$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/958CC8DA1C2611ECB416AA68C4F9AE02.roa File: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (raw, json) Hash identifier: SlT7b5WGF4xDvO5UnYsRWIEsNMsfCj2P0RDQ0c4uxVg= Subject key identifier: 2D:83:18:F5:55:28:9F:13:5A:02:F2:45:34:7C:17:1C:D5:99:B6:1A Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C44 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/958CC8DA1C2611ECB416AA68C4F9AE02.roa Signing time: Sat 16 Aug 2025 19:30:08 +0000 ROA not before: Sat 16 Aug 2025 19:30:08 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 394749 IP address blocks: 2407:b000:4015::/48 maxlen: 48 2407:b001:1010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Aug 16 19:30:08 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a0dc40-e14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d6:e3:04:de:db:c6:25:3f:d2:06:ac:52:93: 8c:58:12:a2:61:a4:03:44:71:8b:11:2b:b5:34:25: ef:8d:93:2a:32:c8:08:2f:ec:7e:65:08:2f:57:28: af:39:35:d3:c8:a3:7a:83:72:fb:fd:47:6f:ce:66: 6b:86:7c:4a:cb:2b:44:05:39:57:72:92:3b:88:bf: 18:74:05:05:02:97:45:4d:a0:53:4b:5e:65:01:a8: 13:03:0c:a9:5f:e8:47:a2:1c:fa:ba:3c:c3:de:c0: 0b:15:de:85:a3:a0:80:14:86:09:5b:83:37:94:3b: 2e:b7:ca:9d:20:19:d8:01:08:c5:30:29:e1:a3:1e: 56:b2:cb:9f:51:66:2d:70:83:29:68:31:82:57:4b: d7:a6:8f:0d:d9:22:6d:48:17:03:eb:c0:b9:2a:56: f9:13:3b:9d:45:03:6c:2b:bb:9d:cc:da:73:ec:71: 7e:f0:e8:e2:e8:e3:9a:69:34:38:64:b1:61:44:af: 42:58:fb:a8:1f:49:af:40:fe:f6:05:27:dd:7a:31: ea:b6:61:49:df:ba:2f:33:84:5f:e3:7a:6c:cd:3a: 9f:29:fa:f9:aa:55:51:62:6d:cf:9a:fd:6b:ea:36: a1:91:a3:5b:02:87:91:8d:e3:fa:fa:7d:41:8f:8c: bd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:83:18:F5:55:28:9F:13:5A:02:F2:45:34:7C:17:1C:D5:99:B6:1A X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/958CC8DA1C2611ECB416AA68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:b000:4015::/48 2407:b001:1010::/48 Signature Algorithm: sha256WithRSAEncryption 6f:98:eb:39:23:48:1c:4d:15:1a:e9:65:cc:2a:3b:1c:f0:c1: c8:6d:70:f1:78:3e:2f:15:e8:78:56:a3:95:94:29:ba:ab:02: b2:ba:94:7f:89:66:ea:ad:e8:5d:07:db:cf:73:66:5b:7a:4f: a6:92:a2:04:01:d0:c8:40:87:92:d8:fb:3d:74:af:d8:f5:f5: 6c:8a:5f:70:2e:29:bb:c8:47:ea:25:56:5f:f0:18:c8:ea:11: 4f:bf:ff:34:13:35:b5:c3:31:e0:a7:ef:41:68:01:55:86:52: 97:83:4f:1b:2c:32:6a:0f:78:75:0b:71:ed:fb:f9:81:d6:45: 75:7b:9e:5a:d0:41:5c:61:1b:73:7d:97:24:4d:c1:98:ff:f4: a8:a0:37:3b:d2:4c:c2:12:bd:17:24:9d:68:41:49:77:e1:fa: 7c:d5:ee:b0:c5:37:3e:bf:90:7c:a0:cb:ba:c2:5f:e9:11:b2: f9:ce:f8:df:7b:ac:86:2f:5d:89:c1:99:6d:69:33:c0:68:9b: a2:ec:aa:92:7f:23:ae:25:27:89:e4:f9:a7:72:f6:67:0a:f9: b9:d6:e2:9a:ef:70:23:76:5a:75:7f:b3:55:2d:7c:0c:97:1c: db:e5:64:8b:6b:9e:ae:73:88:e9:47:1c:f4:3f:35:d0:6a:ab: bb:c2:aa:3b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwODE2MTkzMDA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEwZGM0MC1lMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztbjBN7bxiU/0gasUpOMWBKiYaQDRHGLESu1NCXvjZMqMsgIL+x+ZQgvVyiv OTXTyKN6g3L7/UdvzmZrhnxKyytEBTlXcpI7iL8YdAUFApdFTaBTS15lAagTAwyp X+hHohz6ujzD3sALFd6Fo6CAFIYJW4M3lDsut8qdIBnYAQjFMCnhox5WssufUWYt cIMpaDGCV0vXpo8N2SJtSBcD68C5Klb5EzudRQNsK7udzNpz7HF+8Oji6OOaaTQ4 ZLFhRK9CWPuoH0mvQP72BSfdejHqtmFJ37ovM4Rf43pszTqfKfr5qlVRYm3Pmv1r 6jahkaNbAoeRjeP6+n1Bj4y9aQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFC2DGPVV KJ8TWgLyRTR8FxzVmbYaMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvOTU4Q0M4REEx QzI2MTFFQ0I0MTZBQTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkB7AAQBUDBwAkB7ABEBAwDQYJKoZIhvcNAQELBQADggEB AG+Y6zkjSBxNFRrpZcwqOxzwwchtcPF4Pi8V6HhWo5WUKbqrArK6lH+JZuqt6F0H 289zZlt6T6aSogQB0MhAh5LY+z10r9j19WyKX3AuKbvIR+olVl/wGMjqEU+//zQT NbXDMeCn70FoAVWGUpeDTxssMmoPeHULce37+YHWRXV7nlrQQVxhG3N9lyRNwZj/ 9KigNzvSTMISvRcknWhBSXfh+nzV7rDFNz6/kHygy7rCX+kRsvnO+N97rIYvXYnB mW1pM8Bom6LsqpJ/I64lJ4nk+ady9mcK+bnW4prvcCN2WnV/s1UtfAyXHNvlZItr nq5ziOlHHPQ/NdBqq7vCqjs= -----END CERTIFICATE-----Generated at Sun Aug 24 03:33:53 2025 by rpki-client