$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6105478544311EDAA0C947CC4F9AE02.roa File: A6105478544311EDAA0C947CC4F9AE02.roa (raw, json) Hash identifier: hU4Lp6VLnaAlQiZuu4FcMPkeFTtTADstbvxSRU0sWfc= Subject key identifier: C2:C6:67:9C:0C:FD:6A:CF:5E:A9:9E:43:0E:20:BB:C3:E0:16:08:87 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B518 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6105478544311EDAA0C947CC4F9AE02.roa Signing time: Thu 08 May 2025 16:11:40 +0000 ROA not before: Thu 08 May 2025 16:11:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138299 IP address blocks: 2001:df1:5ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46360 (0xb518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:11:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd7bb-79f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b2:f8:93:77:aa:f7:0f:9b:9c:fc:b5:58:4a: 8f:c7:b1:91:00:0e:03:52:2c:e4:2c:00:df:60:b1: 35:0f:d2:7d:86:dc:8b:82:6e:45:c8:28:b0:c1:5f: f7:18:bc:67:e2:9d:18:db:4f:ff:c0:89:b9:f2:9b: 70:3a:5b:45:88:c7:6c:a0:9a:44:9c:d8:e2:3f:e1: f1:69:41:f8:b0:e7:da:bb:55:40:1b:36:13:6e:6c: 6f:41:70:54:f5:7b:95:01:2c:fb:60:e0:cb:a1:da: d6:fd:34:97:94:ca:cf:90:60:f2:19:a1:31:d9:c0: e5:1f:41:5a:dd:37:97:70:43:66:9b:f0:8c:60:b1: 0c:2c:9b:1f:ce:ae:bf:4e:a7:3a:80:61:67:90:24: 2e:e1:18:a1:9b:c3:db:5d:09:92:da:3f:61:79:c5: 8c:e5:99:63:0f:b6:a6:12:a8:06:1a:a8:a4:a0:40: 6e:ec:80:87:4f:ce:07:59:b7:65:5b:62:84:74:2d: 6f:9e:5b:b6:b9:b1:2f:a0:9b:0e:3f:fe:e5:59:18: a0:dc:da:cd:ba:d0:b0:ad:6c:ff:3d:a5:86:a5:48: f8:82:a0:d7:6f:76:c1:e3:84:34:e9:ef:01:e1:0f: 20:71:62:78:2d:76:02:f6:28:41:44:08:8d:8d:46: 19:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C6:67:9C:0C:FD:6A:CF:5E:A9:9E:43:0E:20:BB:C3:E0:16:08:87 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6105478544311EDAA0C947CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:5ec0::/48 Signature Algorithm: sha256WithRSAEncryption 92:51:a7:51:c0:22:2c:10:97:c2:e6:82:65:8c:f8:f0:b1:a4: 16:9d:34:ef:ab:df:4d:0c:12:5c:78:7a:a2:69:10:7c:c5:c2: d7:2b:11:82:f5:6b:5a:bd:0a:3e:b0:ea:12:ab:1f:67:05:c1: 7b:89:30:65:c8:d8:0b:c5:c7:44:b5:11:6b:29:42:85:6a:74: 8a:3b:4c:b6:30:9a:b0:00:cd:18:e4:98:85:cb:8e:fa:1e:b6: 57:a0:62:25:93:99:00:e3:3b:b1:20:31:ab:95:1a:98:ce:dc: 18:0a:01:fa:9b:51:6f:a4:ae:52:6b:7c:fc:d0:31:c2:03:56: a6:51:a8:d3:f9:5c:d9:48:1d:89:65:40:74:ab:c1:33:e1:91: 8d:55:0b:b7:dc:53:8c:48:ea:a7:41:5c:30:47:cc:97:cd:99: 3a:ed:e8:6d:fe:1e:63:38:dd:55:9e:5a:82:b5:ec:19:b9:87: 75:b3:f5:42:99:c7:c9:50:83:58:aa:70:e0:97:24:66:f4:a1: ab:55:60:a0:ad:02:ea:dd:86:38:b6:c0:f2:d4:2a:80:0d:5c: c5:98:00:f5:8c:6f:81:06:3b:53:04:aa:ff:7a:07:e0:10:47: 49:0e:ec:ef:bc:ed:cb:f4:9e:72:bf:79:ed:85:3b:37:c9:0b: 87:e2:1e:88 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDALUYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTE0MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3YmItNzlmMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJSy+JN3qvcPm5z8tVhKj8exkQAOA1Is5CwA32CxNQ/SfYbci4JuRcgosMFf 9xi8Z+KdGNtP/8CJufKbcDpbRYjHbKCaRJzY4j/h8WlB+LDn2rtVQBs2E25sb0Fw VPV7lQEs+2Dgy6Ha1v00l5TKz5Bg8hmhMdnA5R9BWt03l3BDZpvwjGCxDCybH86u v06nOoBhZ5AkLuEYoZvD210Jkto/YXnFjOWZYw+2phKoBhqopKBAbuyAh0/OB1m3 ZVtihHQtb55btrmxL6CbDj/+5VkYoNzazbrQsK1s/z2lhqVI+IKg1292weOENOnv AeEPIHFieC12AvYoQUQIjY1GGQMCAwEAAaOCApgwggKUMB0GA1UdDgQWBBTCxmec DP1qz16pnkMOILvD4BYIhzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E2MTA1NDc4 NTQ0MzExRURBQTBDOTQ3Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN8V7AMA0GCSqGSIb3DQEBCwUAA4IBAQCSUadRwCIs EJfC5oJljPjwsaQWnTTvq99NDBJceHqiaRB8xcLXKxGC9WtavQo+sOoSqx9nBcF7 iTBlyNgLxcdEtRFrKUKFanSKO0y2MJqwAM0Y5JiFy476HrZXoGIlk5kA4zuxIDGr lRqYztwYCgH6m1FvpK5Sa3z80DHCA1amUajT+VzZSB2JZUB0q8Ez4ZGNVQu33FOM SOqnQVwwR8yXzZk67eht/h5jON1VnlqCtewZuYd1s/VCmcfJUINYqnDglyRm9KGr VWCgrQLq3YY4tsDy1CqADVzFmAD1jG+BBjtTBKr/egfgEEdJDuzvvO3L9J5yv3nt hTs3yQuH4h6I -----END CERTIFICATE-----Generated at Wed Nov 5 17:55:57 2025 by rpki-client