$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/8672C378CCCB11EAAAE49011C4F9AE02.roa File: 8672C378CCCB11EAAAE49011C4F9AE02.roa (raw, json) Hash identifier: 7pdFtjbSd0Y1musq+ELiSsGGWOchEoOsPebzMdEXDYo= Subject key identifier: 4D:45:3E:80:39:2F:E4:3C:C2:0C:B1:1D:65:A5:EF:4F:71:BC:1F:23 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 288F Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/8672C378CCCB11EAAAE49011C4F9AE02.roa Signing time: Sat 26 Jul 2025 15:54:14 +0000 ROA not before: Sat 26 Jul 2025 15:54:14 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 29802 IP address blocks: 2402:9e80:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10383 (0x288f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:54:14 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884fa26-b863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:70:63:ec:7b:30:58:86:d6:a4:12:24:54: 36:82:c0:e2:13:2d:55:41:31:99:44:e6:47:fb:79: 71:8a:2a:18:84:a0:83:6b:bc:41:9a:55:5a:de:ef: 11:08:94:5c:fe:2b:07:30:ab:72:49:fd:d6:b7:87: 72:30:75:74:a8:9b:80:c8:a3:5f:fd:c5:10:d3:ca: 1c:6f:eb:d7:be:30:16:4d:fc:e7:a3:ef:40:d8:bc: 09:aa:3f:00:16:67:3c:c3:0f:c9:41:ff:88:24:f1: 51:f3:5b:63:a8:6c:d1:c8:19:0f:e2:fe:f8:b7:08: 46:2f:2f:bc:59:de:fb:7e:81:6d:e3:a9:fa:17:da: c7:ad:ec:b5:f0:ab:f9:21:30:ed:d3:b2:2f:d8:62: 6e:aa:f8:d5:1d:78:8f:22:55:90:a7:10:72:0d:23: 24:f1:66:c3:86:ff:5d:b4:69:6a:2d:1f:2f:1d:b4: f2:37:11:ba:cc:f7:a4:0f:c0:5b:87:3b:b2:6e:25: 02:1d:64:9d:9a:4f:95:22:a9:dd:30:99:37:e4:b0: 9c:b2:38:75:02:30:1a:c2:b6:d3:09:37:8b:67:81: 5a:b0:b3:c6:46:03:48:35:ab:af:57:21:c6:bb:d4: da:32:1f:2e:54:fa:c4:03:5e:6c:b3:f8:99:c5:9b: 7f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:45:3E:80:39:2F:E4:3C:C2:0C:B1:1D:65:A5:EF:4F:71:BC:1F:23 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/8672C378CCCB11EAAAE49011C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:8::/48 Signature Algorithm: sha256WithRSAEncryption 5d:1d:ab:31:e7:22:25:dc:2a:81:0e:5e:a5:e1:a1:d0:73:d9: c8:2f:25:2c:cb:c1:99:6d:5e:71:fa:d1:48:e3:96:db:f9:02: e6:92:05:01:7a:39:60:bc:95:82:65:13:4a:4e:f0:54:d5:4f: bf:41:bb:c4:94:08:dd:4e:46:d5:56:ff:5e:6d:76:cd:6f:66: 15:94:4d:66:a0:0b:b4:b8:1c:50:e4:6e:52:f3:22:0a:8a:e5: dc:1e:2a:41:cd:16:e1:ac:67:c2:2d:9e:8c:ee:b4:f8:4e:ba: f9:8c:21:b8:e9:b7:d5:21:cb:89:c1:4c:4c:bc:1a:d9:93:ee: 70:db:d1:2e:5e:6e:e3:f8:92:94:39:f3:a3:49:b4:5a:8a:35: 9a:ad:e3:b6:f7:25:7d:f2:7c:2b:c6:9b:98:15:9e:cb:af:5f: 6e:9b:bc:2b:ef:cb:1b:b4:ed:88:64:b5:cc:4d:38:16:bd:e2: 4b:b7:c5:13:90:d8:f4:f4:78:30:4b:fd:ec:fd:a2:d1:ef:d5: 72:fb:03:da:ee:1c:f1:cb:9d:5f:b9:d8:03:2b:f2:86:46:6c: 43:ae:0d:f1:43:f1:a8:70:eb:df:4a:01:20:f7:23:f8:87:fc: f0:db:b8:87:cb:6c:cd:e0:80:5c:4e:69:0a:75:ac:11:57:c1: 14:a0:13:d6 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICKI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1NDE0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZmEyNi1iODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsZwY+x7MFiG1qQSJFQ2gsDiEy1VQTGZROZH+3lxiioYhKCDa7xBmlVa3u8R CJRc/isHMKtySf3Wt4dyMHV0qJuAyKNf/cUQ08ocb+vXvjAWTfzno+9A2LwJqj8A Fmc8ww/JQf+IJPFR81tjqGzRyBkP4v74twhGLy+8Wd77foFt46n6F9rHrey18Kv5 ITDt07Iv2GJuqvjVHXiPIlWQpxByDSMk8WbDhv9dtGlqLR8vHbTyNxG6zPekD8Bb hzuybiUCHWSdmk+VIqndMJk35LCcsjh1AjAawrbTCTeLZ4FasLPGRgNINauvVyHG u9TaMh8uVPrEA15ss/iZxZt//wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFE1FPoA5 L+Q8wgyxHWWl709xvB8jMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvODY3MkMzNzhD Q0NCMTFFQUFBRTQ5MDExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAp6AAAgwDQYJKoZIhvcNAQELBQADggEBAF0dqzHnIiXc KoEOXqXhodBz2cgvJSzLwZltXnH60Ujjltv5AuaSBQF6OWC8lYJlE0pO8FTVT79B u8SUCN1ORtVW/15tds1vZhWUTWagC7S4HFDkblLzIgqK5dweKkHNFuGsZ8Itnozu tPhOuvmMIbjpt9Uhy4nBTEy8GtmT7nDb0S5ebuP4kpQ586NJtFqKNZqt47b3JX3y fCvGm5gVnsuvX26bvCvvyxu07YhktcxNOBa94ku3xROQ2PT0eDBL/ez9otHv1XL7 A9ruHPHLnV+52AMr8oZGbEOuDfFD8ahw699KASD3I/iH/PDbuIfLbM3ggFxOaQp1 rBFXwRSgE9Y= -----END CERTIFICATE-----Generated at Sun Aug 10 04:20:41 2025 by rpki-client