$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa File: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (raw, json) Hash identifier: r+C29yNQnuCXTSlOlr8783OHQQCzhGmi0bueLCwhtlk= Subject key identifier: ED:89:3A:2E:80:F7:C8:CA:72:9B:6C:4F:C7:85:33:3B:DE:67:29:C4 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2873 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa Signing time: Sat 26 Jul 2025 15:53:46 +0000 ROA not before: Sat 26 Jul 2025 15:53:46 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138564 IP address blocks: 2402:9e80:42::/48 maxlen: 48 2402:9e80:a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10355 (0x2873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:53:46 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884fa0a-b96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7c:1d:41:b3:e2:a4:59:63:cf:6e:0e:ce:36: f4:8e:79:18:15:f6:53:31:b1:72:ce:3a:9e:76:d4: 16:92:1a:6c:10:8b:de:d3:8d:57:57:00:8a:7e:6e: b0:a1:d3:cc:16:71:b9:0e:75:91:6c:83:d6:b3:74: af:c4:4b:d9:fd:54:a7:44:1f:74:ec:7f:3b:23:a8: 31:95:e7:34:8d:c3:83:2f:22:0e:d6:a2:20:89:4a: 27:9d:d9:e1:4d:c7:f4:0c:2f:da:19:cf:4d:1a:c1: 5d:22:6a:3b:6f:94:a1:25:08:61:9e:b5:62:85:b7: 17:46:67:8c:34:44:6e:6b:23:0e:4f:c7:30:6f:82: 63:d7:d4:40:e9:f6:c5:4a:b3:0a:b1:7d:39:cb:28: 40:a6:85:b2:de:58:ac:1f:a0:93:d8:c8:9b:1c:e7: 8e:72:5a:91:b5:ee:c1:7d:a1:5f:a4:18:82:38:52: 43:49:22:61:6b:47:92:b5:3e:83:49:a5:d1:88:d5: 44:be:72:d1:5d:51:e4:ac:29:18:18:f5:b3:ac:01: a3:81:40:2d:2e:18:da:03:4e:d4:02:c1:a3:f4:0f: b5:d5:a4:13:88:c4:9b:55:54:0a:bb:c1:f3:ed:84: de:fd:55:34:47:11:25:8b:d1:f9:3d:b8:b3:2a:51: 90:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:89:3A:2E:80:F7:C8:CA:72:9B:6C:4F:C7:85:33:3B:DE:67:29:C4 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:42::/48 2402:9e80:a00::/40 Signature Algorithm: sha256WithRSAEncryption 9e:64:29:31:e4:a1:04:90:0c:65:93:ba:77:9b:87:34:50:96: 80:49:6f:02:27:c2:81:4b:44:26:d0:86:f1:01:4f:8d:cf:9c: 29:24:b7:12:87:09:83:aa:21:8e:86:dd:20:98:63:12:75:28: 33:29:21:a9:79:4e:42:f6:b4:64:55:d8:a6:36:68:cf:52:a3: 3a:f4:87:a8:c5:69:80:e6:50:40:08:dc:1d:48:63:08:06:fa: 97:71:f8:1b:9c:05:d7:04:06:80:3c:6e:e5:73:71:be:97:65: f4:d0:89:85:30:ef:f8:80:78:58:58:73:fe:58:6c:db:9f:68: fd:c7:09:36:b4:cb:a2:8e:1c:a9:cf:30:f3:d5:cc:cf:34:c6: be:df:32:56:a2:6e:bd:96:d5:d4:7e:c3:e3:4a:fd:0f:05:28: 5f:1c:de:31:99:53:ba:8a:43:fd:04:52:a4:3f:ef:42:2b:95: 8c:a4:76:2d:d0:9b:3b:81:e8:51:b8:4d:43:81:25:28:cf:db: 96:fe:68:df:30:88:6e:e6:cb:83:82:2a:85:b8:50:98:2a:53: 9e:ef:22:c0:6d:27:27:e3:57:2f:3f:c1:f6:7f:1e:eb:f4:f1: 5b:a5:21:87:32:4d:aa:84:60:5f:ad:72:74:15:60:a9:33:dd: 57:35:9f:ee -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICKHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1MzQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZmEwYS1iOTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXwdQbPipFljz24Ozjb0jnkYFfZTMbFyzjqedtQWkhpsEIve041XVwCKfm6w odPMFnG5DnWRbIPWs3SvxEvZ/VSnRB907H87I6gxlec0jcODLyIO1qIgiUonndnh Tcf0DC/aGc9NGsFdImo7b5ShJQhhnrVihbcXRmeMNERuayMOT8cwb4Jj19RA6fbF SrMKsX05yyhApoWy3lisH6CT2MibHOeOclqRte7BfaFfpBiCOFJDSSJha0eStT6D SaXRiNVEvnLRXVHkrCkYGPWzrAGjgUAtLhjaA07UAsGj9A+11aQTiMSbVVQKu8Hz 7YTe/VU0RxEli9H5PbizKlGQOwIDAQABo4ICoDCCApwwHQYDVR0OBBYEFO2JOi6A 98jKcptsT8eFMzveZynEMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNzdDOThENDZD OEUwMTFFQTlGRjgwMjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKgYIKwYBBQUHAQcBAf8E GzAZMBcEAgACMBEDBwAkAp6AAEIDBgAkAp6ACjANBgkqhkiG9w0BAQsFAAOCAQEA nmQpMeShBJAMZZO6d5uHNFCWgElvAifCgUtEJtCG8QFPjc+cKSS3EocJg6ohjobd IJhjEnUoMykhqXlOQva0ZFXYpjZoz1KjOvSHqMVpgOZQQAjcHUhjCAb6l3H4G5wF 1wQGgDxu5XNxvpdl9NCJhTDv+IB4WFhz/lhs259o/ccJNrTLoo4cqc8w89XMzzTG vt8yVqJuvZbV1H7D40r9DwUoXxzeMZlTuopD/QRSpD/vQiuVjKR2LdCbO4HoUbhN Q4ElKM/blv5o3zCIbubLg4IqhbhQmCpTnu8iwG0nJ+NXLz/B9n8e6/TxW6UhhzJN qoRgX61ydBVgqTPdVzWf7g== -----END CERTIFICATE-----Generated at Sun Aug 10 18:49:08 2025 by rpki-client