$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/778B08A40A4911EC8BC5AF5EC4F9AE02.roa File: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (raw, json) Hash identifier: EroGR2PKG0Syu1AnhKuuGY0KAjoG8CwxX6jbtNC3fQQ= Subject key identifier: 09:1E:18:E9:34:7E:9D:2E:8C:D2:E3:BC:8D:E4:E6:EF:D7:42:F6:7C Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 0557 Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/778B08A40A4911EC8BC5AF5EC4F9AE02.roa Signing time: Fri 19 Sep 2025 00:05:59 +0000 ROA not before: Fri 19 Sep 2025 00:05:59 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 146991 IP address blocks: 2407:d4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Sep 19 00:05:59 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68cc9e67-afac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:0e:95:0d:e8:5d:60:88:a2:9b:81:72:80: a7:a1:70:32:db:ed:1e:14:16:24:6e:df:29:ed:ad: 69:be:41:0e:59:36:43:de:d4:e7:59:12:e2:e1:27: b0:54:a1:d0:2f:7c:41:b0:89:2d:2e:b5:7a:ef:9d: c5:5c:d5:49:72:e8:11:ba:23:0d:c1:4f:27:4d:4a: 95:87:f9:a3:ea:1c:fa:d9:a7:ab:39:f2:3a:22:f9: 0f:e9:91:73:e7:84:df:1c:07:b0:92:42:ef:75:ce: 54:c2:d2:7e:2b:b4:d2:65:5b:ab:80:69:96:00:1e: 71:b3:17:f4:4f:46:d5:95:e2:37:df:2b:e1:9a:e2: 4a:25:06:25:9e:13:d9:cd:51:76:65:ff:d8:2c:ad: 46:b7:ac:2d:2c:dd:69:aa:de:07:89:db:9a:40:26: f0:7f:a2:8b:33:54:55:40:cb:d1:d8:42:a8:a3:d8: 18:db:1f:95:1f:d5:ff:bd:36:1d:c8:69:b2:e4:9f: 29:3c:7c:d9:e4:76:50:47:91:ca:1c:86:09:62:14: e2:d8:8d:50:c5:12:dd:83:fe:80:9c:2b:3d:75:85: 58:78:ac:47:65:5e:fc:37:26:07:65:89:e5:10:b0: cb:3d:7b:b8:ee:41:70:a9:1d:7a:70:dd:78:d7:f2: 5e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1E:18:E9:34:7E:9D:2E:8C:D2:E3:BC:8D:E4:E6:EF:D7:42:F6:7C X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/778B08A40A4911EC8BC5AF5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:d4c0::/32 Signature Algorithm: sha256WithRSAEncryption 39:a4:e2:69:d3:2f:2d:34:fb:4c:96:e4:88:65:01:97:8e:05: 72:f4:65:e3:fe:16:31:8f:b4:26:14:c8:16:3f:e7:e0:80:b0: e1:eb:f6:f6:b3:0a:1e:cc:d4:d4:65:54:c4:6c:b8:ad:67:80: c1:d8:e0:97:fc:fc:48:33:57:03:fb:0f:0f:12:47:50:5c:2b: 01:17:f4:83:4a:a7:e9:5a:45:91:0d:73:71:c5:01:d9:0f:f4: 3a:43:5c:c4:62:18:e9:8c:7d:e3:af:4b:ff:fd:5d:c2:87:70: 1d:93:79:1b:b8:3b:4d:4b:27:be:93:75:ee:ca:12:95:36:93: 97:5c:13:5d:e0:42:be:06:80:34:a7:06:e4:59:30:c2:f0:d3: bd:a9:9b:c2:7b:75:03:4c:15:ed:1d:25:8a:2d:ce:7d:21:b7: 16:78:fe:58:ef:aa:cc:8a:fc:cf:e4:f7:8f:a5:fb:34:03:1b: 59:7f:af:c1:ef:84:d5:10:bb:be:2c:63:90:38:33:fa:06:b6: 57:64:c2:3b:b8:f1:06:68:e7:41:ed:95:b3:fe:27:d3:24:33: 41:e4:5d:6c:49:84:ab:b5:76:77:d3:29:6a:a1:bf:9c:27:6f: 7c:65:54:6f:18:48:0f:b3:ae:48:71:0c:2b:8d:38:59:31:9f: 8e:d0:84:0e -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjUwOTE5MDAwNTU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNjOWU2Ny1hZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtcOlQ3oXWCIopuBcoCnoXAy2+0eFBYkbt8p7a1pvkEOWTZD3tTnWRLi4Sew VKHQL3xBsIktLrV6753FXNVJcugRuiMNwU8nTUqVh/mj6hz62aerOfI6IvkP6ZFz 54TfHAewkkLvdc5UwtJ+K7TSZVurgGmWAB5xsxf0T0bVleI33yvhmuJKJQYlnhPZ zVF2Zf/YLK1Gt6wtLN1pqt4HiduaQCbwf6KLM1RVQMvR2EKoo9gY2x+VH9X/vTYd yGmy5J8pPHzZ5HZQR5HKHIYJYhTi2I1QxRLdg/6AnCs9dYVYeKxHZV78NyYHZYnl ELDLPXu47kFwqR16cN141/JeBQIDAQABo4ICljCCApIwHQYDVR0OBBYEFAkeGOk0 fp0ujNLjvI3k5u/XQvZ8MB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRDMTUvQUM5QzZCNTAwQTQ0MTFFQzk0Nzk3RTUzQzRGOUFFMDIvNzc4QjA4QTQw QTQ5MTFFQzhCQzVBRjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkB9TAMA0GCSqGSIb3DQEBCwUAA4IBAQA5pOJp0y8tNPtM luSIZQGXjgVy9GXj/hYxj7QmFMgWP+fggLDh6/b2swoezNTUZVTEbLitZ4DB2OCX /PxIM1cD+w8PEkdQXCsBF/SDSqfpWkWRDXNxxQHZD/Q6Q1zEYhjpjH3jr0v//V3C h3Adk3kbuDtNSye+k3XuyhKVNpOXXBNd4EK+BoA0pwbkWTDC8NO9qZvCe3UDTBXt HSWKLc59IbcWeP5Y76rMivzP5PePpfs0AxtZf6/B74TVELu+LGOQODP6BrZXZMI7 uPEGaOdB7ZWz/ifTJDNB5F1sSYSrtXZ30ylqob+cJ298ZVRvGEgPs65IcQwrjThZ MZ+O0IQO -----END CERTIFICATE-----Generated at Fri Sep 19 04:02:00 2025 by rpki-client