$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/411624587D2511ECA2A43549C4F9AE02.roa File: 411624587D2511ECA2A43549C4F9AE02.roa (raw, json) Hash identifier: GuJ4Y9sxp8o3CdlaaRs5rN2aTj9swH/QSPmwZPnS9dA= Subject key identifier: 51:BB:B3:6D:96:66:E8:1C:19:08:D2:F2:61:5C:33:A4:CD:5E:B3:A1 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2891 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/411624587D2511ECA2A43549C4F9AE02.roa Signing time: Sat 26 Jul 2025 15:54:16 +0000 ROA not before: Sat 26 Jul 2025 15:54:16 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38136 IP address blocks: 2402:9e80:a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10385 (0x2891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:54:16 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884fa28-0be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8c:8d:cb:75:ab:ee:72:9d:49:e0:78:03:89: b6:db:6c:c9:7a:e4:37:06:ef:e8:48:3f:2f:a4:6d: f8:2f:c1:41:66:68:62:8b:0d:49:aa:a2:f4:1e:44: d1:be:1e:ba:23:43:f1:d8:13:3f:a8:dd:9b:48:26: 57:96:fe:0e:3d:9a:c0:94:8c:7d:89:1f:f3:45:d0: 92:0b:35:f1:d9:b0:6a:ea:63:c4:0d:83:cd:9a:f3: 8f:91:05:e5:98:bd:12:f9:74:32:67:48:d4:30:97: e7:ed:b1:a3:4e:95:cd:c3:d7:c9:d3:67:3c:75:68: d7:6c:21:5c:48:dc:5f:a8:1d:eb:57:ca:b0:2d:48: 5a:0d:39:24:f0:5d:2c:42:f2:dd:12:ef:1d:5a:76: ca:27:db:e2:ea:99:ab:df:23:61:50:73:fa:6a:73: e7:72:17:53:c7:ce:d9:67:5b:23:1d:6c:8e:e2:6d: df:e4:06:c3:eb:0e:ed:9e:d7:c3:93:95:8a:9a:2d: 9b:f5:9d:ad:01:d5:0b:02:4f:d0:6a:a5:92:c8:9e: 81:b0:79:c2:8c:b5:7b:78:dc:df:8e:48:e8:97:3b: 15:32:d9:ac:2a:36:c9:ef:19:42:f8:b7:be:cb:43: 8f:8d:ba:58:ad:7b:92:2e:41:66:81:0d:e5:e3:ba: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BB:B3:6D:96:66:E8:1C:19:08:D2:F2:61:5C:33:A4:CD:5E:B3:A1 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/411624587D2511ECA2A43549C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:a00::/40 Signature Algorithm: sha256WithRSAEncryption 1f:6d:59:98:87:16:b3:34:34:8b:21:4d:ab:b9:4d:15:11:06: 7e:5a:a3:74:b5:be:c2:65:93:23:a7:a8:a8:06:3b:35:39:08: 34:f2:66:f8:a5:26:11:f5:d8:72:e6:08:14:09:fe:b1:d0:9f: 54:cc:4a:b0:07:96:e2:87:12:a5:cd:51:1e:a5:93:bc:2a:a8: 0c:24:9f:33:e8:69:90:df:3e:2c:65:ab:9e:17:69:44:9f:3a: cc:dc:64:88:23:57:84:78:1e:10:b1:37:98:19:05:12:c3:a9: c2:23:49:f3:e7:71:2c:7e:60:ad:48:63:12:2f:65:d1:ee:7b: 4a:01:08:d7:f6:0e:28:06:c3:12:b8:db:0a:52:60:ed:c5:ef: 27:29:1e:6c:fa:6d:b8:ce:22:e3:ae:06:68:ce:de:24:ab:cd: 50:b7:71:67:90:9f:dc:87:ee:97:60:65:00:d3:c9:b5:c4:b0: 73:e4:27:84:bf:68:be:2f:12:c5:e4:57:57:1b:95:1c:17:5d: bf:c1:88:b9:6d:e9:74:17:ef:32:66:96:1e:a4:b1:9e:1c:4c: 19:37:ae:57:09:77:a4:60:be:29:79:a4:fc:25:3a:0e:05:2a: e2:8c:d1:2d:ea:4d:db:fe:36:4c:70:2f:2d:5e:47:33:82:d2: 05:f0:a9:b6 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICKJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1NDE2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZmEyOC0wYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4yNy3Wr7nKdSeB4A4m222zJeuQ3Bu/oSD8vpG34L8FBZmhiiw1JqqL0HkTR vh66I0Px2BM/qN2bSCZXlv4OPZrAlIx9iR/zRdCSCzXx2bBq6mPEDYPNmvOPkQXl mL0S+XQyZ0jUMJfn7bGjTpXNw9fJ02c8dWjXbCFcSNxfqB3rV8qwLUhaDTkk8F0s QvLdEu8dWnbKJ9vi6pmr3yNhUHP6anPnchdTx87ZZ1sjHWyO4m3f5AbD6w7tntfD k5WKmi2b9Z2tAdULAk/QaqWSyJ6BsHnCjLV7eNzfjkjolzsVMtmsKjbJ7xlC+Le+ y0OPjbpYrXuSLkFmgQ3l47rVYwIDAQABo4IClzCCApMwHQYDVR0OBBYEFFG7s22W ZugcGQjS8mFcM6TNXrOhMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDExNjI0NTg3 RDI1MTFFQ0EyQTQzNTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkAp6ACjANBgkqhkiG9w0BAQsFAAOCAQEAH21ZmIcWszQ0 iyFNq7lNFREGflqjdLW+wmWTI6eoqAY7NTkINPJm+KUmEfXYcuYIFAn+sdCfVMxK sAeW4ocSpc1RHqWTvCqoDCSfM+hpkN8+LGWrnhdpRJ86zNxkiCNXhHgeELE3mBkF EsOpwiNJ8+dxLH5grUhjEi9l0e57SgEI1/YOKAbDErjbClJg7cXvJykebPptuM4i 464GaM7eJKvNULdxZ5Cf3Iful2BlANPJtcSwc+QnhL9ovi8SxeRXVxuVHBddv8GI uW3pdBfvMmaWHqSxnhxMGTeuVwl3pGC+KXmk/CU6DgUq4ozRLepN2/42THAvLV5H M4LSBfCptg== -----END CERTIFICATE-----Generated at Sat Aug 9 14:21:42 2025 by rpki-client