$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C2C631C8A47911E99DBEDD52C4F9AE02.roa File: C2C631C8A47911E99DBEDD52C4F9AE02.roa (raw, json) Hash identifier: Xmn9rKXqawcB/ajmntmSYWXo/n1a94MI1ePlNWCx+l8= Subject key identifier: 94:2D:BB:68:36:A0:49:84:3C:7A:23:5D:9D:EF:5A:8D:09:A2:69:EE Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Certificate serial: 383F Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C2C631C8A47911E99DBEDD52C4F9AE02.roa Signing time: Mon 18 Aug 2025 14:50:29 +0000 ROA not before: Mon 18 Aug 2025 14:50:29 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 58562 IP address blocks: 2001:c20:c817::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14399 (0x383f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Validity Not Before: Aug 18 14:50:29 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a33db4-39d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:aa:b4:01:21:80:50:d2:7d:04:10:51:49: 32:63:0a:8b:7d:99:0f:4f:a1:7a:22:eb:c1:40:5e: cf:60:2d:3f:32:79:02:3d:33:af:8a:6a:b7:91:5f: 2b:13:66:c2:8e:db:04:59:f0:e4:f5:aa:93:81:c4: c0:14:d1:ef:9f:95:d9:45:d5:1e:e8:5b:c5:59:82: de:80:c7:c7:e4:1a:e3:63:9b:ec:5b:57:38:a2:73: 41:cc:32:18:aa:e4:9c:51:72:a7:f4:24:ea:5c:43: ae:7d:5f:11:d5:ca:7b:f2:ba:8b:f6:63:fe:c1:89: c0:c0:f7:b2:1f:7a:7a:3e:9e:0e:9a:19:0c:7b:de: d3:97:2d:f4:68:c9:73:2e:fe:73:34:fc:71:b1:1a: 11:7d:3e:97:6e:b1:80:2c:0b:fc:3b:c5:e2:7d:b8: 5e:68:4d:b6:df:36:56:8c:92:ac:75:04:7b:f6:ea: c4:38:48:0f:93:50:39:1c:8a:fe:f5:d0:b4:83:e8: 36:e8:13:a5:6d:45:66:59:7d:0a:12:7f:6a:09:30: 81:13:0e:36:2c:b3:8a:af:24:4a:49:83:5f:5a:9f: 6f:cc:0d:38:10:11:58:8a:21:e9:72:d4:d5:46:77: cb:aa:87:1a:7b:46:e5:99:b5:b5:d8:82:8b:c0:f4: f8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2D:BB:68:36:A0:49:84:3C:7A:23:5D:9D:EF:5A:8D:09:A2:69:EE X509v3 Authority Key Identifier: keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C2C631C8A47911E99DBEDD52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:c20:c817::/48 Signature Algorithm: sha256WithRSAEncryption 33:33:c7:d1:b3:20:f8:28:8a:cb:af:2b:04:9d:cd:5a:b1:8d: 5c:a1:c4:3a:a1:97:39:94:eb:62:15:20:80:57:ca:d2:f2:ce: 12:0f:8b:39:a2:4e:fa:b2:b9:27:7f:b4:89:f9:ee:fd:fd:4d: 3f:60:3e:a1:30:6d:66:ee:10:ab:7e:80:18:30:79:4a:3c:bb: 3b:9e:ae:db:d2:eb:da:16:48:1f:26:44:6d:0b:03:d9:45:ca: db:82:a4:ec:03:00:df:e9:7e:f6:2f:f3:31:62:27:96:6c:c5: 83:5e:44:6f:16:5a:f9:70:17:9f:16:f5:96:38:c8:68:40:50: ee:a0:79:1d:21:18:23:28:e4:2f:74:bf:40:d9:26:69:df:bb: f6:88:e6:6a:0b:cd:84:1a:14:93:3d:4a:b0:e7:01:c5:da:14: d4:98:72:cb:5d:97:17:f2:16:49:43:91:e8:df:6e:74:c4:a6: da:4c:a8:8c:3f:67:41:c8:1f:5c:33:e3:2b:61:1f:2c:45:06: 0f:fb:a8:6c:fe:d6:f7:81:7a:55:90:ae:d0:48:27:39:6a:44: d0:7e:e4:f1:7d:e3:de:39:f9:bb:6c:22:11:29:41:61:f3:4d: ed:fe:ac:83:34:5b:ff:4d:ad:56:c3:6a:8f:58:3e:90:de:df: bb:20:77:ce -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICOD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0 MkI1MDUxQ0UwHhcNMjUwODE4MTQ1MDI5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzM2RiNC0zOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroaqtAEhgFDSfQQQUUkyYwqLfZkPT6F6IuvBQF7PYC0/MnkCPTOvimq3kV8r E2bCjtsEWfDk9aqTgcTAFNHvn5XZRdUe6FvFWYLegMfH5BrjY5vsW1c4onNBzDIY quScUXKn9CTqXEOufV8R1cp78rqL9mP+wYnAwPeyH3p6Pp4OmhkMe97Tly30aMlz Lv5zNPxxsRoRfT6XbrGALAv8O8XifbheaE223zZWjJKsdQR79urEOEgPk1A5HIr+ 9dC0g+g26BOlbUVmWX0KEn9qCTCBEw42LLOKryRKSYNfWp9vzA04EBFYiiHpctTV RnfLqocae0blmbW12IKLwPT48wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJQtu2g2 oEmEPHojXZ3vWo0JomnuMB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNjkwN0MzRTIxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvQzJDNjMxQzhB NDc5MTFFOTlEQkVERDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQwgyBcwDQYJKoZIhvcNAQELBQADggEBADMzx9GzIPgo isuvKwSdzVqxjVyhxDqhlzmU62IVIIBXytLyzhIPizmiTvqyuSd/tIn57v39TT9g PqEwbWbuEKt+gBgweUo8uzuertvS69oWSB8mRG0LA9lFytuCpOwDAN/pfvYv8zFi J5ZsxYNeRG8WWvlwF58W9ZY4yGhAUO6geR0hGCMo5C90v0DZJmnfu/aI5moLzYQa FJM9SrDnAcXaFNSYcstdlxfyFklDkejfbnTEptpMqIw/Z0HIH1wz4ythHyxFBg/7 qGz+1veBelWQrtBIJzlqRNB+5PF94945+btsIhEpQWHzTe3+rIM0W/9NrVbDao9Y PpDe37sgd84= -----END CERTIFICATE-----Generated at Sun Aug 24 02:33:38 2025 by rpki-client