$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/F3A1F32E51E111F0B810EE3AC4F9AE02.roa File: F3A1F32E51E111F0B810EE3AC4F9AE02.roa (raw, json) Hash identifier: jxu2i0AbbyNEnTbuxTH6+1BC3Aaiwa6vcqioCG/wOIU= Subject key identifier: 34:9D:35:1C:DB:41:FD:94:C3:0A:81:8B:0B:37:4B:E6:F0:1A:E5:DF Certificate issuer: /CN=A918ABAC/serialNumber=42FFE951F9C3904738A92BACA53D08459899E884 Certificate serial: 04 Authority key identifier: 42:FF:E9:51:F9:C3:90:47:38:A9:2B:AC:A5:3D:08:45:98:99:E8:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/F3A1F32E51E111F0B810EE3AC4F9AE02.roa Signing time: Wed 25 Jun 2025 16:32:15 +0000 ROA not before: Wed 25 Jun 2025 16:32:15 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 153993 IP address blocks: 2001:df5:c7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.crl rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ABAC, serialNumber=42FFE951F9C3904738A92BACA53D08459899E884 Validity Not Before: Jun 25 16:32:15 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=685c248e-a1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:da:2a:1a:c8:39:12:93:3a:de:a9:74:48: 0f:8b:7b:e6:40:bf:7d:ad:5c:87:e3:ae:13:20:26: d1:51:61:10:b8:63:59:aa:a8:3d:a0:38:5e:76:eb: 7a:39:87:b0:42:5f:14:a8:1a:61:2a:e8:b4:17:66: aa:84:03:1c:cf:d3:b0:18:a0:7f:58:ee:af:14:a9: 06:7a:32:63:2f:2d:01:e0:51:88:3b:62:e2:00:f3: a2:79:cb:d9:f0:8b:36:b4:8e:be:f0:ba:fc:71:36: 9c:d5:d5:30:20:d8:1e:39:66:af:51:1b:cb:85:c1: 8a:d0:a5:1c:fa:5d:1b:8e:4f:fe:31:de:45:d7:31: 41:91:3a:b2:78:4f:bb:5f:ea:42:f1:e5:bc:3c:d3: 32:64:f6:bd:95:73:04:45:3f:52:e8:37:b5:46:77: 2f:4c:63:9b:d3:1c:45:c2:86:cf:50:ed:7d:cb:5e: cb:93:50:d9:e3:e7:25:7e:4e:bb:e3:61:f8:e5:a9: 4e:d1:cb:49:dc:e5:4f:19:27:c0:eb:8d:de:98:73: f5:b0:0a:54:fc:4c:36:b8:b2:16:1e:16:85:61:ab: e1:23:b3:2c:9a:fa:53:07:e7:8d:d8:a9:ee:e4:84: 17:7f:9e:9e:78:07:ee:69:74:4f:f6:5c:f6:1a:2b: 42:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9D:35:1C:DB:41:FD:94:C3:0A:81:8B:0B:37:4B:E6:F0:1A:E5:DF X509v3 Authority Key Identifier: keyid:42:FF:E9:51:F9:C3:90:47:38:A9:2B:AC:A5:3D:08:45:98:99:E8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/F3A1F32E51E111F0B810EE3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df5:c7c0::/48 Signature Algorithm: sha256WithRSAEncryption ba:77:cf:c2:ca:71:1d:81:34:d3:d7:30:48:dc:25:30:09:15: b9:42:ae:00:94:40:f4:e6:79:74:e0:68:8e:39:ed:36:ca:e5: df:a4:a4:1c:00:2e:8b:bc:1c:5e:f1:61:c6:09:72:67:0b:62: a8:ab:9c:31:32:e3:4c:42:76:b5:70:cc:4b:cc:96:6e:fb:b3: 30:27:cd:59:23:76:7d:c1:24:f6:8f:9b:5c:be:02:e3:89:c1: 7c:b2:7b:e9:a0:77:24:00:7d:92:52:68:19:a2:b2:b1:f5:a2: 01:2b:88:ef:60:e1:1e:67:1c:d6:0f:c1:8d:fa:c2:4a:1e:67: 0d:2b:a9:cc:1e:16:b2:e4:ad:1f:1a:47:7c:6a:c6:52:d7:1c: ec:a3:25:1d:32:dd:ba:bc:6b:e5:f5:59:e9:4a:0b:1d:9e:2f: d7:ad:a0:5d:3f:68:1e:b3:b7:05:41:80:a3:ec:9e:c7:b5:4a: 31:c3:a4:e4:10:ce:9c:b6:ce:e2:82:d9:36:e0:c3:f1:3e:e5: d7:0e:03:a9:f4:e5:3f:8e:37:99:8f:79:df:b4:da:fa:60:6e: e5:b9:0c:58:3a:f8:e7:68:04:f3:8a:ed:fa:8a:4c:56:97:2e: 26:11:74:44:b7:b6:72:64:25:95:1e:78:25:3d:da:0c:75:49: 23:6e:05:9d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUJBQzExMC8GA1UEBRMoNDJGRkU5NTFGOUMzOTA0NzM4QTkyQkFDQTUzRDA4NDU5 ODk5RTg4NDAeFw0yNTA2MjUxNjMyMTVaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NWMyNDhlLWExYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+odoqGsg5EpM63ql0SA+Le+ZAv32tXIfjrhMgJtFRYRC4Y1mqqD2gOF5263o5 h7BCXxSoGmEq6LQXZqqEAxzP07AYoH9Y7q8UqQZ6MmMvLQHgUYg7YuIA86J5y9nw iza0jr7wuvxxNpzV1TAg2B45Zq9RG8uFwYrQpRz6XRuOT/4x3kXXMUGROrJ4T7tf 6kLx5bw80zJk9r2VcwRFP1LoN7VGdy9MY5vTHEXChs9Q7X3LXsuTUNnj5yV+Trvj YfjlqU7Ry0nc5U8ZJ8Drjd6Yc/WwClT8TDa4shYeFoVhq+Ejsyya+lMH543Yqe7k hBd/np54B+5pdE/2XPYaK0LPAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUNJ01HNtB /ZTDCoGLCzdL5vAa5d8wHwYDVR0jBBgwFoAUQv/pUfnDkEc4qSuspT0IRZiZ6IQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQkFDLzZENEIyOTZDNTBD OTExRjBCNDczMDI0NkM0RjlBRTAyL1F2X3BVZm5Ea0VjNHFTdXNwVDBJUlppWjZJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXZfcFVmbkRrRWM0cVN1c3BUMElSWmlaNklRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUJBQy82RDRCMjk2QzUwQzkxMUYwQjQ3MzAyNDZDNEY5QUUwMi9GM0ExRjMyRTUx RTExMUYwQjgxMEVFM0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfXHwDANBgkqhkiG9w0BAQsFAAOCAQEAunfPwspxHYE0 09cwSNwlMAkVuUKuAJRA9OZ5dOBojjntNsrl36SkHAAui7wcXvFhxglyZwtiqKuc MTLjTEJ2tXDMS8yWbvuzMCfNWSN2fcEk9o+bXL4C44nBfLJ76aB3JAB9klJoGaKy sfWiASuI72DhHmcc1g/BjfrCSh5nDSupzB4WsuStHxpHfGrGUtcc7KMlHTLdurxr 5fVZ6UoLHZ4v162gXT9oHrO3BUGAo+yex7VKMcOk5BDOnLbO4oLZNuDD8T7l1w4D qfTlP443mY9537Ta+mBu5bkMWDr452gE84rt+opMVpcuJhF0RLe2cmQllR54JT3a DHVJI24FnQ== -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:22 2025 by rpki-client