$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/9BE20420DA6411EF95F32A7FC4F9AE02.roa File: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (raw, json) Hash identifier: p4MgzG+OXWtv9vZOtFXE4K9GjNanwMoHoivstYkkSaU= Subject key identifier: 81:4B:6F:21:1F:96:6B:3A:6D:F3:A4:DF:16:FE:B4:3B:2E:B4:8E:5A Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Certificate serial: 065C Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/9BE20420DA6411EF95F32A7FC4F9AE02.roa Signing time: Wed 16 Apr 2025 22:33:15 +0000 ROA not before: Wed 16 Apr 2025 22:33:15 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 4826 IP address blocks: 2407:1740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Validity Not Before: Apr 16 22:33:15 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6800302b-ab1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:1c:e1:6c:43:2b:e8:93:65:a3:e4:92:ff: 74:44:8a:5a:5a:2c:ad:c9:b6:c8:4a:ca:3f:73:87: 4d:7e:f9:13:83:ff:aa:52:53:13:5b:19:b2:54:d8: 50:f5:74:e7:bc:72:2b:8f:d3:98:5a:6d:19:64:05: 1c:2c:7d:fe:22:fd:2b:a9:c4:08:76:84:fd:3c:6d: 58:ff:74:a7:1c:bc:19:ab:3c:70:e8:92:b8:15:c3: 3f:7e:dc:8d:b0:0e:c1:b2:1e:ff:ef:ea:79:4d:a4: 2a:ec:53:e7:58:07:b2:d8:13:7d:2c:41:6e:ff:1d: e7:3d:0c:d3:83:6c:d5:cd:ba:46:91:e7:53:db:e7: 16:cc:79:54:47:9f:2a:5e:06:ba:e6:ff:4b:92:3a: fb:f2:57:0d:78:29:c5:33:18:32:d0:3b:09:b6:d4: c5:af:52:f5:ca:60:1e:61:ee:32:c6:1a:e2:34:a2: fc:93:6e:e3:fc:6d:3e:fe:df:bb:77:5c:51:db:8b: ac:09:ec:7f:1d:cc:4f:af:17:df:cb:6d:fe:a0:12: 93:ce:77:71:6e:57:74:0a:59:76:7d:77:40:66:6c: d2:20:41:33:a5:17:63:f5:d0:ee:57:36:0a:79:09: ad:c4:2f:7c:d0:8c:0a:b3:6e:02:52:99:62:75:c7: 35:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4B:6F:21:1F:96:6B:3A:6D:F3:A4:DF:16:FE:B4:3B:2E:B4:8E:5A X509v3 Authority Key Identifier: keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/9BE20420DA6411EF95F32A7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:1740::/32 Signature Algorithm: sha256WithRSAEncryption 8d:b1:48:3f:9a:b1:51:e3:71:97:b2:90:78:9b:f7:1b:9c:63: e1:ae:01:f1:7a:b9:c4:7e:59:e7:8a:d1:f7:33:80:2f:31:2c: c9:bd:78:80:a4:19:c5:c2:85:58:05:af:73:ae:0e:8f:3c:c1: f4:94:23:b9:65:c8:86:85:e3:c2:b1:31:d2:1a:77:1c:9b:3a: 8f:4b:2d:cd:72:2d:84:61:19:22:67:60:5f:02:97:39:96:68: 3f:86:85:31:95:e5:8e:13:3f:dd:a2:c3:d6:92:98:07:9d:2b: 74:db:68:28:3b:d6:c7:dd:95:52:2c:81:e5:1b:3e:ae:8d:ac: cf:68:d6:e4:e6:9f:22:03:6c:6e:ec:d2:25:32:9d:6e:24:ab: 2a:ed:1f:8a:32:31:bc:85:fb:2d:9a:60:82:51:37:34:95:d5: d3:04:00:87:f4:61:82:42:7a:bd:50:ba:49:91:1e:ee:66:83: 25:e7:a6:44:6b:13:4b:44:4b:17:a8:ea:52:1d:ad:fe:85:47: a9:f3:bc:72:ae:96:bb:a0:cf:b6:2a:a0:13:99:12:b5:65:92: 36:cc:bc:d0:5c:ea:bc:f4:4a:8d:7b:80:2e:72:1e:cc:a0:bf: 85:88:a0:65:c8:1b:37:97:5d:68:1e:d0:a8:c7:bf:c9:80:0c: 4b:a3:04:32 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw QTUyOEVEQzAwHhcNMjUwNDE2MjIzMzE1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODAwMzAyYi1hYjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQ4c4WxDK+iTZaPkkv90RIpaWiytybbISso/c4dNfvkTg/+qUlMTWxmyVNhQ 9XTnvHIrj9OYWm0ZZAUcLH3+Iv0rqcQIdoT9PG1Y/3SnHLwZqzxw6JK4FcM/ftyN sA7Bsh7/7+p5TaQq7FPnWAey2BN9LEFu/x3nPQzTg2zVzbpGkedT2+cWzHlUR58q Xga65v9Lkjr78lcNeCnFMxgy0DsJttTFr1L1ymAeYe4yxhriNKL8k27j/G0+/t+7 d1xR24usCex/HcxPrxffy23+oBKTzndxbld0Cll2fXdAZmzSIEEzpRdj9dDuVzYK eQmtxC980IwKs24CUplidcc17wIDAQABo4ICljCCApIwHQYDVR0OBBYEFIFLbyEf lms6bfOk3xb+tDsutI5aMB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI4MTIvQzFFNUREMUU4MDdCMTFFQkE4M0FDMDFEQzRGOUFFMDIvOUJFMjA0MjBE QTY0MTFFRjk1RjMyQTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBxdAMA0GCSqGSIb3DQEBCwUAA4IBAQCNsUg/mrFR43GX spB4m/cbnGPhrgHxernEflnnitH3M4AvMSzJvXiApBnFwoVYBa9zrg6PPMH0lCO5 ZciGhePCsTHSGnccmzqPSy3Nci2EYRkiZ2BfApc5lmg/hoUxleWOEz/dosPWkpgH nSt022goO9bH3ZVSLIHlGz6ujazPaNbk5p8iA2xu7NIlMp1uJKsq7R+KMjG8hfst mmCCUTc0ldXTBACH9GGCQnq9ULpJkR7uZoMl56ZEaxNLREsXqOpSHa3+hUep87xy rpa7oM+2KqATmRK1ZZI2zLzQXOq89EqNe4Auch7MoL+FiKBlyBs3l11oHtCox7/J gAxLowQy -----END CERTIFICATE-----Generated at Wed Nov 5 04:48:41 2025 by rpki-client