$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/42431FFC8FF711EEA0FC990FC4F9AE02.roa File: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (raw, json) Hash identifier: YFP7eBTQi2LSXP0RAmqpULUvPlrkmlQWua4tsLRcOaQ= Subject key identifier: 98:75:BB:B3:18:30:2F:91:6D:6E:C9:8D:56:72:B7:2A:D8:50:3F:A9 Certificate issuer: /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192 Certificate serial: 0EAB Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/42431FFC8FF711EEA0FC990FC4F9AE02.roa Signing time: Mon 18 Aug 2025 17:57:50 +0000 ROA not before: Mon 18 Aug 2025 17:57:49 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138164 IP address blocks: 240c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3755 (0xeab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192 Validity Not Before: Aug 18 17:57:49 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a3699d-f908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:7b:00:b1:98:df:c9:52:98:db:d4:7d:89: df:f3:d5:9b:71:aa:13:ea:b5:cb:f7:bf:e7:49:f9: 1b:bd:53:b6:c7:05:00:ab:f1:63:52:b1:c3:02:ea: 9c:1f:08:6c:11:e6:cf:db:66:33:96:1f:33:79:d4: 92:3b:e3:e7:21:29:6f:4a:8e:45:b1:a0:e6:36:e6: 6d:3b:52:8c:84:c0:ed:bb:b8:9b:ca:6d:fc:ee:ed: c8:02:38:32:64:62:a5:38:6d:96:e9:d4:55:52:87: b8:55:96:f4:9a:bd:67:63:38:e6:9f:4e:ce:19:2a: a7:5f:55:27:bb:44:81:f9:5e:14:85:d8:46:a0:fc: 7f:2a:12:15:fa:71:bf:f2:9e:cb:c3:8e:d5:4c:4c: 6f:f8:7d:42:51:11:1e:85:15:53:38:38:0c:ab:f3: 85:9c:f8:ae:ae:70:bb:a7:4f:a4:4f:7d:9c:b0:38: 27:d6:94:0a:7f:53:02:ce:41:46:f0:0a:31:41:6f: bb:46:00:e0:83:54:37:7f:e8:ca:f6:63:20:15:0d: ad:cd:de:1d:98:d9:53:38:c8:a9:24:da:18:e8:06: 7e:1e:87:29:ab:a5:bf:1d:80:50:65:ff:d3:d2:99: 92:0f:50:f0:09:b2:ed:fe:55:a5:97:a8:3b:3b:cb: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:75:BB:B3:18:30:2F:91:6D:6E:C9:8D:56:72:B7:2A:D8:50:3F:A9 X509v3 Authority Key Identifier: keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/42431FFC8FF711EEA0FC990FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 240c::/48 Signature Algorithm: sha256WithRSAEncryption a3:cc:85:fa:3f:12:76:1b:9d:62:57:9c:0b:53:5a:85:3d:c3: 40:5c:cd:67:f1:2f:a3:c3:da:0b:ac:30:6f:7c:4b:3a:a3:ec: d2:6d:bf:82:ab:29:a7:4f:09:0f:46:24:00:f7:48:66:b5:a2: 03:f3:69:dd:e4:8a:e7:1e:ab:1c:58:88:32:4f:a9:a0:ab:89: ca:b9:2c:25:11:4d:23:0a:69:f7:60:3c:24:8a:fb:c9:ea:6e: 43:d5:41:48:33:f9:a5:8e:9a:b4:55:88:4a:5b:b4:4e:10:db: 01:41:b5:0f:27:65:ea:95:91:76:d6:90:73:81:f4:59:23:74: 28:9a:b1:ac:10:21:10:d4:53:65:d3:24:ad:43:c8:10:1a:cc: 3e:09:41:58:eb:d9:67:b5:9e:83:77:8e:5b:91:8c:31:7e:10: 12:84:e9:a7:00:3b:8d:c3:b9:75:cf:95:83:69:de:ae:1c:94: e5:5e:14:93:af:f3:ab:9f:2c:ac:29:c6:95:a0:cc:32:81:88: 8d:9c:db:a4:d6:21:6e:49:c6:7d:ba:43:7e:bc:26:ea:7b:e9: 7e:09:ca:90:1e:45:11:03:5e:32:1e:30:65:16:61:dd:32:a4: b3:c0:08:cb:41:fe:9e:1b:80:99:e7:8f:58:68:08:37:e6:ff: 2c:2d:34:bb -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBNkUxMTAvBgNVBAUTKEQwMDY2MTBFQkQ2ODI5Nzg0NTdERjhBREEyOTExMDAx MzM5MTAxOTIwHhcNMjUwODE4MTc1NzQ5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzNjk5ZC1mOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdx7ALGY38lSmNvUfYnf89WbcaoT6rXL97/nSfkbvVO2xwUAq/FjUrHDAuqc HwhsEebP22Yzlh8zedSSO+PnISlvSo5FsaDmNuZtO1KMhMDtu7ibym387u3IAjgy ZGKlOG2W6dRVUoe4VZb0mr1nYzjmn07OGSqnX1Unu0SB+V4UhdhGoPx/KhIV+nG/ 8p7Lw47VTExv+H1CUREehRVTODgMq/OFnPiurnC7p0+kT32csDgn1pQKf1MCzkFG 8AoxQW+7RgDgg1Q3f+jK9mMgFQ2tzd4dmNlTOMipJNoY6AZ+Hocpq6W/HYBQZf/T 0pmSD1DwCbLt/lWll6g7O8u4awIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJh1u7MY MC+RbW7JjVZytyrYUD+pMB8GA1UdIwQYMBaAFNAGYQ69aCl4RX34raKREAEzkQGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0E2RS83OUVDRTgzODk4 QkQxMUU5QUM5OUU3NEVDNEY5QUUwMi8wQVpoRHIxb0tYaEZmZml0b3BFUUFUT1JB WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBWmhEcjFvS1hoRmZmaXRvcEVRQVRPUkFaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTNBNkUvNzlFQ0U4Mzg5OEJEMTFFOUFDOTlFNzRFQzRGOUFFMDIvNDI0MzFGRkM4 RkY3MTFFRUEwRkM5OTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkDAAAAAAwDQYJKoZIhvcNAQELBQADggEBAKPMhfo/EnYb nWJXnAtTWoU9w0BczWfxL6PD2gusMG98Szqj7NJtv4KrKadPCQ9GJAD3SGa1ogPz ad3kiuceqxxYiDJPqaCricq5LCURTSMKafdgPCSK+8nqbkPVQUgz+aWOmrRViEpb tE4Q2wFBtQ8nZeqVkXbWkHOB9FkjdCiasawQIRDUU2XTJK1DyBAazD4JQVjr2We1 noN3jluRjDF+EBKE6acAO43DuXXPlYNp3q4clOVeFJOv86ufLKwpxpWgzDKBiI2c 26TWIW5Jxn26Q368Jup76X4JypAeRREDXjIeMGUWYd0ypLPACMtB/p4bgJnnj1ho CDfm/ywtNLs= -----END CERTIFICATE-----Generated at Sun Aug 24 04:43:32 2025 by rpki-client