$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/AC39D9F8615211E7BAD4DA61C4F9AE02.roa File: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (raw, json) Hash identifier: janciRMHjU97zB3lXitJwIl9Ika5JfzU+v8Mkow8p3Q= Subject key identifier: 62:F1:E5:37:26:C6:F0:43:8D:AE:88:2B:9C:63:65:B5:A7:D7:DC:47 Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Certificate serial: 1A84 Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/AC39D9F8615211E7BAD4DA61C4F9AE02.roa Signing time: Fri 04 Apr 2025 16:45:09 +0000 ROA not before: Fri 04 Apr 2025 16:45:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6939 IP address blocks: 2401:3740:374::/48 maxlen: 48 2401:3740:375::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6788 (0x1a84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Validity Not Before: Apr 4 16:45:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f00c95-7bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:10:a8:af:74:e9:52:8f:91:93:58:f5:5c: 5a:d7:90:7e:43:d2:56:cd:73:20:a3:e6:4b:91:fa: ca:fd:99:45:9e:75:77:31:ab:a5:1a:38:96:cc:c6: 5f:93:8d:56:5d:8b:80:82:d6:1f:a3:1a:f6:42:69: dc:8f:c8:83:da:e9:d8:36:d8:ed:b8:4b:5c:3e:43: f7:7c:b2:85:3b:85:88:6b:a6:4b:ce:9b:e7:e3:5d: e2:c8:81:5e:f2:e1:ae:bd:e8:25:aa:0a:9b:ec:9c: 0e:fd:0d:58:4c:c1:07:19:6a:b8:35:d0:3e:9c:c1: 4b:a9:8d:8b:f6:01:a8:5a:c3:5d:92:6b:35:bf:01: 25:5e:67:a4:c5:55:e2:12:30:d3:e7:91:1a:52:c6: 5f:ad:83:73:97:d4:4f:27:27:2d:c8:9e:86:6b:47: b2:4f:96:e7:9d:c1:ea:77:e8:3a:6d:a2:17:da:70: 74:29:19:91:8e:cb:4f:7d:10:6f:e3:9d:9f:e7:43: b7:c0:0d:b6:e7:d0:4b:59:97:7b:f6:73:03:ee:25: 4a:08:f0:15:36:7c:fb:0d:d7:ab:f1:ae:17:cc:0f: 49:60:9f:ee:33:0b:7b:b8:02:ca:83:2d:8a:51:f2: 79:a7:7a:23:e6:8b:38:6e:f5:43:7e:f5:4e:7f:44: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F1:E5:37:26:C6:F0:43:8D:AE:88:2B:9C:63:65:B5:A7:D7:DC:47 X509v3 Authority Key Identifier: keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/AC39D9F8615211E7BAD4DA61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:3740:374::/47 Signature Algorithm: sha256WithRSAEncryption 17:30:37:f6:a5:a1:67:2e:fc:ef:b4:a7:e2:9f:f6:28:24:52: 6b:b9:ea:37:17:02:c9:fc:14:7f:7a:dd:f8:55:79:89:5d:f3: fb:3c:f6:1d:44:dd:09:c7:8a:bf:25:e2:f1:fb:1a:2f:13:52: 3e:40:5a:fd:17:80:15:2f:23:9a:d9:ae:56:98:9e:43:61:07: bf:e6:7c:89:0b:2c:c1:f1:21:9a:49:03:e3:ba:0b:92:b2:7b: 76:ce:3e:e6:00:ae:68:6f:bb:ad:f5:6a:8a:90:7f:0e:18:2d: 71:de:0f:a0:b3:88:fe:6b:38:fb:d0:b7:f2:e2:03:37:fc:a0: dd:c0:e7:9f:e9:23:4b:0d:06:ea:f8:76:58:e7:f6:92:81:fc: 81:33:ca:1f:b0:6a:05:62:15:ee:a3:e5:f5:e3:02:12:38:19: 81:9b:de:46:20:3b:f3:18:6c:6d:55:43:04:ee:4a:66:fc:43: ab:c0:18:8d:5a:f0:2a:e5:9b:4d:65:14:b5:20:63:dc:8a:a9: 31:82:c5:99:eb:95:b1:df:9c:b6:a3:a0:b8:7c:f5:19:e1:a2: 8a:10:02:09:13:f7:10:3e:95:7c:f4:82:3f:f6:09:c6:82:ae: 83:a6:5c:7a:ff:a5:19:e2:76:e1:2a:33:5d:68:b0:02:f9:f6: aa:d5:0b:8a -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICGoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY2QTgxMTAvBgNVBAUTKEY3RDc0QzdGQjhCMEJBRUZDMzYzNUNENEUzNTA0OEFG ODhFMzlFRUYwHhcNMjUwNDA0MTY0NTA5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwMGM5NS03YmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXoQqK906VKPkZNY9Vxa15B+Q9JWzXMgo+ZLkfrK/ZlFnnV3MaulGjiWzMZf k41WXYuAgtYfoxr2Qmncj8iD2unYNtjtuEtcPkP3fLKFO4WIa6ZLzpvn413iyIFe 8uGuveglqgqb7JwO/Q1YTMEHGWq4NdA+nMFLqY2L9gGoWsNdkms1vwElXmekxVXi EjDT55EaUsZfrYNzl9RPJyctyJ6Ga0eyT5bnncHqd+g6baIX2nB0KRmRjstPfRBv 452f50O3wA2259BLWZd79nMD7iVKCPAVNnz7Dder8a4XzA9JYJ/uMwt7uALKgy2K UfJ5p3oj5os4bvVDfvVOf0QDQQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGLx5Tcm xvBDja6IK5xjZbWn19xHMB8GA1UdIwQYMBaAFPfXTH+4sLrvw2Nc1ONQSK+I457v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjZBOC9GM0JENEMzNjQ5 Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1X0RZMXpVNDFCSXI0ampu dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5ZE1mN2l3dXVfRFkxelU0MUJJcjRqam51OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUY2QTgvRjNCRDRDMzY0OUNCMTFFN0E0QTg3QzdCQzRGOUFFMDIvQUMzOUQ5Rjg2 MTUyMTFFN0JBRDREQTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkATdAA3QwDQYJKoZIhvcNAQELBQADggEBABcwN/aloWcu /O+0p+Kf9igkUmu56jcXAsn8FH963fhVeYld8/s89h1E3QnHir8l4vH7Gi8TUj5A Wv0XgBUvI5rZrlaYnkNhB7/mfIkLLMHxIZpJA+O6C5Kye3bOPuYArmhvu631aoqQ fw4YLXHeD6CziP5rOPvQt/LiAzf8oN3A55/pI0sNBur4dljn9pKB/IEzyh+wagVi Fe6j5fXjAhI4GYGb3kYgO/MYbG1VQwTuSmb8Q6vAGI1a8Crlm01lFLUgY9yKqTGC xZnrlbHfnLajoLh89RnhoooQAgkT9xA+lXz0gj/2CcaCroOmXHr/pRniduEqM11o sAL59qrVC4o= -----END CERTIFICATE-----Generated at Tue Nov 4 23:51:29 2025 by rpki-client