$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/065A717E9B6E11EFBCAB692BC4F9AE02.roa File: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (raw, json) Hash identifier: fpApiu1FjrarZlPUsOOK6GGIbKmnMiZ6mCyLBRP/A/k= Subject key identifier: 55:4D:F6:C4:F1:74:55:AA:A1:C5:BE:D8:9A:C2:E2:D8:B2:01:91:B8 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C42 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/065A717E9B6E11EFBCAB692BC4F9AE02.roa Signing time: Sat 16 Aug 2025 19:30:07 +0000 ROA not before: Sat 16 Aug 2025 19:30:07 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 24121 IP address blocks: 2407:b001:1000::/40 maxlen: 40 2407:b001:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3138 (0xc42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Aug 16 19:30:07 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a0dc3e-6e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:7f:1a:ec:f4:93:75:10:30:63:ac:73:be: 35:e5:27:92:d0:4f:ba:52:c9:83:f3:ec:c4:8a:ba: 61:2c:33:88:06:b3:4a:81:38:9b:f8:75:4d:4e:b9: 6a:30:37:40:c8:5e:30:88:e4:37:82:b4:d4:2f:60: 13:0c:19:97:e4:b9:90:9b:ba:66:82:0e:0a:9c:df: 4d:da:a7:81:06:8b:d8:7f:ce:d0:c6:a8:33:dd:f7: e8:97:fd:d2:ad:85:7d:c7:6e:67:63:a6:5e:c5:68: 74:2d:81:32:f9:f9:09:fe:6e:02:6a:73:2c:25:10: 4c:e4:2a:64:d9:df:53:e2:cc:1c:7a:09:2c:f8:69: c8:b2:62:76:52:2d:fb:78:f1:bd:d3:be:60:29:65: 00:07:a1:ba:5e:9c:c1:20:75:38:55:04:57:4c:58: 9f:6e:17:be:b0:fc:99:64:22:d5:9c:ad:e2:93:20: d0:14:29:b5:61:e4:24:74:7f:56:ff:4a:89:41:4c: 6d:0b:37:81:38:97:dd:d6:01:e9:8f:6e:2f:a6:47: 32:40:c9:c3:0a:e9:96:64:09:14:be:0d:a4:7f:d7: 87:f0:c1:b3:56:a3:ca:50:17:28:0a:f6:df:46:a2: 09:23:44:47:d2:43:86:47:5f:9f:68:ab:b4:cf:b4: 98:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4D:F6:C4:F1:74:55:AA:A1:C5:BE:D8:9A:C2:E2:D8:B2:01:91:B8 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/065A717E9B6E11EFBCAB692BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:b001:1000::/40 2407:b001:3000::/40 Signature Algorithm: sha256WithRSAEncryption 6c:ca:52:8e:9f:94:a6:62:0b:83:26:ef:c5:dd:03:df:d2:af: a5:4d:55:c5:e6:bd:dd:cc:29:85:f8:56:96:3b:01:88:46:83: 10:b5:a6:90:d9:03:38:09:84:d3:da:3b:9b:dd:62:3b:ec:cd: 88:17:9a:7d:65:44:96:f0:8d:7a:7e:94:fb:04:57:90:fd:13: cf:9d:aa:ab:57:f3:75:20:56:65:d2:b1:be:71:ba:e5:67:42: 97:7e:24:4d:41:5e:f6:86:d4:43:35:e9:c9:11:7c:d2:48:49: 42:e2:f3:2c:f6:ac:50:52:ef:0b:5a:0c:00:56:8b:a9:57:ed: ff:34:59:9f:d5:54:1f:ad:1a:7e:41:da:37:2f:3c:df:55:8b: 0c:7a:4e:80:36:2d:28:92:3c:24:b8:5b:89:92:28:b4:22:63: 29:7a:85:1b:91:44:64:fa:94:3b:0a:d9:9c:c1:db:c0:4d:35: 41:10:d3:b0:4f:58:84:f4:0e:c6:f1:45:cc:e2:67:f9:dd:d4: 37:c4:52:e1:d9:40:7f:0d:43:63:da:ea:83:bf:ef:08:c7:1d: 63:f5:09:49:ad:f2:49:71:90:2c:1c:d1:d0:1b:f1:01:21:10: ed:d0:d3:52:d0:4f:89:3f:1a:a3:6a:24:23:f8:05:ce:4c:de: f7:74:b5:3d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwODE2MTkzMDA3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEwZGMzZS02ZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlN/Guz0k3UQMGOsc7415SeS0E+6UsmD8+zEirphLDOIBrNKgTib+HVNTrlq MDdAyF4wiOQ3grTUL2ATDBmX5LmQm7pmgg4KnN9N2qeBBovYf87Qxqgz3ffol/3S rYV9x25nY6ZexWh0LYEy+fkJ/m4CanMsJRBM5Cpk2d9T4swcegks+GnIsmJ2Ui37 ePG9075gKWUAB6G6XpzBIHU4VQRXTFifbhe+sPyZZCLVnK3ikyDQFCm1YeQkdH9W /0qJQUxtCzeBOJfd1gHpj24vpkcyQMnDCumWZAkUvg2kf9eH8MGzVqPKUBcoCvbf RqIJI0RH0kOGR1+faKu0z7SYVQIDAQABo4ICnzCCApswHQYDVR0OBBYEFFVN9sTx dFWqocW+2JrC4tiyAZG4MB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvMDY1QTcxN0U5 QjZFMTFFRkJDQUI2OTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQcBAf8E GjAYMBYEAgACMBADBgAkB7ABEAMGACQHsAEwMA0GCSqGSIb3DQEBCwUAA4IBAQBs ylKOn5SmYguDJu/F3QPf0q+lTVXF5r3dzCmF+FaWOwGIRoMQtaaQ2QM4CYTT2jub 3WI77M2IF5p9ZUSW8I16fpT7BFeQ/RPPnaqrV/N1IFZl0rG+cbrlZ0KXfiRNQV72 htRDNenJEXzSSElC4vMs9qxQUu8LWgwAVoupV+3/NFmf1VQfrRp+Qdo3LzzfVYsM ek6ANi0okjwkuFuJkii0ImMpeoUbkURk+pQ7CtmcwdvATTVBENOwT1iE9A7G8UXM 4mf53dQ3xFLh2UB/DUNj2uqDv+8Ixx1j9QlJrfJJcZAsHNHQG/EBIRDt0NNS0E+J PxqjaiQj+AXOTN73dLU9 -----END CERTIFICATE-----Generated at Sun Aug 24 01:02:20 2025 by rpki-client