$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1D884A0AC36111E9A37AC46EC4F9AE02.roa File: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (raw, json) Hash identifier: qyDf++LPWxa+MkjWOgRr95EIpuQ2+myemcO9SD4YHEk= Subject key identifier: FF:55:6A:0C:2B:D1:1F:56:14:46:1C:AE:94:A3:29:BE:FD:56:12:F3 Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Certificate serial: 0DB9 Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1D884A0AC36111E9A37AC46EC4F9AE02.roa Signing time: Fri 04 Jul 2025 18:27:31 +0000 ROA not before: Fri 04 Jul 2025 18:27:31 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45820 IP address blocks: 2001:df7:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3513 (0xdb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Validity Not Before: Jul 4 18:27:31 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68681d12-2547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:05:b4:dc:7d:26:53:c6:cc:82:f8:d1:2b: 84:7a:0d:fc:1d:93:d0:44:94:de:36:f6:aa:dd:18: e6:b1:ce:1d:76:0e:18:e0:5a:c6:05:06:d0:d0:28: 3a:f0:e9:97:79:ad:ba:f3:45:21:a9:1a:8f:3e:bb: 8b:f2:c6:d9:c3:ce:92:fa:00:e4:bd:7e:ca:6f:1f: 33:09:8f:18:d5:f8:04:05:02:6e:35:70:00:35:af: f8:0f:57:04:ff:c2:52:bd:19:af:d0:cf:d3:31:88: cd:36:73:e4:dc:15:9f:53:e7:9d:02:2c:b2:1b:49: 6f:15:3d:df:27:d1:a8:3e:f9:86:16:55:1f:e5:f4: d1:49:af:e3:55:6c:22:ef:8b:c6:aa:15:7d:d6:c1: b9:23:22:89:98:2a:be:1b:f0:74:00:ab:7a:34:04: c8:71:1c:bb:75:83:e2:d3:a8:5d:de:3b:ff:3d:2f: 75:10:41:78:9c:80:a0:dd:77:d1:77:92:57:1f:06: ac:20:98:1f:73:41:18:36:03:ad:eb:f4:c9:98:48: e7:e2:a2:41:b0:51:0b:71:a8:62:bd:ed:84:2f:c0: ea:d1:dd:9a:a6:d9:35:44:8d:1d:f5:22:81:4e:59: d3:0f:33:2a:ea:df:d8:fe:e2:18:a9:39:28:5f:e9: c2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:55:6A:0C:2B:D1:1F:56:14:46:1C:AE:94:A3:29:BE:FD:56:12:F3 X509v3 Authority Key Identifier: keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1D884A0AC36111E9A37AC46EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df7:6000::/48 Signature Algorithm: sha256WithRSAEncryption 59:ed:8a:3d:54:73:20:c9:75:6c:ca:54:ce:c7:e9:0b:7f:58: e2:c1:37:cc:2d:38:64:c1:de:63:82:93:cd:c6:1e:b7:67:43: 4c:b1:83:85:82:e6:57:8e:de:93:21:fc:ca:f8:6b:09:0e:e6: 61:2b:0d:f7:4e:32:12:49:19:ed:fe:1e:27:5e:d0:ab:9d:65: e4:6f:86:e8:56:f2:ef:96:0b:fc:02:7c:77:51:58:52:62:d1: 58:e0:6a:c5:f5:9b:a7:1a:88:65:08:3e:af:84:1f:57:70:cc: d1:4d:99:e0:00:a9:2e:9b:7a:da:c1:ee:c3:ce:31:1f:c5:1f: 9d:e2:8e:86:52:c9:c9:84:ef:02:80:6f:bb:45:6e:e0:e0:1c: dd:90:b9:5b:f5:e8:f4:8c:c9:97:d0:68:ae:f9:17:16:6b:90: 31:97:24:b8:b2:d9:85:52:02:fb:68:16:2b:b8:2d:8b:ca:34: 91:e3:00:87:d5:ae:71:7a:a0:f3:f3:83:da:91:43:05:af:61: 95:87:23:b6:67:d6:25:d6:b8:cb:a6:98:1b:81:12:60:2b:30: 89:24:74:b5:c5:0f:60:8c:41:08:75:01:b8:5c:55:e8:ca:ae: 49:03:ae:65:14:28:42:47:82:20:02:c0:67:59:b6:bf:26:d4: be:23:d6:ad -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz NEVEQTlDNjMwHhcNMjUwNzA0MTgyNzMxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4MWQxMi0yNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYoFtNx9JlPGzIL40SuEeg38HZPQRJTeNvaq3Rjmsc4ddg4Y4FrGBQbQ0Cg6 8OmXea2680UhqRqPPruL8sbZw86S+gDkvX7Kbx8zCY8Y1fgEBQJuNXAANa/4D1cE /8JSvRmv0M/TMYjNNnPk3BWfU+edAiyyG0lvFT3fJ9GoPvmGFlUf5fTRSa/jVWwi 74vGqhV91sG5IyKJmCq+G/B0AKt6NATIcRy7dYPi06hd3jv/PS91EEF4nICg3XfR d5JXHwasIJgfc0EYNgOt6/TJmEjn4qJBsFELcahive2EL8Dq0d2aptk1RI0d9SKB TlnTDzMq6t/Y/uIYqTkoX+nCyQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFP9Vagwr 0R9WFEYcrpSjKb79VhLzMB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ1MjkvMjBDRjJFMTRDMzYwMTFFOThBNUMwMjZEQzRGOUFFMDIvMUQ4ODRBMEFD MzYxMTFFOUEzN0FDNDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ33YAAwDQYJKoZIhvcNAQELBQADggEBAFntij1UcyDJ dWzKVM7H6Qt/WOLBN8wtOGTB3mOCk83GHrdnQ0yxg4WC5leO3pMh/Mr4awkO5mEr DfdOMhJJGe3+Hide0KudZeRvhuhW8u+WC/wCfHdRWFJi0VjgasX1m6caiGUIPq+E H1dwzNFNmeAAqS6betrB7sPOMR/FH53ijoZSycmE7wKAb7tFbuDgHN2QuVv16PSM yZfQaK75FxZrkDGXJLiy2YVSAvtoFiu4LYvKNJHjAIfVrnF6oPPzg9qRQwWvYZWH I7Zn1iXWuMummBuBEmArMIkkdLXFD2CMQQh1AbhcVejKrkkDrmUUKEJHgiACwGdZ tr8m1L4j1q0= -----END CERTIFICATE-----Generated at Sat Jul 5 02:01:48 2025 by rpki-client