$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E367308E8D8811EDB3C13D6CC4F9AE02.roa File: E367308E8D8811EDB3C13D6CC4F9AE02.roa (raw, json) Hash identifier: Yrlzkw+xW7vzxjAA+gYjWPy3w6+ulnZPM2vfj4PRtL4= Subject key identifier: B7:9E:F7:C2:3F:7C:60:26:C1:87:B4:C5:E7:4B:81:A2:B9:33:DD:1C Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 35AB Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E367308E8D8811EDB3C13D6CC4F9AE02.roa Signing time: Thu 30 Oct 2025 15:31:24 +0000 ROA not before: Thu 30 Oct 2025 15:31:24 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38620 IP address blocks: 2409::/40 maxlen: 40 240a:e000::/21 maxlen: 22 240a:e800::/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13739 (0x35ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Oct 30 15:31:24 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=690384cc-9d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:38:3b:43:f5:c0:f2:66:c4:84:c4:c8:d5: 0d:34:24:7b:8d:fa:c5:e7:c4:46:aa:8b:f3:b8:8c: cf:3f:49:99:3d:d0:24:34:33:a5:52:96:1f:15:8b: dd:60:40:28:b4:af:32:2b:d5:89:7f:e2:c4:f0:dc: b4:96:d2:6f:00:18:91:76:a7:e2:66:94:c9:95:94: c9:29:02:4c:53:6b:d6:07:f1:d2:56:6c:15:3b:7c: 13:bb:a0:06:1a:d3:d6:ee:bc:15:ee:6f:4d:bb:64: 69:37:da:90:13:5c:94:28:7d:99:c2:2d:92:63:3c: 52:84:bb:8d:05:3c:83:38:fd:0d:da:e7:91:f7:f8: ef:24:df:92:44:8d:b9:3c:f4:f9:51:2e:53:44:98: dc:b6:c5:01:f3:26:e5:6a:27:7e:7d:3e:e2:b0:65: 8b:83:3b:1a:49:4c:7e:ca:56:78:30:a5:51:20:d7: e0:f2:9f:49:ab:8f:9f:e5:36:e9:3c:d5:9b:2d:7c: 58:e5:31:09:b6:da:eb:48:c1:ed:80:cb:1e:c2:7f: db:90:ee:49:b2:54:21:ec:e5:19:cb:30:5a:56:8d: 04:54:93:87:6e:71:1f:a7:82:5f:c9:41:bf:76:dd: 52:0d:53:99:0a:22:64:d5:42:cd:24:d4:f3:0e:aa: a9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9E:F7:C2:3F:7C:60:26:C1:87:B4:C5:E7:4B:81:A2:B9:33:DD:1C X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E367308E8D8811EDB3C13D6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2409::/40 240a:e000::/20 Signature Algorithm: sha256WithRSAEncryption 2c:db:87:c3:f1:ed:4b:04:c0:1d:bc:5f:6a:ad:24:b6:5c:97: ee:25:9b:98:22:10:b1:db:26:ac:c0:ae:a8:fd:45:53:6b:64: 0f:d3:05:3d:cf:f7:ba:2d:ad:5e:a3:ca:ff:f8:c1:b3:c0:47: 22:17:3f:99:4a:43:5c:a5:91:00:fe:7d:f0:d0:03:34:26:c2: af:35:1b:c4:13:cd:7f:c1:21:61:fb:9c:a3:17:56:35:db:81: f3:e1:74:3a:19:65:06:d9:b3:61:41:7f:36:16:6e:fa:a6:d2: 55:96:26:23:50:2d:e7:00:14:9f:10:54:b0:08:7e:14:0f:4a: 04:02:6e:01:55:dc:5a:7d:9a:b8:09:e5:14:f0:b0:bb:f9:e1: 39:61:0a:c1:84:64:b5:1d:9d:62:47:82:79:16:00:9d:77:8e: 7f:a1:30:8c:87:69:03:da:51:b1:8e:fb:d9:5b:14:46:69:9e: ed:57:68:c2:b1:60:ce:7d:a8:ba:1c:8a:01:5e:f7:6c:0e:93: 54:6f:06:4d:fa:36:95:1d:d6:37:59:8a:36:73:46:e6:b1:f3: b0:e8:79:61:af:e6:64:09:f0:2c:65:75:4c:e2:56:14:9a:4d: 50:d5:cb:98:3c:31:40:75:ae:47:1f:85:8f:94:cd:23:a0:85: 5e:3b:b9:85 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICNaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjUxMDMwMTUzMTI0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzODRjYy05ZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkM4O0P1wPJmxITEyNUNNCR7jfrF58RGqovzuIzPP0mZPdAkNDOlUpYfFYvd YEAotK8yK9WJf+LE8Ny0ltJvABiRdqfiZpTJlZTJKQJMU2vWB/HSVmwVO3wTu6AG GtPW7rwV7m9Nu2RpN9qQE1yUKH2Zwi2SYzxShLuNBTyDOP0N2ueR9/jvJN+SRI25 PPT5US5TRJjctsUB8yblaid+fT7isGWLgzsaSUx+ylZ4MKVRINfg8p9Jq4+f5Tbp PNWbLXxY5TEJttrrSMHtgMsewn/bkO5JslQh7OUZyzBaVo0EVJOHbnEfp4JfyUG/ dt1SDVOZCiJk1ULNJNTzDqqpwwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFLee98I/ fGAmwYe0xedLgaK5M90cMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvRTM2NzMwOEU4 RDg4MTFFREIzQzEzRDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgACMA4DBgAkCQAAAAMEBCQK4DANBgkqhkiG9w0BAQsFAAOCAQEALNuH w/HtSwTAHbxfaq0ktlyX7iWbmCIQsdsmrMCuqP1FU2tkD9MFPc/3ui2tXqPK//jB s8BHIhc/mUpDXKWRAP598NADNCbCrzUbxBPNf8EhYfucoxdWNduB8+F0OhllBtmz YUF/NhZu+qbSVZYmI1At5wAUnxBUsAh+FA9KBAJuAVXcWn2auAnlFPCwu/nhOWEK wYRktR2dYkeCeRYAnXeOf6EwjIdpA9pRsY772VsURmme7VdowrFgzn2ouhyKAV73 bA6TVG8GTfo2lR3WN1mKNnNG5rHzsOh5Ya/mZAnwLGV1TOJWFJpNUNXLmDwxQHWu Rx+Fj5TNI6CFXju5hQ== -----END CERTIFICATE-----Generated at Thu Nov 6 02:57:04 2025 by rpki-client