$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa File: 118F422C816F11EF9ACB654AC4F9AE02.roa (raw, json) Hash identifier: M+kVidWeNxQJxyYqpjX+UThdH/HC0I70LM24xp9pvfc= Subject key identifier: 1E:6A:AA:04:B8:F8:B3:D7:49:84:34:6D:59:A7:23:AC:45:5C:3C:02 Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Certificate serial: 1950 Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa Signing time: Thu 02 Oct 2025 16:44:54 +0000 ROA not before: Thu 02 Oct 2025 16:44:54 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 20940 IP address blocks: 2400:2000:6::/48 maxlen: 48 2400:2000:7::/48 maxlen: 48 2400:2000:b::/48 maxlen: 48 2400:2000:c::/48 maxlen: 48 2400:2000:f::/48 maxlen: 48 2400:2000:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6480 (0x1950) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Validity Not Before: Oct 2 16:44:54 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68deac06-8480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:d3:01:26:c3:a7:83:77:3a:2f:be:3d:14: 83:43:66:4d:cb:ed:15:91:c2:18:0a:8b:cf:e7:be: a3:72:83:ea:5e:77:91:e3:a4:fb:c8:e1:00:23:d5: 7e:c9:23:4b:bd:18:6d:b9:e5:80:00:0a:7e:4f:fd: 9a:69:12:43:fa:c4:da:43:30:88:b5:85:1e:a4:d5: d4:7f:0b:d9:ba:78:3c:7e:98:32:5e:16:d9:c7:12: 61:e4:80:ca:7a:ed:20:17:99:c4:38:2e:4f:1f:22: b8:aa:b7:02:a7:13:8b:9c:80:cb:51:47:c3:77:4c: 0a:b1:c4:4f:cd:e5:b1:75:4b:41:31:cc:9d:8d:62: e0:8d:f7:67:f3:7a:31:95:99:35:a4:7d:5a:85:12: 8a:ca:3d:b8:91:e1:b9:4d:08:ad:fe:4d:11:e9:20: b9:72:d6:18:7e:61:94:69:90:ed:a5:b0:ca:09:6a: dc:8a:a7:70:c4:32:fb:da:74:57:31:d2:49:52:81: 35:5f:43:5f:49:9d:14:6b:74:03:ec:3d:7d:51:8e: 33:88:f0:cc:cd:22:d5:38:65:8f:88:4d:01:d6:f6: 64:c7:0b:be:b9:8f:04:35:43:6a:9b:d1:01:af:9c: fb:a2:c2:84:6b:eb:9d:82:b8:c8:6f:67:19:be:dc: 50:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6A:AA:04:B8:F8:B3:D7:49:84:34:6D:59:A7:23:AC:45:5C:3C:02 X509v3 Authority Key Identifier: keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:2000:6::/47 2400:2000:b::-2400:2000:c:ffff:ffff:ffff:ffff:ffff 2400:2000:f::-2400:2000:10:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a1:e1:b5:fd:39:c6:a1:98:96:c2:db:1a:00:07:35:85:b4:f3: 34:88:1d:b5:92:ed:f3:52:39:d6:dd:16:a4:37:00:52:ee:22: 1f:02:a9:d5:10:95:b2:a1:ff:3b:56:83:e1:cd:cd:ff:fe:55: bb:d2:09:5e:0b:cd:5c:3b:a5:4e:c9:54:0f:d0:5e:04:c5:e4: 97:9b:58:2c:84:64:4b:35:05:b5:cb:10:9b:d3:f0:7a:ee:ed: 28:95:21:91:d5:ac:9c:b5:ea:68:92:8e:b5:71:f3:91:42:c3: a4:3f:bb:44:98:6e:c8:32:31:c8:28:21:9c:91:48:3c:24:31: 8c:71:51:e1:c0:fb:13:12:11:0a:ba:c2:e5:df:53:12:d3:af: 9e:c5:b8:e6:93:58:ea:c0:88:25:c5:7f:65:67:9f:e2:ad:1b: 6b:db:39:91:fe:b3:2a:b1:3a:f3:40:84:c8:df:8c:81:3c:ca: 78:64:02:6a:a8:5c:23:be:d9:b6:d8:ff:ce:fe:b0:91:6d:00: 28:26:42:5d:6b:29:75:91:44:6c:87:b6:11:20:aa:e3:eb:34: 87:fa:b7:67:ea:3f:dc:fb:f2:e4:55:59:b4:ce:6e:32:55:68: e8:91:90:8d:27:b7:40:7c:c5:84:4a:df:86:b5:b8:31:78:3c: af:de:72:24 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICGVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND RjJBNEU2NEUwHhcNMjUxMDAyMTY0NDU0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlYWMwNi04NDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsD7TASbDp4N3Oi++PRSDQ2ZNy+0VkcIYCovP576jcoPqXneR46T7yOEAI9V+ ySNLvRhtueWAAAp+T/2aaRJD+sTaQzCItYUepNXUfwvZung8fpgyXhbZxxJh5IDK eu0gF5nEOC5PHyK4qrcCpxOLnIDLUUfDd0wKscRPzeWxdUtBMcydjWLgjfdn83ox lZk1pH1ahRKKyj24keG5TQit/k0R6SC5ctYYfmGUaZDtpbDKCWrciqdwxDL72nRX MdJJUoE1X0NfSZ0Ua3QD7D19UY4ziPDMzSLVOGWPiE0B1vZkxwu+uY8ENUNqm9EB r5z7osKEa+udgrjIb2cZvtxQ3wIDAQABo4ICwDCCArwwHQYDVR0OBBYEFB5qqgS4 +LPXSYQ0bVmnI6xFXDwCMB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0 NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTNBRTEvNjM4NDNFRDA5NDQwMTFFN0JDOTlDMTFBQzRGOUFFMDIvMTE4RjQyMkM4 MTZGMTFFRjlBQ0I2NTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MDcEAgACMDEDBwEkACAAAAYwEgMHACQAIAAACwMHACQAIAAADDASAwcAJAAg AAAPAwcAJAAgAAAQMA0GCSqGSIb3DQEBCwUAA4IBAQCh4bX9OcahmJbC2xoABzWF tPM0iB21ku3zUjnW3RakNwBS7iIfAqnVEJWyof87VoPhzc3//lW70gleC81cO6VO yVQP0F4ExeSXm1gshGRLNQW1yxCb0/B67u0olSGR1ayctepoko61cfORQsOkP7tE mG7IMjHIKCGckUg8JDGMcVHhwPsTEhEKusLl31MS06+exbjmk1jqwIglxX9lZ5/i rRtr2zmR/rMqsTrzQITI34yBPMp4ZAJqqFwjvtm22P/O/rCRbQAoJkJdayl1kURs h7YRIKrj6zSH+rdn6j/c+/LkVVm0zm4yVWjokZCNJ7dAfMWESt+GtbgxeDyv3nIk -----END CERTIFICATE-----Generated at Mon Oct 20 00:22:35 2025 by rpki-client