$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/2E2847223DB311EE9375493EC4F9AE02.roa File: 2E2847223DB311EE9375493EC4F9AE02.roa (raw, json) Hash identifier: 6fQ9RtJZkeAm2/Mx6K4V4QJpuiRsWx//JNYH/Hg0zIQ= Subject key identifier: 71:97:8C:8C:42:CA:9A:B5:FD:CA:63:6E:6C:8B:FB:27:2C:DE:5F:54 Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Certificate serial: 02B9 Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/2E2847223DB311EE9375493EC4F9AE02.roa Signing time: Wed 22 Oct 2025 02:45:42 +0000 ROA not before: Wed 22 Oct 2025 02:45:42 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 137053 IP address blocks: 2001:df1:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Validity Not Before: Oct 22 02:45:42 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f84550-eb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:80:14:71:f7:fc:ae:4b:01:c4:f3:28:e7:1d: 35:fe:cf:03:72:1b:20:1f:32:8b:ba:12:36:3c:d6: 54:95:0c:4f:f0:b2:25:ba:99:47:ed:bf:6f:3f:cd: 37:b8:a4:9b:eb:1d:31:c9:84:a7:cb:39:0a:35:44: 04:21:30:b8:5b:68:29:71:6e:06:ee:08:78:78:fe: 2a:f3:53:ca:54:93:67:7b:2f:f2:4f:6d:66:96:71: a3:b5:f2:2e:50:ba:d7:ac:02:0c:ed:48:20:9f:4b: 39:c4:a7:38:63:40:5f:0a:61:b1:f3:e8:34:f7:6d: 05:c8:37:6d:13:ce:8b:93:d0:35:20:ef:18:25:60: c6:84:cd:7b:b2:8f:17:30:fc:a3:8e:a3:0e:ff:dc: f9:bb:e7:10:40:db:50:83:09:22:c9:4b:fe:ac:84: 16:68:89:43:25:df:b4:1d:23:33:7b:5d:ff:a8:5d: 5a:de:d2:c6:cf:3b:01:20:00:dc:f6:eb:57:45:c4: 5f:c9:ff:50:60:56:82:ea:c4:04:13:8c:15:5d:e3: 09:eb:d8:1f:54:37:f0:48:a5:8f:d1:c2:db:53:7f: 1c:4a:27:32:ef:6f:28:86:68:ca:a5:a1:fb:0e:bd: 5c:52:79:0a:6b:ef:34:6e:1f:2b:e4:d2:f1:d5:ad: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:97:8C:8C:42:CA:9A:B5:FD:CA:63:6E:6C:8B:FB:27:2C:DE:5F:54 X509v3 Authority Key Identifier: keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/2E2847223DB311EE9375493EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:4840::/48 Signature Algorithm: sha256WithRSAEncryption 34:92:b0:5e:a1:d5:64:0b:68:ca:ea:d6:6e:4a:da:53:e0:54: 02:2c:5c:c1:5e:8c:e2:9d:88:f5:b8:22:7e:7d:59:87:aa:0a: 1b:f0:d7:df:13:f8:48:82:96:0e:d7:1d:ad:c0:1c:84:82:63: dc:34:01:18:4f:e1:77:5a:f2:29:b5:76:26:5c:77:41:29:94: b9:be:35:cc:c3:cd:f1:a4:80:6d:45:c9:a6:be:84:99:4e:59: 41:3a:c6:c6:c1:ed:ae:20:1f:40:f2:5d:c2:73:24:be:7a:e2: 6c:45:6b:e4:4f:44:01:12:67:33:7a:13:59:d6:8c:69:b1:49: 75:f9:ff:94:b0:80:0e:7d:a9:3d:17:53:05:96:72:c9:6e:27: 2e:5e:15:4f:3a:eb:30:a3:5e:39:b2:c2:ac:1a:5a:f4:d4:21: da:9f:1f:f9:4b:28:1a:51:00:96:6e:e4:2d:5d:6b:66:d9:8a: 42:1b:47:86:1c:03:9c:5a:95:33:34:11:aa:f4:4f:ef:6e:5b: 0f:a2:7d:df:d0:33:c9:fe:98:1d:fb:dc:5f:2d:2e:cb:ba:01: ff:45:be:9a:f3:90:52:d9:17:22:37:23:96:3a:85:51:d8:f0: 7e:d3:b3:33:a2:1e:d7:3e:08:f9:27:a1:c6:2a:03:74:e8:1c: 95:50:52:2a -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF MDcxNTdCNUQwHhcNMjUxMDIyMDI0NTQyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY4NDU1MC1lYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IAUcff8rksBxPMo5x01/s8DchsgHzKLuhI2PNZUlQxP8LIluplH7b9vP803 uKSb6x0xyYSnyzkKNUQEITC4W2gpcW4G7gh4eP4q81PKVJNney/yT21mlnGjtfIu ULrXrAIM7Uggn0s5xKc4Y0BfCmGx8+g0920FyDdtE86Lk9A1IO8YJWDGhM17so8X MPyjjqMO/9z5u+cQQNtQgwkiyUv+rIQWaIlDJd+0HSMze13/qF1a3tLGzzsBIADc 9utXRcRfyf9QYFaC6sQEE4wVXeMJ69gfVDfwSKWP0cLbU38cSicy728ohmjKpaH7 Dr1cUnkKa+80bh8r5NLx1a36AwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHGXjIxC ypq1/cpjbmyL+ycs3l9UMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjgwN0EvMDI2M0FCNDgzRTg4MTFFREE2MUE5QjJBQzRGOUFFMDIvMkUyODQ3MjIz REIzMTFFRTkzNzU0OTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3xSEAwDQYJKoZIhvcNAQELBQADggEBADSSsF6h1WQL aMrq1m5K2lPgVAIsXMFejOKdiPW4In59WYeqChvw198T+EiClg7XHa3AHISCY9w0 ARhP4Xda8im1diZcd0EplLm+NczDzfGkgG1Fyaa+hJlOWUE6xsbB7a4gH0DyXcJz JL564mxFa+RPRAESZzN6E1nWjGmxSXX5/5SwgA59qT0XUwWWcsluJy5eFU866zCj XjmywqwaWvTUIdqfH/lLKBpRAJZu5C1da2bZikIbR4YcA5xalTM0Ear0T+9uWw+i fd/QM8n+mB373F8tLsu6Af9FvprzkFLZFyI3I5Y6hVHY8H7TszOiHtc+CPknocYq A3ToHJVQUio= -----END CERTIFICATE-----Generated at Fri Oct 24 09:17:10 2025 by rpki-client