$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9AC721604BC211EEA7AF2B6FC4F9AE02.roa File: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (raw, json) Hash identifier: HgWyC5qLUIQClxHJEnvtF6CqTubXKBmljCRRSfRxHP0= Subject key identifier: 74:15:EB:E9:9B:DF:2E:FB:21:3F:EB:18:3B:20:66:16:5F:C2:AB:02 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 038E Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9AC721604BC211EEA7AF2B6FC4F9AE02.roa Signing time: Wed 18 Jun 2025 01:28:31 +0000 ROA not before: Wed 18 Jun 2025 01:28:31 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 151338 IP address blocks: 2400:70e0:bab::/48 maxlen: 48 2400:70e0:baf::/48 maxlen: 48 2400:70e0:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 910 (0x38e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: Jun 18 01:28:31 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6852163f-a9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:28:b5:af:aa:56:79:44:a1:f2:0c:fc:74:e0: 3e:9c:c1:d6:4e:46:79:5f:bb:19:82:6e:ae:05:98: b4:9e:48:97:a9:55:12:0b:2e:54:7d:1c:bf:d9:fb: 32:2d:2d:a8:9e:2d:10:9a:f7:f7:76:03:0c:ee:ec: bd:35:4a:57:7d:1e:7b:77:97:67:6e:e0:3a:18:1a: 9a:be:a9:be:66:87:55:df:29:67:05:af:2c:1f:52: 44:9d:a3:0b:3a:0b:c6:7d:54:b6:dd:8d:22:33:d2: cf:b7:61:c2:d5:c5:69:e9:bf:03:e2:ec:5a:61:25: a4:70:cd:ee:93:2a:f8:21:56:3e:7d:a1:9a:5b:cc: ef:dc:3d:8e:aa:1b:4e:32:a4:69:dc:5c:08:ff:f7: 11:28:a7:2f:b5:75:fb:c2:83:ec:c1:25:dd:ed:08: e3:2f:09:32:01:7f:d8:ab:d2:45:23:97:c5:cb:9f: 82:06:a2:8c:83:40:fc:36:b1:bc:31:e9:0b:9e:0b: ac:63:f1:02:db:1b:be:55:19:1a:de:fa:f0:a6:67: 36:cb:45:30:ea:ba:db:7d:a4:d9:d7:9b:f7:33:4e: 74:75:2a:f1:49:ce:ba:be:19:54:9c:29:e0:cc:69: 3d:91:9a:03:60:f6:12:9b:e5:7c:f1:5c:38:fa:ae: 9a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:15:EB:E9:9B:DF:2E:FB:21:3F:EB:18:3B:20:66:16:5F:C2:AB:02 X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9AC721604BC211EEA7AF2B6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:70e0:bab::/48 2400:70e0:baf::/48 2400:70e0:b000::/48 Signature Algorithm: sha256WithRSAEncryption 4f:cf:b7:d3:ae:32:f2:a3:5f:c7:c5:39:27:19:90:6e:0a:59: 35:23:48:aa:11:9b:3d:5f:2d:d5:f9:fe:f4:19:06:c8:5f:14: 86:d3:ad:f0:1e:98:9d:39:40:25:ea:65:75:ed:05:12:f1:a2: f8:0f:9b:78:dd:f4:82:7c:8f:45:9e:01:85:06:f1:20:a2:e1: 74:60:21:62:0a:b7:11:b6:43:8d:0e:ba:72:10:0a:1d:a3:fc: fc:4f:f1:9e:2b:10:1a:9e:cf:8c:24:e1:62:bc:d2:45:9a:90: 8c:af:0a:86:f8:97:dd:a1:e0:fe:cb:85:ea:b5:a7:4e:0f:09: 86:a3:fc:7b:eb:84:87:58:b9:a2:a7:c0:56:a3:02:f1:56:4f: 3f:7e:13:b0:02:93:7c:74:e7:81:0a:12:18:e2:88:5d:4b:fa: b3:33:dd:fa:b4:aa:8e:39:bb:8a:3e:51:bf:38:c8:32:4f:6b: af:ac:c3:68:32:82:f7:df:93:62:c3:34:a0:65:c8:53:ff:6d: 84:a4:18:41:5f:18:67:b2:7d:ce:74:fa:90:8d:82:71:4d:52: 66:d3:6e:98:bc:60:db:f1:ad:db:5c:62:27:e7:6c:b6:98:31: ea:82:a6:f4:cd:3f:87:87:eb:c9:19:e5:8f:e0:da:95:80:9b: 9f:21:75:ac -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjUwNjE4MDEyODMxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUyMTYzZi1hOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+yi1r6pWeUSh8gz8dOA+nMHWTkZ5X7sZgm6uBZi0nkiXqVUSCy5UfRy/2fsy LS2oni0Qmvf3dgMM7uy9NUpXfR57d5dnbuA6GBqavqm+ZodV3ylnBa8sH1JEnaML OgvGfVS23Y0iM9LPt2HC1cVp6b8D4uxaYSWkcM3ukyr4IVY+faGaW8zv3D2OqhtO MqRp3FwI//cRKKcvtXX7woPswSXd7QjjLwkyAX/Yq9JFI5fFy5+CBqKMg0D8NrG8 MekLngusY/EC2xu+VRka3vrwpmc2y0Uw6rrbfaTZ15v3M050dSrxSc66vhlUnCng zGk9kZoDYPYSm+V88Vw4+q6aCwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHQV6+mb 3y77IT/rGDsgZhZfwqsCMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI4MzcvOUQ5MEFCNjJDMTVBMTFFQ0E0NEY1MzYwQzRGOUFFMDIvOUFDNzIxNjA0 QkMyMTFFRUE3QUYyQjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMCEEAgACMBsDBwAkAHDgC6sDBwAkAHDgC68DBwAkAHDgsAAwDQYJKoZIhvcN AQELBQADggEBAE/Pt9OuMvKjX8fFOScZkG4KWTUjSKoRmz1fLdX5/vQZBshfFIbT rfAemJ05QCXqZXXtBRLxovgPm3jd9IJ8j0WeAYUG8SCi4XRgIWIKtxG2Q40OunIQ Ch2j/PxP8Z4rEBqez4wk4WK80kWakIyvCob4l92h4P7Lheq1p04PCYaj/HvrhIdY uaKnwFajAvFWTz9+E7ACk3x054EKEhjiiF1L+rMz3fq0qo45u4o+Ub84yDJPa6+s w2gygvffk2LDNKBlyFP/bYSkGEFfGGeyfc50+pCNgnFNUmbTbpi8YNvxrdtcYifn bLaYMeqCpvTNP4eH68kZ5Y/g2pWAm58hdaw= -----END CERTIFICATE-----Generated at Fri Jul 4 08:01:59 2025 by rpki-client