$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3469BD8A3D4A11F08AE43354C4F9AE02.roa File: 3469BD8A3D4A11F08AE43354C4F9AE02.roa (raw, json) Hash identifier: 9GwqXa81VT6E0hajsLBhQiGT+UVLYqKcU0jhY+JV31s= Subject key identifier: FC:E9:61:EE:39:E4:2F:CA:ED:9B:A6:DA:B8:0D:05:BE:C1:90:4B:91 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BC93 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3469BD8A3D4A11F08AE43354C4F9AE02.roa Signing time: Fri 30 May 2025 11:35:36 +0000 ROA not before: Fri 30 May 2025 11:35:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136677 IP address blocks: 2001:df4:a840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48275 (0xbc93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 11:35:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68399808-47de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:e6:bb:f9:da:21:04:a6:f1:94:3f:8b:39: 66:0b:eb:7a:84:77:58:c8:50:af:37:19:71:18:2b: dd:b1:68:50:ae:7c:13:0d:4e:2f:1c:fa:73:5e:33: f5:a6:d0:36:6d:47:3e:bb:90:b7:f8:0d:0b:2c:a3: bb:9e:c8:a0:b1:25:77:f1:e5:a3:ec:96:f8:32:a3: 9d:58:ff:1a:9f:88:ac:6c:d9:6a:5f:4c:10:08:12: 69:89:24:18:e6:03:61:25:dd:6c:a7:e1:cf:71:b4: 5f:92:70:e1:4f:4e:39:16:09:7a:39:ad:1e:58:88: f8:ee:7a:54:01:9a:1b:f8:94:08:7a:18:de:ee:ce: 85:eb:47:f4:d8:7e:01:b1:79:e4:b2:70:f8:64:2c: cc:a0:ca:17:c0:b0:6d:d3:56:0e:ed:e6:67:67:e6: 5d:9f:4f:67:7d:67:a7:73:a2:50:70:51:bc:55:a7: 15:e6:a5:db:f9:a7:ef:97:24:58:8f:49:77:4a:50: 36:0b:68:80:39:89:f0:0b:e1:71:f3:7b:8a:fc:e5: 72:fe:f5:72:59:d6:68:da:be:d4:fd:5f:72:ad:8b: 7c:e9:b9:b8:11:28:bb:3c:4d:45:eb:42:07:0f:e0: 18:96:0e:59:8d:77:10:f2:44:98:5a:22:36:c5:c7: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E9:61:EE:39:E4:2F:CA:ED:9B:A6:DA:B8:0D:05:BE:C1:90:4B:91 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3469BD8A3D4A11F08AE43354C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:a840::/48 Signature Algorithm: sha256WithRSAEncryption 76:f1:13:63:a4:95:ce:53:ee:5c:15:d9:87:09:12:9c:a9:bd: be:18:39:d4:10:07:62:96:0b:66:dd:44:e4:96:2a:34:72:39: 03:e3:5c:ff:45:83:51:87:dc:e7:85:b1:eb:db:82:14:39:4f: d8:46:8b:8e:99:34:f5:38:e5:9f:c9:21:c9:e8:cc:da:f6:cf: 87:1a:9e:5b:0d:d4:d3:e8:8f:9a:dc:1b:1e:67:a7:05:d1:35: 0d:3a:93:69:63:59:69:93:ff:3c:bc:77:24:17:f9:d4:f0:84: 16:2e:1b:a0:09:33:76:99:6e:a2:0b:25:53:d1:4d:70:62:21: 27:ed:f2:fb:e8:98:c0:b5:0a:09:54:d2:40:53:97:ca:27:61: f5:0c:9e:f7:62:ca:22:f3:0f:43:df:94:66:b8:c6:89:f1:52: da:a8:3a:81:9f:bd:80:b1:75:86:d0:b5:37:50:c3:d8:60:97: 9c:8c:f9:73:b3:76:ad:7b:47:01:b4:6c:39:4c:90:3e:73:de: 88:63:a0:e7:ce:be:23:29:4e:51:40:45:ab:0b:4a:bb:89:5d: 66:75:0a:3a:f7:44:c4:44:a0:b2:01:c1:cf:a8:18:04:3d:a3: 84:62:30:88:04:ef:60:ef:37:09:d1:01:76:3a:ea:57:15:10: 65:73:81:31 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDALyTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUzMDExMzUzNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgzOTk4MDgtNDdkZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwg5rv52iEEpvGUP4s5ZgvreoR3WMhQrzcZcRgr3bFoUK58Ew1OLxz6c14z 9abQNm1HPruQt/gNCyyju57IoLEld/Hlo+yW+DKjnVj/Gp+IrGzZal9MEAgSaYkk GOYDYSXdbKfhz3G0X5Jw4U9OORYJejmtHliI+O56VAGaG/iUCHoY3u7OhetH9Nh+ AbF55LJw+GQszKDKF8CwbdNWDu3mZ2fmXZ9PZ31np3OiUHBRvFWnFeal2/mn75ck WI9Jd0pQNgtogDmJ8AvhcfN7ivzlcv71clnWaNq+1P1fcq2LfOm5uBEouzxNRetC Bw/gGJYOWY13EPJEmFoiNsXHeisCAwEAAaOCApgwggKUMB0GA1UdDgQWBBT86WHu OeQvyu2bptq4DQW+wZBLkTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM0NjlCRDhB M0Q0QTExRjA4QUU0MzM1NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN9KhAMA0GCSqGSIb3DQEBCwUAA4IBAQB28RNjpJXO U+5cFdmHCRKcqb2+GDnUEAdilgtm3UTklio0cjkD41z/RYNRh9znhbHr24IUOU/Y RouOmTT1OOWfySHJ6Mza9s+HGp5bDdTT6I+a3BseZ6cF0TUNOpNpY1lpk/88vHck F/nU8IQWLhugCTN2mW6iCyVT0U1wYiEn7fL76JjAtQoJVNJAU5fKJ2H1DJ73Ysoi 8w9D35RmuMaJ8VLaqDqBn72AsXWG0LU3UMPYYJecjPlzs3ate0cBtGw5TJA+c96I Y6Dnzr4jKU5RQEWrC0q7iV1mdQo690TERKCyAcHPqBgEPaOEYjCIBO9g7zcJ0QF2 OupXFRBlc4Ex -----END CERTIFICATE-----Generated at Thu Nov 6 01:12:42 2025 by rpki-client