$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/F99E9E78571B11F093AD0C10C4F9AE02.roa File: F99E9E78571B11F093AD0C10C4F9AE02.roa (raw, json) Hash identifier: Ntdzzur1e7UcFcIFXVyf4NefmktAA4cSP3KFPUhWals= Subject key identifier: 89:94:96:C4:9C:36:44:E4:E2:4D:E1:1A:35:F4:C4:44:A2:A7:3E:D0 Certificate issuer: /CN=A9170DA5/serialNumber=3EC7B1A6DA21A1A775815D1CBFE72314B8A95DD9 Certificate serial: 02 Authority key identifier: 3E:C7:B1:A6:DA:21:A1:A7:75:81:5D:1C:BF:E7:23:14:B8:A9:5D:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psexptohoad1gV0cv-cjFLipXdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/F99E9E78571B11F093AD0C10C4F9AE02.roa Signing time: Wed 02 Jul 2025 08:10:11 +0000 ROA not before: Wed 02 Jul 2025 08:10:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154002 IP address blocks: 2001:df5:ce40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.crl rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psexptohoad1gV0cv-cjFLipXdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DA5, serialNumber=3EC7B1A6DA21A1A775815D1CBFE72314B8A95DD9 Validity Not Before: Jul 2 08:10:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6864e963-2743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:45:16:c8:f7:11:d6:57:16:f5:db:c0:94:17: 0e:19:dd:e3:7d:f2:69:5b:c0:e8:07:8b:0a:f9:a8: e2:ea:07:25:80:0f:8c:37:9e:68:60:c4:f1:05:bc: 39:fa:63:64:84:3e:ca:b9:d4:e2:6b:b0:a9:d3:96: 21:53:7a:88:28:6c:b1:22:98:68:b8:0f:d9:4e:e4: cf:b1:2b:27:1c:be:e8:1d:dd:40:44:ab:b9:29:16: 87:42:a8:c8:76:0d:f0:af:5c:14:e3:e9:97:5b:93: e8:a6:de:02:a7:e9:1b:c1:d1:89:94:c6:93:78:d6: 19:a2:f6:72:18:e3:97:30:b9:c6:96:3b:89:72:c5: d4:fb:4d:5b:69:89:b0:93:36:59:b0:ad:ad:29:56: ea:9e:57:51:49:78:c3:a8:f1:e3:81:3a:19:dd:c4: c4:f7:9c:fd:4b:de:23:9d:1d:cc:8c:ae:8e:f4:d7: 7b:38:b3:ad:a6:33:6d:ae:3d:25:83:2b:e9:e9:6d: b0:6a:5f:56:f4:3b:f5:3c:f2:48:f1:ea:d8:1a:82: c7:81:2d:b3:6e:12:e2:08:b3:b2:9b:14:1a:90:c7: 3f:b3:ca:6d:59:d7:62:78:5e:6e:6a:15:e5:60:33: ac:32:30:a4:f0:f2:b7:f1:14:60:f1:7b:5a:e9:98: 4c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:94:96:C4:9C:36:44:E4:E2:4D:E1:1A:35:F4:C4:44:A2:A7:3E:D0 X509v3 Authority Key Identifier: keyid:3E:C7:B1:A6:DA:21:A1:A7:75:81:5D:1C:BF:E7:23:14:B8:A9:5D:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psexptohoad1gV0cv-cjFLipXdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/F99E9E78571B11F093AD0C10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df5:ce40::/48 Signature Algorithm: sha256WithRSAEncryption ab:ff:79:64:e7:53:20:6d:74:86:68:6a:d3:50:36:85:f8:0f: ff:07:f9:e6:a2:c9:28:63:5d:78:97:bf:4c:41:3a:fb:b8:0b: 62:b1:25:d4:4e:18:99:86:86:93:ef:ee:f2:15:41:fd:38:a2: 3d:9b:71:b3:db:ed:ed:67:54:7a:48:f7:95:69:8f:4d:3f:8c: 20:86:51:ec:f1:88:b4:2d:bb:4c:e9:7b:80:73:2e:87:6d:68: 7e:37:2d:ef:89:50:c6:a6:6b:7b:5c:39:7d:51:dc:45:08:e4: bd:16:e3:9d:c0:7d:4f:54:9f:28:2f:e3:ac:ea:e6:8c:51:f8: ad:e1:b5:04:37:1e:eb:47:4f:8b:0c:9d:f1:35:a5:e4:26:91: 00:49:fb:d0:15:0f:a8:b5:28:bb:ae:a7:53:e4:55:d8:1a:37: a9:cd:cb:ed:2d:f4:ad:d5:b3:0c:03:28:cb:99:51:e0:76:40: 98:90:ee:62:67:df:4d:fc:c3:e4:f5:50:bc:13:ce:cf:35:b0: 9a:c4:36:2d:06:48:27:36:95:e1:6c:b4:d9:61:44:96:fc:f9: 66:60:a9:b1:47:e6:c6:4e:b3:b3:c8:69:11:78:c2:b8:f7:ec: ab:4c:2e:7b:4b:79:f4:97:48:74:4d:34:11:e9:24:87:44:35: 46:c3:29:55 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MERBNTExMC8GA1UEBRMoM0VDN0IxQTZEQTIxQTFBNzc1ODE1RDFDQkZFNzIzMTRC OEE5NUREOTAeFw0yNTA3MDIwODEwMTFaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NjRlOTYzLTI3NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIRRbI9xHWVxb128CUFw4Z3eN98mlbwOgHiwr5qOLqByWAD4w3nmhgxPEFvDn6 Y2SEPsq51OJrsKnTliFTeogobLEimGi4D9lO5M+xKyccvugd3UBEq7kpFodCqMh2 DfCvXBTj6Zdbk+im3gKn6RvB0YmUxpN41hmi9nIY45cwucaWO4lyxdT7TVtpibCT Nlmwra0pVuqeV1FJeMOo8eOBOhndxMT3nP1L3iOdHcyMro7013s4s62mM22uPSWD K+npbbBqX1b0O/U88kjx6tgagseBLbNuEuIIs7KbFBqQxz+zym1Z12J4Xm5qFeVg M6wyMKTw8rfxFGDxe1rpmEw7AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUiZSWxJw2 ROTiTeEaNfTERKKnPtAwHwYDVR0jBBgwFoAUPsexptohoad1gV0cv+cjFLipXdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwREE1L0NFMEVEQTI2NTcx QTExRjBCODUwNzM0MUM0RjlBRTAyL1BzZXhwdG9ob2FkMWdWMGN2LWNqRkxpcFhk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHNleHB0b2hvYWQxZ1YwY3YtY2pGTGlwWGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MERBNS9DRTBFREEyNjU3MUExMUYwQjg1MDczNDFDNEY5QUUwMi9GOTlFOUU3ODU3 MUIxMUYwOTNBRDBDMTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfXOQDANBgkqhkiG9w0BAQsFAAOCAQEAq/95ZOdTIG10 hmhq01A2hfgP/wf55qLJKGNdeJe/TEE6+7gLYrEl1E4YmYaGk+/u8hVB/TiiPZtx s9vt7WdUekj3lWmPTT+MIIZR7PGItC27TOl7gHMuh21ofjct74lQxqZre1w5fVHc RQjkvRbjncB9T1SfKC/jrOrmjFH4reG1BDce60dPiwyd8TWl5CaRAEn70BUPqLUo u66nU+RV2Bo3qc3L7S30rdWzDAMoy5lR4HZAmJDuYmffTfzD5PVQvBPOzzWwmsQ2 LQZIJzaV4Wy02WFElvz5ZmCpsUfmxk6zs8hpEXjCuPfsq0wue0t59JdIdE00Eekk h0Q1RsMpVQ== -----END CERTIFICATE-----Generated at Wed Nov 5 00:23:06 2025 by rpki-client