$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/1B38341C6B7C11F095B90A2BC4F9AE02.roa File: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (raw, json) Hash identifier: KtpeeMkouh4BeqprRpHiO5N0mOWLBqSII+5IcI34asQ= Subject key identifier: 2B:F4:C1:AB:B1:69:BF:CF:CD:44:0C:1B:A8:A4:67:4E:53:83:9F:3F Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Certificate serial: 01CB Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/1B38341C6B7C11F095B90A2BC4F9AE02.roa Signing time: Mon 28 Jul 2025 06:28:42 +0000 ROA not before: Mon 28 Jul 2025 06:28:42 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 141023 IP address blocks: 2001:df1:fa40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Validity Not Before: Jul 28 06:28:42 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6887189a-6ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:93:c0:be:cf:ed:78:59:32:a3:d2:83:6e: dd:b0:30:c3:82:15:6a:67:c0:e7:c5:c2:6a:1b:a2: fe:82:32:80:f4:07:0c:7d:c2:2c:60:7d:9c:0c:3e: ff:b4:df:cc:b1:f8:47:e3:9d:e0:d4:8b:8c:5e:f5: 49:0a:87:41:6f:0c:c9:f5:d7:4d:3a:42:12:7e:1f: 80:50:22:7c:f8:69:38:dd:9e:3b:ff:90:92:40:fb: ad:95:aa:84:98:db:75:e1:99:4c:74:3e:1c:60:44: 93:24:db:34:f7:61:22:7e:53:bc:fd:4a:9f:56:09: c5:c0:77:c5:3a:41:bd:d0:9e:e9:5c:d2:a3:e1:e6: 0c:70:2d:46:fe:a1:52:67:e0:b1:32:e5:cc:eb:1a: b2:cb:45:46:7f:eb:17:3f:84:b7:dd:38:99:f0:d9: 69:73:a0:3a:79:74:88:70:43:3e:5c:fb:c2:bb:0c: 46:e4:53:32:79:8f:ec:23:8c:f4:a6:27:c9:f1:9a: 76:5a:5b:e4:ef:b9:4b:e7:15:a8:0f:7d:66:ec:4d: 7d:49:e8:33:da:96:84:90:f3:18:49:51:b3:c2:c9: cf:b3:6d:a7:b9:03:e1:68:3a:3e:9e:54:06:c5:35: a1:d3:d4:0e:f5:f9:9a:c3:c1:13:48:9d:95:37:70: b2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F4:C1:AB:B1:69:BF:CF:CD:44:0C:1B:A8:A4:67:4E:53:83:9F:3F X509v3 Authority Key Identifier: keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/1B38341C6B7C11F095B90A2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:fa40::/48 Signature Algorithm: sha256WithRSAEncryption 11:d5:35:26:07:83:ba:cc:0b:15:d2:a6:4e:95:07:b1:9f:46: 13:de:33:08:ff:15:22:8d:ae:78:f3:9c:76:95:df:d7:24:52: 4c:94:a6:32:8e:78:d6:85:66:1d:09:3c:09:9d:41:87:88:fa: 69:79:fd:b6:17:2a:da:76:78:4e:a8:c1:e2:b8:70:a5:d9:6a: 47:58:30:04:79:cf:8b:13:6b:25:25:1e:98:2a:9d:0d:aa:05: 31:a1:d4:9e:e6:b1:2e:31:de:6f:9f:e9:4c:8a:41:27:ba:72: d3:b8:46:71:99:8b:ee:36:09:5e:0b:e1:b2:92:78:14:8e:5d: ca:8f:8b:df:0a:37:76:fc:20:47:9c:d2:98:6e:31:7a:86:c7: 6d:d0:7f:3b:c1:52:22:19:89:7a:43:18:e4:ff:75:a9:3f:e8: 5b:b4:36:99:57:b1:fa:34:4e:50:b8:cc:01:ce:cd:9d:d5:56: 29:06:1e:ed:f4:22:85:3e:6c:0a:14:52:73:dd:d9:7b:fa:82: d7:82:56:2a:ee:bf:e7:37:02:cc:6e:75:90:bc:5e:44:7a:27: a4:af:a3:b4:43:97:0f:8a:f0:02:1a:f4:23:74:85:b6:a7:c8: 59:cb:dd:7c:17:d6:6a:45:b0:5b:43:b0:23:85:cc:43:e7:d0: d6:cd:52:95 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMkIxMTAvBgNVBAUTKEE5OTg1Q0REMzc5MzJFMUQzNjRDNEM2RDc1REJBNTAz QkY3MjY3N0MwHhcNMjUwNzI4MDYyODQyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODg3MTg5YS02ZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5yTwL7P7XhZMqPSg27dsDDDghVqZ8DnxcJqG6L+gjKA9AcMfcIsYH2cDD7/ tN/MsfhH453g1IuMXvVJCodBbwzJ9ddNOkISfh+AUCJ8+Gk43Z47/5CSQPutlaqE mNt14ZlMdD4cYESTJNs092EiflO8/UqfVgnFwHfFOkG90J7pXNKj4eYMcC1G/qFS Z+CxMuXM6xqyy0VGf+sXP4S33TiZ8Nlpc6A6eXSIcEM+XPvCuwxG5FMyeY/sI4z0 pifJ8Zp2Wlvk77lL5xWoD31m7E19Segz2paEkPMYSVGzwsnPs22nuQPhaDo+nlQG xTWh09QO9fmaw8ETSJ2VN3CyLQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCv0waux ab/PzUQMG6ikZ05Tg58/MB8GA1UdIwQYMBaAFKmYXN03ky4dNkxMbXXbpQO/cmd8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjEyQi8wOEMyNzUzMkRC NjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExoMDJURXh0ZGR1bEE3OXla M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaaGMzVGVUTGgwMlRFeHRkZHVsQTc5eVozdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUIxMkIvMDhDMjc1MzJEQjY4MTFFRDk2QzQ5QzNEQzRGOUFFMDIvMUIzODM0MUM2 QjdDMTFGMDk1QjkwQTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3x+kAwDQYJKoZIhvcNAQELBQADggEBABHVNSYHg7rM CxXSpk6VB7GfRhPeMwj/FSKNrnjznHaV39ckUkyUpjKOeNaFZh0JPAmdQYeI+ml5 /bYXKtp2eE6oweK4cKXZakdYMAR5z4sTayUlHpgqnQ2qBTGh1J7msS4x3m+f6UyK QSe6ctO4RnGZi+42CV4L4bKSeBSOXcqPi98KN3b8IEec0phuMXqGx23QfzvBUiIZ iXpDGOT/dak/6Fu0NplXsfo0TlC4zAHOzZ3VVikGHu30IoU+bAoUUnPd2Xv6gteC Viruv+c3AsxudZC8XkR6J6Svo7RDlw+K8AIa9CN0hbanyFnL3XwX1mpFsFtDsCOF zEPn0NbNUpU= -----END CERTIFICATE-----Generated at Sat Aug 9 23:26:20 2025 by rpki-client