$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/987A530C663A11F09330C842C4F9AE02.roa File: 987A530C663A11F09330C842C4F9AE02.roa (raw, json) Hash identifier: ydoBz1xRe+ppaKkLeP6ZIyBqXQhNa9I6bfDBMRhaz94= Subject key identifier: 30:E1:AF:B4:97:3D:FA:91:D4:62:AB:45:9E:06:A3:0D:3F:60:64:9D Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0F9A Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/987A530C663A11F09330C842C4F9AE02.roa Signing time: Tue 14 Oct 2025 14:29:14 +0000 ROA not before: Tue 14 Oct 2025 14:29:14 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 213903 IP address blocks: 2406:840:a800::/37 maxlen: 48 2406:840:c100::/40 maxlen: 48 2406:840:fde1::/48 maxlen: 48 2406:840:fde2::/48 maxlen: 48 2406:840:fde4::/48 maxlen: 48 2406:840:fde5::/48 maxlen: 48 2406:840:fde6::/48 maxlen: 48 2406:840:fde7::/48 maxlen: 48 2406:840:fe95::/48 maxlen: 48 2406:840:fe9c::/48 maxlen: 48 2406:840:fec6::/48 maxlen: 48 2406:840:fec7::/48 maxlen: 48 2406:840:fedd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 21:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3994 (0xf9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Oct 14 14:29:14 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68ee5e3a-5075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:35:5a:91:5c:c2:7e:88:14:47:0b:fa:4d:9b: 3b:d3:41:40:e7:ca:e8:d6:e9:3a:01:76:65:38:00: 62:7d:08:26:3e:2d:f9:7a:77:e9:a4:c9:6b:40:9a: 48:ec:c9:c0:a4:0a:48:c1:72:fc:d1:ab:10:c1:17: d6:63:4f:b5:8b:98:95:89:ba:91:a5:34:cf:57:14: 34:a9:83:d9:15:6c:48:1c:48:04:32:31:d6:e6:6a: 8e:51:c1:a7:2a:03:7d:0e:d6:55:b0:ee:61:70:c0: 90:6b:43:15:f7:c0:14:94:af:00:a3:46:91:40:a4: f5:07:f0:49:36:57:31:09:d6:9c:c8:44:bd:6a:ae: 82:e9:c5:1c:64:bb:00:59:5e:b7:fe:57:9e:63:42: fc:59:cf:ba:20:40:4e:7b:70:d9:74:67:b2:87:6e: 5b:fb:d1:14:b2:20:f9:52:96:21:0e:bc:af:e1:ad: a3:58:8f:5f:fb:86:cd:52:85:75:43:b2:c2:f8:12: d9:86:de:64:59:fb:d9:eb:ae:4c:d9:74:50:24:59: eb:d5:2e:7e:45:62:14:25:64:c9:6d:da:96:df:91: e8:09:40:cf:7b:2d:4f:2f:fd:8d:77:f1:16:e3:41: 6f:27:a5:3c:46:26:7e:90:b1:b5:58:20:37:fb:be: 07:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E1:AF:B4:97:3D:FA:91:D4:62:AB:45:9E:06:A3:0D:3F:60:64:9D X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/987A530C663A11F09330C842C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:a800::/37 2406:840:c100::/40 2406:840:fde1::-2406:840:fde2:ffff:ffff:ffff:ffff:ffff 2406:840:fde4::/46 2406:840:fe95::/48 2406:840:fe9c::/48 2406:840:fec6::/47 2406:840:fedd::/48 Signature Algorithm: sha256WithRSAEncryption 69:a9:b9:f7:46:74:bf:47:3a:bc:ac:ae:79:61:b5:46:57:86: 7e:18:7e:dd:ca:52:97:4a:54:b9:8f:c1:49:7f:f4:29:f8:87: 18:a3:9d:40:55:48:fe:2b:0a:80:2c:ca:e9:da:40:e9:0c:a6: f8:68:f6:92:d6:7c:ad:46:eb:5c:32:2d:42:42:37:62:13:76: ea:b9:a8:30:bd:7b:c7:81:b7:c0:14:bb:62:1e:a4:07:fc:bb: 2b:bd:e5:fd:54:ed:d9:63:2a:b1:b9:e1:86:30:40:cc:0d:aa: f9:01:b3:ba:3d:bc:1d:14:db:0d:57:7f:aa:bb:53:fb:1f:1d: d8:bb:9c:de:4e:33:17:1d:d0:91:44:3d:73:f2:9d:26:72:f7: f9:2e:48:5e:11:52:72:9f:27:00:bd:74:cb:e7:26:76:f4:cf: 97:3f:24:b5:73:54:9d:ff:dc:b6:27:e3:5b:b3:a6:45:66:d8: a5:9d:0e:09:5a:8d:64:87:26:e8:34:f6:63:31:33:1c:0e:c6: e2:8f:78:0e:2f:56:4d:90:83:75:02:95:4f:fd:3c:1f:ac:64: b0:28:c1:11:80:2a:25:b8:11:79:e6:94:e9:25:82:82:a1:ab: 41:c1:5f:d8:f7:4f:72:ec:38:1b:71:60:90:32:68:34:4b:8b: 6f:17:70:62 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgICD5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUxMDE0MTQyOTE0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVlNWUzYS01MDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TVakVzCfogURwv6TZs700FA58ro1uk6AXZlOABifQgmPi35enfppMlrQJpI 7MnApApIwXL80asQwRfWY0+1i5iVibqRpTTPVxQ0qYPZFWxIHEgEMjHW5mqOUcGn KgN9DtZVsO5hcMCQa0MV98AUlK8Ao0aRQKT1B/BJNlcxCdacyES9aq6C6cUcZLsA WV63/leeY0L8Wc+6IEBOe3DZdGeyh25b+9EUsiD5UpYhDryv4a2jWI9f+4bNUoV1 Q7LC+BLZht5kWfvZ665M2XRQJFnr1S5+RWIUJWTJbdqW35HoCUDPey1PL/2Nd/EW 40FvJ6U8RiZ+kLG1WCA3+74HpQIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFDDhr7SX PfqR1GKrRZ4Gow0/YGSdMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOTg3QTUzMEM2 NjNBMTFGMDkzMzBDODQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwagYIKwYBBQUHAQcBAf8E WzBZMFcEAgACMFEDBgMkBghAqAMGACQGCEDBMBIDBwAkBghA/eEDBwAkBghA/eID BwIkBghA/eQDBwAkBghA/pUDBwAkBghA/pwDBwEkBghA/sYDBwAkBghA/t0wDQYJ KoZIhvcNAQELBQADggEBAGmpufdGdL9HOrysrnlhtUZXhn4Yft3KUpdKVLmPwUl/ 9Cn4hxijnUBVSP4rCoAsyunaQOkMpvho9pLWfK1G61wyLUJCN2ITduq5qDC9e8eB t8AUu2IepAf8uyu95f1U7dljKrG54YYwQMwNqvkBs7o9vB0U2w1Xf6q7U/sfHdi7 nN5OMxcd0JFEPXPynSZy9/kuSF4RUnKfJwC9dMvnJnb0z5c/JLVzVJ3/3LYn41uz pkVm2KWdDglajWSHJug09mMxMxwOxuKPeA4vVk2Qg3UClU/9PB+sZLAowRGAKiW4 EXnmlOklgoKhq0HBX9j3T3LsOBtxYJAyaDRLi28XcGI= -----END CERTIFICATE-----Generated at Sat Oct 18 06:24:34 2025 by rpki-client