$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/35274C3080AF11F0BAFC1E65C4F9AE02.roa File: 35274C3080AF11F0BAFC1E65C4F9AE02.roa (raw, json) Hash identifier: 4ybvDEw+ybpfGmixJrGgzd7Dw99nknebyCRa5+FGzd4= Subject key identifier: 8C:51:0C:58:54:DB:F0:D9:85:9F:4B:9E:3B:0E:23:08:00:13:FD:50 Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Certificate serial: 0105 Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/35274C3080AF11F0BAFC1E65C4F9AE02.roa Signing time: Sun 24 Aug 2025 05:57:25 +0000 ROA not before: Sun 24 Aug 2025 05:57:25 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152708 IP address blocks: 2001:df3:b7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 05:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Validity Not Before: Aug 24 05:57:25 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68aaa9c5-1003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:17:d3:e5:06:60:f4:54:90:3f:92:2c:54:06: 96:3f:5a:91:00:82:74:cd:57:db:55:fa:ce:df:e3: 0a:ec:06:44:a2:0e:96:b1:92:42:db:88:e7:6b:2c: b1:67:ba:73:87:9b:e0:e5:14:9d:20:88:64:a1:3c: a7:07:6c:5b:7e:16:99:70:4b:04:8d:96:46:b5:c2: 32:e3:6b:16:c2:e2:9f:a3:2d:11:d0:63:8b:8f:e4: 0e:24:75:d6:16:7b:86:5c:a1:2d:e6:a6:3f:c7:94: 39:68:b7:80:bb:18:81:13:b7:bf:84:bd:89:2e:48: 14:6a:78:f9:0c:da:ec:55:05:aa:63:63:c7:a7:a3: c0:09:70:24:e8:b4:fc:28:dd:18:40:eb:5b:4d:77: 1e:4d:b5:1a:cd:08:73:17:44:6f:fa:d1:43:9b:cd: 79:d6:48:c9:f1:d5:0d:5e:30:e4:7c:5f:7d:96:66: 22:4c:89:fb:20:dd:b6:88:74:39:a5:08:69:74:d7: a0:4d:ff:e7:bc:5a:ee:c7:f6:0c:cc:ae:5e:6d:51: b6:f9:56:fd:1e:64:d7:30:68:03:86:46:48:ca:b5: b6:10:b4:f3:32:d4:34:1c:a9:60:e0:80:72:dd:af: bc:d2:19:9c:0c:0a:c6:0c:cc:83:51:53:94:81:79: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:51:0C:58:54:DB:F0:D9:85:9F:4B:9E:3B:0E:23:08:00:13:FD:50 X509v3 Authority Key Identifier: keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/35274C3080AF11F0BAFC1E65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:b7c0::/48 Signature Algorithm: sha256WithRSAEncryption 86:7c:f2:86:74:15:43:02:d3:37:1c:c7:0b:58:cc:e0:15:d3: 16:b6:b4:b9:1e:1a:e1:10:2f:9c:62:c1:68:a2:93:c6:07:1a: c4:1f:85:ab:88:5a:02:06:09:a4:8a:ad:f3:73:bd:d3:fb:9d: b0:7d:5b:f9:bc:d4:fd:d0:25:53:b2:32:92:53:f1:6c:a1:a6: ab:4d:30:25:23:27:3d:e1:06:14:86:2c:8b:f7:92:6f:38:7c: 3b:77:50:98:4e:e5:4f:1e:0e:0b:c9:a5:6b:43:84:13:85:74: 13:5f:ae:db:b6:19:49:cb:3e:7a:51:4e:1f:e6:ba:24:59:f8: 2f:52:6e:01:1d:6a:23:30:6a:c1:c7:04:2f:28:f3:12:6e:c9: f2:76:14:26:62:42:f7:f5:99:e0:a4:53:25:cb:8a:0a:09:6f: 3f:10:15:ad:f3:b9:6a:9a:dd:03:fe:43:bd:e5:9f:37:96:77: ac:f9:d8:27:72:30:32:01:38:4d:08:3f:be:62:c3:c5:8f:d7: 0f:30:ae:fe:58:65:79:81:92:c8:ab:60:a9:77:ed:d4:6e:7d: 09:7d:41:cb:4e:33:c5:96:80:4a:a5:63:d4:20:46:0b:ff:b5: 33:2a:69:72:a9:ec:ad:14:53:a0:13:1f:01:e4:73:68:2a:66: da:3c:cd:07 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNGQ0UxMTAvBgNVBAUTKDg2NkU3OEQxQTQ1RThGRDEyNjgwOEFGRjdDRUE0RkMw OEU3RDkyQTgwHhcNMjUwODI0MDU1NzI1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFhYTljNS0xMDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRfT5QZg9FSQP5IsVAaWP1qRAIJ0zVfbVfrO3+MK7AZEog6WsZJC24jnayyx Z7pzh5vg5RSdIIhkoTynB2xbfhaZcEsEjZZGtcIy42sWwuKfoy0R0GOLj+QOJHXW FnuGXKEt5qY/x5Q5aLeAuxiBE7e/hL2JLkgUanj5DNrsVQWqY2PHp6PACXAk6LT8 KN0YQOtbTXceTbUazQhzF0Rv+tFDm8151kjJ8dUNXjDkfF99lmYiTIn7IN22iHQ5 pQhpdNegTf/nvFrux/YMzK5ebVG2+Vb9HmTXMGgDhkZIyrW2ELTzMtQ0HKlg4IBy 3a+80hmcDArGDMyDUVOUgXmXwwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIxRDFhU 2/DZhZ9LnjsOIwgAE/1QMB8GA1UdIwQYMBaAFIZueNGkXo/RJoCK/3zqT8COfZKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0ZDRS9FMEJFMzZBQzAy M0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5RW1nSXJfZk9wUHdJNTlr cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2htNTQwYVJlajlFbWdJcl9mT3BQd0k1OWtxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNGQ0UvRTBCRTM2QUMwMjNGMTFFRjhFNUMxRTU4QzRGOUFFMDIvMzUyNzRDMzA4 MEFGMTFGMEJBRkMxRTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zt8AwDQYJKoZIhvcNAQELBQADggEBAIZ88oZ0FUMC 0zccxwtYzOAV0xa2tLkeGuEQL5xiwWiik8YHGsQfhauIWgIGCaSKrfNzvdP7nbB9 W/m81P3QJVOyMpJT8WyhpqtNMCUjJz3hBhSGLIv3km84fDt3UJhO5U8eDgvJpWtD hBOFdBNfrtu2GUnLPnpRTh/muiRZ+C9SbgEdaiMwasHHBC8o8xJuyfJ2FCZiQvf1 meCkUyXLigoJbz8QFa3zuWqa3QP+Q73lnzeWd6z52CdyMDIBOE0IP75iw8WP1w8w rv5YZXmBksirYKl37dRufQl9QctOM8WWgEqlY9QgRgv/tTMqaXKp7K0UU6ATHwHk c2gqZto8zQc= -----END CERTIFICATE-----Generated at Sun Aug 24 13:36:49 2025 by rpki-client