$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8B707C6C17DC11EE959DE671C4F9AE02.roa File: 8B707C6C17DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: FBcOfIAiLQzUwARh2vRnAPUlJE7QYwm514/u+ntzHTg= Subject key identifier: 1D:BF:96:E6:D1:EA:D9:B3:6C:1A:61:80:0F:9D:F7:05:1D:15:D3:9F Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0D50 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8B707C6C17DC11EE959DE671C4F9AE02.roa Signing time: Sun 02 Nov 2025 19:08:15 +0000 ROA not before: Sun 02 Nov 2025 19:08:15 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 54994 IP address blocks: 2001:e68:20db:10::/64 maxlen: 64 2001:e68:20db:11::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3408 (0xd50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 2 19:08:15 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6907ac1f-d099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9e:4b:49:8b:42:eb:a7:2c:42:4e:7c:db:d9: 0f:3c:14:e8:7d:f6:76:7a:17:58:bc:73:00:8e:9e: fc:f1:88:5a:d0:16:7a:93:04:6e:4b:d3:96:3d:d8: 03:27:cf:99:57:0d:ad:bc:c4:9e:3a:7b:6a:92:d8: a4:2a:ff:2f:9a:da:48:31:f0:7c:dd:b9:f9:4e:0e: a3:1a:f5:58:65:86:3c:06:30:6c:26:31:02:81:c1: 23:f2:b0:a1:a5:5d:bb:45:5c:fa:7b:08:bd:d9:59: 24:ce:23:f5:a8:ca:3e:53:f9:22:8f:7c:d2:29:66: 23:4e:9d:72:4e:99:22:c7:db:d0:77:18:50:a5:82: e1:51:dc:07:77:9d:39:76:c8:bc:52:cc:73:97:26: 78:ba:77:43:44:5b:aa:fb:b8:bb:9c:07:00:c7:20: ac:e8:de:05:ca:a8:55:69:de:c6:6e:7f:62:d5:d6: 26:f3:10:d0:35:60:74:5d:f8:d5:08:e5:78:97:fd: 33:00:83:83:60:d6:e9:a7:44:15:33:b0:55:a8:c6: 5a:cf:40:b9:53:35:34:7f:e1:76:11:d3:92:86:96: 65:70:ce:83:81:b1:58:a1:37:8b:51:66:bc:44:c8: b5:a7:92:e6:bc:5b:2e:55:45:78:f4:f5:59:1c:cc: 9d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BF:96:E6:D1:EA:D9:B3:6C:1A:61:80:0F:9D:F7:05:1D:15:D3:9F X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8B707C6C17DC11EE959DE671C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:e68:20db:10::/63 Signature Algorithm: sha256WithRSAEncryption 2e:58:ee:4c:e3:7d:18:2d:bf:b8:2e:ac:29:85:b4:b6:85:7b: ab:3c:fe:bc:8d:58:dc:5a:db:cf:04:5f:ad:58:55:28:ca:d6: ad:7f:c5:62:ba:a9:f9:a4:50:5f:7c:25:f9:b2:0f:96:2e:3c: 89:4b:74:28:52:5e:ce:32:33:54:f8:bf:a5:5d:3b:3a:d7:e9: 0c:ba:41:bf:94:31:c1:c6:49:3c:b7:03:85:0a:0a:aa:3e:8b: 24:8e:83:da:77:11:b9:c0:b7:27:01:9e:e4:7b:21:01:a3:f7: 58:22:a7:ce:81:ec:ad:cc:85:c2:ec:4e:b9:25:4f:36:99:73: 6e:ff:7e:83:6f:09:6e:ac:c6:80:96:fb:a4:9f:54:1d:ed:6b: 62:a6:20:79:c0:74:c7:bc:6b:7b:30:b2:1c:c8:a6:f1:fc:95: c2:59:cb:63:39:2d:0d:1d:df:b9:68:fa:78:f9:e2:27:25:e5: f8:0a:41:c3:4a:f8:b7:f7:8f:3d:c8:f2:c0:a4:ee:e5:88:09: 52:f6:73:b2:69:f8:81:65:94:78:62:f7:93:b9:06:06:40:88: 8a:83:66:13:30:7a:ad:60:1e:eb:df:b2:8b:10:26:c4:2e:fd: ee:cc:a6:31:af:0b:24:dd:2c:51:18:5c:ae:81:c3:89:0f:51: 06:e4:2d:60 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgICDVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUxMTAyMTkwODE1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3YWMxZi1kMDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz55LSYtC66csQk5829kPPBToffZ2ehdYvHMAjp788Yha0BZ6kwRuS9OWPdgD J8+ZVw2tvMSeOntqktikKv8vmtpIMfB83bn5Tg6jGvVYZYY8BjBsJjECgcEj8rCh pV27RVz6ewi92VkkziP1qMo+U/kij3zSKWYjTp1yTpkix9vQdxhQpYLhUdwHd505 dsi8UsxzlyZ4undDRFuq+7i7nAcAxyCs6N4FyqhVad7Gbn9i1dYm8xDQNWB0XfjV COV4l/0zAIODYNbpp0QVM7BVqMZaz0C5UzU0f+F2EdOShpZlcM6DgbFYoTeLUWa8 RMi1p5LmvFsuVUV49PVZHMydDwIDAQABo4ICmjCCApYwHQYDVR0OBBYEFB2/lubR 6tmzbBphgA+d9wUdFdOfMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOEI3MDdDNkMx N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8E FTATMBEEAgACMAsDCQEgAQ5oINsAEDANBgkqhkiG9w0BAQsFAAOCAQEALljuTON9 GC2/uC6sKYW0toV7qzz+vI1Y3FrbzwRfrVhVKMrWrX/FYrqp+aRQX3wl+bIPli48 iUt0KFJezjIzVPi/pV07OtfpDLpBv5QxwcZJPLcDhQoKqj6LJI6D2ncRucC3JwGe 5HshAaP3WCKnzoHsrcyFwuxOuSVPNplzbv9+g28JbqzGgJb7pJ9UHe1rYqYgecB0 x7xrezCyHMim8fyVwlnLYzktDR3fuWj6ePniJyXl+ApBw0r4t/ePPcjywKTu5YgJ UvZzsmn4gWWUeGL3k7kGBkCIioNmEzB6rWAe69+yixAmxC797symMa8LJN0sURhc roHDiQ9RBuQtYA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:21 2025 by rpki-client