$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/D16A1B5C225711EF975F6747C4F9AE02.roa File: D16A1B5C225711EF975F6747C4F9AE02.roa (raw, json) Hash identifier: Oq3D4ezYunPFGiMcUlxoGy2jtufjcwOjdtjOKgqjtFk= Subject key identifier: FE:97:97:49:DA:F3:C2:AB:A2:4E:13:94:07:6C:C6:4A:2C:8D:76:21 Certificate issuer: /CN=A9167CB5/serialNumber=FA811F52E5195A429D706D19C003237C3209AA37 Certificate serial: CB Authority key identifier: FA:81:1F:52:E5:19:5A:42:9D:70:6D:19:C0:03:23:7C:32:09:AA:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/D16A1B5C225711EF975F6747C4F9AE02.roa Signing time: Tue 01 Jul 2025 06:44:02 +0000 ROA not before: Tue 01 Jul 2025 06:44:01 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152898 IP address blocks: 2001:df3:e1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.crl rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CB5, serialNumber=FA811F52E5195A429D706D19C003237C3209AA37 Validity Not Before: Jul 1 06:44:01 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686383b1-dc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:11:6d:bf:e4:cb:4d:0f:08:20:8b:d1:b9: 92:f9:99:fb:21:2c:e9:9a:f5:aa:2d:07:74:22:7d: 7d:8d:aa:4e:a7:67:89:a4:92:3b:27:16:a2:22:b3: 5c:81:af:f2:38:4b:97:7f:92:25:57:76:19:c3:e6: 6f:5c:df:fe:cd:c4:93:fd:42:b0:ce:87:1a:c4:4d: 7c:86:1a:eb:50:d3:ca:25:91:3e:6d:73:55:33:11: 13:fb:42:97:b5:c1:6c:e5:92:df:c4:f6:08:b7:0f: b0:a5:51:5f:96:01:44:f4:9f:58:fb:ee:71:70:b2: 22:56:e0:d3:c4:5f:3c:f5:54:99:1f:da:53:1b:8c: 97:05:fb:96:32:c5:bb:95:9c:b4:2e:1c:93:16:9a: f8:67:1b:e0:aa:88:a1:26:d4:f6:33:3e:c5:7a:51: 20:09:b0:a2:40:03:e2:88:df:de:73:51:7a:d3:ce: cd:9b:fd:f3:7e:7d:78:b5:43:25:64:40:d4:21:71: 7d:44:fe:5e:a1:bf:a4:b5:ae:f6:fc:82:7b:3f:29: db:f4:5c:e9:7a:65:b2:91:05:4e:b5:82:fb:8d:18: 9c:d7:58:dd:08:e0:c2:c7:b0:84:58:fe:db:f7:9a: b7:5d:5d:34:ed:68:45:96:1b:0e:6a:ef:24:69:3e: d6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:97:97:49:DA:F3:C2:AB:A2:4E:13:94:07:6C:C6:4A:2C:8D:76:21 X509v3 Authority Key Identifier: keyid:FA:81:1F:52:E5:19:5A:42:9D:70:6D:19:C0:03:23:7C:32:09:AA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/D16A1B5C225711EF975F6747C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:e1c0::/48 Signature Algorithm: sha256WithRSAEncryption 0b:50:27:02:80:5f:1d:a8:3c:c2:99:32:23:34:40:5d:51:60: 0c:2d:7c:57:a5:eb:4d:6a:e5:db:f7:cb:84:f4:bd:df:47:fd: e6:33:57:a6:1a:0d:06:33:a5:55:7f:f6:e2:ae:76:86:47:19: e6:47:a2:47:10:47:55:4d:60:db:a7:04:37:10:97:2a:3a:75: 95:8b:33:67:6c:bd:8a:82:a7:b9:de:01:b1:d2:2c:e6:27:c0: 46:7d:57:1a:ce:d7:9c:e1:ea:18:08:89:5e:e5:e1:11:5e:09: 75:9b:7d:b8:52:35:e3:f9:9e:24:32:94:60:16:57:a7:01:01: c6:f2:2a:06:04:a8:4c:6d:03:54:eb:9d:9c:27:6b:64:a9:ac: f6:20:23:d1:e6:fc:80:9c:50:38:a4:0b:ec:7d:b5:39:9f:7a: 76:a4:77:68:b7:86:7b:89:1f:23:fb:53:03:06:8f:bc:e8:fc: 12:38:39:5b:26:17:01:d2:69:84:94:a6:a7:20:05:1b:3b:b5: 54:be:fe:f7:8f:71:ee:89:88:05:a6:2e:aa:b9:db:b8:3f:a1: a8:d4:d1:68:56:67:72:19:ec:16:f0:14:83:34:01:96:34:0b: bc:08:c5:20:0c:bf:34:62:8f:63:17:60:d6:b1:b2:c0:de:b8: cb:91:e3:5b -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQjUxMTAvBgNVBAUTKEZBODExRjUyRTUxOTVBNDI5RDcwNkQxOUMwMDMyMzdD MzIwOUFBMzcwHhcNMjUwNzAxMDY0NDAxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzODNiMS1kYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy78Rbb/ky00PCCCL0bmS+Zn7ISzpmvWqLQd0In19japOp2eJpJI7JxaiIrNc ga/yOEuXf5IlV3YZw+ZvXN/+zcST/UKwzocaxE18hhrrUNPKJZE+bXNVMxET+0KX tcFs5ZLfxPYItw+wpVFflgFE9J9Y++5xcLIiVuDTxF889VSZH9pTG4yXBfuWMsW7 lZy0LhyTFpr4ZxvgqoihJtT2Mz7FelEgCbCiQAPiiN/ec1F6087Nm/3zfn14tUMl ZEDUIXF9RP5eob+kta72/IJ7Pynb9FzpemWykQVOtYL7jRic11jdCODCx7CEWP7b 95q3XV007WhFlhsOau8kaT7WcwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFP6Xl0na 88Krok4TlAdsxkosjXYhMB8GA1UdIwQYMBaAFPqBH1LlGVpCnXBtGcADI3wyCao3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NCNS9GQTM3QzYzRTIy NTYxMUVGQjc1NjFGNDZDNEY5QUUwMi8tb0VmVXVVWldrS2RjRzBad0FNamZESUpx amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1vRWZVdVVaV2tLZGNHMFp3QU1qZkRJSnFqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdDQjUvRkEzN0M2M0UyMjU2MTFFRkI3NTYxRjQ2QzRGOUFFMDIvRDE2QTFCNUMy MjU3MTFFRjk3NUY2NzQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3z4cAwDQYJKoZIhvcNAQELBQADggEBAAtQJwKAXx2o PMKZMiM0QF1RYAwtfFel601q5dv3y4T0vd9H/eYzV6YaDQYzpVV/9uKudoZHGeZH okcQR1VNYNunBDcQlyo6dZWLM2dsvYqCp7neAbHSLOYnwEZ9VxrO15zh6hgIiV7l 4RFeCXWbfbhSNeP5niQylGAWV6cBAcbyKgYEqExtA1TrnZwna2SprPYgI9Hm/ICc UDikC+x9tTmfenakd2i3hnuJHyP7UwMGj7zo/BI4OVsmFwHSaYSUpqcgBRs7tVS+ /vePce6JiAWmLqq527g/oajU0WhWZ3IZ7BbwFIM0AZY0C7wIxSAMvzRij2MXYNax ssDeuMuR41s= -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:05 2025 by rpki-client