$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/5A8744D8143411EEAB1A5D73C4F9AE02.roa File: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (raw, json) Hash identifier: 9oN/rraJSk7Kign78bcfJYuxiKVkz1RMvAOI+ErcKZQ= Subject key identifier: D1:0B:26:42:F0:CE:51:E0:47:10:76:EE:F8:9F:C7:96:EE:59:32:9E Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Certificate serial: 188E Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/5A8744D8143411EEAB1A5D73C4F9AE02.roa Signing time: Tue 26 Aug 2025 16:55:10 +0000 ROA not before: Tue 26 Aug 2025 16:55:10 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38481 IP address blocks: 2407:e500:8::/47 maxlen: 47 2407:e500:a::/47 maxlen: 47 2407:e500:20::/47 maxlen: 47 2407:e500:30::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6286 (0x188e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Validity Not Before: Aug 26 16:55:10 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68ade6ed-200e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:7a:39:c2:fd:37:d2:49:50:fd:b3:d6:f8: 22:d9:e5:16:4c:4e:78:ab:82:c3:c1:b7:53:70:65: c5:ae:76:af:d1:70:0d:c4:7a:8d:4b:0e:df:41:95: 5c:d2:10:40:d7:94:51:b8:90:a3:b9:3a:28:10:b4: f1:0a:6d:2c:0c:5e:8d:22:cf:23:b6:7e:63:51:d8: a3:17:1f:45:74:bf:e6:1b:7f:7b:ae:e3:12:2b:77: 7a:53:12:15:d7:ff:2a:38:44:1c:6f:8c:4c:0e:7f: 71:c2:e6:ea:80:51:76:f7:60:d5:83:b0:30:52:76: 11:bb:36:ec:0a:7c:2a:de:42:e5:52:dc:78:aa:ac: 51:e9:8f:8a:a0:72:f7:d7:0d:65:3f:23:61:d0:34: a2:da:36:f6:d2:0e:9e:29:26:6a:2a:8e:7b:a1:cf: 46:1c:c3:34:78:4f:ca:b6:34:5e:f2:4f:2c:53:19: c2:94:0b:f8:66:86:ba:f8:08:b4:a4:fa:31:a5:1f: 84:c6:74:44:cc:1c:38:58:36:e7:25:2a:3c:0b:97: ee:63:85:59:4f:a3:29:6a:07:76:9c:c4:01:62:11: ba:76:b7:b2:21:92:f9:ff:7d:e3:31:58:f2:30:8e: e8:cd:8b:c5:03:b9:08:c0:7f:50:48:cb:cc:b5:75: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0B:26:42:F0:CE:51:E0:47:10:76:EE:F8:9F:C7:96:EE:59:32:9E X509v3 Authority Key Identifier: keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/5A8744D8143411EEAB1A5D73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:e500:8::/46 2407:e500:20::/47 2407:e500:30::/47 Signature Algorithm: sha256WithRSAEncryption 3a:dc:53:2b:1e:69:75:77:5b:f6:ed:b8:7e:00:5a:e3:fe:55: 11:84:ba:fa:bd:50:19:dc:b2:fc:fa:72:0e:6f:fe:05:91:41: a7:2d:a7:01:33:88:e3:fc:9e:30:3c:90:0d:bb:ef:9a:9a:d1: 23:6d:fb:57:05:2f:1d:45:62:dd:f4:fa:22:49:e9:61:4c:4d: 7a:07:d3:e8:c5:7c:50:33:73:9f:fe:04:79:8a:7a:b9:c4:3b: bb:c2:12:8e:6e:ce:a9:1b:23:49:70:56:0d:cf:b3:28:e9:37: a1:33:52:70:9f:2f:37:e2:0d:6f:d7:45:7d:cd:2e:27:66:fc: c3:77:53:2a:3d:eb:60:b1:9f:d8:17:91:aa:91:f0:51:11:fd: ca:a8:31:cb:c5:6f:6a:ee:a4:a5:eb:cc:39:fa:e0:47:70:9d: a5:79:9c:a4:dd:16:ef:d9:b5:03:53:fe:b9:b0:d9:9c:7f:0d: f6:2d:a5:33:ed:d4:8d:1d:c7:53:c8:24:46:8a:68:ac:b8:80: 1b:c5:8a:f9:1c:83:fd:0a:2c:ec:7a:50:ac:0e:98:98:1d:2f: 13:96:72:bf:f8:e7:18:80:98:9a:24:9c:e2:63:55:de:13:01: 37:b1:6e:8c:53:87:30:0c:51:13:49:e8:09:3a:94:f6:56:39: 3c:bb:4a:14 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICGI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG NjQyNDZDN0MwHhcNMjUwODI2MTY1NTEwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFkZTZlZC0yMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZR6OcL9N9JJUP2z1vgi2eUWTE54q4LDwbdTcGXFrnav0XANxHqNSw7fQZVc 0hBA15RRuJCjuTooELTxCm0sDF6NIs8jtn5jUdijFx9FdL/mG397ruMSK3d6UxIV 1/8qOEQcb4xMDn9xwubqgFF292DVg7AwUnYRuzbsCnwq3kLlUtx4qqxR6Y+KoHL3 1w1lPyNh0DSi2jb20g6eKSZqKo57oc9GHMM0eE/KtjRe8k8sUxnClAv4Zoa6+Ai0 pPoxpR+ExnREzBw4WDbnJSo8C5fuY4VZT6Mpagd2nMQBYhG6dreyIZL5/33jMVjy MI7ozYvFA7kIwH9QSMvMtXV6FQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNELJkLw zlHgRxB27vifx5buWTKeMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQzNkEvMzdBQkQ3MDhBQTlBMTFFN0JBQzQxMjUyQzRGOUFFMDIvNUE4NzQ0RDgx NDM0MTFFRUFCMUE1RDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMCEEAgACMBsDBwIkB+UAAAgDBwEkB+UAACADBwEkB+UAADAwDQYJKoZIhvcN AQELBQADggEBADrcUyseaXV3W/btuH4AWuP+VRGEuvq9UBncsvz6cg5v/gWRQact pwEziOP8njA8kA2775qa0SNt+1cFLx1FYt30+iJJ6WFMTXoH0+jFfFAzc5/+BHmK ernEO7vCEo5uzqkbI0lwVg3PsyjpN6EzUnCfLzfiDW/XRX3NLidm/MN3Uyo962Cx n9gXkaqR8FER/cqoMcvFb2rupKXrzDn64EdwnaV5nKTdFu/ZtQNT/rmw2Zx/DfYt pTPt1I0dx1PIJEaKaKy4gBvFivkcg/0KLOx6UKwOmJgdLxOWcr/45xiAmJoknOJj Vd4TATexboxThzAMURNJ6Ak6lPZWOTy7ShQ= -----END CERTIFICATE-----Generated at Mon Oct 20 11:30:43 2025 by rpki-client