$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33372d3337203d3e20313437303230.roa File: 323430313a323036303a323030303a3a2f33372d3337203d3e20313437303230.roa (raw, json) Hash identifier: I86A9AHpVObLATZ5x2f8YD14CFGypt+UhFXqpAsqh+0= Subject key identifier: 3A:CF:6A:2A:58:B0:F8:98:2B:1D:0C:FA:85:85:CC:69:66:2C:97:48 Certificate issuer: /CN=A9150E4D0000/serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E Certificate serial: 2C19D77108B87799E291F27C2273B9C9ADAC4E94 Authority key identifier: 11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33372d3337203d3e20313437303230.roa Signing time: Wed 04 Jun 2025 05:28:32 +0000 ROA not before: Wed 04 Jun 2025 05:23:32 +0000 ROA not after: Wed 03 Jun 2026 05:28:32 +0000 asID: 147020 IP address blocks: 2401:2060:2000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:19:d7:71:08:b8:77:99:e2:91:f2:7c:22:73:b9:c9:ad:ac:4e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E4D0000, serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E Validity Not Before: Jun 4 05:23:32 2025 GMT Not After : Jun 3 05:28:32 2026 GMT Subject: CN=3ACF6A2A58B0F8982B1D0CFA8585CC69662C9748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:0c:7f:da:86:1e:66:db:a3:79:55:12:ff: 51:23:17:51:47:34:52:0c:ce:13:81:07:5b:18:81: 30:07:f9:2b:9b:71:f5:31:6f:0e:d0:c4:fd:88:5e: 0f:49:64:73:8f:4c:b3:45:99:0a:4f:bf:2d:60:a6: e9:8d:0e:98:57:02:57:ca:1a:d5:a5:02:1f:1c:89: 07:fc:f7:7d:a7:ce:6d:91:47:af:e3:0d:85:eb:dd: 58:80:1c:1c:c6:11:33:10:98:ed:c9:77:b2:e4:88: 61:b3:45:63:2a:d5:b5:6c:99:4b:19:59:8e:7b:4f: 58:a9:61:92:0a:2f:8d:37:16:0a:51:69:ee:25:78: 2d:b4:16:2a:33:c5:8f:19:73:d0:15:04:75:52:fd: ed:a1:4a:ea:5f:5e:45:8e:57:e6:6b:47:1c:a6:8e: cc:3f:43:fe:5c:c4:0b:12:a0:13:53:3c:71:41:a0: 81:f6:93:b1:22:b4:cf:44:22:62:cf:75:0b:b7:09: 2c:0f:00:c1:f7:73:4a:4b:69:02:8a:80:d4:06:4e: ae:65:e0:7a:9d:15:60:10:72:0f:d7:03:78:dd:7e: a5:c1:0f:d8:76:49:f9:e0:a0:3e:e6:8a:6e:ab:59: 2a:27:8c:4d:03:9b:e5:f6:f3:16:5f:05:9d:a2:68: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CF:6A:2A:58:B0:F8:98:2B:1D:0C:FA:85:85:CC:69:66:2C:97:48 X509v3 Authority Key Identifier: keyid:11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33372d3337203d3e20313437303230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:2000::/37 Signature Algorithm: sha256WithRSAEncryption 8f:5a:0d:df:f4:b7:ae:5d:37:b5:2b:98:3d:6f:e5:c4:9a:d7: 5b:97:e2:d3:e8:98:5b:3b:0d:2f:c1:3c:0b:7d:6d:05:cc:ff: 77:b7:46:3a:19:d5:99:7a:4e:94:6d:12:66:9d:c0:2a:86:77: 8f:fa:08:4b:7a:02:48:55:f6:4e:eb:fb:6b:aa:9c:de:bc:ed: 45:de:fa:4e:c1:28:17:40:64:38:c0:e6:1f:54:04:3b:6c:19: 42:ad:f3:31:14:0e:90:ec:ce:f2:bb:f1:7d:48:02:29:62:96: 16:ed:2a:cf:7d:5f:47:76:dd:2f:50:ca:c5:be:d4:33:31:d2: e2:8f:db:5a:e1:f5:54:22:9c:85:0c:bd:29:8b:90:63:b8:bf: ca:f9:f2:90:20:12:5f:ba:a2:cb:3b:e3:da:91:e4:13:b0:b6: a6:0d:10:b6:9d:9e:e9:12:f5:a3:cf:28:ac:2a:61:6b:6c:d9: cf:0a:32:e0:6a:54:78:08:87:34:34:3d:f3:79:2c:68:1e:40: fb:35:32:04:cc:3d:ad:d6:cc:76:0c:a6:7e:f0:f8:8c:7d:11: c2:91:46:0d:e2:3f:ad:0f:9d:ab:5b:56:df:6b:2b:ac:3a:9a: ad:6a:00:1a:42:af:fd:b9:2f:84:74:45:da:53:2e:56:f2:3e: 12:38:a9:73 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIULBnXcQi4d5nikfJ8InO5ya2sTpQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEygxMUY5OEYzRjhE RDRGNTVDQzdGRkI3QTRCQUNDNjU2RTBEMTkzRDFFMB4XDTI1MDYwNDA1MjMzMloX DTI2MDYwMzA1MjgzMlowMzExMC8GA1UEAxMoM0FDRjZBMkE1OEIwRjg5ODJCMUQw Q0ZBODU4NUNDNjk2NjJDOTc0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKDmDH/ahh5m26N5VRL/USMXUUc0UgzOE4EHWxiBMAf5K5tx9TFvDtDE/Yhe D0lkc49Ms0WZCk+/LWCm6Y0OmFcCV8oa1aUCHxyJB/z3fafObZFHr+MNhevdWIAc HMYRMxCY7cl3suSIYbNFYyrVtWyZSxlZjntPWKlhkgovjTcWClFp7iV4LbQWKjPF jxlz0BUEdVL97aFK6l9eRY5X5mtHHKaOzD9D/lzECxKgE1M8cUGggfaTsSK0z0Qi Ys91C7cJLA8AwfdzSktpAoqA1AZOrmXgep0VYBByD9cDeN1+pcEP2HZJ+eCgPuaK bqtZKieMTQOb5fbzFl8FnaJo5i0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQ6z2oq WLD4mCsdDPqFhcxpZiyXSDAfBgNVHSMEGDAWgBQR+Y8/jdT1XMf/t6S6zGVuDRk9 HjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0RDAwMDAvMC8xMUY5OEYz RjhERDRGNTVDQzdGRkI3QTRCQUNDNjU2RTBEMTkzRDFFLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9FZm1QUDQzVTlW ekhfN2VrdXN4bGJnMFpQUjQuY2VyMIGYBggrBgEFBQcBCwSBizCBiDCBhQYIKwYB BQUHMAuGeXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkx NTBFNEQwMDAwLzAvMzIzNDMwMzEzYTMyMzAzNjMwM2EzMjMwMzAzMDNhM2EyZjMz MzcyZDMzMzcyMDNkM2UyMDMxMzQzNzMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyQBIGAgMA0G CSqGSIb3DQEBCwUAA4IBAQCPWg3f9LeuXTe1K5g9b+XEmtdbl+LT6JhbOw0vwTwL fW0FzP93t0Y6GdWZek6UbRJmncAqhneP+ghLegJIVfZO6/trqpzevO1F3vpOwSgX QGQ4wOYfVAQ7bBlCrfMxFA6Q7M7yu/F9SAIpYpYW7SrPfV9Hdt0vUMrFvtQzMdLi j9ta4fVUIpyFDL0pi5BjuL/K+fKQIBJfuqLLO+PakeQTsLamDRC2nZ7pEvWjzyis KmFrbNnPCjLgalR4CIc0ND3zeSxoHkD7NTIEzD2t1sx2DKZ+8PiMfRHCkUYN4j+t D52rW1bfayusOpqtagAaQq/9uS+EdEXaUy5W8j4SOKlz -----END CERTIFICATE-----Generated at Thu Jun 19 00:17:28 2025 by rpki-client