$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa File: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (raw, json) Hash identifier: K7ih6dZEP7tPsDE029yQg9J9G2EoOjYxEh23BSXqdx4= Subject key identifier: A5:22:CE:EC:20:D8:D3:7A:C8:AF:ED:54:73:23:FA:6B:9D:DE:73:A5 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 01D2 Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa Signing time: Sun 11 May 2025 02:31:45 +0000 ROA not before: Sun 11 May 2025 02:31:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 204174 IP address blocks: 2400:e3e0:100::/40 maxlen: 48 2400:e3e0:f00::/40 maxlen: 48 2400:e3e0:f5d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 04:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: May 11 02:31:45 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68200c11-2db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:1f:74:e0:35:bb:7c:a9:ef:ea:16:bc:84: f0:19:9a:43:6e:c0:07:e1:db:f5:76:f0:3d:7c:a0: c4:7e:05:ae:13:27:e8:20:de:45:5b:02:2c:ca:55: 07:d8:1d:9f:a0:d1:0c:90:fd:de:52:35:cc:c5:e7: d4:d9:17:b2:68:dd:d6:9f:f3:08:c3:2d:06:02:f0: 29:6e:e9:67:e0:33:65:5c:4a:1a:8c:56:06:33:f5: 33:eb:00:38:0d:9c:67:11:49:1c:b2:90:39:53:5e: f5:b8:65:f3:d4:27:61:6f:ba:b4:37:10:75:82:a4: 5b:a2:03:3c:e7:08:02:5b:d2:fc:0c:b9:04:c1:9b: 3f:25:f3:1f:56:9d:61:14:73:66:5e:1d:76:76:8c: f6:8f:df:a5:52:ac:e2:74:2d:01:b5:9c:df:61:4e: 3e:de:43:cc:cf:00:fc:d1:d9:fb:b4:43:29:19:44: 82:ea:db:34:81:44:b0:bc:69:67:79:f7:c6:92:fe: c4:17:ca:96:a5:03:a3:32:29:4b:a5:a0:04:7b:0f: 38:35:15:88:7d:a8:47:08:46:16:f5:c7:52:fb:d4: 29:1c:29:55:bf:d9:fb:f5:8d:76:4f:2d:44:d6:3c: c6:d3:ba:df:ef:7b:d2:0d:7c:6d:33:0f:64:bc:97: a6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:22:CE:EC:20:D8:D3:7A:C8:AF:ED:54:73:23:FA:6B:9D:DE:73:A5 X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:e3e0:100::/40 2400:e3e0:f00::/40 2400:e3e0:f5d9::/48 Signature Algorithm: sha256WithRSAEncryption 86:20:a8:43:91:27:cb:66:66:de:88:49:23:5e:bc:29:70:10: 14:7a:ac:eb:a8:26:e1:a6:70:79:75:29:5c:30:2e:56:67:8a: 91:1c:fc:cc:1f:f3:d6:0c:06:51:a0:46:40:eb:66:e0:d3:0c: 18:d5:49:6f:36:fc:97:d7:dc:fa:5b:f7:56:fb:0e:ab:d0:90: ac:2d:14:85:c5:20:81:f3:55:60:3b:47:f2:a7:64:a1:e6:38: 55:d2:52:a0:7c:21:bc:c6:9a:cd:5c:7c:ef:bd:d2:a7:ad:88: 26:a5:36:9a:60:e3:d6:0a:02:97:20:38:8a:4b:ac:18:bc:57: 10:d0:e7:2e:5f:ba:ab:d4:b5:b8:a1:d6:d0:fd:7c:56:cc:87: 43:06:31:4c:6e:9e:e9:e3:ce:e8:ad:4c:ff:6b:8e:44:b4:02: 2a:56:0a:19:1c:3a:3e:13:b5:e7:f7:5d:48:95:ea:79:42:0b: 0a:b9:30:49:ac:d5:d5:38:bc:84:7f:7d:f7:08:16:b6:04:cd: e6:ba:db:d3:1e:45:56:db:70:1a:cc:b9:61:31:9b:ca:0b:02: 4f:2c:30:be:4e:7d:83:54:4d:5e:32:a6:ec:08:22:6f:e5:0f: d3:2f:0c:69:91:af:d2:fe:c5:31:8e:1c:b3:ea:75:26:9a:9a: 73:ef:01:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUwNTExMDIzMTQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODIwMGMxMS0yZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDwfdOA1u3yp7+oWvITwGZpDbsAH4dv1dvA9fKDEfgWuEyfoIN5FWwIsylUH 2B2foNEMkP3eUjXMxefU2ReyaN3Wn/MIwy0GAvApbuln4DNlXEoajFYGM/Uz6wA4 DZxnEUkcspA5U171uGXz1Cdhb7q0NxB1gqRbogM85wgCW9L8DLkEwZs/JfMfVp1h FHNmXh12doz2j9+lUqzidC0BtZzfYU4+3kPMzwD80dn7tEMpGUSC6ts0gUSwvGln effGkv7EF8qWpQOjMilLpaAEew84NRWIfahHCEYW9cdS+9QpHClVv9n79Y12Ty1E 1jzG07rf73vSDXxtMw9kvJemxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUizuwg 2NN6yK/tVHMj+mud3nOlMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJFOUEvOEZBMUY1NkVCODVFMTFFRDhFNkY0MjEzQzRGOUFFMDIvMzRENUVEMTIx MEY1MTFFRUJDRTJBODFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQcBAf8E IzAhMB8EAgACMBkDBgAkAOPgAQMGACQA4+APAwcAJADj4PXZMA0GCSqGSIb3DQEB CwUAA4IBAQCGIKhDkSfLZmbeiEkjXrwpcBAUeqzrqCbhpnB5dSlcMC5WZ4qRHPzM H/PWDAZRoEZA62bg0wwY1UlvNvyX19z6W/dW+w6r0JCsLRSFxSCB81VgO0fyp2Sh 5jhV0lKgfCG8xprNXHzvvdKnrYgmpTaaYOPWCgKXIDiKS6wYvFcQ0OcuX7qr1LW4 odbQ/XxWzIdDBjFMbp7p487orUz/a45EtAIqVgoZHDo+E7Xn911Ilep5QgsKuTBJ rNXVOLyEf333CBa2BM3mutvTHkVW23AazLlhMZvKCwJPLDC+Tn2DVE1eMqbsCCJv 5Q/TLwxpka/S/sUxjhyz6nUmmppz7wHE -----END CERTIFICATE-----Generated at Fri Oct 24 05:31:38 2025 by rpki-client