5d:c9:ed:8b:13:82:f7:1b:5e:4f:f3: 6b:53:81:41:0f:27:c5:1e:0f:5d:4d:bb:1f:c0:05:1e:c6:c5: b1:be:c6:01:00:1c:1e:78:29:dd:bd:82:c7:3d:b4:63:b1:d5: c4:75:09:56:e5:07:c3:33:68:b0:a9:76:fc:16:eb:ff:41:ab: f2:20:db:dc:4b:7c:bf:50:77:c3:f2:57:43:5f:c3:47:a8:c9: 1c:b9:fb:7e:64:bd:61:5a:ef:bf:98:b0:a0:07:49:ac:54:40: 32:84:2d:08:ba:ee:0e:ad:36:27:6a:4d:2e:07:2e:b2:89:5e: a0:ad:c2:cb:73:bf:64:55:41:2b:c7:c8:9a:37:e3:90:05:d2: 7a:12:7d:ad:62:6d:e7:06:0b:b9:71:2a:fa:98:21:d3:49:2c: b3:fd:ca:bc:16:b5:35:3f:bc:ff:1c:5a:9f:d3:74:f5:27:77: 6a:70:63:cb:f7:06:d8:15:8b:e4:01:9e:0d:35:1a:55:75:04: ae:b9:ea:c7 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICHscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjUwMzMxMjExODExWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViMDY5My02NGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7vCW1TPcBRHX8qW9JURVdYtqBAUdxie2W8Cbjo9QfsTwg4PvF9r8CQGwXhc cjq73s+e/1xR71OD+oEpb7pRxnCCQIfG2HKAtC67LJjCCaqnQAjCGkNoVX6W/GJL dT63Dk3nONEdpkY4XmaxuBsvI3ilhUfTPYxmWvA3sr0KRMhdgVUkDF+L7/rSFtXw xnrLiIkbsiE01V3XRAcpVtKfjAMqGJvxpJwcMY8G2ZhWs2lO1qSlG8Itg2u2+722 L8U9fEVgDQYAqO0sYvELY6DooVViUf8vdi+rBLJ4zZPD+sDMU8/Gwfu8nmHCo8+d 4nRL4Pqv7KvzaEGFGpgDG2dvnQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFE4Bk+2Q 2aGrR/QXJ+TxxIs45UvpMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0YwRTMvMjkxNTc2QkU2QjM0MTFFNjkxODRCNjZDQzRGOUFFMDIvQTYzNDg0NzYw RTc1MTFGMEI2NTFBNDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAMdgACEwDQYJKoZIhvcNAQELBQADggEBAD5uUE3CDbO+ 0et0mqJk0lhb5uJLhN6HLx/GFe6KMRJ4VbuTg8KJ+B2anvoLR9J70YTgFZNtMQsc SCiTWoVdye2LE4L3G15P82tTgUEPJ8UeD11Nux/ABR7GxbG+xgEAHB54Kd29gsc9 tGOx1cR1CVblB8MzaLCpdvwW6/9Bq/Ig29xLfL9Qd8PyV0Nfw0eoyRy5+35kvWFa 77+YsKAHSaxUQDKELQi67g6tNidqTS4HLrKJXqCtwstzv2RVQSvHyJo345AF0noS fa1ibecGC7lxKvqYIdNJLLP9yrwWtTU/vP8cWp/TdPUnd2pwY8v3BtgVi+QBng01 GlV1BK656sc= -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:55 2025 by rpki-client