$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/D459D92C31D711EEBE1BFD20C4F9AE02.roa File: D459D92C31D711EEBE1BFD20C4F9AE02.roa (raw, json) Hash identifier: SRP91sfnLKgHs2VY7WFFGrHVKBCFl0+7NYfhfkLyZBU= Subject key identifier: EC:19:A7:B9:D4:DC:F7:33:ED:1B:A8:8A:AA:8A:74:26:BC:0A:6D:6F Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 0193 Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/D459D92C31D711EEBE1BFD20C4F9AE02.roa Signing time: Wed 03 Sep 2025 04:22:40 +0000 ROA not before: Wed 03 Sep 2025 04:22:40 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55891 IP address blocks: 2406:4ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: Sep 3 04:22:40 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b7c290-7bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:a1:99:01:1d:fb:ca:50:55:46:09:c3:92: 3c:89:60:77:4f:0a:a6:2f:b2:4b:84:6e:81:9a:01: f0:e3:0c:9c:1d:50:e7:01:8e:fa:77:6d:8e:70:b3: 4e:4b:c0:a4:bc:bd:5a:5c:19:8a:fb:ce:56:6c:13: bc:2a:ab:0c:a0:69:5c:68:0c:d3:c5:80:a2:8a:8d: 02:f9:16:b1:84:15:4b:7f:94:ec:48:62:28:8a:31: 57:d1:12:d4:4a:bd:36:ca:db:02:45:52:e7:75:59: 1c:70:aa:e0:8c:2e:83:55:79:71:93:57:09:da:8c: c9:99:6e:b7:6b:94:0f:c3:72:89:22:d6:b4:21:a4: fd:4e:43:37:aa:9d:01:ab:48:6b:7b:d5:72:8c:07: 3d:17:7e:ac:88:3c:f1:99:72:2a:e3:a3:01:f3:f0: 38:a6:f4:17:24:ae:20:20:83:5c:ab:14:c0:41:64: 7e:72:52:e2:f6:15:cb:e5:fe:e9:6e:11:d9:9b:94: c5:f5:3e:05:30:07:01:1d:34:1d:04:7a:42:71:b9: 30:fd:fa:b2:89:db:75:e8:85:d2:64:b9:84:1c:c7: 08:25:0e:13:f9:2e:97:e8:0f:93:d0:d2:8d:53:86: 45:0c:09:9e:13:66:37:9d:42:f3:0c:a2:1a:3b:27: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:19:A7:B9:D4:DC:F7:33:ED:1B:A8:8A:AA:8A:74:26:BC:0A:6D:6F X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/D459D92C31D711EEBE1BFD20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:4ac0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:6c:a1:f7:aa:13:b1:93:81:d1:0a:5a:c3:53:f0:be:fc:fd: e0:37:65:fc:d2:d8:75:df:eb:b6:14:d0:d5:6f:bc:34:b2:bc: 54:6f:74:f4:d5:ab:bc:23:99:44:ec:cf:8c:1c:3b:73:9a:1d: 09:56:8f:a8:31:28:95:d5:06:76:14:9f:f0:64:fd:31:6e:37: c9:5f:9b:7d:f6:54:68:e1:81:c0:0c:ce:39:3c:77:92:51:7e: ad:63:b6:87:0b:0f:69:43:f9:6c:00:a4:37:ea:58:e2:74:c5: 7c:5d:9d:08:7a:eb:2d:52:7f:da:78:2b:9d:45:b2:36:3d:e4: 59:14:c4:97:00:2c:1b:16:a4:e5:37:0b:fb:43:34:d7:a1:21: 41:0c:de:60:42:1b:5f:b4:b1:0f:26:eb:cb:9f:0a:31:68:5c: c9:7d:95:1e:ed:cd:9a:c1:03:f5:df:c7:51:c9:41:11:87:a6: 3e:bc:c3:6c:73:3a:3f:c0:8e:db:f3:3e:18:3d:6a:7f:e7:23: 39:74:f2:01:f5:d0:5f:e2:c1:2a:59:9f:32:b8:16:9e:bf:ec: 17:e0:99:1d:5e:32:4c:6a:ed:27:c8:1a:e6:b1:7b:f7:fb:4a: 72:d5:a4:83:d9:2d:6f:c8:67:57:7b:df:22:fc:61:3e:ed:b3: d5:48:eb:71 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjUwOTAzMDQyMjQwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3YzI5MC03YmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvH+hmQEd+8pQVUYJw5I8iWB3TwqmL7JLhG6BmgHw4wycHVDnAY76d22OcLNO S8CkvL1aXBmK+85WbBO8KqsMoGlcaAzTxYCiio0C+RaxhBVLf5TsSGIoijFX0RLU Sr02ytsCRVLndVkccKrgjC6DVXlxk1cJ2ozJmW63a5QPw3KJIta0IaT9TkM3qp0B q0hre9VyjAc9F36siDzxmXIq46MB8/A4pvQXJK4gIINcqxTAQWR+clLi9hXL5f7p bhHZm5TF9T4FMAcBHTQdBHpCcbkw/fqyidt16IXSZLmEHMcIJQ4T+S6X6A+T0NKN U4ZFDAmeE2Y3nULzDKIaOyfxXwIDAQABo4ICljCCApIwHQYDVR0OBBYEFOwZp7nU 3Pcz7RuoiqqKdCa8Cm1vMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDg0NTYvNjA3QUQ5MjAzMUQ3MTFFRTlDMjAzQjIwQzRGOUFFMDIvRDQ1OUQ5MkMz MUQ3MTFFRUJFMUJGRDIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBkrAMA0GCSqGSIb3DQEBCwUAA4IBAQAubKH3qhOxk4HR ClrDU/C+/P3gN2X80th13+u2FNDVb7w0srxUb3T01au8I5lE7M+MHDtzmh0JVo+o MSiV1QZ2FJ/wZP0xbjfJX5t99lRo4YHADM45PHeSUX6tY7aHCw9pQ/lsAKQ36lji dMV8XZ0IeustUn/aeCudRbI2PeRZFMSXACwbFqTlNwv7QzTXoSFBDN5gQhtftLEP JuvLnwoxaFzJfZUe7c2awQP138dRyUERh6Y+vMNsczo/wI7b8z4YPWp/5yM5dPIB 9dBf4sEqWZ8yuBaev+wX4JkdXjJMau0nyBrmsXv3+0py1aSD2S1vyGdXe98i/GE+ 7bPVSOtx -----END CERTIFICATE-----Generated at Fri Sep 19 02:34:51 2025 by rpki-client