$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33362d3336203d3e20313437303230.roa File: 323430313a323036303a323030303a3a2f33362d3336203d3e20313437303230.roa (raw, json) Hash identifier: 8II/IFTY+LP0pWi3oLfnXuFrdxfoiIGgtzec2awSL/A= Subject key identifier: 7C:AB:A7:10:DD:68:58:3F:20:18:D9:B0:1C:2E:16:17:33:A8:4D:8E Certificate issuer: /CN=A9150E4D0000/serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E Certificate serial: 6CCD95F9AAB34AABCDF3656C167B6168BB9C843C Authority key identifier: 11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33362d3336203d3e20313437303230.roa Signing time: Wed 04 Jun 2025 05:28:28 +0000 ROA not before: Wed 04 Jun 2025 05:23:28 +0000 ROA not after: Wed 03 Jun 2026 05:28:28 +0000 asID: 147020 IP address blocks: 2401:2060:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 07:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:cd:95:f9:aa:b3:4a:ab:cd:f3:65:6c:16:7b:61:68:bb:9c:84:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E4D0000, serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E Validity Not Before: Jun 4 05:23:28 2025 GMT Not After : Jun 3 05:28:28 2026 GMT Subject: CN=7CABA710DD68583F2018D9B01C2E161733A84D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9f:3a:46:c7:98:fc:c9:77:82:c5:86:d1:10: 8d:20:83:07:af:dd:bc:30:e2:4a:95:56:fa:b6:c1: 91:28:3b:18:04:a8:6b:54:b1:e8:75:4f:4e:ab:d6: 15:4c:2d:75:fd:3c:1a:0f:6d:e8:86:76:d0:e5:56: 8e:fe:37:11:ad:82:67:82:81:e2:8a:8f:75:91:34: 6f:30:fe:66:f4:8f:eb:f1:6c:a3:67:4c:23:1f:59: ce:5a:0c:87:c1:e5:88:67:34:a1:3f:be:8f:f4:a8: ab:56:9f:d1:5a:63:50:21:a0:1b:28:0f:4f:d9:d3: 53:d6:03:9a:e8:64:72:e6:b0:fa:75:cb:0f:b7:a5: d9:ab:27:47:2b:e8:31:b6:33:65:61:65:05:b6:56: 95:9b:ec:a5:28:f1:78:b6:6b:6c:8c:b1:e7:aa:76: 86:90:a3:9d:91:69:6b:be:40:de:ea:87:2a:2b:15: 39:d0:04:1f:a7:7c:36:cd:b9:64:6f:00:66:d0:48: ed:21:83:bb:d4:fc:e2:8b:c2:54:49:d5:e7:29:90: a0:37:ef:ce:6a:26:1d:5f:0d:ea:f1:c2:89:f1:a2: bc:ad:3b:2c:d5:11:b8:99:e6:ac:85:73:d7:26:1c: ec:e3:30:11:ab:27:88:6d:fd:8b:a7:4b:4a:e4:17: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AB:A7:10:DD:68:58:3F:20:18:D9:B0:1C:2E:16:17:33:A8:4D:8E X509v3 Authority Key Identifier: keyid:11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33362d3336203d3e20313437303230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:2000::/36 Signature Algorithm: sha256WithRSAEncryption 40:f9:27:a7:03:bc:8d:cf:b6:d5:3f:85:8e:c1:88:00:5b:f7: 8a:36:99:36:6f:b5:9a:f4:06:7f:e7:7f:1e:b9:92:c7:b6:27: 58:78:b5:a8:97:cb:85:0c:ee:64:3f:3c:9e:52:8e:ac:0f:66: 93:4d:e7:f2:ab:1a:18:48:d0:44:f1:ea:8d:c7:b0:47:a6:4c: dc:b7:4c:de:35:d8:2e:07:bb:5e:39:da:fa:6a:de:7d:3a:25: 91:94:08:ba:7c:3f:a6:2e:8a:97:ce:00:ec:5d:c7:c9:43:37: 00:5c:97:f7:a5:00:be:68:bd:90:36:2c:24:96:d9:20:c3:02: 98:63:0d:16:6c:b1:53:11:c9:9d:08:69:31:89:e2:18:d6:3e: 1f:14:d3:e7:6e:a1:81:98:dc:ee:7c:8b:1d:15:ba:7d:b1:2e: f2:f1:74:f4:fd:cc:7e:8d:36:b8:ef:d1:5d:10:df:e0:86:3d: c6:e6:d3:29:f3:83:76:e0:20:72:6f:e8:f9:46:fe:77:b7:d2: 7f:b0:d7:85:e3:39:1f:71:c1:75:5c:f7:9f:ea:aa:83:71:c4: 35:2e:18:95:15:dd:d1:11:19:9d:81:71:4b:5f:56:fe:44:f4: b9:f5:89:ed:0b:51:18:8a:49:db:33:22:da:2e:8f:8b:a8:9e: 83:cc:7a:5b -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUbM2V+aqzSqvN82VsFnthaLuchDwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEygxMUY5OEYzRjhE RDRGNTVDQzdGRkI3QTRCQUNDNjU2RTBEMTkzRDFFMB4XDTI1MDYwNDA1MjMyOFoX DTI2MDYwMzA1MjgyOFowMzExMC8GA1UEAxMoN0NBQkE3MTBERDY4NTgzRjIwMThE OUIwMUMyRTE2MTczM0E4NEQ4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGfOkbHmPzJd4LFhtEQjSCDB6/dvDDiSpVW+rbBkSg7GASoa1Sx6HVPTqvW FUwtdf08Gg9t6IZ20OVWjv43Ea2CZ4KB4oqPdZE0bzD+ZvSP6/Fso2dMIx9ZzloM h8HliGc0oT++j/Soq1af0VpjUCGgGygPT9nTU9YDmuhkcuaw+nXLD7el2asnRyvo MbYzZWFlBbZWlZvspSjxeLZrbIyx56p2hpCjnZFpa75A3uqHKisVOdAEH6d8Ns25 ZG8AZtBI7SGDu9T84ovCVEnV5ymQoDfvzmomHV8N6vHCifGivK07LNURuJnmrIVz 1yYc7OMwEasniG39i6dLSuQXghsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBR8q6cQ 3WhYPyAY2bAcLhYXM6hNjjAfBgNVHSMEGDAWgBQR+Y8/jdT1XMf/t6S6zGVuDRk9 HjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0RDAwMDAvMC8xMUY5OEYz RjhERDRGNTVDQzdGRkI3QTRCQUNDNjU2RTBEMTkzRDFFLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9FZm1QUDQzVTlW ekhfN2VrdXN4bGJnMFpQUjQuY2VyMIGYBggrBgEFBQcBCwSBizCBiDCBhQYIKwYB BQUHMAuGeXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkx NTBFNEQwMDAwLzAvMzIzNDMwMzEzYTMyMzAzNjMwM2EzMjMwMzAzMDNhM2EyZjMz MzYyZDMzMzYyMDNkM2UyMDMxMzQzNzMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQBIGAgMA0G CSqGSIb3DQEBCwUAA4IBAQBA+SenA7yNz7bVP4WOwYgAW/eKNpk2b7Wa9AZ/538e uZLHtidYeLWol8uFDO5kPzyeUo6sD2aTTefyqxoYSNBE8eqNx7BHpkzct0zeNdgu B7teOdr6at59OiWRlAi6fD+mLoqXzgDsXcfJQzcAXJf3pQC+aL2QNiwkltkgwwKY Yw0WbLFTEcmdCGkxieIY1j4fFNPnbqGBmNzufIsdFbp9sS7y8XT0/cx+jTa479Fd EN/ghj3G5tMp84N24CByb+j5Rv53t9J/sNeF4zkfccF1XPef6qqDccQ1LhiVFd3R ERmdgXFLX1b+RPS59YntC1EYiknbMyLaLo+LqJ6DzHpb -----END CERTIFICATE-----Generated at Thu Jun 19 08:06:49 2025 by rpki-client