$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4FB7C576376811E9847C6223C4F9AE02.roa File: 4FB7C576376811E9847C6223C4F9AE02.roa (raw, json) Hash identifier: SlMnGnHGJTw9zh4hOi0MJHciRJEwPALAOUFD/r39IJA= Subject key identifier: 54:4F:93:70:BB:37:0E:1F:11:3B:56:FD:F7:41:70:26:E1:D1:0D:9D Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2874 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4FB7C576376811E9847C6223C4F9AE02.roa Signing time: Sat 26 Jul 2025 15:53:47 +0000 ROA not before: Sat 26 Jul 2025 15:53:47 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138631 IP address blocks: 2402:9e80:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10356 (0x2874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:53:47 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884fa0a-cf7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:35:63:fa:8e:14:21:59:c6:12:5c:65:a0: 07:3a:ee:32:3d:9e:25:db:49:6e:2c:1d:60:9a:64: 45:7c:d8:78:07:d4:ff:43:be:ca:1e:f5:1b:be:17: a7:8c:a2:a3:9e:79:8a:ac:e8:d3:89:70:c9:d4:da: 0a:67:a9:8b:02:7c:fd:ab:0a:5e:4c:2d:f0:11:fa: e2:38:0c:d1:5c:e4:ed:5f:0d:21:4d:f2:d0:e6:c7: 96:cb:2c:1e:76:4e:62:91:8b:71:00:49:31:3e:fd: f1:eb:07:44:05:fd:c2:9f:81:f5:f9:ca:96:76:0f: 09:0e:28:a6:be:06:df:26:0a:06:f7:16:dc:e9:8e: ff:fb:3c:1a:8e:99:46:d4:7c:fd:82:a2:dc:25:2b: 23:6e:ed:89:ed:61:4f:86:fd:ce:d1:d3:e2:04:2a: 36:d1:70:02:a7:6b:ea:e3:7c:c4:a2:ee:27:d5:9e: 2d:49:f4:c3:2f:7e:f7:a0:57:79:38:74:00:cb:51: 8c:fd:a6:05:5b:50:fa:bb:54:a0:ac:d4:27:1a:32: 2f:5b:fd:23:c9:fb:d5:a8:25:53:c0:9f:6b:65:cc: 63:8b:93:74:d8:f3:1f:e3:71:6b:0f:34:6f:7e:87: ce:d4:2a:ec:b2:29:78:96:42:d0:60:0c:bf:f2:fc: 05:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4F:93:70:BB:37:0E:1F:11:3B:56:FD:F7:41:70:26:E1:D1:0D:9D X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4FB7C576376811E9847C6223C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:43::/48 Signature Algorithm: sha256WithRSAEncryption c6:89:a9:21:ce:26:02:3d:5a:ca:d2:17:f0:27:95:f1:a8:37: aa:1b:02:01:13:40:10:6a:15:8a:88:8d:fd:fc:4a:b8:9f:f7: 7b:2f:59:64:70:b6:06:8e:c8:ba:19:12:4c:19:22:3e:1c:dc: 3f:42:bc:b8:ff:c4:f4:fc:a7:d0:52:c5:5c:28:1d:92:ab:a6: c1:91:46:5f:90:48:28:f7:87:76:00:af:d5:19:7c:12:b4:29: d5:88:a5:a7:a7:b9:b6:17:9d:6d:50:83:b7:90:a0:b2:7e:60: ad:49:46:a0:c5:a8:4d:e5:7b:81:41:16:3f:b6:b9:c2:ff:a9: 07:d2:55:c2:d7:43:36:3a:68:03:7f:2c:7e:4c:5b:32:a2:f9: d5:04:fb:53:fd:bb:28:8a:2d:74:09:52:d6:a1:99:de:8e:47: 59:76:c5:75:8d:79:e1:ac:64:a4:68:fd:ec:b3:9f:f3:3a:e5: 2f:93:1b:c6:bd:8a:51:42:66:2b:fd:91:02:e4:b9:7c:6b:c0: e4:e2:4f:2f:3c:ef:fc:f3:b1:3b:2b:7f:75:3e:da:66:2b:35: 9f:62:77:16:a2:6c:8a:cc:4a:70:fd:56:5e:df:d2:d0:ed:9a: a7:ca:24:16:be:b9:b0:b7:73:a2:b9:65:b4:14:8e:5a:b5:fa: b4:21:fb:20 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICKHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1MzQ3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZmEwYS1jZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS41Y/qOFCFZxhJcZaAHOu4yPZ4l20luLB1gmmRFfNh4B9T/Q77KHvUbvhen jKKjnnmKrOjTiXDJ1NoKZ6mLAnz9qwpeTC3wEfriOAzRXOTtXw0hTfLQ5seWyywe dk5ikYtxAEkxPv3x6wdEBf3Cn4H1+cqWdg8JDiimvgbfJgoG9xbc6Y7/+zwajplG 1Hz9gqLcJSsjbu2J7WFPhv3O0dPiBCo20XACp2vq43zEou4n1Z4tSfTDL373oFd5 OHQAy1GM/aYFW1D6u1SgrNQnGjIvW/0jyfvVqCVTwJ9rZcxji5N02PMf43FrDzRv fofO1Crssil4lkLQYAy/8vwFAwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFRPk3C7 Nw4fETtW/fdBcCbh0Q2dMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNEZCN0M1NzYz NzY4MTFFOTg0N0M2MjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAp6AAEMwDQYJKoZIhvcNAQELBQADggEBAMaJqSHOJgI9 WsrSF/AnlfGoN6obAgETQBBqFYqIjf38Srif93svWWRwtgaOyLoZEkwZIj4c3D9C vLj/xPT8p9BSxVwoHZKrpsGRRl+QSCj3h3YAr9UZfBK0KdWIpaenubYXnW1Qg7eQ oLJ+YK1JRqDFqE3le4FBFj+2ucL/qQfSVcLXQzY6aAN/LH5MWzKi+dUE+1P9uyiK LXQJUtahmd6OR1l2xXWNeeGsZKRo/eyzn/M65S+TG8a9ilFCZiv9kQLkuXxrwOTi Ty887/zzsTsrf3U+2mYrNZ9idxaibIrMSnD9Vl7f0tDtmqfKJBa+ubC3c6K5ZbQU jlq1+rQh+yA= -----END CERTIFICATE-----Generated at Mon Aug 11 01:50:58 2025 by rpki-client