$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/41372C94C1A311EC8986B978C4F9AE02.roa File: 41372C94C1A311EC8986B978C4F9AE02.roa (raw, json) Hash identifier: WTDIuE/G1qrkGu3PYWOTs1bHaZxHX8fxTlZEa1gE7Ug= Subject key identifier: 66:2B:3C:54:34:1D:E7:03:2F:C3:A2:CD:54:4D:C6:68:EE:F6:FF:E5 Certificate issuer: /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C Certificate serial: 07C0 Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/41372C94C1A311EC8986B978C4F9AE02.roa Signing time: Thu 31 Jul 2025 18:27:54 +0000 ROA not before: Thu 31 Jul 2025 18:27:54 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139192 IP address blocks: 2001:df0:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137242, serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C Validity Not Before: Jul 31 18:27:54 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688bb5aa-3f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9d:0e:48:1c:31:9d:b7:21:8e:9b:a7:28:1c: 23:9b:d9:b0:05:33:77:96:40:de:ee:b1:b9:7d:0d: 76:0f:03:9c:ea:23:64:17:50:5f:5c:6a:68:c4:1a: 5e:6c:1b:60:65:6d:5e:15:49:1a:dc:45:63:21:81: 6f:ed:df:71:97:6d:65:ec:0b:28:2c:fa:d4:37:a5: b5:01:b0:df:ce:fe:2f:e0:d1:2a:d1:aa:8d:80:ec: 1a:7c:66:79:25:12:c7:8a:b4:d9:09:c4:fc:bb:40: 93:b9:5c:ec:b1:1a:34:b8:db:4a:bc:fa:0c:f5:91: fc:91:f6:43:ac:07:fe:79:1b:ff:87:55:2a:ba:66: 57:f8:57:4d:85:fb:ff:8e:45:97:fb:4b:d7:f2:39: 89:47:24:2c:8a:d3:1d:22:12:87:4d:fc:f1:8d:1a: b7:9c:25:19:6a:1e:b3:a5:e6:41:e1:b3:64:2a:28: 7a:61:97:07:54:1e:5f:2f:12:8b:d2:42:19:48:0c: ea:bd:aa:4d:01:38:71:d0:66:06:8c:f0:a2:d8:f9: 15:15:36:20:5f:5b:b9:06:2f:b7:02:aa:fb:6f:e9: b9:6a:9a:cd:24:8c:a8:94:f9:d2:8c:50:ce:64:70: 5e:46:52:5e:45:ff:b1:ec:3c:62:5b:74:b3:db:67: c9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2B:3C:54:34:1D:E7:03:2F:C3:A2:CD:54:4D:C6:68:EE:F6:FF:E5 X509v3 Authority Key Identifier: keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/41372C94C1A311EC8986B978C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:8080::/48 Signature Algorithm: sha256WithRSAEncryption 5b:e7:c9:f4:55:83:47:8d:b5:9f:56:c2:d6:66:04:b4:30:dc: 1a:d9:71:c6:4b:30:04:33:84:0e:07:10:56:06:8c:93:8d:67: dc:23:07:af:6d:e8:82:6e:14:7a:3c:a1:50:f7:39:d7:57:4b: d0:82:30:c7:82:cb:98:37:9c:b4:ee:a1:df:83:e9:17:fc:6f: bc:ff:1a:72:9f:d0:8d:3a:3b:a3:ae:55:5a:89:1a:a8:59:36: 86:7f:4e:98:54:c0:f6:76:ab:5b:a1:b4:1d:7f:71:de:68:61: 21:8e:01:37:0c:8c:fd:05:3d:17:dc:88:3e:40:ca:60:5c:8d: 67:29:0f:e4:45:3c:5a:a1:0a:9d:c4:55:2d:29:ab:5a:cc:53: fa:ab:91:19:f6:54:df:ba:61:f9:43:80:a0:a3:eb:5d:62:c0: 83:24:7e:e6:1b:43:5b:a9:98:9a:97:33:ca:76:ea:ed:01:7f: 1f:da:81:09:34:d6:5c:9e:2d:cb:ba:d6:cf:a9:ea:2d:52:a6: 6f:80:19:52:b9:9f:a1:e2:7d:93:e3:89:4c:b3:96:6b:d0:1c: b2:3d:8b:9d:cb:41:84:50:ee:4e:d2:e0:ba:7e:39:8f:2c:f5: 30:da:49:ae:fd:bc:c0:ef:b0:95:60:b7:21:c4:28:e3:e2:5d: 04:2d:f6:43 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyNDIxMTAvBgNVBAUTKEVBQjI0QTkwQzZEMDQ2Q0Q4M0ZCNUVGNEEzQzU5OEU0 RUE5QTE2OEMwHhcNMjUwNzMxMTgyNzU0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiYjVhYS0zZjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Z0OSBwxnbchjpunKBwjm9mwBTN3lkDe7rG5fQ12DwOc6iNkF1BfXGpoxBpe bBtgZW1eFUka3EVjIYFv7d9xl21l7AsoLPrUN6W1AbDfzv4v4NEq0aqNgOwafGZ5 JRLHirTZCcT8u0CTuVzssRo0uNtKvPoM9ZH8kfZDrAf+eRv/h1UqumZX+FdNhfv/ jkWX+0vX8jmJRyQsitMdIhKHTfzxjRq3nCUZah6zpeZB4bNkKih6YZcHVB5fLxKL 0kIZSAzqvapNAThx0GYGjPCi2PkVFTYgX1u5Bi+3Aqr7b+m5aprNJIyolPnSjFDO ZHBeRlJeRf+x7DxiW3Sz22fJtQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGYrPFQ0 HecDL8OizVRNxmju9v/lMB8GA1UdIwQYMBaAFOqySpDG0EbNg/te9KPFmOTqmhaM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzI0Mi8wQjYwODc5NkNB MzQxMUU5QkM3NjkwNTVDNEY5QUUwMi82ckpLa01iUVJzMkQtMTcwbzhXWTVPcWFG b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZySktrTWJRUnMyRC0xNzBvOFdZNU9xYUZvdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzcyNDIvMEI2MDg3OTZDQTM0MTFFOUJDNzY5MDU1QzRGOUFFMDIvNDEzNzJDOTRD MUEzMTFFQzg5ODZCOTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3wgIAwDQYJKoZIhvcNAQELBQADggEBAFvnyfRVg0eN tZ9WwtZmBLQw3BrZccZLMAQzhA4HEFYGjJONZ9wjB69t6IJuFHo8oVD3OddXS9CC MMeCy5g3nLTuod+D6Rf8b7z/GnKf0I06O6OuVVqJGqhZNoZ/TphUwPZ2q1uhtB1/ cd5oYSGOATcMjP0FPRfciD5AymBcjWcpD+RFPFqhCp3EVS0pq1rMU/qrkRn2VN+6 YflDgKCj611iwIMkfuYbQ1upmJqXM8p26u0Bfx/agQk01lyeLcu61s+p6i1Spm+A GVK5n6HifZPjiUyzlmvQHLI9i53LQYRQ7k7S4Lp+OY8s9TDaSa79vMDvsJVgtyHE KOPiXQQt9kM= -----END CERTIFICATE-----Generated at Mon Aug 11 07:55:09 2025 by rpki-client