$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/C2911C74E6A711EFA8D1A077C4F9AE02.roa File: C2911C74E6A711EFA8D1A077C4F9AE02.roa (raw, json) Hash identifier: g48jQH2Ndz+BJ2g+3DFqKTezsj/596L9PEbikDy8KVo= Subject key identifier: 3A:F1:82:C9:EE:B6:DA:35:E4:6E:D2:0D:3C:6B:9B:F8:57:53:DC:70 Certificate issuer: /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Certificate serial: 0CD2 Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/C2911C74E6A711EFA8D1A077C4F9AE02.roa Signing time: Thu 31 Jul 2025 18:57:34 +0000 ROA not before: Thu 31 Jul 2025 18:57:34 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138398 IP address blocks: 2404:ddc0:6000::/36 maxlen: 36 2404:ddc0:aa00::/40 maxlen: 40 2404:ddc0:af00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160EEF, serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Validity Not Before: Jul 31 18:57:34 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688bbc9e-5c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:7c:3d:50:ab:5c:be:28:77:a5:a9:ca:5e: 41:40:57:76:9d:bf:d7:6c:4e:e1:56:6c:9d:36:1b: c4:17:bb:fc:05:47:e2:36:2e:4c:c1:8c:80:01:7d: 98:6a:fe:cb:b8:49:07:bf:48:19:10:08:44:4c:ec: 8a:8d:af:dc:9e:5a:01:89:c6:29:10:c4:b2:ed:3d: 28:85:fa:b4:05:4f:d8:3e:b6:69:dc:9f:e6:b6:b4: e9:c7:c3:f7:89:36:9a:a2:34:2f:f7:47:27:25:ac: 8b:6f:61:e1:32:2b:65:a7:d3:01:dd:f4:ad:cc:f6: 03:75:3e:de:d0:5c:ed:18:74:c1:ef:bb:f1:2a:60: 40:9a:50:3f:ff:4a:9d:9e:a3:8f:1c:8c:a5:f7:4c: 16:f8:b4:7a:48:fa:27:f2:ff:a2:03:60:30:0a:32: b5:55:f2:0b:0c:b6:b8:5c:00:92:c7:9d:1b:5d:de: 96:1d:e5:4b:f9:22:e4:ee:88:43:4a:7b:2c:cb:b3: 10:c9:d2:0e:eb:55:b3:e6:13:88:26:65:ab:58:8b: 76:54:cd:c7:aa:47:e8:48:2d:eb:8d:f4:c8:41:0d: c9:82:8d:00:ed:fb:e9:07:8b:6b:be:c1:a4:e9:1d: 0e:5a:e3:5d:ec:a5:e9:42:26:57:c9:d7:b9:c4:9a: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F1:82:C9:EE:B6:DA:35:E4:6E:D2:0D:3C:6B:9B:F8:57:53:DC:70 X509v3 Authority Key Identifier: keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/C2911C74E6A711EFA8D1A077C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:ddc0:6000::/36 2404:ddc0:aa00::/40 2404:ddc0:af00::/40 Signature Algorithm: sha256WithRSAEncryption 07:eb:e4:60:9b:71:5a:4a:fc:78:81:da:1e:a5:df:83:79:97: 24:a5:ed:7c:83:16:18:86:7c:e6:76:51:be:64:cb:6f:ba:28: 39:bc:8a:b2:ae:cb:aa:d3:88:e0:7a:9c:50:a8:f3:8a:88:b8: 44:c9:18:1a:52:ba:3c:28:1d:67:56:78:8f:25:28:82:f5:2c: 35:90:c8:f0:3e:37:94:67:d3:a7:32:24:33:01:80:3c:9a:41: 26:1d:cd:4e:99:62:ba:41:a3:ab:47:34:35:80:c5:2d:17:3e: 41:75:cd:ad:17:30:e1:ad:e6:0e:1a:9c:5c:04:64:b8:65:12: c2:fb:9a:d5:ad:da:29:03:1d:8e:40:47:09:d2:48:92:a9:d7: 52:88:62:8e:61:7f:94:ce:ab:00:45:77:26:31:a8:f0:91:bc: f5:8e:c1:1a:86:0c:82:72:a3:73:59:bd:0f:9e:11:22:e9:51: b9:41:45:b3:3f:bf:f7:50:3d:fb:2b:91:60:cd:f4:48:e4:2f: 48:71:d8:b3:cb:3b:08:74:5d:00:fc:e0:17:97:1b:a2:9a:ed: 91:dc:72:70:c8:b8:16:13:2b:e7:ff:32:0b:99:a2:fc:84:cd: 70:5b:f2:17:b6:90:2e:53:b5:e4:6f:9c:1f:61:28:4a:39:d2: 0a:e7:6e:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBFRUYxMTAvBgNVBAUTKDk1OEE0RUQ5RDdENjRGQUM4N0JEMTZFQzhBMzY1NzFF MUEyRjUwOEEwHhcNMjUwNzMxMTg1NzM0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiYmM5ZS01YzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbp8PVCrXL4od6Wpyl5BQFd2nb/XbE7hVmydNhvEF7v8BUfiNi5MwYyAAX2Y av7LuEkHv0gZEAhETOyKja/cnloBicYpEMSy7T0ohfq0BU/YPrZp3J/mtrTpx8P3 iTaaojQv90cnJayLb2HhMitlp9MB3fStzPYDdT7e0FztGHTB77vxKmBAmlA//0qd nqOPHIyl90wW+LR6SPon8v+iA2AwCjK1VfILDLa4XACSx50bXd6WHeVL+SLk7ohD Snssy7MQydIO61Wz5hOIJmWrWIt2VM3HqkfoSC3rjfTIQQ3Jgo0A7fvpB4trvsGk 6R0OWuNd7KXpQiZXyde5xJp6JwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFDrxgsnu tto15G7SDTxrm/hXU9xwMB8GA1UdIwQYMBaAFJWKTtnX1k+sh70W7Io2Vx4aL1CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEVFRi82QzRDRDY5MEY4 ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2eUh2UmJzaWpaWEhob3ZV SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZcE8yZGZXVDZ5SHZSYnNpalpYSGhvdlVJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjBFRUYvNkM0Q0Q2OTBGODg4MTFFOThGQTAwQTdDQzRGOUFFMDIvQzI5MTFDNzRF NkE3MTFFRkE4RDFBMDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgACMBgDBgQkBN3AYAMGACQE3cCqAwYAJATdwK8wDQYJKoZIhvcNAQEL BQADggEBAAfr5GCbcVpK/HiB2h6l34N5lySl7XyDFhiGfOZ2Ub5ky2+6KDm8irKu y6rTiOB6nFCo84qIuETJGBpSujwoHWdWeI8lKIL1LDWQyPA+N5Rn06cyJDMBgDya QSYdzU6ZYrpBo6tHNDWAxS0XPkF1za0XMOGt5g4anFwEZLhlEsL7mtWt2ikDHY5A RwnSSJKp11KIYo5hf5TOqwBFdyYxqPCRvPWOwRqGDIJyo3NZvQ+eESLpUblBRbM/ v/dQPfsrkWDN9EjkL0hx2LPLOwh0XQD84BeXG6Ka7ZHccnDIuBYTK+f/MguZovyE zXBb8he2kC5TteRvnB9hKEo50grnbhk= -----END CERTIFICATE-----Generated at Sun Aug 10 05:42:13 2025 by rpki-client