$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/8276BFA60BB811EFB091FD1CC4F9AE02.roa File: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (raw, json) Hash identifier: tHlnHTM42fIgrOKj6B5mEiDlxGJ8PU+aATIjcWUbfzQ= Subject key identifier: 0B:DA:C5:26:3F:82:03:57:69:6D:0F:EE:D0:15:1B:C7:96:CD:E7:AE Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 0421 Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/8276BFA60BB811EFB091FD1CC4F9AE02.roa Signing time: Sat 15 Mar 2025 00:45:55 +0000 ROA not before: Sat 15 Mar 2025 00:45:55 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 201351 IP address blocks: 2400:8a20:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Mar 15 00:45:55 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67d4cdc2-3493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:f7:d6:1e:97:b4:2a:69:07:0e:61:95:28: 02:19:50:1d:17:c2:63:f1:3f:86:90:f9:97:40:e8: d3:ab:25:16:5d:73:12:c3:af:71:73:a0:41:6f:56: ce:b7:46:78:53:0c:6a:40:9e:7e:e3:b0:cc:62:71: ad:29:ab:71:df:d1:58:55:9d:8c:62:a2:7b:a4:ec: 69:80:6a:da:a7:01:20:51:5d:02:b9:b5:03:79:4d: 76:12:04:70:01:86:12:2b:2c:49:73:be:e0:80:12: 82:84:23:b3:75:31:9f:d7:56:ea:f4:0f:af:12:7f: bf:5c:77:56:46:c4:bf:f7:26:78:52:8e:23:fa:2d: a7:c8:a2:02:58:1c:07:d0:94:c9:3b:d0:9b:01:52: 75:08:2b:cf:29:16:f8:1d:13:1a:55:50:d4:9c:5d: e7:56:53:4b:d2:dc:54:a6:e2:98:9e:21:82:0d:ec: 4f:e7:d5:f7:bc:9e:aa:f5:d9:2a:6b:4c:86:61:f3: f3:db:76:ed:79:a9:10:e7:cb:b4:78:e2:30:89:ce: 46:0e:dd:2e:17:b2:52:49:fd:2e:e9:a3:d5:55:db: 92:4f:c4:56:52:ac:f5:44:71:15:cf:04:47:30:55: f5:19:8a:d9:5c:0e:2f:ec:23:65:94:38:3a:b6:90: 12:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DA:C5:26:3F:82:03:57:69:6D:0F:EE:D0:15:1B:C7:96:CD:E7:AE X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/8276BFA60BB811EFB091FD1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8a20:127::/48 Signature Algorithm: sha256WithRSAEncryption 08:de:3a:60:8f:40:ab:ab:2b:9a:c1:1a:a5:ed:da:08:dc:26: 32:29:fc:d1:05:36:67:66:c2:69:4c:71:f5:23:35:b5:b0:6c: 80:71:80:ad:16:a0:80:10:15:9e:92:aa:20:2d:37:74:4b:0b: a5:59:16:01:f3:05:5d:72:27:cf:2c:a2:f2:fb:5b:bb:b7:06: 87:95:62:76:b9:8e:00:b3:e0:56:7a:e7:61:60:18:b5:75:59: 55:33:5e:f1:32:22:b5:0e:6c:d4:7c:86:96:f3:3d:fe:05:2b: 0d:1c:7e:50:63:7a:10:1c:e9:ef:f3:60:c0:e5:fe:74:b3:b6: 2a:bc:64:5c:d5:aa:ee:66:93:5a:73:37:15:75:8f:5b:74:83: 00:f0:fd:d9:2a:49:b5:4f:b4:66:52:26:33:60:8b:13:37:43: b0:1c:ad:d0:61:f6:c8:78:19:5f:22:89:66:68:a6:22:69:1a: 88:cf:96:d5:08:41:0a:58:41:6e:59:74:dc:ea:f1:99:a4:0c: e4:07:b8:ba:c7:b9:fe:47:51:66:82:f5:1c:83:ec:e3:7f:f5: e0:e6:f8:5f:bd:34:32:a6:1e:3c:b9:04:2e:4d:8a:27:01:37: 41:dd:43:c6:4b:03:bf:00:24:ba:78:e9:d4:a7:f9:df:eb:f4: 9d:39:7e:bd -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUwMzE1MDA0NTU1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q0Y2RjMi0zNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+731h6XtCppBw5hlSgCGVAdF8Jj8T+GkPmXQOjTqyUWXXMSw69xc6BBb1bO t0Z4UwxqQJ5+47DMYnGtKatx39FYVZ2MYqJ7pOxpgGrapwEgUV0CubUDeU12EgRw AYYSKyxJc77ggBKChCOzdTGf11bq9A+vEn+/XHdWRsS/9yZ4Uo4j+i2nyKICWBwH 0JTJO9CbAVJ1CCvPKRb4HRMaVVDUnF3nVlNL0txUpuKYniGCDexP59X3vJ6q9dkq a0yGYfPz23bteakQ58u0eOIwic5GDt0uF7JSSf0u6aPVVduST8RWUqz1RHEVzwRH MFX1GYrZXA4v7CNllDg6tpASeQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAvaxSY/ ggNXaW0P7tAVG8eWzeeuMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTJEQjEvM0ZBNjkyMDA4M0MwMTFFQ0I1NEIzOTdGQzRGOUFFMDIvODI3NkJGQTYw QkI4MTFFRkIwOTFGRDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAIogAScwDQYJKoZIhvcNAQELBQADggEBAAjeOmCPQKur K5rBGqXt2gjcJjIp/NEFNmdmwmlMcfUjNbWwbIBxgK0WoIAQFZ6SqiAtN3RLC6VZ FgHzBV1yJ88sovL7W7u3BoeVYna5jgCz4FZ652FgGLV1WVUzXvEyIrUObNR8hpbz Pf4FKw0cflBjehAc6e/zYMDl/nSztiq8ZFzVqu5mk1pzNxV1j1t0gwDw/dkqSbVP tGZSJjNgixM3Q7AcrdBh9sh4GV8iiWZopiJpGojPltUIQQpYQW5ZdNzq8ZmkDOQH uLrHuf5HUWaC9RyD7ON/9eDm+F+9NDKmHjy5BC5NiicBN0HdQ8ZLA78AJLp46dSn +d/r9J05fr0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:02 2025 by rpki-client