$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5D313B1C31DA11EEBE28A546C4F9AE02.roa File: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (raw, json) Hash identifier: 8C0fcjEA2IcfNRUG4kX2e0bXX39iEcsL5wzsa0/yvL4= Subject key identifier: 47:94:03:A9:7D:67:45:D9:CB:32:5F:38:61:66:7D:54:51:7D:98:50 Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D Certificate serial: 01B7 Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5D313B1C31DA11EEBE28A546C4F9AE02.roa Signing time: Wed 05 Nov 2025 03:47:40 +0000 ROA not before: Wed 05 Nov 2025 03:47:40 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 55891 IP address blocks: 2405:4cc1:100::/40 maxlen: 40 2405:4cc1:200::/40 maxlen: 40 2405:4cc1:300::/40 maxlen: 40 2405:4cc1:500::/40 maxlen: 40 2405:4cc1:600::/40 maxlen: 40 2405:4cc1:700::/40 maxlen: 40 2405:4cc1:800::/40 maxlen: 40 2405:4cc1:900::/40 maxlen: 40 2405:4cc1:b00::/40 maxlen: 40 2405:4cc1:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D Validity Not Before: Nov 5 03:47:40 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690ac8dc-cb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:a4:18:c8:76:55:e6:3d:4b:6a:5e:cc:c0: d5:72:c7:54:49:86:64:df:22:f4:e1:03:59:23:ca: 57:42:07:a8:d4:c4:41:d2:a6:17:d5:5e:86:00:66: 0a:c1:bb:af:b2:6e:60:e4:c5:13:12:db:7d:00:46: 14:23:a8:17:35:09:2a:b7:49:45:17:59:e3:ce:54: c0:b3:57:e0:f0:69:06:1a:d7:5a:d0:d6:c4:34:d1: 3b:7c:15:b1:d7:2f:22:70:23:f3:05:14:7a:65:1f: 0c:ba:a5:b0:2b:d3:8a:60:ce:57:95:fb:7d:d0:07: 38:b5:be:80:7c:85:b3:57:28:94:1f:c6:5e:28:5d: 5c:28:4a:46:ff:8c:12:37:7e:ed:10:45:a6:bd:36: 23:5c:ad:3d:7a:b0:66:54:78:d2:fe:1a:1d:99:64: bf:fd:2d:b4:81:16:ff:ef:a9:30:3e:53:d0:90:08: 77:7a:22:3c:99:ef:8d:a4:72:e8:1f:14:7e:57:5d: a3:64:5a:0d:88:78:58:24:c6:8a:11:de:da:78:cb: 58:d8:b6:12:17:19:94:f5:2e:60:c5:6e:f3:4b:b2: fb:a1:78:82:ee:09:1f:d9:c2:9d:3b:99:af:b3:05: a8:3e:95:1f:6d:a8:e7:70:fc:16:9c:5e:4d:67:f6: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:94:03:A9:7D:67:45:D9:CB:32:5F:38:61:66:7D:54:51:7D:98:50 X509v3 Authority Key Identifier: keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5D313B1C31DA11EEBE28A546C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:4cc1:100::-2405:4cc1:3ff:ffff:ffff:ffff:ffff:ffff 2405:4cc1:500::-2405:4cc1:9ff:ffff:ffff:ffff:ffff:ffff 2405:4cc1:b00::/40 2405:4cc1:1000::/40 Signature Algorithm: sha256WithRSAEncryption 48:59:be:f6:9e:af:f5:54:0f:7a:28:ac:c9:50:37:44:d3:eb: 95:3a:39:d5:ee:37:66:a3:9a:44:90:b0:76:ca:bb:a7:64:73: 33:86:89:31:bb:df:9e:68:cc:ef:27:c4:f6:bc:47:ab:4c:5e: 0d:5d:f2:37:f0:23:c1:db:ff:93:f3:cc:64:c1:20:f8:ab:72: 07:21:99:15:6e:bf:b2:2e:22:cf:ab:7d:df:fb:41:cd:87:e1: 66:bd:07:bf:79:2c:25:ec:aa:ef:37:89:0a:9a:21:63:ae:16: bf:98:1b:bd:5a:9e:7c:9a:ae:f1:3b:a1:36:92:21:20:1c:49: e6:9a:40:f2:64:05:19:76:77:4f:71:43:95:45:e9:d5:65:9a: 5d:1a:b1:6d:e4:34:a5:29:f5:2b:d3:e1:90:a6:5f:1e:c0:e2: 44:ff:19:33:26:f8:27:24:97:36:0f:6a:d3:fb:b3:3e:50:89: 80:f9:0e:68:63:be:db:ff:87:2a:70:09:a4:da:65:c0:18:0d: 61:05:ee:0f:f1:8b:51:cd:09:85:ba:d7:a2:85:d1:7f:65:56: 4d:26:99:00:a1:fb:2f:af:24:d1:5d:f6:fa:3c:3d:57:0a:51: 20:54:17:59:ba:3d:aa:55:14:99:04:a2:a5:a4:01:e6:34:b9: b6:36:01:a8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzAxMTAvBgNVBAUTKDc2Njg1N0JBM0Y3QzcyOEI2ODA1MjVBQzQxRkE3Q0Uy QTFGMDA5MkQwHhcNMjUxMTA1MDM0NzQwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhYzhkYy1jYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPqkGMh2VeY9S2pezMDVcsdUSYZk3yL04QNZI8pXQgeo1MRB0qYX1V6GAGYK wbuvsm5g5MUTEtt9AEYUI6gXNQkqt0lFF1njzlTAs1fg8GkGGtda0NbENNE7fBWx 1y8icCPzBRR6ZR8MuqWwK9OKYM5Xlft90Ac4tb6AfIWzVyiUH8ZeKF1cKEpG/4wS N37tEEWmvTYjXK09erBmVHjS/hodmWS//S20gRb/76kwPlPQkAh3eiI8me+NpHLo HxR+V12jZFoNiHhYJMaKEd7aeMtY2LYSFxmU9S5gxW7zS7L7oXiC7gkf2cKdO5mv swWoPpUfbajncPwWnF5NZ/ZuWwIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFEeUA6l9 Z0XZyzJfOGFmfVRRfZhQMB8GA1UdIwQYMBaAFHZoV7o/fHKLaAUlrEH6fOKh8Akt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDMC9FNEVENTM5NDMx RDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNvdG9CU1dzUWZwODRxSHdD UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtaFh1ajk4Y290b0JTV3NRZnA4NHFId0NTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhBQzAvRTRFRDUzOTQzMUQ4MTFFRTgzMDA2QTQxQzRGOUFFMDIvNUQzMTNCMUMz MURBMTFFRUJFMjhBNTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E PjA8MDoEAgACMDQwEAMGACQFTMEBAwYCJAVMwQAwEAMGACQFTMEFAwYBJAVMwQgD BgAkBUzBCwMGACQFTMEQMA0GCSqGSIb3DQEBCwUAA4IBAQBIWb72nq/1VA96KKzJ UDdE0+uVOjnV7jdmo5pEkLB2yrunZHMzhokxu9+eaMzvJ8T2vEerTF4NXfI38CPB 2/+T88xkwSD4q3IHIZkVbr+yLiLPq33f+0HNh+FmvQe/eSwl7KrvN4kKmiFjrha/ mBu9Wp58mq7xO6E2kiEgHEnmmkDyZAUZdndPcUOVRenVZZpdGrFt5DSlKfUr0+GQ pl8ewOJE/xkzJvgnJJc2D2rT+7M+UImA+Q5oY77b/4cqcAmk2mXAGA1hBe4P8YtR zQmFuteihdF/ZVZNJpkAofsvryTRXfb6PD1XClEgVBdZuj2qVRSZBKKlpAHmNLm2 NgGo -----END CERTIFICATE-----Generated at Wed Nov 5 16:49:03 2025 by rpki-client