$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DCC9968641C511E8BEC06D36C4F9AE02.roa File: DCC9968641C511E8BEC06D36C4F9AE02.roa (raw, json) Hash identifier: I9RlqzrRC4NcmfUDKYCrUBw08VKq1V3OwJl6oMNXL/w= Subject key identifier: 70:8D:64:9F:56:56:DB:35:E5:98:59:EA:04:BD:16:92:79:FE:2B:80 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2863 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DCC9968641C511E8BEC06D36C4F9AE02.roa Signing time: Sat 26 Jul 2025 15:53:32 +0000 ROA not before: Sat 26 Jul 2025 15:53:32 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132362 IP address blocks: 2402:9e80:20::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10339 (0x2863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:53:32 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884f9fc-9f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b7:3a:34:94:72:1c:4f:78:c6:cb:77:ab:98: fb:34:a5:ec:e2:f6:08:0f:77:a7:cb:b1:b3:23:a3: 86:03:e8:82:67:b3:7d:91:f8:d6:7a:02:41:96:55: 69:6a:4b:d0:6f:0b:4a:2a:a3:42:90:c3:ca:fb:77: 10:04:0e:83:df:a6:3f:ac:f3:89:8e:0d:17:5d:08: 03:79:3b:51:28:28:d1:1f:2a:1f:5e:a4:e6:db:79: f0:ad:08:82:3c:cd:5d:69:8a:53:9c:7c:b3:5b:f2: dc:f5:1f:4a:79:c9:2f:cf:44:e7:50:81:17:62:b9: 40:cc:3c:26:2b:4a:9b:6a:36:94:53:b0:7c:9e:ab: 61:fe:23:8a:b7:a0:e4:8d:90:ef:da:92:f4:ed:58: 2c:3e:cc:89:89:40:21:c3:59:5d:d2:e5:8d:47:af: 35:6b:b6:44:46:ac:23:2a:e0:94:d2:6e:72:66:da: 80:20:95:30:eb:d4:b8:bc:1f:39:e5:ee:33:3b:1b: f6:e4:81:1f:00:19:29:f1:4f:72:15:08:e4:49:b6: bd:13:ed:04:9f:5e:94:2a:4e:49:da:d2:ec:17:b5: 5a:11:b6:5f:78:47:40:be:d0:ea:61:0b:45:6f:0d: 0f:37:55:12:65:f8:b3:bf:60:3a:f9:91:fb:cb:c9: 3d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8D:64:9F:56:56:DB:35:E5:98:59:EA:04:BD:16:92:79:FE:2B:80 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DCC9968641C511E8BEC06D36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:20::/47 Signature Algorithm: sha256WithRSAEncryption 91:c1:53:38:68:1f:a4:9d:80:73:73:7b:bb:63:6c:0d:53:02: 56:27:a7:8e:e2:e2:cf:13:69:ff:87:fb:ae:b4:f6:e7:5c:a4: cb:1f:c4:91:7b:7d:1e:e6:f1:c5:7d:47:4a:b5:ee:20:03:bd: 64:3c:ac:8e:49:71:e8:a6:16:0d:29:d9:7e:f7:2f:52:27:2b: 34:eb:2b:94:a0:73:75:8d:fa:d4:4b:66:d8:be:31:11:74:37: 65:fe:47:10:e8:23:3b:e6:35:51:d1:64:ac:99:32:da:70:23: 8b:bb:f9:92:b0:9b:e7:58:80:db:be:73:d1:de:73:4a:df:7a: 7a:cf:0f:3c:22:e3:7e:ab:24:10:ab:87:6f:66:7a:0d:ba:53: 93:9d:e1:42:54:59:b3:0d:5a:bb:52:35:86:6f:1d:44:f8:76: 29:4a:42:1d:d0:f5:95:21:d2:0c:a7:4f:02:c4:e6:25:e1:6b: 25:24:1d:82:29:8c:06:5c:cf:37:51:f7:13:83:d1:d7:27:26: 65:3b:91:17:49:74:6a:1c:a2:f3:69:31:0b:df:90:05:04:db: 64:72:0b:85:c6:8e:5e:98:93:41:23:d3:6a:66:b0:a1:21:cb: 9c:c3:bc:a8:cb:c5:83:86:68:3d:5d:28:c9:68:3d:db:2f:f8: 84:e2:e1:bd -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICKGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1MzMyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZjlmYy05ZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbc6NJRyHE94xst3q5j7NKXs4vYID3eny7GzI6OGA+iCZ7N9kfjWegJBllVp akvQbwtKKqNCkMPK+3cQBA6D36Y/rPOJjg0XXQgDeTtRKCjRHyofXqTm23nwrQiC PM1daYpTnHyzW/Lc9R9Keckvz0TnUIEXYrlAzDwmK0qbajaUU7B8nqth/iOKt6Dk jZDv2pL07VgsPsyJiUAhw1ld0uWNR681a7ZERqwjKuCU0m5yZtqAIJUw69S4vB85 5e4zOxv25IEfABkp8U9yFQjkSba9E+0En16UKk5J2tLsF7VaEbZfeEdAvtDqYQtF bw0PN1USZfizv2A6+ZH7y8k9PwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHCNZJ9W Vts15ZhZ6gS9FpJ5/iuAMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvRENDOTk2ODY0 MUM1MTFFOEJFQzA2RDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkAp6AACAwDQYJKoZIhvcNAQELBQADggEBAJHBUzhoH6Sd gHNze7tjbA1TAlYnp47i4s8Taf+H+6609udcpMsfxJF7fR7m8cV9R0q17iADvWQ8 rI5JceimFg0p2X73L1InKzTrK5Sgc3WN+tRLZti+MRF0N2X+RxDoIzvmNVHRZKyZ MtpwI4u7+ZKwm+dYgNu+c9Hec0rfenrPDzwi436rJBCrh29meg26U5Od4UJUWbMN WrtSNYZvHUT4dilKQh3Q9ZUh0gynTwLE5iXhayUkHYIpjAZczzdR9xOD0dcnJmU7 kRdJdGocovNpMQvfkAUE22RyC4XGjl6Yk0Ej02pmsKEhy5zDvKjLxYOGaD1dKMlo Pdsv+ITi4b0= -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:19 2025 by rpki-client