$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/AB96EF3852CD11ECAB209C5FC4F9AE02.roa File: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (raw, json) Hash identifier: KHmIhJVDnUN/JIAGOGyBUT9fEQNuIGqQSzduAjkMS7g= Subject key identifier: 3B:20:9A:BA:8A:5F:DD:83:77:36:F4:2A:C3:EB:0D:56:6F:CA:7C:74 Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0B39 Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/AB96EF3852CD11ECAB209C5FC4F9AE02.roa Signing time: Tue 10 Jun 2025 22:10:07 +0000 ROA not before: Tue 10 Jun 2025 22:10:07 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132591 IP address blocks: 240d:c010:50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Jun 10 22:10:07 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6848ad3f-8b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:0f:f8:6f:bb:e8:37:ff:0d:5c:22:60:73: 82:eb:99:05:63:e0:4c:d5:f2:48:97:47:95:79:06: 6b:e3:5c:fa:96:b4:6d:0e:c2:5e:1f:5d:22:b0:d2: b5:52:08:66:05:ad:01:8b:33:3c:f7:f1:8a:20:b7: c7:f1:95:39:43:29:80:69:7e:fc:f3:25:02:45:86: 13:23:47:e7:61:60:10:64:87:56:66:c6:08:e6:83: 37:c1:73:8a:5b:c0:30:4e:20:3b:88:69:9a:60:17: b0:04:70:96:9b:1a:40:ca:d4:38:0a:35:83:51:8f: 13:cd:9a:db:d8:b7:06:9d:e7:1b:bc:da:77:4e:25: 18:fd:5a:ae:5c:92:e3:ed:1a:4c:e9:de:75:a9:37: b8:92:e2:db:ee:f4:dc:c7:14:65:c6:b4:3a:df:2f: ba:58:c9:5a:71:92:bb:c7:24:5e:a0:3f:d9:12:19: a1:bc:b0:43:e2:40:d7:c5:75:ed:2d:00:e9:60:73: 52:ab:08:cb:c9:22:42:53:d9:a7:4a:c3:b0:23:e2: b8:c0:cd:39:8e:48:2a:2b:ae:d6:99:3e:3a:35:48: 37:cd:8f:18:e2:c6:fb:d6:e0:d1:06:75:b2:f7:6c: 60:d9:bd:2d:28:ca:01:c3:2b:6f:32:57:25:61:b9: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:20:9A:BA:8A:5F:DD:83:77:36:F4:2A:C3:EB:0D:56:6F:CA:7C:74 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/AB96EF3852CD11ECAB209C5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 240d:c010:50::/48 Signature Algorithm: sha256WithRSAEncryption d3:e2:69:80:d6:1f:6f:ce:d4:56:f4:f0:65:e1:9f:cd:c2:ed: 36:4a:4a:2a:f2:e0:84:bc:d0:e2:e9:5a:09:fe:c5:6a:2c:7e: c5:b7:20:fd:ac:6f:31:75:8c:35:13:50:4c:8e:f5:62:83:d9: ba:cc:b9:04:ff:72:d6:87:1e:bb:d6:01:a6:ed:c2:e7:c0:d9: 78:8d:32:a0:ba:db:7d:0b:a3:04:40:54:a6:8f:e7:01:5d:5c: 64:6a:8d:1b:fa:ee:ed:ba:be:4e:97:52:60:ef:49:03:9e:08: ae:f3:90:df:7a:75:29:fb:91:3c:82:26:79:c1:70:b2:81:7d: 8e:b4:50:fe:57:c9:fe:68:fc:d4:36:ef:30:6d:f4:44:09:b6: be:05:e9:30:58:16:4e:70:39:28:ea:70:d4:f5:c4:43:9e:57: a9:36:e3:6e:8c:ae:3e:2f:53:55:7c:03:40:5d:d6:23:bc:a4: af:1f:99:1b:10:b4:05:5c:13:93:3e:4e:ba:47:1a:62:8f:23: d3:19:b7:29:8c:4d:0b:a9:69:37:46:02:49:25:67:bf:9a:5d: d7:b8:0a:99:14:17:9c:b2:3c:c4:39:58:f1:c3:bf:2c:73:c3: 6d:e5:78:7b:5c:b3:38:06:24:bb:c6:98:9d:c9:68:9d:fc:8d: 64:e2:1b:c4 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjUwNjEwMjIxMDA3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ4YWQzZi04YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LAP+G+76Df/DVwiYHOC65kFY+BM1fJIl0eVeQZr41z6lrRtDsJeH10isNK1 UghmBa0BizM89/GKILfH8ZU5QymAaX788yUCRYYTI0fnYWAQZIdWZsYI5oM3wXOK W8AwTiA7iGmaYBewBHCWmxpAytQ4CjWDUY8TzZrb2LcGnecbvNp3TiUY/VquXJLj 7RpM6d51qTe4kuLb7vTcxxRlxrQ63y+6WMlacZK7xyReoD/ZEhmhvLBD4kDXxXXt LQDpYHNSqwjLySJCU9mnSsOwI+K4wM05jkgqK67WmT46NUg3zY8Y4sb71uDRBnWy 92xg2b0tKMoBwytvMlclYbkvOwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDsgmrqK X92Ddzb0KsPrDVZvynx0MB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvQUI5NkVGMzg1 MkNEMTFFQ0FCMjA5QzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkDcAQAFAwDQYJKoZIhvcNAQELBQADggEBANPiaYDWH2/O 1Fb08GXhn83C7TZKSiry4IS80OLpWgn+xWosfsW3IP2sbzF1jDUTUEyO9WKD2brM uQT/ctaHHrvWAabtwufA2XiNMqC6230LowRAVKaP5wFdXGRqjRv67u26vk6XUmDv SQOeCK7zkN96dSn7kTyCJnnBcLKBfY60UP5Xyf5o/NQ27zBt9EQJtr4F6TBYFk5w OSjqcNT1xEOeV6k2426Mrj4vU1V8A0Bd1iO8pK8fmRsQtAVcE5M+TrpHGmKPI9MZ tymMTQupaTdGAkklZ7+aXde4CpkUF5yyPMQ5WPHDvyxzw23leHtcszgGJLvGmJ3J aJ38jWTiG8Q= -----END CERTIFICATE-----Generated at Wed Jul 2 23:03:27 2025 by rpki-client