$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1A582DBABDCB11ED998A723DC4F9AE02.roa File: 1A582DBABDCB11ED998A723DC4F9AE02.roa (raw, json) Hash identifier: bHO35v2d+whGfLiFlwfh8bZ4eWQakv4BbylUUSLDomk= Subject key identifier: 8E:B1:0A:93:AD:50:E6:24:37:E5:CB:9A:29:FF:E0:4F:0C:E0:6A:2F Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0F3F Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1A582DBABDCB11ED998A723DC4F9AE02.roa Signing time: Wed 04 Jun 2025 18:00:11 +0000 ROA not before: Wed 04 Jun 2025 18:00:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 133492 IP address blocks: 2402:3180:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3903 (0xf3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Jun 4 18:00:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684089ab-07e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:cb:8c:b0:44:3e:1b:2c:35:44:64:a7:63: 1c:c2:8d:d4:f1:dd:ea:63:d8:fa:a9:fe:ef:a3:98: d6:2a:77:93:06:e1:86:af:0a:72:7a:3f:03:53:3d: db:19:af:95:b8:f3:09:f0:30:c3:e1:17:f0:ba:60: 77:ec:72:91:32:f5:b9:8d:0f:84:95:c9:de:f8:11: ee:ea:7e:46:9b:45:1d:b4:34:ce:47:6f:62:69:b4: 84:ea:38:86:cd:de:cc:48:98:2b:a1:1a:32:63:2b: 1a:92:9a:21:e8:05:72:f3:e0:43:54:dd:e3:45:fb: 65:36:35:ca:70:23:e7:1c:c3:a3:43:b6:43:e3:32: 08:8d:f5:77:d6:f5:90:d0:fe:c0:fc:67:86:de:50: 13:82:70:da:92:3b:39:7b:9e:ae:c8:67:3e:c5:db: 4c:09:1c:60:77:1c:07:0e:b7:d7:95:5f:ac:e7:83: 83:c3:87:69:d5:68:4e:1a:fd:26:18:3b:d2:2c:61: c6:e8:fa:e3:a0:62:47:2a:4e:64:3a:34:cb:e6:84: 5c:83:5b:13:23:1e:97:11:35:49:f3:ab:58:a0:e5: 36:d1:32:fe:cb:f6:6f:31:a7:02:2f:c8:54:29:74: 55:f4:42:e4:67:a2:b4:e0:71:c3:88:8b:d7:09:27: 38:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B1:0A:93:AD:50:E6:24:37:E5:CB:9A:29:FF:E0:4F:0C:E0:6A:2F X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1A582DBABDCB11ED998A723DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3180:8000::/33 Signature Algorithm: sha256WithRSAEncryption 77:67:3c:ae:e9:12:91:1c:b7:ad:c6:fd:d5:2b:ee:9c:24:bb: 65:d8:cc:dc:0e:5d:ae:74:15:45:ad:01:b6:18:1e:6a:65:ea: 75:70:82:68:cf:be:e4:ed:c4:a4:28:72:b4:ac:38:d7:91:f3: 50:82:fc:cc:ba:8e:e7:25:51:a8:ec:d7:93:d9:b0:21:ca:51: 93:19:8b:00:9c:94:60:7e:ac:b0:c3:51:b4:45:09:db:48:82: 50:66:4f:de:93:30:bf:ad:6e:f5:f2:7a:1f:52:ca:a6:ba:e9: bb:f1:ce:5e:30:20:93:34:cc:d3:76:73:f4:4e:d1:eb:a9:c4: 30:48:3e:9d:d9:60:bb:2f:00:87:d3:9d:90:aa:25:4d:f7:94: e2:d7:33:4e:05:91:d6:e3:49:15:08:ae:89:4b:8e:14:fa:ca: 95:b8:ef:10:77:19:e1:ed:b0:01:e5:70:1d:a6:dd:c3:fa:26: 1e:88:32:99:2d:63:c2:fb:2b:a0:1e:fb:9d:f2:35:e0:97:48: a1:06:7f:32:3c:3f:13:9d:0f:06:22:f4:ac:f1:a4:38:7c:12: d0:3e:3c:28:23:94:18:ef:b9:ab:ab:a4:1f:5c:b4:91:95:e0: 5c:4d:e3:1e:57:75:55:97:c6:48:da:f2:b3:c4:0b:79:dd:0f: d6:60:a0:90 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICDz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUwNjA0MTgwMDExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwODlhYi0wN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+PLjLBEPhssNURkp2Mcwo3U8d3qY9j6qf7vo5jWKneTBuGGrwpyej8DUz3b Ga+VuPMJ8DDD4RfwumB37HKRMvW5jQ+Elcne+BHu6n5Gm0UdtDTOR29iabSE6jiG zd7MSJgroRoyYysakpoh6AVy8+BDVN3jRftlNjXKcCPnHMOjQ7ZD4zIIjfV31vWQ 0P7A/GeG3lATgnDakjs5e56uyGc+xdtMCRxgdxwHDrfXlV+s54ODw4dp1WhOGv0m GDvSLGHG6PrjoGJHKk5kOjTL5oRcg1sTIx6XETVJ86tYoOU20TL+y/ZvMacCL8hU KXRV9ELkZ6K04HHDiIvXCSc4wQIDAQABo4IClzCCApMwHQYDVR0OBBYEFI6xCpOt UOYkN+XLmin/4E8M4GovMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZCRkYvRTQyQkVBQzI5M0YwMTFFOUJDMENGRjcxQzRGOUFFMDIvMUE1ODJEQkFC RENCMTFFRDk5OEE3MjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgckAjGAgDANBgkqhkiG9w0BAQsFAAOCAQEAd2c8rukSkRy3 rcb91SvunCS7ZdjM3A5drnQVRa0BthgeamXqdXCCaM++5O3EpChytKw415HzUIL8 zLqO5yVRqOzXk9mwIcpRkxmLAJyUYH6ssMNRtEUJ20iCUGZP3pMwv61u9fJ6H1LK prrpu/HOXjAgkzTM03Zz9E7R66nEMEg+ndlguy8Ah9OdkKolTfeU4tczTgWR1uNJ FQiuiUuOFPrKlbjvEHcZ4e2wAeVwHabdw/omHogymS1jwvsroB77nfI14JdIoQZ/ Mjw/E50PBiL0rPGkOHwS0D48KCOUGO+5q6ukH1y0kZXgXE3jHld1VZfGSNrys8QL ed0P1mCgkA== -----END CERTIFICATE-----Generated at Sun Jun 15 09:31:02 2025 by rpki-client