$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/E02718B0FB7E11EFA25DF775C4F9AE02.roa File: E02718B0FB7E11EFA25DF775C4F9AE02.roa (raw, json) Hash identifier: ENL4WA6KSbvc2YPMu+cWB67CxYVDtC/Jfo8vWdg+j8U= Subject key identifier: E7:DB:83:12:55:9C:5B:68:7E:B0:05:A9:65:24:21:D8:AC:29:B7:07 Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 08F8 Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/E02718B0FB7E11EFA25DF775C4F9AE02.roa Signing time: Sat 30 Aug 2025 21:11:55 +0000 ROA not before: Sat 30 Aug 2025 21:11:55 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 993 IP address blocks: 2001:df4:d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Validity Not Before: Aug 30 21:11:55 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68b3691b-1b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4a:5d:57:4f:c9:fd:13:64:80:7d:61:6e:55: b0:71:03:c4:c4:13:66:fb:11:ee:2f:f6:bb:ff:f3: 6f:94:1c:d3:0c:97:39:be:87:10:17:e9:ab:a6:93: aa:88:54:38:c2:a0:fb:89:9e:65:ca:24:a2:25:64: 7a:b6:22:a1:5f:b9:84:83:0e:b8:64:32:0a:ae:b4: 2e:dd:b8:3a:4b:d9:49:03:a7:ed:83:a4:78:4d:9d: aa:a0:17:ce:52:54:a2:0f:2c:39:3e:16:4d:9c:af: 1f:ca:62:1d:24:29:2c:24:bd:ff:a8:87:2d:5a:73: a5:6e:5d:b0:48:f0:0e:27:41:92:b5:d7:3f:80:72: 45:36:9c:59:d2:1f:50:27:f6:07:f6:e6:5e:89:2f: 94:34:e0:cf:dd:47:e6:54:85:b3:2a:d9:50:ed:e5: f8:be:39:13:80:83:da:47:ec:9b:7d:56:16:aa:10: 90:78:c0:a0:31:10:99:a5:d2:25:6d:d0:cf:db:e9: e5:16:1e:43:0c:d4:6b:4b:d3:6a:92:4f:97:cc:5d: 5d:05:64:71:02:47:e3:1e:fc:0a:a7:4c:be:89:10: 96:e0:ba:88:2c:84:2f:23:67:a3:95:34:5d:e0:87: 09:0e:0a:be:7d:75:1a:c1:c5:cb:5b:f4:35:b9:34: d0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DB:83:12:55:9C:5B:68:7E:B0:05:A9:65:24:21:D8:AC:29:B7:07 X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/E02718B0FB7E11EFA25DF775C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:d80::/48 Signature Algorithm: sha256WithRSAEncryption ca:31:f6:96:a6:9b:5b:37:5d:9e:ef:8a:9a:5b:de:60:da:fb: dd:21:82:e5:8f:3f:f0:f6:be:d1:15:3b:5a:b4:43:41:a6:d1: 1d:5b:9a:b3:d7:5f:2b:15:04:20:0e:fb:78:56:da:62:db:11: 0b:1f:fc:62:e8:9e:bc:8c:f5:d7:75:17:9b:ff:49:2f:9f:07: 3f:21:3b:3b:38:cc:cb:ea:32:15:0e:0f:4b:ae:1b:26:e1:aa: 20:1c:f8:ac:21:fc:66:74:cc:f3:6d:3e:cd:5c:63:ab:d8:3a: a6:41:fe:8a:55:45:d0:8d:b2:fd:85:22:4d:09:b2:13:2a:0f: 46:9b:12:dd:0e:5c:d5:99:d9:ac:e1:f0:c7:6e:35:6f:39:a4: 02:7b:80:4b:9e:52:09:fe:5d:53:47:f7:44:83:b5:2e:e4:ac: 52:78:ca:43:cd:e1:6c:43:c3:d4:11:c0:c3:fd:8f:31:da:48: 3b:ae:ed:9b:be:3a:c8:2e:3d:df:a9:0d:52:7f:09:e4:8e:b1: 36:27:4a:82:ab:8f:c4:c5:bf:a0:bf:80:96:28:bf:29:2c:33: 72:3e:98:0e:49:1c:03:36:39:3d:71:ce:cc:24:4a:1f:ce:df: 7d:e3:a7:0c:64:89:11:ca:91:c8:3c:25:88:b7:60:5e:3d:f6: dc:60:79:a1 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjUwODMwMjExMTU1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzNjkxYi0xYjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UpdV0/J/RNkgH1hblWwcQPExBNm+xHuL/a7//NvlBzTDJc5vocQF+mrppOq iFQ4wqD7iZ5lyiSiJWR6tiKhX7mEgw64ZDIKrrQu3bg6S9lJA6ftg6R4TZ2qoBfO UlSiDyw5PhZNnK8fymIdJCksJL3/qIctWnOlbl2wSPAOJ0GStdc/gHJFNpxZ0h9Q J/YH9uZeiS+UNODP3UfmVIWzKtlQ7eX4vjkTgIPaR+ybfVYWqhCQeMCgMRCZpdIl bdDP2+nlFh5DDNRrS9Nqkk+XzF1dBWRxAkfjHvwKp0y+iRCW4LqILIQvI2ejlTRd 4IcJDgq+fXUawcXLW/Q1uTTQcwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOfbgxJV nFtofrAFqWUkIdisKbcHMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjZDMzkvMjdFRUNGRDBCQjk3MTFFQUExQTY2QzUzQzRGOUFFMDIvRTAyNzE4QjBG QjdFMTFFRkEyNURGNzc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30DYAwDQYJKoZIhvcNAQELBQADggEBAMox9pamm1s3 XZ7vippb3mDa+90hguWPP/D2vtEVO1q0Q0Gm0R1bmrPXXysVBCAO+3hW2mLbEQsf /GLonryM9dd1F5v/SS+fBz8hOzs4zMvqMhUOD0uuGybhqiAc+Kwh/GZ0zPNtPs1c Y6vYOqZB/opVRdCNsv2FIk0JshMqD0abEt0OXNWZ2azh8MduNW85pAJ7gEueUgn+ XVNH90SDtS7krFJ4ykPN4WxDw9QRwMP9jzHaSDuu7Zu+OsguPd+pDVJ/CeSOsTYn SoKrj8TFv6C/gJYovyksM3I+mA5JHAM2OT1xzswkSh/O333jpwxkiRHKkcg8JYi3 YF499txgeaE= -----END CERTIFICATE-----Generated at Mon Sep 8 13:49:00 2025 by rpki-client