$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/A8689054340411E9A22CD05CC4F9AE02.roa File: A8689054340411E9A22CD05CC4F9AE02.roa (raw, json) Hash identifier: 9Abm2hwP5n1eigQRbM/2Ald4kJwUC5p7xAvKRar2kxA= Subject key identifier: CF:C7:E3:CC:E2:87:FE:53:66:29:F3:43:CD:41:6E:E3:8E:8F:06:F6 Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Certificate serial: 3580 Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/A8689054340411E9A22CD05CC4F9AE02.roa Signing time: Sat 14 Jun 2025 14:50:49 +0000 ROA not before: Sat 14 Jun 2025 14:50:49 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45787 IP address blocks: 2404:138:1301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13696 (0x3580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Validity Not Before: Jun 14 14:50:49 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684d8c49-3e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:db:8e:d7:cc:7a:80:6a:a7:5d:fb:06:18: 73:0a:b5:51:71:ef:3a:cd:b1:ca:81:51:b0:5a:18: d7:87:d5:9e:c7:5d:db:99:12:9b:4b:48:b4:24:55: 9c:ef:cf:b4:c6:33:ed:04:08:7d:91:4a:6b:ea:02: bb:7a:7d:04:ee:9c:0d:62:1b:cd:a7:ce:a5:29:43: 43:f4:12:85:3b:c0:2e:08:a5:41:c3:1c:5a:c2:94: 5f:dd:38:7b:4a:4d:3b:1c:a4:32:00:d9:46:43:45: 8d:5d:cf:fb:6d:97:56:f6:0c:12:a5:ac:19:4f:20: 48:0e:b7:11:2a:30:66:55:86:7d:0f:0f:3d:3c:6e: 25:8b:f1:ca:62:63:c6:06:e0:6f:c9:2a:d1:ec:91: 13:ca:e0:56:fe:62:dd:d3:16:66:4b:3a:33:8e:63: c1:61:fd:a2:89:71:c2:e4:b3:85:4b:58:21:9f:35: 89:cf:c5:c2:9b:26:b5:39:8a:c1:d6:fb:92:64:95: 66:6d:c8:ea:92:3a:f8:df:38:3d:ad:15:f0:19:4a: 46:6b:76:a0:47:90:e3:b0:ee:44:17:7c:79:d0:68: 35:e6:72:34:ea:46:d8:04:70:3d:8d:a0:93:b4:7d: b5:d0:d2:03:69:ad:50:3b:2d:d0:57:d7:9f:f8:da: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C7:E3:CC:E2:87:FE:53:66:29:F3:43:CD:41:6E:E3:8E:8F:06:F6 X509v3 Authority Key Identifier: keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/A8689054340411E9A22CD05CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:138:1301::/48 Signature Algorithm: sha256WithRSAEncryption 89:c2:43:3c:d1:63:5a:5d:ea:60:7f:f0:d7:78:13:12:54:cc: 23:c2:a1:46:e2:e1:59:25:fb:38:19:dc:43:e5:bb:e9:d0:c2: ac:f6:7d:d8:2c:7c:74:61:1d:6e:ef:19:03:e9:b0:51:be:43: 42:68:5e:2f:bc:89:92:c5:03:d5:69:48:6d:05:34:a8:89:29: 2c:3c:ed:59:91:60:fc:61:ca:8f:3a:a5:3d:e9:24:dc:d5:d1: be:cb:53:fd:2a:1d:9d:f5:6d:e5:6b:34:45:98:49:a1:5f:d0: 89:fd:9c:5c:14:06:5e:39:95:a1:b6:47:3a:26:69:31:f1:32: 96:73:d5:d7:fd:6f:4a:4b:9e:44:c7:88:45:f2:ce:1b:e7:8e: e2:1d:4c:fa:c5:78:16:21:ee:79:6a:64:20:40:e7:c1:22:0b: f2:c5:5b:c3:8a:5d:4a:bf:f0:43:0c:df:00:5a:80:ff:ea:dd: 2d:73:76:03:03:34:e7:39:53:9f:1d:be:26:e3:8b:13:23:81: b0:f7:d3:43:7c:37:cf:b3:6f:03:89:93:92:a1:01:d1:14:eb: 83:e2:0d:83:92:79:2a:02:f9:9b:6a:5b:0a:09:e2:8c:ef:f5: 09:48:99:48:e1:b9:92:40:d8:67:a6:99:8e:4e:c1:53:fe:f0: c0:4d:1d:db -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICNYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0 OTE4OUJDNjQwHhcNMjUwNjE0MTQ1MDQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRkOGM0OS0zZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSnbjtfMeoBqp137BhhzCrVRce86zbHKgVGwWhjXh9Wex13bmRKbS0i0JFWc 78+0xjPtBAh9kUpr6gK7en0E7pwNYhvNp86lKUND9BKFO8AuCKVBwxxawpRf3Th7 Sk07HKQyANlGQ0WNXc/7bZdW9gwSpawZTyBIDrcRKjBmVYZ9Dw89PG4li/HKYmPG BuBvySrR7JETyuBW/mLd0xZmSzozjmPBYf2iiXHC5LOFS1ghnzWJz8XCmya1OYrB 1vuSZJVmbcjqkjr43zg9rRXwGUpGa3agR5DjsO5EF3x50Gg15nI06kbYBHA9jaCT tH210NIDaa1QOy3QV9ef+NpLjQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFM/H48zi h/5TZinzQ81BbuOOjwb2MB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTEzMTgvREM3NDUxRjIxRDkxMTFFMjk4RTc0NkY0MDhCMDJDRDIvQTg2ODkwNTQz NDA0MTFFOUEyMkNEMDVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBAE4EwEwDQYJKoZIhvcNAQELBQADggEBAInCQzzRY1pd 6mB/8Nd4ExJUzCPCoUbi4Vkl+zgZ3EPlu+nQwqz2fdgsfHRhHW7vGQPpsFG+Q0Jo Xi+8iZLFA9VpSG0FNKiJKSw87VmRYPxhyo86pT3pJNzV0b7LU/0qHZ31beVrNEWY SaFf0In9nFwUBl45laG2RzomaTHxMpZz1df9b0pLnkTHiEXyzhvnjuIdTPrFeBYh 7nlqZCBA58EiC/LFW8OKXUq/8EMM3wBagP/q3S1zdgMDNOc5U58dvibjixMjgbD3 00N8N8+zbwOJk5KhAdEU64PiDYOSeSoC+ZtqWwoJ4ozv9QlImUjhuZJA2GemmY5O wVP+8MBNHds= -----END CERTIFICATE-----Generated at Fri Jul 4 06:12:01 2025 by rpki-client