$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/CA9C62B6011911F0A7636250C4F9AE02.roa File: CA9C62B6011911F0A7636250C4F9AE02.roa (raw, json) Hash identifier: wLOrSqw7qLHdzdLMjtTkfhjjFQPjvligZ3Sh55JbmkA= Subject key identifier: 62:C4:FB:E6:84:9C:96:7F:5A:8E:A4:16:7B:8C:B1:08:81:F9:6C:A9 Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0B74 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/CA9C62B6011911F0A7636250C4F9AE02.roa Signing time: Thu 31 Jul 2025 20:30:03 +0000 ROA not before: Thu 31 Jul 2025 20:30:03 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 55569 IP address blocks: 2400:8800:1002::/48 maxlen: 48 2400:8800:1003::/48 maxlen: 48 2400:8800:1004::/48 maxlen: 48 2400:8800:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2932 (0xb74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Jul 31 20:30:03 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688bd24b-58de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:32:54:3c:6d:a1:08:ec:b5:a6:93:6d:4e: 23:15:8a:af:bb:12:74:fd:2d:a0:67:ab:ab:39:d2: f8:5e:fd:f1:b5:f1:71:ef:63:37:ac:d1:1c:ee:0b: 18:8f:01:73:a9:8d:89:0a:e2:b9:0d:34:58:57:f2: f0:f6:2c:ee:c8:1f:f5:37:9d:07:7f:5b:6d:04:de: e5:a3:18:2f:0c:62:20:b6:0b:09:af:f1:11:6e:00: 6a:e6:93:9b:3a:9b:30:05:ed:e8:97:61:3d:ee:6f: 10:04:b2:06:04:f9:80:ba:b4:98:79:9d:30:33:0c: 7a:18:b7:ab:23:71:3b:33:19:f7:04:b8:4b:e6:6b: 1f:f8:c1:02:4a:74:2e:9c:7f:d6:80:14:4e:b6:ad: 96:e9:a3:60:7c:71:ce:94:45:04:d8:74:05:bd:56: 9e:8b:98:16:e6:46:f2:fe:4b:82:74:e2:45:17:c9: ca:0b:db:3d:93:2a:fb:e2:cd:98:b6:f1:bd:55:51: e3:12:7f:63:1f:3b:b4:b8:fc:b2:3c:2e:cf:f0:2e: 4d:4a:8b:8b:90:71:a8:d6:dc:a6:47:d0:e7:b5:f6: 82:33:83:7b:a8:34:b9:1f:11:30:87:cd:da:3e:02: 56:d8:16:0d:0d:7d:86:95:df:2d:75:a1:f6:e0:d4: d6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C4:FB:E6:84:9C:96:7F:5A:8E:A4:16:7B:8C:B1:08:81:F9:6C:A9 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/CA9C62B6011911F0A7636250C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8800:1002::-2400:8800:1005:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 37:03:6b:71:1c:14:23:d5:0a:7c:37:b8:04:dc:06:0d:00:0f: 3d:99:4c:fb:31:de:08:82:3f:bf:ce:5e:3e:3e:39:58:a5:34: 4d:6f:ab:c8:8a:bc:0e:0e:51:6c:db:a9:d5:aa:d6:f6:c6:d8: 75:44:ed:c5:27:c3:20:94:a0:6b:85:2f:46:4c:34:89:a2:a8: 74:ba:2d:6a:c5:96:4f:57:4e:f3:30:57:5a:7d:48:ff:f6:12: b7:fb:a6:b2:30:b9:85:2d:fc:67:1e:58:fc:bc:f8:97:88:6d: 1c:12:3a:c5:cc:08:70:d3:33:19:d2:39:5b:79:2e:7a:40:85: d8:af:8f:8c:cf:5d:4b:a1:37:b2:e6:ed:fc:0f:3a:e8:09:26: 12:03:65:6d:6e:21:d3:e7:04:04:70:5d:2d:e4:f1:62:43:00: bc:f0:35:5c:52:7a:02:d5:1e:09:aa:a1:6c:05:dc:d2:d5:ed: 2c:fb:ba:9e:ae:76:ae:f5:c2:14:ec:58:1a:f9:b1:aa:33:a4: eb:bd:41:99:f9:b7:7e:d9:91:65:cd:53:35:99:51:23:85:8e: 65:6a:61:5a:34:be:ad:ee:4d:b0:b3:72:e7:c1:ca:9a:c1:4d: f9:44:03:b4:31:11:d0:6b:61:ac:9d:bc:17:5b:d6:b9:d1:80: 67:6c:d3:a9 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUwNzMxMjAzMDAzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiZDI0Yi01OGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWUyVDxtoQjstaaTbU4jFYqvuxJ0/S2gZ6urOdL4Xv3xtfFx72M3rNEc7gsY jwFzqY2JCuK5DTRYV/Lw9izuyB/1N50Hf1ttBN7loxgvDGIgtgsJr/ERbgBq5pOb OpswBe3ol2E97m8QBLIGBPmAurSYeZ0wMwx6GLerI3E7Mxn3BLhL5msf+MECSnQu nH/WgBROtq2W6aNgfHHOlEUE2HQFvVaei5gW5kby/kuCdOJFF8nKC9s9kyr74s2Y tvG9VVHjEn9jHzu0uPyyPC7P8C5NSouLkHGo1tymR9DntfaCM4N7qDS5HxEwh83a PgJW2BYNDX2Gld8tdaH24NTWpQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFGLE++aE nJZ/Wo6kFnuMsQiB+WypMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvQTM3NEExQjY0NjcxMTFFQTgxQUJCMjVGQzRGOUFFMDIvQ0E5QzYyQjYw MTE5MTFGMEE3NjM2MjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgACMBQwEgMHASQAiAAQAgMHASQAiAAQBDANBgkqhkiG9w0BAQsFAAOC AQEANwNrcRwUI9UKfDe4BNwGDQAPPZlM+zHeCII/v85ePj45WKU0TW+ryIq8Dg5R bNup1arW9sbYdUTtxSfDIJSga4UvRkw0iaKodLotasWWT1dO8zBXWn1I//YSt/um sjC5hS38Zx5Y/Lz4l4htHBI6xcwIcNMzGdI5W3kuekCF2K+PjM9dS6E3subt/A86 6AkmEgNlbW4h0+cEBHBdLeTxYkMAvPA1XFJ6AtUeCaqhbAXc0tXtLPu6nq52rvXC FOxYGvmxqjOk671Bmfm3ftmRZc1TNZlRI4WOZWphWjS+re5NsLNy58HKmsFN+UQD tDER0GthrJ28F1vWudGAZ2zTqQ== -----END CERTIFICATE-----Generated at Sun Aug 10 19:54:09 2025 by rpki-client