$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3632957E441311EE8A03A472C4F9AE02.roa File: 3632957E441311EE8A03A472C4F9AE02.roa (raw, json) Hash identifier: nC156FtWNisRyJ+sZJC0neQfTsLbF3t6cdGqYP4uj+g= Subject key identifier: B2:9D:01:BB:3D:B1:14:0E:47:EB:02:E9:BF:0B:D1:1B:F1:02:B2:6B Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 02D8 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3632957E441311EE8A03A472C4F9AE02.roa Signing time: Sat 09 Aug 2025 02:39:19 +0000 ROA not before: Sat 09 Aug 2025 02:39:19 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 148996 IP address blocks: 2400:9ce0:6000::/36 maxlen: 36 2400:9ce0:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Aug 9 02:39:19 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6896b4d7-60e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9b:10:dd:4c:e3:ef:f1:a8:07:ec:6c:47:a8: 21:aa:7a:ee:86:07:65:f3:e5:75:14:78:8d:4b:4b: d3:74:22:38:f8:fa:38:ce:6f:60:c8:db:3f:2f:50: 2b:8d:82:76:0f:ca:be:f3:96:4b:26:9f:25:9f:c5: c0:f2:4c:58:83:0e:c1:63:bd:eb:e4:d2:3f:5b:39: eb:39:f2:5a:d2:5c:ea:8c:2a:51:1f:18:1c:f3:7a: 79:b5:a1:b1:ef:2e:21:0f:ec:ce:67:ea:a7:97:83: ac:89:77:e2:3b:99:6f:2f:85:cc:5b:15:64:33:5f: 7c:bb:00:a7:d0:d1:a7:ff:e4:91:4b:8d:93:9e:73: c2:07:2c:66:8d:1d:a6:39:dd:9f:a0:bf:a0:d8:da: 6c:03:ab:47:c3:c8:60:30:12:b7:a0:7b:df:78:66: de:ed:f2:47:51:c5:1e:d1:15:3e:8c:d8:0b:af:5c: f5:01:20:ff:81:0a:1a:f4:44:9b:e3:ce:78:94:29: 8d:6a:ff:61:72:42:6d:d1:7f:69:cc:be:5b:52:59: ae:54:da:59:de:9d:da:3d:7f:ce:00:94:0a:cc:d4: 0b:fe:29:85:c5:2b:81:46:cb:f4:ab:4d:63:18:96: 16:c9:91:77:93:d9:82:bb:5e:83:d9:b5:f5:c6:44: 32:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9D:01:BB:3D:B1:14:0E:47:EB:02:E9:BF:0B:D1:1B:F1:02:B2:6B X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3632957E441311EE8A03A472C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:9ce0:6000::/35 Signature Algorithm: sha256WithRSAEncryption 96:1a:c0:ae:bc:aa:e1:12:bb:86:8a:e2:d8:4d:0c:2f:a5:dd: 89:ca:fc:bc:68:dd:08:34:39:37:61:65:8d:4d:a9:fa:13:52: 9e:20:56:b0:0b:14:a0:74:ed:87:6f:d7:bb:c7:b4:6c:0a:b2: d2:54:6b:3b:17:ac:74:c4:91:08:85:5e:68:d6:9e:4e:7e:7c: c9:b7:db:c9:34:b4:7f:5a:bc:b9:84:60:c3:f4:9a:fd:17:de: 12:e6:aa:06:2b:1f:1e:e4:c5:ab:d8:a0:16:0e:be:59:93:67: 3b:b9:49:e4:d7:84:20:5f:8d:26:83:a6:cf:56:ea:ef:1a:dc: 11:95:c9:ea:a3:0d:f8:37:fb:2d:93:48:ff:96:f9:14:a8:cd: fe:ea:16:94:37:7e:c3:88:44:d0:6a:fc:1a:41:9e:4b:31:92: f1:29:a3:34:59:a5:b5:dc:32:4e:dd:0c:23:04:14:2e:90:77: 2e:82:88:73:9d:a8:57:d7:a2:20:21:de:e4:7a:38:8f:66:36: a5:f8:64:fd:67:e6:20:a8:00:04:5e:85:4b:50:09:ec:3e:24: 0b:e4:bb:d9:4d:46:fd:40:c9:51:17:55:f5:02:23:f5:5b:0f: 76:2e:d9:db:07:76:df:49:43:dd:31:ef:35:52:83:f8:f1:3f: 4d:95:f7:92 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUwODA5MDIzOTE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk2YjRkNy02MGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZsQ3Uzj7/GoB+xsR6ghqnruhgdl8+V1FHiNS0vTdCI4+Po4zm9gyNs/L1Ar jYJ2D8q+85ZLJp8ln8XA8kxYgw7BY73r5NI/WznrOfJa0lzqjCpRHxgc83p5taGx 7y4hD+zOZ+qnl4OsiXfiO5lvL4XMWxVkM198uwCn0NGn/+SRS42TnnPCByxmjR2m Od2foL+g2NpsA6tHw8hgMBK3oHvfeGbe7fJHUcUe0RU+jNgLr1z1ASD/gQoa9ESb 4854lCmNav9hckJt0X9pzL5bUlmuVNpZ3p3aPX/OAJQKzNQL/imFxSuBRsv0q01j GJYWyZF3k9mCu16D2bX1xkQyxQIDAQABo4IClzCCApMwHQYDVR0OBBYEFLKdAbs9 sRQOR+sC6b8L0RvxArJrMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JBQzUvNDcwQTYyMDQxNTMwMTFFREJBQTNEMDI3QzRGOUFFMDIvMzYzMjk1N0U0 NDEzMTFFRThBMDNBNDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgUkAJzgYDANBgkqhkiG9w0BAQsFAAOCAQEAlhrArryq4RK7 hori2E0ML6Xdicr8vGjdCDQ5N2FljU2p+hNSniBWsAsUoHTth2/Xu8e0bAqy0lRr OxesdMSRCIVeaNaeTn58ybfbyTS0f1q8uYRgw/Sa/RfeEuaqBisfHuTFq9igFg6+ WZNnO7lJ5NeEIF+NJoOmz1bq7xrcEZXJ6qMN+Df7LZNI/5b5FKjN/uoWlDd+w4hE 0Gr8GkGeSzGS8SmjNFmltdwyTt0MIwQULpB3LoKIc52oV9eiICHe5Ho4j2Y2pfhk /WfmIKgABF6FS1AJ7D4kC+S72U1G/UDJURdV9QIj9VsPdi7Z2wd230lD3THvNVKD +PE/TZX3kg== -----END CERTIFICATE-----Generated at Sun Aug 10 05:45:00 2025 by rpki-client