$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/70E478D0C06D11F0ABA91C6CC4F9AE02.roa File: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (raw, json) Hash identifier: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc= Subject key identifier: AE:0A:08:F4:6D:C4:70:DB:9F:71:64:16:7D:C6:A5:DD:D6:41:75:42 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1A02 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/70E478D0C06D11F0ABA91C6CC4F9AE02.roa Signing time: Thu 13 Nov 2025 08:47:53 +0000 ROA not before: Thu 13 Nov 2025 08:47:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55990 IP address blocks: 2405:f080:e000::/40 maxlen: 40 2405:f080:e0fe::/48 maxlen: 48 2405:f080:e0ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Nov 2025 16:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6658 (0x1a02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Nov 13 08:47:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69159b38-aab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:08:85:2a:67:26:03:06:3f:26:6a:73:b0: f2:06:1c:da:7f:bf:5b:3f:e3:a3:60:8e:84:98:6c: e7:b0:35:9a:5e:da:d1:96:b7:63:6e:ca:33:d5:3a: bb:1f:0e:e1:0d:80:64:9b:c4:9c:54:45:c1:da:a5: ba:7b:81:50:c4:16:c5:7c:76:e6:7a:19:1f:5b:92: 31:e1:09:ba:c6:32:93:40:6a:4f:ec:c2:1b:fb:7b: d5:43:53:c1:67:5f:f9:95:5d:ab:4f:65:6c:ce:34: c8:ae:12:5e:6e:60:6b:fb:e7:b8:1b:11:61:f0:28: 4b:64:68:8b:8d:3b:49:f3:24:95:8e:60:38:32:bd: 15:2f:4a:87:d5:51:c9:bf:6e:93:6e:dc:48:45:1d: 42:cb:eb:43:43:81:14:c3:0f:05:67:f3:62:5e:62: d6:67:65:98:cd:4f:8c:ba:2c:4e:f7:d5:95:8f:95: 87:e0:62:b2:70:c5:14:69:b2:bd:17:cc:6d:35:b9: 61:af:ad:d5:0f:2f:07:aa:69:d0:25:eb:cd:78:7d: 91:26:0f:1f:bf:8e:ef:d1:dd:1d:f2:b9:b0:e4:40: f3:04:7d:48:21:02:5b:e0:2a:df:a1:54:53:39:b5: d8:86:64:8c:a4:ce:f9:5b:88:80:71:55:14:0c:4c: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0A:08:F4:6D:C4:70:DB:9F:71:64:16:7D:C6:A5:DD:D6:41:75:42 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/70E478D0C06D11F0ABA91C6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:f080:e000::/40 Signature Algorithm: sha256WithRSAEncryption 79:5c:89:b8:e5:d5:9a:99:55:49:8f:ab:8c:25:c0:f1:97:79: 8f:cf:88:92:95:a4:bd:5f:4d:05:f5:ed:bb:68:e3:02:84:87: 91:23:8e:3a:50:bc:e1:85:36:b7:9d:b5:f7:8a:97:28:4c:54: 49:08:b8:62:c3:75:ce:96:21:4e:8a:0a:2d:38:7f:92:0f:0a: 90:69:1a:56:fe:73:8b:80:e1:70:d3:78:81:4f:ac:12:bf:72: 7f:38:bf:a4:06:f9:2b:91:a5:bb:0f:07:23:dc:cb:64:e1:23: ed:ab:40:9c:9b:3a:3b:ee:16:2e:e9:34:e7:8d:6d:e1:93:b2: 4a:dd:be:e1:63:75:3c:de:39:76:3d:c9:a9:11:5a:c2:ae:84: eb:ad:44:69:b4:97:3e:ea:f1:86:a8:11:aa:2b:e2:53:30:c2: 64:4a:87:d4:76:da:6f:dc:64:11:42:68:cd:24:1d:63:9a:51: 4a:8b:cc:a5:d7:00:09:bf:85:ef:08:11:7d:e8:30:7a:e1:42: 5a:56:e0:5a:f7:98:e1:62:4a:d7:c2:c4:00:4e:d9:f8:a8:2c: c9:c9:d4:22:5a:a8:4f:01:c4:c9:42:d8:26:84:52:4e:69:e8: ac:c0:3c:a6:c7:af:b4:d8:6f:d0:8d:42:c2:e0:de:4c:ff:8d: 27:87:c0:0c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICGgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjUxMTEzMDg0NzUzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE1OWIzOC1hYWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkYIhSpnJgMGPyZqc7DyBhzaf79bP+OjYI6EmGznsDWaXtrRlrdjbsoz1Tq7 Hw7hDYBkm8ScVEXB2qW6e4FQxBbFfHbmehkfW5Ix4Qm6xjKTQGpP7MIb+3vVQ1PB Z1/5lV2rT2VszjTIrhJebmBr++e4GxFh8ChLZGiLjTtJ8ySVjmA4Mr0VL0qH1VHJ v26TbtxIRR1Cy+tDQ4EUww8FZ/NiXmLWZ2WYzU+MuixO99WVj5WH4GKycMUUabK9 F8xtNblhr63VDy8HqmnQJevNeH2RJg8fv47v0d0d8rmw5EDzBH1IIQJb4CrfoVRT ObXYhmSMpM75W4iAcVUUDExzhwIDAQABo4IClzCCApMwHQYDVR0OBBYEFK4KCPRt xHDbn3FkFn3Gpd3WQXVCMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U2NzgvNzI1ODNBRkE2OTU3MTFFOEE0MkJFNjgwQzRGOUFFMDIvNzBFNDc4RDBD MDZEMTFGMEFCQTkxQzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkBfCA4DANBgkqhkiG9w0BAQsFAAOCAQEAeVyJuOXVmplV SY+rjCXA8Zd5j8+IkpWkvV9NBfXtu2jjAoSHkSOOOlC84YU2t52194qXKExUSQi4 YsN1zpYhTooKLTh/kg8KkGkaVv5zi4DhcNN4gU+sEr9yfzi/pAb5K5Gluw8HI9zL ZOEj7atAnJs6O+4WLuk0541t4ZOySt2+4WN1PN45dj3JqRFawq6E661EabSXPurx hqgRqiviUzDCZEqH1Hbab9xkEUJozSQdY5pRSovMpdcACb+F7wgRfegweuFCWlbg WveY4WJK18LEAE7Z+KgsycnUIlqoTwHEyULYJoRSTmnorMA8psevtNhv0I1CwuDe TP+NJ4fADA== -----END CERTIFICATE-----Generated at Sat Nov 15 00:13:44 2025 by rpki-client