$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/5DA1D170593F11ED9D9F2D28C4F9AE02.roa File: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (raw, json) Hash identifier: BIcjECgUWsQ4hPpYoXe2O+HNYZxFLkHcHH/BGhRf0OQ= Subject key identifier: FD:AA:92:1A:AD:02:D5:1B:BE:F2:1F:C4:0D:91:98:89:46:B0:1F:39 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 037E Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/5DA1D170593F11ED9D9F2D28C4F9AE02.roa Signing time: Mon 19 May 2025 00:57:51 +0000 ROA not before: Mon 19 May 2025 00:57:51 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 210445 IP address blocks: 2400:70e0:bac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 894 (0x37e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: May 19 00:57:51 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682a820f-c40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f6:12:13:33:5e:2c:99:69:59:03:c9:99:d6: d5:73:3b:25:f6:5c:6c:82:af:c2:2f:85:79:37:15: 10:18:47:f2:17:0d:db:d9:e0:af:ea:8a:87:29:3a: 38:c2:8a:ab:63:bc:57:0b:a6:12:75:65:b2:98:f0: 13:ab:fa:15:9b:81:09:99:2b:5a:eb:d5:b2:c9:31: 35:8f:36:74:17:cb:1a:81:81:45:98:6d:a2:cc:5b: ac:0c:6a:e5:a4:93:a3:28:d5:50:e8:61:9e:40:e1: a0:0a:98:ec:8c:53:d0:c3:ef:57:f2:65:ef:a0:b0: 3c:65:16:81:6c:25:8c:75:06:6c:44:7d:62:65:ec: 31:f1:55:ff:55:3c:4e:ca:43:f4:65:9d:af:81:84: f8:11:9d:e7:e5:0a:ea:b9:a7:17:4d:2e:0a:d8:32: 32:a5:39:a2:e6:81:62:1d:5f:20:83:cb:7f:e7:47: 8b:cc:4a:6a:28:46:65:bb:67:3f:24:f9:f8:47:25: 58:b2:67:c6:37:1a:19:5c:02:3c:ed:30:b9:20:90: f0:cb:dd:9d:7b:9c:94:32:31:0d:be:4b:cd:d3:9a: 44:94:1c:55:4a:3d:5d:f9:76:c6:5d:eb:ee:36:ec: 1b:9e:a2:93:cd:18:80:43:c6:9b:61:e7:fc:ff:9e: d8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AA:92:1A:AD:02:D5:1B:BE:F2:1F:C4:0D:91:98:89:46:B0:1F:39 X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/5DA1D170593F11ED9D9F2D28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:70e0:bac::/48 Signature Algorithm: sha256WithRSAEncryption 01:04:bf:aa:6e:90:aa:d3:b7:3e:ba:03:7e:c2:0b:4e:5d:1f: 4a:7f:35:d8:61:e4:9a:a1:8c:5f:e0:68:b6:da:4b:83:a8:e9: 34:92:59:d3:95:32:7b:ad:05:9c:3a:98:08:3f:66:16:36:d2: 21:12:c8:3c:84:b3:e1:83:37:82:ef:6f:00:25:a9:6d:ca:27: d0:31:0f:a2:2d:60:c3:af:c2:6d:d6:87:47:9d:5a:4a:29:5a: de:7b:e6:6d:0f:f9:b2:9f:9f:01:c6:7e:53:8a:0a:62:dd:a9: 81:13:18:26:76:00:a1:1b:36:09:a2:59:e1:ce:08:74:07:5d: d4:de:6e:f4:f1:ce:66:a8:ac:36:8a:0c:64:41:de:35:f1:cc: 34:42:6b:89:d0:15:94:b7:c9:49:ca:c3:a5:3c:57:53:e3:a6: 41:c3:fc:9d:8a:0d:c4:f2:05:0f:50:8a:b4:45:c6:58:01:f0: 3b:35:e4:7c:e8:d2:91:d7:21:7b:8c:e8:57:80:91:9a:e5:20: 6a:b3:b2:91:a8:06:ae:c2:2b:f7:3a:cc:8a:64:60:81:8e:bf: bc:3f:48:1d:0d:e4:af:f7:b4:c4:93:32:1b:9c:2e:c7:65:2a: f8:b8:0f:61:f3:e0:37:54:dc:c3:b1:f5:c7:63:bf:3d:30:3c: e7:f4:53:f4 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICA34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjUwNTE5MDA1NzUxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJhODIwZi1jNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PYSEzNeLJlpWQPJmdbVczsl9lxsgq/CL4V5NxUQGEfyFw3b2eCv6oqHKTo4 woqrY7xXC6YSdWWymPATq/oVm4EJmSta69WyyTE1jzZ0F8sagYFFmG2izFusDGrl pJOjKNVQ6GGeQOGgCpjsjFPQw+9X8mXvoLA8ZRaBbCWMdQZsRH1iZewx8VX/VTxO ykP0ZZ2vgYT4EZ3n5QrquacXTS4K2DIypTmi5oFiHV8gg8t/50eLzEpqKEZlu2c/ JPn4RyVYsmfGNxoZXAI87TC5IJDwy92de5yUMjENvkvN05pElBxVSj1d+XbGXevu NuwbnqKTzRiAQ8abYef8/57YywIDAQABo4ICmDCCApQwHQYDVR0OBBYEFP2qkhqt AtUbvvIfxA2RmIlGsB85MB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI4MzcvOUQ5MEFCNjJDMTVBMTFFQ0E0NEY1MzYwQzRGOUFFMDIvNURBMUQxNzA1 OTNGMTFFRDlEOUYyRDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAHDgC6wwDQYJKoZIhvcNAQELBQADggEBAAEEv6pukKrT tz66A37CC05dH0p/Ndhh5JqhjF/gaLbaS4Oo6TSSWdOVMnutBZw6mAg/ZhY20iES yDyEs+GDN4LvbwAlqW3KJ9AxD6ItYMOvwm3Wh0edWkopWt575m0P+bKfnwHGflOK CmLdqYETGCZ2AKEbNgmiWeHOCHQHXdTebvTxzmaorDaKDGRB3jXxzDRCa4nQFZS3 yUnKw6U8V1PjpkHD/J2KDcTyBQ9QirRFxlgB8Ds15Hzo0pHXIXuM6FeAkZrlIGqz spGoBq7CK/c6zIpkYIGOv7w/SB0N5K/3tMSTMhucLsdlKvi4D2Hz4DdU3MOx9cdj vz0wPOf0U/Q= -----END CERTIFICATE-----Generated at Wed Nov 5 07:52:42 2025 by rpki-client