$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa File: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (raw, json) Hash identifier: 6avRjwNItYCzxG+yq5MB2LMVNEbgrnYskEIlXomTLWc= Subject key identifier: F7:51:1A:F1:41:14:59:EB:6C:5E:F6:F9:05:E3:35:3B:A8:20:BE:9E Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0CE9 Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa Signing time: Fri 12 Sep 2025 18:28:16 +0000 ROA not before: Fri 12 Sep 2025 18:28:16 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141731 IP address blocks: 2406:ff80::/32 maxlen: 32 2406:ff80:1::/48 maxlen: 48 2406:ff80:2::/48 maxlen: 48 2406:ff80:3::/48 maxlen: 48 2406:ff80:4::/48 maxlen: 48 2406:ff80:5::/48 maxlen: 48 2406:ff80:6::/48 maxlen: 48 2406:ff80:7::/48 maxlen: 48 2406:ff80:8::/48 maxlen: 48 2406:ff80:9::/48 maxlen: 48 2406:ff80:a::/48 maxlen: 48 2406:ff80:b::/48 maxlen: 48 2406:ff80:c::/48 maxlen: 48 2406:ff80:d::/48 maxlen: 48 2406:ff80:e::/48 maxlen: 48 2406:ff80:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3305 (0xce9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Sep 12 18:28:16 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c46640-dc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7a:fc:69:85:6b:31:1f:f0:26:be:99:8b:98: bc:a9:50:e4:3a:cc:c6:60:89:5a:ed:08:12:1c:de: 72:77:25:fb:35:11:4a:6c:0b:d8:8e:09:30:e0:36: bc:cf:74:b9:79:f3:b5:a3:46:40:06:66:cf:de:f8: d9:b0:99:9d:2d:93:0c:87:75:c7:ab:8c:4e:5e:d1: 19:20:8b:98:f7:57:55:66:c6:97:66:e2:78:0e:a0: 0f:5b:b5:a2:72:66:42:68:78:e8:db:ae:4a:fc:bd: 21:87:42:da:e3:79:58:ec:25:16:01:82:53:12:29: e0:1b:cc:1f:90:fa:4c:7f:7a:bb:dc:49:8a:99:3d: ab:be:fb:11:70:41:de:b3:f5:7d:44:0e:6e:a6:fa: 06:4d:0a:99:73:8d:72:80:24:39:4f:9c:11:7c:9f: e1:19:4e:bf:63:00:3d:4a:c1:2b:2a:ef:b8:a5:96: d3:94:6a:9f:8d:5f:73:45:ed:46:d1:d7:ad:e0:21: d6:ce:e6:ff:15:87:e0:ba:f5:5a:e0:2b:85:8d:f5: 9d:7b:44:67:a2:1e:69:5e:33:ec:ab:94:6e:f5:5f: 2d:92:64:a9:36:2d:9a:9b:76:4d:c8:58:72:6c:18: 4c:7e:4c:10:22:d5:87:ed:4c:5c:57:30:0a:c6:1a: 86:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:51:1A:F1:41:14:59:EB:6C:5E:F6:F9:05:E3:35:3B:A8:20:BE:9E X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:ff80::/32 Signature Algorithm: sha256WithRSAEncryption 58:16:75:fe:96:1b:68:41:8c:dd:a3:a9:76:e4:a0:57:8b:6f: 8e:c6:10:fb:11:fc:06:38:7d:bb:a3:a9:94:ad:9b:99:d1:b6: 26:32:01:a7:21:bc:d9:b5:93:9f:8d:0c:79:6c:f1:4c:b5:1f: 2a:e3:e7:fb:76:f6:25:53:1e:54:4e:29:04:ce:24:a5:a6:b5: 12:30:cc:35:5c:b9:fa:f3:6a:d8:05:5f:d3:06:bd:90:23:8e: 34:3e:b7:4d:a1:bf:60:2a:da:5b:69:d0:44:f7:c2:14:6f:48: 39:83:90:3f:fa:65:03:8c:1d:75:d4:0c:8a:0c:fc:6f:d2:cd: c3:ae:de:fd:61:61:23:80:1a:9a:5e:19:cf:21:01:ad:80:b0: 1a:9f:93:1d:ea:28:dc:07:dd:f9:1e:3c:0d:58:33:eb:f1:61: a1:fb:59:8a:67:2c:e6:bb:24:8b:19:70:3e:72:25:9d:60:ed: 3e:80:85:61:c4:6e:57:ef:d8:7a:44:45:b6:3b:92:f4:12:88: dc:75:9c:bc:a9:13:0f:8b:16:e3:e1:83:80:31:8d:9e:f6:b6: 20:89:6e:3f:73:32:21:8a:5f:38:79:21:7e:66:1f:ed:49:24: e5:63:8f:06:c3:b5:c2:85:69:bc:cf:f3:a1:18:ad:56:39:22: 75:23:f0:73 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICDOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjUwOTEyMTgyODE2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM0NjY0MC1kYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nr8aYVrMR/wJr6Zi5i8qVDkOszGYIla7QgSHN5ydyX7NRFKbAvYjgkw4Da8 z3S5efO1o0ZABmbP3vjZsJmdLZMMh3XHq4xOXtEZIIuY91dVZsaXZuJ4DqAPW7Wi cmZCaHjo265K/L0hh0La43lY7CUWAYJTEingG8wfkPpMf3q73EmKmT2rvvsRcEHe s/V9RA5upvoGTQqZc41ygCQ5T5wRfJ/hGU6/YwA9SsErKu+4pZbTlGqfjV9zRe1G 0det4CHWzub/FYfguvVa4CuFjfWde0Rnoh5pXjPsq5Ru9V8tkmSpNi2am3ZNyFhy bBhMfkwQItWH7UxcVzAKxhqGsQIDAQABo4ICljCCApIwHQYDVR0OBBYEFPdRGvFB FFnrbF72+QXjNTuoIL6eMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Q0NkYvN0RBMjRDN0EwMDY5MTFFQThGREIyODVEQzRGOUFFMDIvOTJGOEY2RDA0 MkRBMTFFRDkzMDI5QTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBv+AMA0GCSqGSIb3DQEBCwUAA4IBAQBYFnX+lhtoQYzd o6l25KBXi2+OxhD7EfwGOH27o6mUrZuZ0bYmMgGnIbzZtZOfjQx5bPFMtR8q4+f7 dvYlUx5UTikEziSlprUSMMw1XLn682rYBV/TBr2QI440PrdNob9gKtpbadBE98IU b0g5g5A/+mUDjB111AyKDPxv0s3Drt79YWEjgBqaXhnPIQGtgLAan5Md6ijcB935 HjwNWDPr8WGh+1mKZyzmuySLGXA+ciWdYO0+gIVhxG5X79h6REW2O5L0EojcdZy8 qRMPixbj4YOAMY2e9rYgiW4/czIhil84eSF+Zh/tSSTlY48Gw7XChWm8z/OhGK1W OSJ1I/Bz -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:09 2025 by rpki-client