$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5835972CD53911EEB6855F57C4F9AE02.roa File: 5835972CD53911EEB6855F57C4F9AE02.roa (raw, json) Hash identifier: kVCXn3YwRLzQ0QxWhmqB4kUXvr6q+7rToFl1PGyo4q0= Subject key identifier: 47:D5:BC:64:9D:8A:D7:3F:E2:67:DD:BC:DE:ED:A6:15:5E:AF:B7:F2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B8D5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5835972CD53911EEB6855F57C4F9AE02.roa Signing time: Thu 08 May 2025 16:26:08 +0000 ROA not before: Thu 08 May 2025 16:26:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150656 IP address blocks: 2001:df1:e540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47317 (0xb8d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:26:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb20-9c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2d:68:18:1b:2a:fe:38:c2:51:7d:2e:88:ff: f3:43:39:7e:97:bc:93:c9:0f:44:4a:04:bb:4b:76: 8f:0e:29:9c:3d:2d:9b:18:43:c7:34:a3:35:ae:54: 1c:ab:c9:0d:07:51:3c:08:36:9b:2b:11:54:28:c0: 81:a9:7e:89:57:bf:a8:16:9d:a2:29:e2:0d:06:0c: 0c:46:38:92:aa:24:c0:82:16:6f:3a:c2:fd:57:55: 4d:2b:61:8f:41:5b:9d:7d:e5:cc:97:da:bc:24:f8: 58:75:43:b0:cd:c3:a2:58:b5:35:25:31:e2:8a:0f: 4b:1e:cc:d2:0a:5d:cb:ea:aa:42:87:de:62:c7:64: 3a:bf:62:b8:aa:01:fd:a1:ba:4b:74:4b:bf:fd:02: ea:1a:fc:56:84:db:2b:1f:bb:40:fe:d5:d9:75:77: 40:1f:82:0b:3e:4b:28:77:bb:15:82:c8:6b:e6:7a: da:a4:94:82:ec:51:08:51:44:c7:74:b5:76:a0:47: 49:28:a6:1a:97:92:bf:cb:23:32:d6:23:5b:56:9d: e3:8f:44:91:03:80:7a:e6:e7:6a:48:10:2c:73:d5: 46:9d:c4:cb:d4:eb:c5:89:7b:ee:9f:cb:2a:1f:72: b1:b9:45:79:6e:aa:40:73:4f:08:1f:ad:13:a3:a3: db:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D5:BC:64:9D:8A:D7:3F:E2:67:DD:BC:DE:ED:A6:15:5E:AF:B7:F2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5835972CD53911EEB6855F57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:e540::/48 Signature Algorithm: sha256WithRSAEncryption 85:ad:81:6e:5f:55:5e:3d:06:f7:8a:03:43:de:1b:cf:08:79: 88:f6:cb:1a:4b:6e:ff:a1:31:9a:13:b9:87:ce:71:93:a9:7e: 84:ad:e8:3a:bc:f6:18:79:7c:2f:21:b7:20:65:d6:a5:8c:4f: 62:77:c6:4c:ac:13:cf:a6:6e:e9:45:48:a9:70:f1:ae:38:a7: 5f:23:7c:cd:39:38:cd:10:46:e1:cc:d5:1b:67:e7:52:3d:20: fb:8b:0a:03:20:8b:f3:72:72:f6:bb:79:c5:16:7f:15:c0:5f: a3:e9:f9:05:7c:47:f7:50:83:f0:a1:30:e8:bc:cc:07:0f:e5: d2:77:1e:ec:1f:9b:56:93:db:5c:5e:f8:ff:f0:95:42:f6:6f: 2e:1c:59:c2:37:90:3b:11:f4:e6:10:40:e6:bf:15:76:39:20: 46:2a:3c:c0:79:2b:3a:13:9a:9f:03:e2:02:79:7e:19:74:73: 22:39:09:bd:94:ee:2d:92:f0:f2:1a:a1:fc:3a:5b:25:82:bf: 59:0a:93:49:af:80:07:b4:27:eb:46:82:81:bf:48:05:dd:df: 79:33:6c:51:fe:dd:16:52:7f:d8:2c:10:58:31:0a:b3:90:df: 23:fc:ec:33:8d:e7:27:d2:61:72:f0:ab:34:36:50:30:ef:5b: 98:9b:33:2c -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDALjVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjYwOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiMjAtOWMwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKctaBgbKv44wlF9Loj/80M5fpe8k8kPREoEu0t2jw4pnD0tmxhDxzSjNa5U HKvJDQdRPAg2mysRVCjAgal+iVe/qBadoiniDQYMDEY4kqokwIIWbzrC/VdVTSth j0FbnX3lzJfavCT4WHVDsM3Doli1NSUx4ooPSx7M0gpdy+qqQofeYsdkOr9iuKoB /aG6S3RLv/0C6hr8VoTbKx+7QP7V2XV3QB+CCz5LKHe7FYLIa+Z62qSUguxRCFFE x3S1dqBHSSimGpeSv8sjMtYjW1ad449EkQOAeubnakgQLHPVRp3Ey9TrxYl77p/L Kh9ysblFeW6qQHNPCB+tE6Oj208CAwEAAaOCApgwggKUMB0GA1UdDgQWBBRH1bxk nYrXP+Jn3bze7aYVXq+38jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU4MzU5NzJD RDUzOTExRUVCNjg1NUY1N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN8eVAMA0GCSqGSIb3DQEBCwUAA4IBAQCFrYFuX1Ve PQb3igND3hvPCHmI9ssaS27/oTGaE7mHznGTqX6Ereg6vPYYeXwvIbcgZdaljE9i d8ZMrBPPpm7pRUipcPGuOKdfI3zNOTjNEEbhzNUbZ+dSPSD7iwoDIIvzcnL2u3nF Fn8VwF+j6fkFfEf3UIPwoTDovMwHD+XSdx7sH5tWk9tcXvj/8JVC9m8uHFnCN5A7 EfTmEEDmvxV2OSBGKjzAeSs6E5qfA+ICeX4ZdHMiOQm9lO4tkvDyGqH8Olslgr9Z CpNJr4AHtCfrRoKBv0gF3d95M2xR/t0WUn/YLBBYMQqzkN8j/Owzjecn0mFy8Ks0 NlAw71uYmzMs -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:03 2025 by rpki-client