$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4D9E29A8305311EF9CFFF238C4F9AE02.roa File: 4D9E29A8305311EF9CFFF238C4F9AE02.roa (raw, json) Hash identifier: MNX+rdA1Et7x9wGaKOvMMV8QRmSvoKr5NffTky/n/aw= Subject key identifier: 47:80:85:97:F6:F3:36:C8:29:82:D2:7B:A3:7D:66:8D:CA:1B:50:8E Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 071D Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4D9E29A8305311EF9CFFF238C4F9AE02.roa Signing time: Fri 20 Jun 2025 22:11:24 +0000 ROA not before: Fri 20 Jun 2025 22:11:24 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 147196 IP address blocks: 2400:8180:21::/48 maxlen: 48 2400:8180:22::/48 maxlen: 48 2400:8180:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Jun 20 22:11:24 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6855dc8c-d020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:36:2f:18:2a:5c:5e:52:8d:da:de:48:5b: 69:91:50:2d:87:4e:17:4f:fd:61:11:87:56:e6:ac: f3:29:3d:79:cd:e7:68:1d:4c:1d:28:26:e9:0e:ae: c1:f0:0c:5b:19:02:3a:cf:51:52:5e:d4:a9:5f:77: 96:84:63:04:c5:f3:b2:a2:d6:d7:4f:5f:08:94:e7: c4:de:53:ec:ba:28:3f:0b:79:d3:fb:e6:96:23:8d: b4:ab:fc:87:e3:27:06:ae:90:ac:bb:e0:d8:7e:16: e8:42:aa:d5:ac:ce:fb:1f:38:36:e5:ea:2b:ed:02: 29:c7:0b:4e:5b:83:30:17:ad:a2:2a:59:eb:01:96: cd:7a:d9:a7:65:a6:d2:4a:f3:43:2b:63:f7:06:68: 16:bf:5d:74:08:c9:d6:16:01:d3:bd:2a:70:60:ae: 82:9c:c4:4d:2c:bf:47:dc:12:36:ab:de:b2:b7:b6: 52:cb:b4:c5:2d:46:ea:24:bc:60:99:bb:98:86:c1: 21:2f:2f:c4:a8:0a:ed:e8:95:6f:f9:fd:29:2c:81: e8:24:7b:e1:ec:70:ac:0f:cb:d0:88:6b:ad:c8:e8: 64:d7:7b:a1:a7:84:0c:40:af:b2:6e:6b:dc:6a:e0: 7b:16:94:9d:07:b6:f5:4f:2a:ab:e3:4f:01:7f:60: b4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:80:85:97:F6:F3:36:C8:29:82:D2:7B:A3:7D:66:8D:CA:1B:50:8E X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4D9E29A8305311EF9CFFF238C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8180:21::-2400:8180:23:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8e:70:ae:8f:ee:e4:e2:be:8c:24:40:07:d1:0b:c2:0e:71:a4: dc:fd:83:98:14:d4:64:b8:d2:85:a8:fe:e0:ae:20:87:0c:9e: 68:f9:99:6e:28:27:04:8e:34:24:3a:cb:fe:58:18:fe:a8:5f: cd:9f:9e:64:b9:05:63:44:94:95:21:07:84:7c:3a:a7:f9:72: 81:fc:27:7a:60:83:37:8d:6b:41:6b:70:32:6c:c6:de:88:0e: 62:f7:7c:0c:be:38:f0:f2:69:04:d9:32:44:9d:1e:b3:e4:4b: 32:a4:ba:df:f3:6d:d8:5b:71:4f:3d:81:64:2d:03:97:5c:e4: 6f:82:50:13:7e:2b:00:28:81:12:1e:7a:8c:2f:38:39:85:a9: d3:1f:bb:40:99:e1:35:c3:62:60:c6:3e:d3:de:aa:7e:ee:62: 3a:62:15:31:a7:e5:08:2d:2d:6c:1f:78:e1:df:a4:6f:c6:43: d7:f2:a9:e3:3a:63:b3:9e:21:55:d9:78:85:d0:09:30:52:5c: d8:d7:b9:06:b6:fc:97:ae:86:73:43:dc:0e:93:f4:6f:36:56: 8d:22:1d:15:88:d0:7d:f4:81:aa:de:dd:61:44:5f:d4:35:0f: eb:26:5a:97:38:ae:06:dd:4d:2d:5c:9a:7c:d9:c1:06:7c:4a: ef:49:bd:4f -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwNjIwMjIxMTI0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU1ZGM4Yy1kMDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEQ2LxgqXF5SjdreSFtpkVAth04XT/1hEYdW5qzzKT15zedoHUwdKCbpDq7B 8AxbGQI6z1FSXtSpX3eWhGMExfOyotbXT18IlOfE3lPsuig/C3nT++aWI420q/yH 4ycGrpCsu+DYfhboQqrVrM77Hzg25eor7QIpxwtOW4MwF62iKlnrAZbNetmnZabS SvNDK2P3BmgWv110CMnWFgHTvSpwYK6CnMRNLL9H3BI2q96yt7ZSy7TFLUbqJLxg mbuYhsEhLy/EqArt6JVv+f0pLIHoJHvh7HCsD8vQiGutyOhk13uhp4QMQK+ybmvc auB7FpSdB7b1Tyqr408Bf2C09wIDAQABo4ICozCCAp8wHQYDVR0OBBYEFEeAhZf2 8zbIKYLSe6N9Zo3KG1COMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvNEQ5RTI5QTgz MDUzMTFFRjlDRkZGMjM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgACMBQwEgMHACQAgYAAIQMHAiQAgYAAIDANBgkqhkiG9w0BAQsFAAOC AQEAjnCuj+7k4r6MJEAH0QvCDnGk3P2DmBTUZLjShaj+4K4ghwyeaPmZbignBI40 JDrL/lgY/qhfzZ+eZLkFY0SUlSEHhHw6p/lygfwnemCDN41rQWtwMmzG3ogOYvd8 DL448PJpBNkyRJ0es+RLMqS63/Nt2FtxTz2BZC0Dl1zkb4JQE34rACiBEh56jC84 OYWp0x+7QJnhNcNiYMY+096qfu5iOmIVMaflCC0tbB944d+kb8ZD1/Kp4zpjs54h Vdl4hdAJMFJc2Ne5Brb8l66Gc0PcDpP0bzZWjSIdFYjQffSBqt7dYURf1DUP6yZa lziuBt1NLVyafNnBBnxK70m9Tw== -----END CERTIFICATE-----Generated at Wed Nov 5 13:08:36 2025 by rpki-client