$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40817904944411F0B15F3C48C4F9AE02.roa File: 40817904944411F0B15F3C48C4F9AE02.roa (raw, json) Hash identifier: eYPOfruk7se08rTtpVxDRaiigKEzYMSyM3gQER04ys8= Subject key identifier: 33:C9:29:80:4C:22:9C:FE:93:AD:47:EC:21:AE:BC:5A:9B:96:7E:23 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C51F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40817904944411F0B15F3C48C4F9AE02.roa Signing time: Thu 18 Sep 2025 04:02:11 +0000 ROA not before: Thu 18 Sep 2025 04:02:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133264 IP address blocks: 2001:df6:ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50463 (0xc51f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 18 04:02:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68cb8443-ce43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:79:1a:5f:02:40:15:53:02:a8:86:6a:15: ae:7b:82:b6:59:1a:6d:2a:ef:a5:3f:52:8d:e0:dc: c9:51:e1:de:a0:58:35:04:30:0c:35:b8:e4:eb:e2: 21:7d:9f:b5:54:64:32:e0:3c:73:94:89:f9:13:90: 54:62:90:f6:89:8a:59:43:42:c9:29:82:cc:7d:f1: f8:0f:1c:bf:39:11:6d:1e:fe:58:02:4b:8e:29:44: 48:a7:72:a6:e9:96:0f:03:56:7d:a5:30:7a:b0:da: a2:8d:72:f2:1e:35:f2:88:74:97:dd:96:39:19:49: e2:e1:d3:c8:b2:59:d6:3a:4b:13:dc:31:1e:18:04: af:c3:71:36:ae:bb:a6:08:9c:2d:85:63:bf:c9:4d: 14:9d:2c:64:44:55:ca:00:3f:09:e2:cc:9e:d5:fe: 99:e0:7e:33:90:e6:c2:03:84:a4:5c:2d:ac:2d:32: 05:2d:7b:3a:ee:36:62:3d:42:43:97:e7:65:42:af: 7f:d6:ed:4a:73:10:3f:40:b5:3c:5a:a2:6a:84:99: 6b:dd:03:1a:bd:67:8b:75:e1:95:8e:41:c4:a8:5a: 5e:5d:81:41:91:2b:7f:35:da:4d:da:05:d5:a0:f4: 74:1c:d5:09:a6:aa:ff:18:2a:eb:29:d3:60:b0:55: 71:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C9:29:80:4C:22:9C:FE:93:AD:47:EC:21:AE:BC:5A:9B:96:7E:23 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40817904944411F0B15F3C48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:ac0::/48 Signature Algorithm: sha256WithRSAEncryption 2e:a7:84:bf:30:40:12:51:2b:f1:a4:c3:9a:1e:f3:14:ef:50: ea:08:e3:d6:5a:bb:f1:1d:b3:da:1b:cc:fd:3c:ec:bb:f4:0b: b0:3f:ef:ae:d9:34:1d:78:7d:ec:f7:31:a3:ac:c8:1b:c5:20: 9a:17:fa:07:f6:85:1c:ae:8f:0a:2a:f0:db:53:cb:2e:03:ed: d8:b2:f9:ae:18:f2:24:da:22:c1:70:0c:8a:9a:08:7d:a7:4c: d1:f0:2e:c8:e0:36:8c:ee:7f:15:64:2f:80:14:c5:10:7f:97: ed:67:5f:ff:32:48:9f:1f:01:cb:86:03:6f:a3:df:3d:b8:11: 80:f9:79:dd:6f:b3:2e:e8:da:a4:7f:96:cf:37:ff:0a:52:6f: e2:14:ef:7d:bf:f7:f1:a7:62:89:f2:b7:38:50:61:e8:83:fa: 5c:f9:8c:f4:45:67:fb:66:f6:74:6a:7f:fc:c9:32:c9:2c:7f: a3:03:e3:7b:de:43:54:67:fc:a6:75:24:2f:dd:77:28:ce:24: 65:80:2f:5d:5c:28:53:c6:62:51:18:ba:4c:30:1a:b8:d7:22: dc:a5:be:bc:08:3c:50:40:02:da:5f:ec:6a:45:17:66:f4:f0: be:96:90:36:07:fd:3b:4b:eb:cb:3b:55:75:e5:18:f9:b8:26: 43:33:7f:5b -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAMUfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDkxODA0MDIxMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhjYjg0NDMtY2U0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoVeRpfAkAVUwKohmoVrnuCtlkabSrvpT9SjeDcyVHh3qBYNQQwDDW45Ovi IX2ftVRkMuA8c5SJ+ROQVGKQ9omKWUNCySmCzH3x+A8cvzkRbR7+WAJLjilESKdy pumWDwNWfaUwerDaoo1y8h418oh0l92WORlJ4uHTyLJZ1jpLE9wxHhgEr8NxNq67 pgicLYVjv8lNFJ0sZERVygA/CeLMntX+meB+M5DmwgOEpFwtrC0yBS17Ou42Yj1C Q5fnZUKvf9btSnMQP0C1PFqiaoSZa90DGr1ni3XhlY5BxKhaXl2BQZErfzXaTdoF 1aD0dBzVCaaq/xgq6ynTYLBVcfECAwEAAaOCApgwggKUMB0GA1UdDgQWBBQzySmA TCKc/pOtR+whrrxam5Z+IzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQwODE3OTA0 OTQ0NDExRjBCMTVGM0M0OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN9grAMA0GCSqGSIb3DQEBCwUAA4IBAQAup4S/MEAS USvxpMOaHvMU71DqCOPWWrvxHbPaG8z9POy79AuwP++u2TQdeH3s9zGjrMgbxSCa F/oH9oUcro8KKvDbU8suA+3YsvmuGPIk2iLBcAyKmgh9p0zR8C7I4DaM7n8VZC+A FMUQf5ftZ1//MkifHwHLhgNvo989uBGA+Xndb7Mu6Nqkf5bPN/8KUm/iFO99v/fx p2KJ8rc4UGHog/pc+Yz0RWf7ZvZ0an/8yTLJLH+jA+N73kNUZ/ymdSQv3XcoziRl gC9dXChTxmJRGLpMMBq41yLcpb68CDxQQALaX+xqRRdm9PC+lpA2B/07S+vLO1V1 5Rj5uCZDM39b -----END CERTIFICATE-----Generated at Wed Nov 5 16:06:14 2025 by rpki-client