$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/FB405D86900E11EAA43BB21FC4F9AE02.roa File: FB405D86900E11EAA43BB21FC4F9AE02.roa (raw, json) Hash identifier: Ey/Kmg1iRRIttYY5811s3SHGsRnkg9ROhR5r3BngPPg= Subject key identifier: 54:45:04:4B:3A:61:F3:61:C8:71:60:6B:BF:B4:EB:43:0D:74:44:7A Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2ACD Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/FB405D86900E11EAA43BB21FC4F9AE02.roa Signing time: Tue 30 Sep 2025 15:42:30 +0000 ROA not before: Tue 30 Sep 2025 15:42:30 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 135053 IP address blocks: 2406:e401::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10957 (0x2acd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Sep 30 15:42:30 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dbfa66-d3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:84:ad:3c:af:73:22:30:d7:b7:c0:da:62: 4a:f8:44:0c:43:47:5c:09:80:8e:e5:d8:13:48:f3: ba:4c:aa:5d:13:86:88:b4:02:d3:c3:93:89:c8:0b: 98:47:f0:34:77:9f:8b:a8:1f:43:de:16:c1:4d:14: 42:b1:46:4f:ec:bc:09:0a:6e:d2:13:db:e3:e0:53: 7e:16:fb:06:22:3f:5a:74:ed:76:95:06:8d:9f:23: 5c:b2:c0:6d:39:a4:46:da:8f:58:92:43:82:e9:19: 92:9a:6f:29:e4:73:b2:1e:cc:25:ef:f7:d0:88:1a: b6:a7:c8:42:42:d9:7e:08:2d:b0:30:51:23:9a:dd: 71:7f:28:bb:b8:0d:c9:81:4c:8d:45:40:0f:95:4a: 3a:65:cd:da:45:11:de:d6:48:40:2e:94:50:89:d4: 46:58:f9:19:e4:08:08:7b:52:74:96:d2:4d:38:61: 6f:bf:9d:a0:eb:58:e9:a5:6f:fb:31:58:82:32:86: 8f:fa:fd:fb:ed:de:bb:07:72:a8:f5:a1:71:f0:e3: 5f:52:12:dc:7b:8d:5a:15:92:90:85:c7:e2:7a:03: 35:a0:6f:f8:17:66:6d:39:b9:43:ba:7c:46:33:01: 60:26:65:9a:f0:f5:52:a6:7d:f0:00:23:80:04:75: 2a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:45:04:4B:3A:61:F3:61:C8:71:60:6B:BF:B4:EB:43:0D:74:44:7A X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/FB405D86900E11EAA43BB21FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:e401::/32 Signature Algorithm: sha256WithRSAEncryption 74:db:11:1e:28:d9:86:93:36:a5:80:02:f2:f7:85:6c:d5:87: 75:92:bc:b1:26:9a:a6:75:b7:0e:48:45:1e:ef:fd:97:4f:3a: 28:03:0c:21:16:7b:b8:8e:35:cd:e9:80:54:54:05:3f:a8:90: 9e:63:22:d4:4b:84:63:6e:c2:d3:d7:3f:c6:f8:59:6d:c7:c7: 8a:21:01:48:d5:50:36:51:ae:6f:98:64:4f:9f:de:56:c8:c5: 8a:6a:0f:07:54:a6:87:d4:4c:71:58:bf:24:b0:3c:fd:a6:b6: ff:da:1e:da:b0:cc:22:ba:32:83:4f:fe:f8:76:d8:ae:46:30: b5:03:04:0c:d4:a3:f7:5e:8c:b6:fa:73:fa:6a:5f:08:4a:34: e6:7b:83:73:38:cc:ea:09:83:74:08:ca:62:90:f0:a4:25:07: f2:af:7e:d1:94:38:53:f8:38:b1:ba:39:52:f3:dc:94:dd:65: bc:ae:1c:34:66:9a:20:09:cf:74:2d:19:9e:db:b7:a2:f2:08: f5:e8:c1:43:a8:a6:00:c5:0a:76:60:8f:8b:f8:6c:7f:3a:94: 87:ba:80:99:29:b4:b4:25:ee:2e:b3:ba:28:00:1e:29:e2:3c: df:c4:98:50:f9:a1:d9:4f:07:0c:18:17:30:5a:47:42:81:9a: d3:2e:99:c6 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICKs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjUwOTMwMTU0MjMwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRiZmE2Ni1kM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwyErTyvcyIw17fA2mJK+EQMQ0dcCYCO5dgTSPO6TKpdE4aItALTw5OJyAuY R/A0d5+LqB9D3hbBTRRCsUZP7LwJCm7SE9vj4FN+FvsGIj9adO12lQaNnyNcssBt OaRG2o9YkkOC6RmSmm8p5HOyHswl7/fQiBq2p8hCQtl+CC2wMFEjmt1xfyi7uA3J gUyNRUAPlUo6Zc3aRRHe1khALpRQidRGWPkZ5AgIe1J0ltJNOGFvv52g61jppW/7 MViCMoaP+v377d67B3Ko9aFx8ONfUhLce41aFZKQhcfiegM1oG/4F2ZtOblDunxG MwFgJmWa8PVSpn3wACOABHUqYQIDAQABo4ICljCCApIwHQYDVR0OBBYEFFRFBEs6 YfNhyHFga7+060MNdER6MB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEMzM0EvMUQyQkQwM0UyRERCMTFFNDlBRjYxNTMwQzRGOUFFMDIvRkI0MDVEODY5 MDBFMTFFQUE0M0JCMjFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBuQBMA0GCSqGSIb3DQEBCwUAA4IBAQB02xEeKNmGkzal gALy94Vs1Yd1kryxJpqmdbcOSEUe7/2XTzooAwwhFnu4jjXN6YBUVAU/qJCeYyLU S4RjbsLT1z/G+Fltx8eKIQFI1VA2Ua5vmGRPn95WyMWKag8HVKaH1ExxWL8ksDz9 prb/2h7asMwiujKDT/74dtiuRjC1AwQM1KP3Xoy2+nP6al8ISjTme4NzOMzqCYN0 CMpikPCkJQfyr37RlDhT+DixujlS89yU3WW8rhw0ZpogCc90LRme27ei8gj16MFD qKYAxQp2YI+L+Gx/OpSHuoCZKbS0Je4us7ooAB4p4jzfxJhQ+aHZTwcMGBcwWkdC gZrTLpnG -----END CERTIFICATE-----Generated at Mon Oct 20 17:05:04 2025 by rpki-client