$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/BAA1B454654411EFACBF7956C4F9AE02.roa File: BAA1B454654411EFACBF7956C4F9AE02.roa (raw, json) Hash identifier: XSuhAhi3kRB8kUY+l+Kw6bn9CYFf3Y2Di14tTGA1/Oo= Subject key identifier: ED:3F:02:72:24:39:0D:24:2A:8D:F2:DA:CF:AD:2E:AE:C2:39:E6:F7 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 0551 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/BAA1B454654411EFACBF7956C4F9AE02.roa Signing time: Wed 03 Sep 2025 00:15:38 +0000 ROA not before: Wed 03 Sep 2025 00:15:38 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 8888 IP address blocks: 2403:fa40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Sep 3 00:15:38 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b788aa-3c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:75:41:5f:a3:8e:f1:c6:00:da:e2:e8:de: 2b:61:5c:01:a1:18:d5:51:24:db:ce:07:99:5f:14: 6f:1f:e9:ed:ca:79:80:57:97:ab:7d:40:91:71:29: d5:fa:63:b5:8b:17:12:f3:01:01:9b:3c:f0:17:80: 4d:3b:76:7a:a0:85:0e:2d:18:0c:91:99:9a:18:77: 6d:d3:4d:7d:aa:ac:97:d2:86:e0:79:68:43:63:1a: 27:c5:fe:bd:ff:cd:cc:73:22:1a:cd:4f:9d:9b:6b: 54:60:97:57:32:c9:7f:63:f6:96:51:ea:18:36:6f: 02:47:15:b6:55:6d:41:78:e5:fe:e9:1e:83:53:c0: e7:6f:ad:6d:00:63:f5:87:d7:2c:16:26:ba:a8:39: 6d:a2:e8:82:c6:b6:b0:1c:e6:40:80:fa:2b:56:27: 06:53:15:ac:a5:5e:23:d9:40:bd:2e:42:fa:ec:34: 4b:1f:89:2a:be:a3:e4:05:db:42:34:90:bd:f6:d3: 31:7c:d9:d8:64:5d:00:12:cb:da:d0:11:87:74:fb: d3:eb:d8:31:84:64:58:a4:69:0f:bf:b4:fb:36:b2: 0d:eb:7e:42:9b:a0:e6:fc:69:87:e3:ec:c4:78:b8: e2:04:e8:2a:ed:eb:54:6c:d9:86:0b:ad:63:04:c8: a7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3F:02:72:24:39:0D:24:2A:8D:F2:DA:CF:AD:2E:AE:C2:39:E6:F7 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/BAA1B454654411EFACBF7956C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:fa40:2::/48 Signature Algorithm: sha256WithRSAEncryption 11:33:14:bd:6a:db:7a:18:c9:e2:1a:b0:2d:6c:7d:3f:6a:ec: ec:a8:eb:30:a7:87:f9:a6:21:7c:5f:2c:72:45:8a:0d:ee:e3: e8:fb:da:fe:cd:3a:c5:07:2a:fb:26:e3:ec:7a:44:ae:50:01: 73:c6:8a:8f:f8:68:23:ec:b5:3f:9c:85:dc:87:ee:85:d8:df: 77:52:95:bd:9c:19:89:47:d7:90:88:13:35:a9:da:f1:cf:9e: 45:33:27:3c:ea:15:cc:89:23:99:f2:a9:f7:b1:ce:1b:46:b6: d5:35:6c:76:30:35:d3:91:bf:f4:9a:2e:e8:60:21:8b:f1:6b: 2b:bf:3e:32:f2:4b:5d:3a:d4:ff:7c:88:2e:19:4c:48:c8:01: b5:47:b8:3d:57:c5:f7:ee:79:93:62:87:51:fc:34:66:dd:26: dc:6f:51:36:e6:e5:2a:d9:3f:89:41:65:7d:39:0e:b0:3a:01: 5d:f0:f7:5d:e5:51:45:41:16:0a:fa:a6:9d:a9:9f:53:4e:25: 04:f4:e5:84:4c:ac:14:df:96:91:c1:91:06:10:9d:4d:88:a1: e9:9a:db:fc:9b:c2:27:dc:5c:cc:65:bd:cc:3a:b8:49:cd:a5: 24:63:4a:21:62:ac:60:7a:03:34:31:1b:4a:e0:4d:fc:b8:40: e4:74:14:c4 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUwOTAzMDAxNTM4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3ODhhYS0zYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Q11QV+jjvHGANri6N4rYVwBoRjVUSTbzgeZXxRvH+ntynmAV5erfUCRcSnV +mO1ixcS8wEBmzzwF4BNO3Z6oIUOLRgMkZmaGHdt0019qqyX0obgeWhDYxonxf69 /83McyIazU+dm2tUYJdXMsl/Y/aWUeoYNm8CRxW2VW1BeOX+6R6DU8Dnb61tAGP1 h9csFia6qDltouiCxrawHOZAgPorVicGUxWspV4j2UC9LkL67DRLH4kqvqPkBdtC NJC99tMxfNnYZF0AEsva0BGHdPvT69gxhGRYpGkPv7T7NrIN635Cm6Dm/GmH4+zE eLjiBOgq7etUbNmGC61jBMinPwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFO0/AnIk OQ0kKo3y2s+tLq7COeb3MB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvRUIzMTJGMDIxRUFBMTFFQ0I3NTZCRjMwQzRGOUFFMDIvQkFBMUI0NTQ2 NTQ0MTFFRkFDQkY3OTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkA/pAAAIwDQYJKoZIhvcNAQELBQADggEBABEzFL1q23oY yeIasC1sfT9q7Oyo6zCnh/mmIXxfLHJFig3u4+j72v7NOsUHKvsm4+x6RK5QAXPG io/4aCPstT+chdyH7oXY33dSlb2cGYlH15CIEzWp2vHPnkUzJzzqFcyJI5nyqfex zhtGttU1bHYwNdORv/SaLuhgIYvxayu/PjLyS1061P98iC4ZTEjIAbVHuD1Xxffu eZNih1H8NGbdJtxvUTbm5SrZP4lBZX05DrA6AV3w913lUUVBFgr6pp2pn1NOJQT0 5YRMrBTflpHBkQYQnU2Ioema2/ybwifcXMxlvcw6uEnNpSRjSiFirGB6AzQxG0rg Tfy4QOR0FMQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:31:13 2025 by rpki-client