$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/DB48AFAAA58A11EB846DBF30C4F9AE02.roa File: DB48AFAAA58A11EB846DBF30C4F9AE02.roa (raw, json) Hash identifier: TA62j59CwIdGZd9Vz1ykQQQOELPkh9Ii/9gwHXOig8c= Subject key identifier: 59:11:04:73:C7:92:BE:D3:A2:33:5B:8D:12:6B:8B:B6:62:CE:0E:8F Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EA9 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/DB48AFAAA58A11EB846DBF30C4F9AE02.roa Signing time: Thu 22 May 2025 20:06:56 +0000 ROA not before: Thu 22 May 2025 20:06:56 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142111 IP address blocks: 2406:840:f400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3753 (0xea9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:06:56 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f83e0-a550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f5:71:83:d9:8c:2f:b0:6b:a8:4c:2d:47:1b: 54:a9:ce:f6:56:f5:c8:a9:9c:b9:7c:ab:b4:da:23: 40:44:a7:59:bd:76:b1:59:7a:73:e3:1d:9d:a8:48: 3d:b3:b6:3d:02:de:e0:bb:51:d7:ae:72:05:22:60: b2:41:c9:97:f8:f6:2b:ac:f7:9f:c7:63:e9:4f:70: e2:69:b9:f7:5b:44:c8:53:05:66:fc:34:0f:8c:72: 8a:8e:8a:b0:55:dd:cb:93:9a:55:6b:56:22:4d:85: ea:dc:d5:70:a9:e7:60:11:59:0c:3c:e3:ae:99:ff: 14:c2:fd:b2:1a:d1:58:b0:5c:33:81:e1:5b:b2:1e: 1b:e2:d7:84:0d:78:8c:41:3e:93:53:11:d8:d9:fd: 7e:7e:a7:65:4f:a2:cd:bc:38:2e:23:04:91:5c:9a: 84:95:5c:86:d9:9b:0b:8b:bd:4a:55:36:ce:e7:c2: 30:45:ee:53:c1:2c:11:f7:b9:29:72:04:c8:6b:60: 51:5f:74:1d:0c:79:d1:da:6e:dc:c1:d7:59:fa:b9: 59:5f:19:2a:bd:11:f4:dd:94:7e:ba:61:63:f2:4c: 22:25:67:43:47:54:58:98:4f:9f:8f:bc:0c:c1:3d: 91:75:04:b5:8a:be:d9:dc:99:e1:5a:c2:de:8f:68: 1f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:11:04:73:C7:92:BE:D3:A2:33:5B:8D:12:6B:8B:B6:62:CE:0E:8F X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/DB48AFAAA58A11EB846DBF30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:f400::/44 Signature Algorithm: sha256WithRSAEncryption 53:c6:0c:91:01:d4:90:bc:aa:9c:9c:cb:b6:d7:4b:18:8c:99: 83:65:4f:7c:f6:8e:ce:37:0f:5f:31:60:05:9b:55:e8:06:71: fa:58:d2:a8:cf:36:85:d0:7c:a2:ed:a5:07:88:6b:17:f4:04: 71:6c:f4:25:cb:03:a1:a1:e4:93:2d:b1:ec:90:03:62:19:cc: 9d:0c:fa:6d:38:a4:b5:e5:14:79:1d:08:3e:26:4c:7f:c3:31: 04:f1:0a:d6:f7:b7:89:6e:a6:11:81:73:99:c8:62:e8:16:99: b0:c5:89:01:59:0c:ea:fb:76:17:61:2d:49:b1:e8:a1:32:d9: 02:7b:62:24:37:6c:3b:df:8f:63:f5:8c:f4:47:66:cd:3f:c2: 8a:2b:99:e9:2c:85:d4:07:84:e0:8e:5a:9d:2a:04:f5:d6:b6: 46:82:b4:6c:ae:09:54:69:6c:3c:e7:2b:b5:91:32:c4:88:0c: fb:59:41:e3:94:28:19:f2:7c:e9:d2:8d:ad:44:7b:97:9e:67: 38:f2:99:6f:8f:7e:c9:9c:a9:23:32:8a:6a:cd:60:e9:84:11: 28:31:5d:74:c9:a4:c3:63:57:62:50:34:82:ea:43:3c:0c:80: 2d:5f:da:63:07:09:dc:1b:11:c2:a2:fd:f9:9f:0a:c5:ac:2c: 00:98:a4:2a -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODNlMC1hNTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/Vxg9mML7BrqEwtRxtUqc72VvXIqZy5fKu02iNARKdZvXaxWXpz4x2dqEg9 s7Y9At7gu1HXrnIFImCyQcmX+PYrrPefx2PpT3Diabn3W0TIUwVm/DQPjHKKjoqw Vd3Lk5pVa1YiTYXq3NVwqedgEVkMPOOumf8Uwv2yGtFYsFwzgeFbsh4b4teEDXiM QT6TUxHY2f1+fqdlT6LNvDguIwSRXJqElVyG2ZsLi71KVTbO58IwRe5TwSwR97kp cgTIa2BRX3QdDHnR2m7cwddZ+rlZXxkqvRH03ZR+umFj8kwiJWdDR1RYmE+fj7wM wT2RdQS1ir7Z3JnhWsLej2gfnwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFkRBHPH kr7TojNbjRJri7Zizg6PMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvREI0OEFGQUFB NThBMTFFQjg0NkRCRjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA9AAwDQYJKoZIhvcNAQELBQADggEBAFPGDJEB1JC8 qpycy7bXSxiMmYNlT3z2js43D18xYAWbVegGcfpY0qjPNoXQfKLtpQeIaxf0BHFs 9CXLA6Gh5JMtseyQA2IZzJ0M+m04pLXlFHkdCD4mTH/DMQTxCtb3t4luphGBc5nI YugWmbDFiQFZDOr7dhdhLUmx6KEy2QJ7YiQ3bDvfj2P1jPRHZs0/woormekshdQH hOCOWp0qBPXWtkaCtGyuCVRpbDznK7WRMsSIDPtZQeOUKBnyfOnSja1Ee5eeZzjy mW+PfsmcqSMyimrNYOmEESgxXXTJpMNjV2JQNILqQzwMgC1f2mMHCdwbEcKi/fmf CsWsLACYpCo= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:06 2025 by rpki-client