$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/BC26B7548CAB11F0BDAA8B67C4F9AE02.roa File: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (raw, json) Hash identifier: yTjA76KeDCsVYv0UnIasiwZD8KPOw92OzNyZSl311Yw= Subject key identifier: 86:2E:0F:08:EF:40:14:B2:50:81:BF:B2:90:9C:D4:3E:22:58:39:A6 Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Certificate serial: 0151 Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/BC26B7548CAB11F0BDAA8B67C4F9AE02.roa Signing time: Mon 08 Sep 2025 12:02:47 +0000 ROA not before: Mon 08 Sep 2025 12:02:47 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 213903 IP address blocks: 2403:ad80:101c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 05:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Validity Not Before: Sep 8 12:02:47 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68bec5e7-8036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:39:77:a6:b4:8d:94:16:25:1e:cd:5c:75: 78:3a:55:1a:5a:50:e0:18:df:22:59:cc:2a:f2:4b: bf:e9:33:4d:37:41:87:79:7b:00:cd:48:fa:2c:a9: ac:e9:a2:d7:eb:f4:7a:f2:60:52:f2:0b:f2:a2:4e: f0:61:0b:a9:6b:e0:41:c0:80:23:5f:0e:6b:85:ca: 60:44:b7:ff:18:1a:d9:6f:76:3f:9e:dd:a2:e9:83: dc:8c:3b:8f:55:32:d4:47:f7:eb:89:40:54:2c:b2: fa:f8:8d:42:c2:24:42:d2:db:cf:13:f0:4e:c1:d6: fc:d5:c0:7e:11:47:25:a2:96:04:9a:3a:fe:52:e0: d8:84:f3:39:34:67:88:2c:5d:95:d9:59:ef:00:3c: 46:3c:79:ac:5e:6e:7a:d8:82:d0:e2:f2:77:dd:c4: 33:07:eb:ab:5c:1f:bf:11:7a:a9:d1:f1:08:9a:a3: b2:db:cd:2c:5e:73:ce:e3:5c:83:79:26:ba:e0:ec: ba:10:85:b0:14:80:81:be:9d:27:dd:8d:a2:6e:c0: e7:ed:a8:10:d7:68:3b:f2:a2:3d:00:55:5e:9a:d9: 71:bc:44:0d:c3:0f:8d:c9:50:9f:d4:ef:65:79:9a: c0:7f:a5:9a:22:ca:c4:70:68:34:4e:43:62:2b:fd: 19:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2E:0F:08:EF:40:14:B2:50:81:BF:B2:90:9C:D4:3E:22:58:39:A6 X509v3 Authority Key Identifier: keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/BC26B7548CAB11F0BDAA8B67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:ad80:101c::/48 Signature Algorithm: sha256WithRSAEncryption 04:90:eb:dc:2b:14:8a:4f:02:ef:30:82:90:ad:4e:22:91:85: 11:a4:b0:fe:c8:e8:ed:5c:72:25:75:17:2e:27:63:92:82:62: 38:a7:c0:9b:b5:a3:a7:71:02:a6:d8:3d:57:ec:9b:38:ff:aa: 9a:67:49:0a:7c:4d:d0:27:9f:70:7d:8e:2f:23:2a:14:da:f0: af:ac:d7:d3:de:94:2e:29:80:50:36:0f:3e:0b:7c:d1:3f:70: 12:20:14:aa:97:34:bc:4e:b0:f2:f5:55:08:22:ed:8b:16:ac: 12:03:b6:3b:38:ac:6d:bd:8e:74:84:ed:17:98:f9:a1:ce:ca: 60:5e:69:67:49:b7:2c:a1:87:98:d5:22:19:d6:e1:e5:60:01: b6:c1:9c:ef:3e:4b:d9:c2:73:c7:99:23:d5:11:04:f4:52:e9: 26:26:6b:43:00:80:09:08:5d:85:6d:bb:d7:9d:d5:31:1d:e4: 11:08:aa:1b:25:4e:30:e4:7f:c1:8b:7f:4f:9f:4b:8f:96:ba: d2:36:0d:a6:29:11:22:cf:6e:b3:21:75:c6:50:94:54:03:5a: e9:0e:f3:d8:d4:b8:d5:14:9a:7c:e7:a1:09:c5:b2:05:7a:ac: 58:f8:1d:f8:12:86:99:90:2a:42:5a:47:6f:59:83:45:cb:a3: 42:ce:72:e0 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1 QjVENjcyOUMwHhcNMjUwOTA4MTIwMjQ3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJlYzVlNy04MDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFw5d6a0jZQWJR7NXHV4OlUaWlDgGN8iWcwq8ku/6TNNN0GHeXsAzUj6LKms 6aLX6/R68mBS8gvyok7wYQupa+BBwIAjXw5rhcpgRLf/GBrZb3Y/nt2i6YPcjDuP VTLUR/friUBULLL6+I1CwiRC0tvPE/BOwdb81cB+EUclopYEmjr+UuDYhPM5NGeI LF2V2VnvADxGPHmsXm562ILQ4vJ33cQzB+urXB+/EXqp0fEImqOy280sXnPO41yD eSa64Oy6EIWwFICBvp0n3Y2ibsDn7agQ12g78qI9AFVemtlxvEQNww+NyVCf1O9l eZrAf6WaIsrEcGg0TkNiK/0ZywIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIYuDwjv QBSyUIG/spCc1D4iWDmmMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3NzcvMEJBNTcyQjBFQzRGMTFFRUExQjM4ODY2QzRGOUFFMDIvQkMyNkI3NTQ4 Q0FCMTFGMEJEQUE4QjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkA62AEBwwDQYJKoZIhvcNAQELBQADggEBAASQ69wrFIpP Au8wgpCtTiKRhRGksP7I6O1cciV1Fy4nY5KCYjinwJu1o6dxAqbYPVfsmzj/qppn SQp8TdAnn3B9ji8jKhTa8K+s19PelC4pgFA2Dz4LfNE/cBIgFKqXNLxOsPL1VQgi 7YsWrBIDtjs4rG29jnSE7ReY+aHOymBeaWdJtyyhh5jVIhnW4eVgAbbBnO8+S9nC c8eZI9URBPRS6SYma0MAgAkIXYVtu9ed1TEd5BEIqhslTjDkf8GLf0+fS4+WutI2 DaYpESLPbrMhdcZQlFQDWukO89jUuNUUmnznoQnFsgV6rFj4HfgShpmQKkJaR29Z g0XLo0LOcuA= -----END CERTIFICATE-----Generated at Mon Sep 15 21:29:08 2025 by rpki-client