$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa File: 7F77220A143811EE97A64D19C4F9AE02.roa (raw, json) Hash identifier: diKGcxmwQTel5YY8WsC3uD2ZYX3TcWgxBxLiKnkwFdQ= Subject key identifier: AC:90:6E:35:B9:7A:B1:09:0C:EF:3D:CD:98:D2:8A:4A:72:BF:F5:B6 Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Certificate serial: 188F Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa Signing time: Tue 26 Aug 2025 16:55:11 +0000 ROA not before: Tue 26 Aug 2025 16:55:11 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38551 IP address blocks: 2407:e500:c::/47 maxlen: 47 2407:e500:e::/47 maxlen: 47 2407:e500:10::/47 maxlen: 47 2407:e500:12::/47 maxlen: 47 2407:e500:80::/47 maxlen: 47 2407:e500:90::/47 maxlen: 47 2407:e500:a0::/47 maxlen: 47 2407:e500:b0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6287 (0x188f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Validity Not Before: Aug 26 16:55:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68ade6ef-6c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:29:c7:ce:91:65:b9:73:cd:4f:e9:76:15:94: bf:f6:65:cb:e1:1c:a6:f5:b9:8b:79:43:bc:d1:83: bb:54:2c:f7:09:0e:0d:c4:af:9e:7e:35:8b:78:0d: 3b:87:48:e1:07:57:92:12:6e:98:2b:62:3c:4a:95: 55:df:d3:75:35:a9:44:d9:e2:f9:60:ac:f0:ad:14: 9d:2b:47:11:fc:0a:8a:91:dc:0b:b1:01:5e:2c:6c: 7e:cb:89:7a:f3:3d:99:f7:73:79:85:27:c4:63:41: c6:d3:f0:6e:4a:c1:ec:ec:4f:f2:20:85:d2:67:83: fe:bc:d3:ae:6d:a2:61:a8:ad:87:ce:7c:3a:a6:c5: ae:e0:f8:1a:87:bc:70:ba:9c:94:2f:62:e7:d4:54: b4:ce:48:d3:30:b2:2a:75:9e:04:7b:eb:60:30:57: 7e:15:77:91:c9:7f:74:c6:e3:8d:72:cb:33:b6:df: 8a:46:f4:18:ee:d0:ff:f2:44:14:4b:cc:f0:0f:71: a5:8f:21:17:5c:44:40:4f:95:13:d5:fe:b8:b1:24: 73:f2:a9:a6:84:28:68:fb:bf:e5:a5:61:ff:ef:9a: 47:d0:fc:c4:47:76:a1:7d:69:4e:08:8a:c8:82:2f: 4c:19:b3:1e:cd:4e:4a:4e:50:c7:26:6e:00:75:bc: 45:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:90:6E:35:B9:7A:B1:09:0C:EF:3D:CD:98:D2:8A:4A:72:BF:F5:B6 X509v3 Authority Key Identifier: keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:e500:c::-2407:e500:13:ffff:ffff:ffff:ffff:ffff 2407:e500:80::/47 2407:e500:90::/47 2407:e500:a0::/47 2407:e500:b0::/47 Signature Algorithm: sha256WithRSAEncryption 5f:5a:64:b8:1c:98:d4:80:28:22:42:7a:09:c5:72:b9:27:95: 40:6c:7c:00:b9:33:da:9e:f8:fb:7f:c6:ee:68:38:d0:64:38: 8f:79:5f:65:f4:a7:91:c6:6e:7b:86:69:3b:bd:60:4a:3b:3f: 15:16:b6:42:b6:66:0e:20:50:21:15:8a:f2:c4:a3:e7:e5:14: 2c:79:4a:9c:05:f2:16:cb:1e:8a:c9:64:f1:3e:50:ab:39:a0: c3:70:dd:01:ee:00:17:d3:dc:d9:28:01:ac:f2:df:b4:64:8f: ff:ee:ee:c9:95:2b:e3:d5:f6:17:11:62:69:70:5e:8d:51:78: ed:3c:97:e3:be:d0:1f:79:34:dc:a1:45:f7:ae:7a:38:d4:68: 34:15:8b:ed:2d:55:75:cc:eb:ac:9c:17:4c:ce:e5:f1:24:83: f8:d4:d6:6b:1c:77:15:8f:2f:9d:97:f4:39:aa:28:04:f4:e2: 65:26:da:64:bb:80:eb:12:4f:60:81:ec:20:2a:96:db:a5:b5: d3:f8:d3:93:7f:79:80:d5:d0:ad:5b:25:1e:b7:01:b4:71:c8: ee:00:3b:f7:fb:fc:61:98:e4:3b:9c:e7:f6:3e:3c:21:3c:a7: 9b:3f:0f:20:d9:06:43:19:bc:76:4d:a1:80:f4:e2:af:50:1c: b3:20:68:0c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICGI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG NjQyNDZDN0MwHhcNMjUwODI2MTY1NTExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFkZTZlZi02YzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCnHzpFluXPNT+l2FZS/9mXL4Rym9bmLeUO80YO7VCz3CQ4NxK+efjWLeA07 h0jhB1eSEm6YK2I8SpVV39N1NalE2eL5YKzwrRSdK0cR/AqKkdwLsQFeLGx+y4l6 8z2Z93N5hSfEY0HG0/BuSsHs7E/yIIXSZ4P+vNOubaJhqK2Hznw6psWu4Pgah7xw upyUL2Ln1FS0zkjTMLIqdZ4Ee+tgMFd+FXeRyX90xuONcssztt+KRvQY7tD/8kQU S8zwD3GljyEXXERAT5UT1f64sSRz8qmmhCho+7/lpWH/75pH0PzER3ahfWlOCIrI gi9MGbMezU5KTlDHJm4AdbxFwwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFKyQbjW5 erEJDO89zZjSikpyv/W2MB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQzNkEvMzdBQkQ3MDhBQTlBMTFFN0JBQzQxMjUyQzRGOUFFMDIvN0Y3NzIyMEEx NDM4MTFFRTk3QTY0RDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgACMDgwEgMHAiQH5QAADAMHAiQH5QAAEAMHASQH5QAAgAMHASQH5QAA kAMHASQH5QAAoAMHASQH5QAAsDANBgkqhkiG9w0BAQsFAAOCAQEAX1pkuByY1IAo IkJ6CcVyuSeVQGx8ALkz2p74+3/G7mg40GQ4j3lfZfSnkcZue4ZpO71gSjs/FRa2 QrZmDiBQIRWK8sSj5+UULHlKnAXyFsseislk8T5Qqzmgw3DdAe4AF9Pc2SgBrPLf tGSP/+7uyZUr49X2FxFiaXBejVF47TyX477QH3k03KFF9656ONRoNBWL7S1Vdczr rJwXTM7l8SSD+NTWaxx3FY8vnZf0OaooBPTiZSbaZLuA6xJPYIHsICqW26W10/jT k395gNXQrVslHrcBtHHI7gA79/v8YZjkO5zn9j48ITynmz8PINkGQxm8dk2hgPTi r1AcsyBoDA== -----END CERTIFICATE-----Generated at Wed Nov 5 22:34:37 2025 by rpki-client