$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/854D304E0C9B11EC8433FE7AC4F9AE02.roa File: 854D304E0C9B11EC8433FE7AC4F9AE02.roa (raw, json) Hash identifier: 3RtBD83ZJNmQpXwmbagiYu3nHPOh0MloLGGIQPhUGxM= Subject key identifier: 00:77:74:FA:47:38:6A:26:C0:25:3A:D6:85:C4:B6:6D:07:B8:29:C2 Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Certificate serial: 1691 Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/854D304E0C9B11EC8433FE7AC4F9AE02.roa Signing time: Sat 12 Jul 2025 16:55:30 +0000 ROA not before: Sat 12 Jul 2025 16:55:30 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 394749 IP address blocks: 2404:6900:2012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5777 (0x1691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Validity Not Before: Jul 12 16:55:30 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68729381-88cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:b9:7c:7f:ac:4c:7c:80:42:aa:12:12:fb: e3:b5:2a:6b:50:8b:ec:e8:12:e5:91:74:e9:ce:cc: c6:c1:b2:84:5a:10:28:8d:30:08:ef:ba:2a:16:15: 34:62:f6:00:69:04:48:94:90:23:cc:b0:24:ce:93: 74:ce:ac:9d:49:bb:a6:01:d1:32:a3:ce:d3:49:f6: f8:8e:df:71:ac:4b:58:e5:49:8a:75:65:78:5d:70: a8:3d:03:3b:31:7d:24:a6:bd:65:69:31:bb:9d:25: f0:4f:2a:48:da:4f:ee:c9:2b:8b:86:1a:73:a0:eb: 40:95:e9:31:cc:28:4a:d1:1c:42:05:9e:7a:52:0a: 6d:c9:2c:ce:d4:68:3f:09:1d:5e:8f:16:76:c1:62: 4d:14:74:e7:4c:9e:ce:7e:58:fb:6f:cf:38:9e:71: 4d:95:cb:c3:93:7b:0f:dc:54:ad:96:f0:6e:ec:d7: 2d:6c:4d:c2:b0:9f:7e:8e:41:c4:3b:d5:cf:17:20: 21:44:e4:30:de:7d:64:03:54:e7:65:a9:1c:66:e2: 3c:cc:e1:57:e4:18:49:b1:e1:bc:2c:ec:2e:bd:b1: 8c:86:3a:a2:a5:e0:af:03:4f:3a:88:a6:44:db:10: df:83:17:29:10:6e:d7:36:27:8c:85:c9:17:85:f0: 5d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:77:74:FA:47:38:6A:26:C0:25:3A:D6:85:C4:B6:6D:07:B8:29:C2 X509v3 Authority Key Identifier: keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/854D304E0C9B11EC8433FE7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:6900:2012::/48 Signature Algorithm: sha256WithRSAEncryption 26:d5:79:f6:83:1d:1f:d3:f0:b2:82:6f:85:6c:29:b2:8d:f3: b7:fd:8e:ae:a4:e4:f0:1f:b6:d8:3a:bc:00:e5:72:4e:10:1c: 90:b3:35:69:34:eb:50:85:9d:48:82:78:c9:46:f1:0b:bc:cd: 46:1f:d8:80:48:9f:cc:c0:03:b6:57:54:74:3f:0b:52:95:42: ae:56:87:db:b7:e4:fd:a5:b4:79:be:b1:79:61:c1:3d:5c:61: 5a:fc:c0:3a:2f:53:6f:6c:20:43:91:96:97:70:a0:b2:52:22: 66:82:0a:69:10:fe:ab:2f:5c:18:61:82:c0:79:8a:64:64:99: c1:02:75:9f:76:e2:a5:4b:f3:ec:f1:ef:a6:c0:36:5d:01:4e: 92:a7:02:f6:34:02:99:46:f3:e4:f6:ac:c1:14:8a:4c:45:d8: 1d:8c:bc:2f:82:ef:4c:6a:18:28:8b:74:ef:65:b6:bb:80:89: 62:be:2c:6a:68:8e:1e:6c:f0:dd:d2:b4:16:fc:27:1d:db:45: eb:e4:00:47:47:0e:84:78:90:e9:8d:83:2f:35:4b:dd:f0:c3: c6:b3:4f:19:1c:ec:18:af:69:96:9d:86:bd:c8:ef:1f:d4:49: 0e:7f:24:4a:53:f6:a5:08:de:87:db:d7:3f:ec:66:42:ba:aa: c0:ea:eb:3d -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICFpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEOTExMTAvBgNVBAUTKEUyRURFNEE3RUE5NzI2NjhBNzk1QjI3QkE5REM4N0Y0 QjkwREE4OTcwHhcNMjUwNzEyMTY1NTMwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcyOTM4MS04OGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0i5fH+sTHyAQqoSEvvjtSprUIvs6BLlkXTpzszGwbKEWhAojTAI77oqFhU0 YvYAaQRIlJAjzLAkzpN0zqydSbumAdEyo87TSfb4jt9xrEtY5UmKdWV4XXCoPQM7 MX0kpr1laTG7nSXwTypI2k/uySuLhhpzoOtAlekxzChK0RxCBZ56UgptySzO1Gg/ CR1ejxZ2wWJNFHTnTJ7Oflj7b884nnFNlcvDk3sP3FStlvBu7NctbE3CsJ9+jkHE O9XPFyAhROQw3n1kA1TnZakcZuI8zOFX5BhJseG8LOwuvbGMhjqipeCvA086iKZE 2xDfgxcpEG7XNieMhckXhfBdzQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAB3dPpH OGomwCU61oXEtm0HuCnCMB8GA1UdIwQYMBaAFOLt5KfqlyZop5Wye6nch/S5DaiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ5MS9FQTY3MkE1QzE5 RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEptaW5sYko3cWR5SDlMa05x SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1M2twLXFYSm1pbmxiSjdxZHlIOUxrTnFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJEOTEvRUE2NzJBNUMxOUU3MTFFOEIyNDNENTdDQzRGOUFFMDIvODU0RDMwNEUw QzlCMTFFQzg0MzNGRTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBGkAIBIwDQYJKoZIhvcNAQELBQADggEBACbVefaDHR/T 8LKCb4VsKbKN87f9jq6k5PAfttg6vADlck4QHJCzNWk061CFnUiCeMlG8Qu8zUYf 2IBIn8zAA7ZXVHQ/C1KVQq5Wh9u35P2ltHm+sXlhwT1cYVr8wDovU29sIEORlpdw oLJSImaCCmkQ/qsvXBhhgsB5imRkmcECdZ924qVL8+zx76bANl0BTpKnAvY0AplG 8+T2rMEUikxF2B2MvC+C70xqGCiLdO9ltruAiWK+LGpojh5s8N3StBb8Jx3bRevk AEdHDoR4kOmNgy81S93ww8azTxkc7BivaZadhr3I7x/USQ5/JEpT9qUI3ofb1z/s ZkK6qsDq6z0= -----END CERTIFICATE-----Generated at Wed Nov 5 20:25:45 2025 by rpki-client