$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/17A651BCA40E11EEAAB83671C4F9AE02.roa File: 17A651BCA40E11EEAAB83671C4F9AE02.roa (raw, json) Hash identifier: /zpbbyMm2w5Xcql5zfUtoN8iPAyG5aFUqVMvzNCSPuM= Subject key identifier: F6:43:CA:BC:B6:F0:69:6E:B4:87:0C:1F:D2:8D:04:25:CD:FE:9F:DC Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 054F Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/17A651BCA40E11EEAAB83671C4F9AE02.roa Signing time: Wed 03 Sep 2025 00:15:37 +0000 ROA not before: Wed 03 Sep 2025 00:15:37 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 47869 IP address blocks: 2401:df40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1359 (0x54f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Sep 3 00:15:37 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b788a9-3aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:29:1a:74:78:67:67:4a:87:b7:92:8a:b2: a1:4f:30:0a:18:73:01:73:d0:e2:69:8c:ca:51:e1: cb:84:5d:01:43:e5:3e:1f:b4:7d:23:88:2f:33:c9: 4b:8c:62:c3:fe:a5:df:d9:d6:39:11:f2:50:8f:f5: 68:e9:df:06:61:d5:16:f1:b8:93:2e:56:c2:5a:e9: e8:87:e5:84:6f:0f:d5:35:1e:b4:db:8d:40:ac:7b: 1f:6d:40:31:63:22:66:bb:ca:9c:05:c0:aa:9d:2e: 3d:78:d9:34:3a:e7:72:25:f4:46:1e:f9:b8:1e:ca: 6e:42:c4:be:34:3c:98:33:39:ad:40:16:84:2b:89: 62:3e:c7:ee:33:14:d7:46:af:2d:c3:f8:cd:d4:e7: 57:51:e2:49:85:aa:bb:05:dc:ef:ed:34:8f:53:85: 36:03:73:66:e7:79:a2:c3:12:3e:4b:bb:96:ff:fa: b3:20:ba:d8:66:f2:cb:5e:40:d2:64:69:9a:9d:81: 98:75:f5:70:22:6a:50:a1:44:eb:ec:79:12:0b:0a: 38:e9:46:0f:93:fc:ae:f4:d7:61:31:5b:5f:fb:02: 6d:f2:6b:a4:1f:2b:5f:cc:30:64:e7:b0:54:5c:30: d1:13:96:37:eb:8b:a8:9d:fb:ed:2d:eb:9d:58:d0: 73:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:43:CA:BC:B6:F0:69:6E:B4:87:0C:1F:D2:8D:04:25:CD:FE:9F:DC X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/17A651BCA40E11EEAAB83671C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:df40:1::/48 Signature Algorithm: sha256WithRSAEncryption 8f:cc:ec:eb:4a:52:1b:7d:6f:bf:eb:75:f1:c1:54:2c:b4:16: 18:4c:3c:4b:a6:a6:fd:8e:be:fb:22:19:2a:84:8c:36:be:30: 83:a6:7f:e7:26:9f:7b:22:70:3d:5d:a5:1b:f9:f0:72:05:4d: 20:41:b7:8c:b3:b2:b1:a7:f9:3d:da:d1:43:1b:f5:ee:26:00: 17:0b:4a:05:49:a6:40:8e:40:d0:b8:c0:8b:a8:58:f9:b2:33: ea:3f:d4:0c:88:4b:0d:65:52:43:ec:64:0f:d3:fa:88:1c:49: 1e:ca:6f:94:5b:15:8a:b7:6f:8d:2d:ed:e1:7d:09:ee:8c:01: fd:73:65:bd:75:da:c0:d5:67:e6:7c:d1:f2:0f:df:77:28:23: 84:a2:c2:a2:c0:31:50:9e:e7:3e:95:8a:8c:23:67:bd:a8:74: bf:74:0a:23:ef:80:ac:d6:ce:b8:59:b8:99:80:f2:89:1d:db: fa:31:bc:5a:00:e4:04:b8:01:41:ac:82:16:b9:bc:6e:99:83: 5c:92:f8:64:fb:3f:8f:28:95:a8:30:7a:de:a0:4d:d3:86:74: 6b:b0:be:86:55:45:6e:69:f7:22:6c:64:4c:fa:b2:cc:52:2b: cd:31:a5:34:a2:c2:d0:25:49:26:e3:70:09:a5:4a:0c:86:73: fa:40:45:06 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUwOTAzMDAxNTM3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3ODhhOS0zYWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWcpGnR4Z2dKh7eSirKhTzAKGHMBc9DiaYzKUeHLhF0BQ+U+H7R9I4gvM8lL jGLD/qXf2dY5EfJQj/Vo6d8GYdUW8biTLlbCWunoh+WEbw/VNR60241ArHsfbUAx YyJmu8qcBcCqnS49eNk0OudyJfRGHvm4HspuQsS+NDyYMzmtQBaEK4liPsfuMxTX Rq8tw/jN1OdXUeJJhaq7Bdzv7TSPU4U2A3Nm53miwxI+S7uW//qzILrYZvLLXkDS ZGmanYGYdfVwImpQoUTr7HkSCwo46UYPk/yu9NdhMVtf+wJt8mukHytfzDBk57BU XDDRE5Y364uonfvtLeudWNBzXwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFPZDyry2 8GlutIcMH9KNBCXN/p/cMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvRUIzMTJGMDIxRUFBMTFFQ0I3NTZCRjMwQzRGOUFFMDIvMTdBNjUxQkNB NDBFMTFFRUFBQjgzNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAd9AAAEwDQYJKoZIhvcNAQELBQADggEBAI/M7OtKUht9 b7/rdfHBVCy0FhhMPEumpv2OvvsiGSqEjDa+MIOmf+cmn3sicD1dpRv58HIFTSBB t4yzsrGn+T3a0UMb9e4mABcLSgVJpkCOQNC4wIuoWPmyM+o/1AyISw1lUkPsZA/T +ogcSR7Kb5RbFYq3b40t7eF9Ce6MAf1zZb112sDVZ+Z80fIP33coI4SiwqLAMVCe 5z6ViowjZ72odL90CiPvgKzWzrhZuJmA8okd2/oxvFoA5AS4AUGsgha5vG6Zg1yS +GT7P48olagwet6gTdOGdGuwvoZVRW5p9yJsZEz6ssxSK80xpTSiwtAlSSbjcAml SgyGc/pARQY= -----END CERTIFICATE-----Generated at Sat Sep 6 14:25:03 2025 by rpki-client