$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98082E58663A11F09330C842C4F9AE02.roa File: 98082E58663A11F09330C842C4F9AE02.roa (raw, json) Hash identifier: RpMYd9ab7WhEibycTycYApA1l+8XkCQj+BWn+Fqb6Nc= Subject key identifier: 6E:31:89:6C:F3:C6:DF:2A:BF:30:CB:C5:4E:44:0F:07:5D:03:93:30 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0F9F Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98082E58663A11F09330C842C4F9AE02.roa Signing time: Sat 18 Oct 2025 14:01:48 +0000 ROA not before: Sat 18 Oct 2025 14:01:48 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 212831 IP address blocks: 2406:840:a000::/37 maxlen: 48 2406:840:b100::/40 maxlen: 48 2406:840:fde3::/48 maxlen: 48 2406:840:fe60::/44 maxlen: 48 2406:840:fed6::/48 maxlen: 48 2406:840:fed9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 14:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3999 (0xf9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Oct 18 14:01:48 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68f39dcc-5da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:34:1c:28:4a:43:ce:2b:dd:62:f6:24:50:00: e1:cd:85:7e:d3:e4:17:a8:d4:aa:c2:8b:49:bc:21: d0:59:fd:1d:53:69:e7:98:71:29:fd:7d:96:3d:15: b6:6e:e4:08:0b:46:3c:ef:42:3f:50:c5:1e:16:d9: 55:40:9f:f8:f2:32:01:0c:b8:43:3e:f7:b9:08:19: e0:15:dc:59:3e:cd:08:4d:9e:ff:f1:4c:18:a8:e8: 79:65:63:cb:e8:14:cd:ab:db:5e:ec:60:94:e5:09: db:83:c6:32:a2:22:37:fc:e4:29:7d:a1:d8:3f:76: a5:7a:26:51:5f:67:fe:8c:66:92:2e:61:11:f8:19: 1d:c7:f7:d4:ce:b3:83:74:d3:02:63:dc:58:e2:b6: 7d:23:4a:e9:e0:03:33:26:f8:2f:a9:60:d3:47:c7: d6:54:c7:41:16:67:db:d0:21:2c:88:c1:65:f7:21: 38:a9:eb:56:7f:cf:4c:0e:cf:a0:77:e6:9f:d4:2a: 26:6f:2b:dd:ed:aa:06:be:59:3b:c6:56:3f:c4:6c: a2:6d:f5:1f:3c:3c:04:2f:ea:f2:b6:4a:fe:61:3e: 58:d5:d3:89:52:71:8a:ea:79:aa:d4:92:85:63:4e: 97:84:e3:89:3b:b0:b6:ca:3e:01:04:d1:49:96:99: 80:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:31:89:6C:F3:C6:DF:2A:BF:30:CB:C5:4E:44:0F:07:5D:03:93:30 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98082E58663A11F09330C842C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:a000::/37 2406:840:b100::/40 2406:840:fde3::/48 2406:840:fe60::/44 2406:840:fed6::/48 2406:840:fed9::/48 Signature Algorithm: sha256WithRSAEncryption 8b:36:19:9d:50:85:ee:eb:6d:a7:80:4b:e4:a0:e6:59:c7:00: 02:13:11:56:af:f9:6e:fc:40:1f:ec:31:17:62:a9:a7:f7:77: 96:d8:a1:a9:bd:fe:fc:79:f3:78:20:7e:c8:ce:a6:a1:de:b1: f3:e6:44:b8:43:be:19:27:e5:76:72:ac:6d:62:0d:ec:55:15: b9:a6:20:6d:61:c7:78:b2:21:58:03:9e:2f:95:36:7d:2d:7c: e9:36:56:bc:28:27:ad:f7:f9:3c:e3:df:65:23:46:02:f5:26: dc:1e:18:b0:98:a5:05:0a:4f:54:e0:73:15:d5:6b:5b:b8:09: 79:a4:ad:94:c8:3c:f9:38:27:e6:d8:7a:23:0f:55:87:63:3c: 02:8b:8c:62:81:fb:41:cb:22:85:24:de:2e:a3:86:e4:ac:30: f1:84:73:4d:47:15:40:a8:86:22:cf:cf:cb:42:3c:a1:d0:4d: de:32:05:76:0c:9d:dc:ba:20:26:21:5a:1e:d8:73:59:23:1c: 76:ef:e2:8f:b9:e4:5f:c2:41:e6:47:fe:15:14:f1:fd:6e:e9: 86:1c:02:41:c2:55:ec:34:89:d3:9b:86:9c:ad:e8:33:d5:73: 2d:f5:6f:9d:73:59:49:9b:e3:c8:e2:c3:e9:df:01:e6:fb:3b: 2c:7c:70:c2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICD58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUxMDE4MTQwMTQ4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYzOWRjYy01ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDQcKEpDzivdYvYkUADhzYV+0+QXqNSqwotJvCHQWf0dU2nnmHEp/X2WPRW2 buQIC0Y870I/UMUeFtlVQJ/48jIBDLhDPve5CBngFdxZPs0ITZ7/8UwYqOh5ZWPL 6BTNq9te7GCU5Qnbg8YyoiI3/OQpfaHYP3aleiZRX2f+jGaSLmER+Bkdx/fUzrOD dNMCY9xY4rZ9I0rp4AMzJvgvqWDTR8fWVMdBFmfb0CEsiMFl9yE4qetWf89MDs+g d+af1Combyvd7aoGvlk7xlY/xGyibfUfPDwEL+rytkr+YT5Y1dOJUnGK6nmq1JKF Y06XhOOJO7C2yj4BBNFJlpmAYQIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFG4xiWzz xt8qvzDLxU5EDwddA5MwMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOTgwODJFNTg2 NjNBMTFGMDkzMzBDODQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E PjA8MDoEAgACMDQDBgMkBghAoAMGACQGCECxAwcAJAYIQP3jAwcEJAYIQP5gAwcA JAYIQP7WAwcAJAYIQP7ZMA0GCSqGSIb3DQEBCwUAA4IBAQCLNhmdUIXu622ngEvk oOZZxwACExFWr/lu/EAf7DEXYqmn93eW2KGpvf78efN4IH7Izqah3rHz5kS4Q74Z J+V2cqxtYg3sVRW5piBtYcd4siFYA54vlTZ9LXzpNla8KCet9/k8499lI0YC9Sbc HhiwmKUFCk9U4HMV1WtbuAl5pK2UyDz5OCfm2HojD1WHYzwCi4xigftByyKFJN4u o4bkrDDxhHNNRxVAqIYiz8/LQjyh0E3eMgV2DJ3cuiAmIVoe2HNZIxx27+KPueRf wkHmR/4VFPH9bumGHAJBwlXsNInTm4acregz1XMt9W+dc1lJm+PI4sPp3wHm+zss fHDC -----END CERTIFICATE-----Generated at Tue Oct 28 12:41:12 2025 by rpki-client