$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/9A20324CDD6011EB9935406BC4F9AE02.roa File: 9A20324CDD6011EB9935406BC4F9AE02.roa (raw, json) Hash identifier: FG0kBNgcXB2ccIKTcUxFDt6fNDa7To3h1nclZ9D+gJE= Subject key identifier: 88:88:DA:16:CD:37:5A:AF:08:28:49:D3:9C:EB:A4:AC:1A:69:59:F0 Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 2452 Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/9A20324CDD6011EB9935406BC4F9AE02.roa Signing time: Mon 30 Jun 2025 16:24:17 +0000 ROA not before: Mon 30 Jun 2025 16:24:17 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 59347 IP address blocks: 2403:cc80::/32 maxlen: 32 2403:cc80::/48 maxlen: 48 2403:cc80:1::/48 maxlen: 48 2403:cc80:2::/48 maxlen: 48 2403:cc80:3::/48 maxlen: 48 2403:cc80:4::/48 maxlen: 48 2403:cc80:5::/48 maxlen: 48 2403:cc80:d::/48 maxlen: 48 2403:cc80:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9298 (0x2452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: Jun 30 16:24:17 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=6862ba31-f380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:44:54:93:d4:32:ff:61:48:2f:dd:2c:b7: 94:3f:c3:c5:1b:7d:7a:6a:6a:3a:bd:8e:57:b8:36: f6:bd:52:00:54:e7:36:61:74:8b:5d:fb:bb:b9:66: 17:62:0e:48:5b:a2:79:20:33:17:28:76:67:d6:b7: 78:30:39:d5:42:2a:25:41:5f:d7:71:0a:83:a9:bb: 99:9f:3a:4a:29:27:0d:0c:a1:43:9c:10:a7:38:a1: ab:c3:12:f4:63:2f:47:1d:35:79:67:8a:38:bf:4b: 2c:3e:a0:5b:2d:20:5d:f1:e2:00:a4:cc:3e:43:12: e7:52:ec:b1:9c:ab:5d:d5:2e:a7:8b:95:a9:66:71: 5e:cd:a2:44:3f:3b:45:cd:5c:29:87:b5:c5:23:bf: 39:51:4f:2b:46:87:a6:f3:35:76:3f:5a:6b:f6:d5: 26:f2:2d:09:49:ba:2b:fe:b7:d0:ad:20:79:c0:b8: 0b:72:2a:77:a5:b4:6b:26:66:c3:6b:2c:96:9e:e0: a1:66:03:c3:3c:cd:d9:5e:88:f1:f0:a6:e9:e9:51: 83:26:ab:de:ac:f4:ed:2e:5c:23:21:4d:a1:95:e8: b1:f2:40:ab:b9:2b:0c:21:f7:ae:84:c3:12:0e:95: 5b:18:c4:bb:03:92:5c:15:c3:eb:92:26:33:87:c1: 54:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:88:DA:16:CD:37:5A:AF:08:28:49:D3:9C:EB:A4:AC:1A:69:59:F0 X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/9A20324CDD6011EB9935406BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:cc80::/32 Signature Algorithm: sha256WithRSAEncryption d6:9a:dc:94:f5:db:e4:4e:4e:20:b8:51:7b:5a:4a:46:69:88: 89:6d:71:3e:20:4f:66:e6:ae:1f:68:6f:5e:e6:19:e6:84:bc: 01:c7:74:a2:c3:7d:8f:e3:00:9e:1c:f6:d8:79:78:41:c9:7a: e1:62:99:eb:55:b3:cc:9b:4b:05:c7:d1:3b:59:63:6c:bb:e8: 7d:d2:55:56:5d:90:b2:27:ef:1f:c5:eb:a8:fd:9c:7b:74:07: 74:d4:22:f3:d0:68:c9:00:5f:98:01:95:21:84:e5:58:a2:56: c1:a7:08:ce:31:e4:35:97:14:5e:62:a4:c8:16:df:00:8a:8f: 76:a3:97:4a:db:36:6d:7e:54:52:06:13:5a:27:70:e4:a0:da: 0a:c7:40:43:76:cb:cd:9c:90:a7:3c:83:08:0c:d6:86:a7:9b: 5a:4c:00:58:fb:7f:71:fb:4e:eb:0a:16:d8:49:81:53:dd:d5: 2b:76:0c:a0:ed:0d:26:32:a8:e1:09:2d:90:59:22:4a:f0:b9: ba:eb:e9:cf:ef:06:f9:0c:d7:2f:3d:e9:1c:b5:4e:26:50:66: 52:f9:99:79:c9:02:e7:8c:6e:7b:31:c6:ae:5c:41:6e:a4:f4: 94:1b:ac:d3:79:b7:64:4b:30:d0:5b:93:b5:41:cd:77:e2:c7: f9:9b:27:76 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICJFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjUwNjMwMTYyNDE3WhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYyYmEzMS1mMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDhEVJPUMv9hSC/dLLeUP8PFG316amo6vY5XuDb2vVIAVOc2YXSLXfu7uWYX Yg5IW6J5IDMXKHZn1rd4MDnVQiolQV/XcQqDqbuZnzpKKScNDKFDnBCnOKGrwxL0 Yy9HHTV5Z4o4v0ssPqBbLSBd8eIApMw+QxLnUuyxnKtd1S6ni5WpZnFezaJEPztF zVwph7XFI785UU8rRoem8zV2P1pr9tUm8i0JSbor/rfQrSB5wLgLcip3pbRrJmbD ayyWnuChZgPDPM3ZXojx8Kbp6VGDJqverPTtLlwjIU2hleix8kCruSsMIfeuhMMS DpVbGMS7A5JcFcPrkiYzh8FUvwIDAQABo4ICljCCApIwHQYDVR0OBBYEFIiI2hbN N1qvCChJ05zrpKwaaVnwMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjFCNzMvMkI3N0VGMkE1RURGMTFFNTgxQUQ4ODBDQzRGOUFFMDIvOUEyMDMyNENE RDYwMTFFQjk5MzU0MDZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkA8yAMA0GCSqGSIb3DQEBCwUAA4IBAQDWmtyU9dvkTk4g uFF7WkpGaYiJbXE+IE9m5q4faG9e5hnmhLwBx3Siw32P4wCeHPbYeXhByXrhYpnr VbPMm0sFx9E7WWNsu+h90lVWXZCyJ+8fxeuo/Zx7dAd01CLz0GjJAF+YAZUhhOVY olbBpwjOMeQ1lxReYqTIFt8Aio92o5dK2zZtflRSBhNaJ3DkoNoKx0BDdsvNnJCn PIMIDNaGp5taTABY+39x+07rChbYSYFT3dUrdgyg7Q0mMqjhCS2QWSJK8Lm66+nP 7wb5DNcvPekctU4mUGZS+Zl5yQLnjG57McauXEFupPSUG6zTebdkSzDQW5O1Qc13 4sf5myd2 -----END CERTIFICATE-----Generated at Fri Jul 4 11:14:12 2025 by rpki-client