$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/8C3BBD78F0D611EDAF996E15C4F9AE02.roa File: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (raw, json) Hash identifier: 2r5VjPZLTfd0cN6seY2Crq6UpUlVqdCBOQkEgVVnHqw= Subject key identifier: 7D:E3:29:DD:7E:F0:D3:27:6F:46:A6:C1:82:E7:11:6F:C2:5F:C1:6F Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Certificate serial: 1890 Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/8C3BBD78F0D611EDAF996E15C4F9AE02.roa Signing time: Tue 26 Aug 2025 16:55:12 +0000 ROA not before: Tue 26 Aug 2025 16:55:12 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38910 IP address blocks: 2407:e500:40::/43 maxlen: 43 2407:e500:40::/47 maxlen: 47 2407:e500:50::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6288 (0x1890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Validity Not Before: Aug 26 16:55:12 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68ade6ef-9a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8b:8e:4b:f7:84:a2:1b:0a:ea:5c:8c:a6:c2: f9:66:58:5c:c3:a2:82:73:94:62:b7:79:1c:5e:6d: 2b:2e:56:30:a2:b0:f8:4d:15:ce:cc:98:36:0f:f9: 35:21:1f:94:d0:9a:28:a8:81:6a:f1:1b:cf:c3:a9: 9d:53:d1:a8:d2:ff:5c:84:fa:2b:01:8e:39:78:2e: f4:70:fe:40:c8:06:71:72:1a:ba:5e:c4:b5:2b:b3: 02:e4:5e:49:06:74:e5:24:d4:e5:a6:a9:a2:00:30: 47:0d:83:86:d3:38:27:1b:d4:5d:d9:9b:ce:60:18: 85:02:f5:17:41:d7:88:b2:55:61:81:98:b1:7d:0b: 3a:41:94:d0:34:d8:e1:32:0f:de:cd:9d:fb:c6:48: 3d:93:94:7a:43:d3:1f:e8:4b:b5:6b:07:74:20:43: e5:5d:bd:9b:45:e2:2f:37:30:e3:00:f6:5a:0f:53: 35:31:61:b0:89:fa:86:24:7b:fc:9c:10:b5:2b:b5: bb:e7:82:85:c0:82:db:9d:61:d5:56:ac:09:53:92: 20:5f:a1:4c:aa:5c:7c:43:0e:d8:37:a1:03:e7:96: 5c:eb:76:50:5f:f2:f5:e6:2e:05:d5:b8:c4:e2:da: b5:b6:c6:9d:1f:22:b0:60:8f:94:08:17:dc:5b:eb: eb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E3:29:DD:7E:F0:D3:27:6F:46:A6:C1:82:E7:11:6F:C2:5F:C1:6F X509v3 Authority Key Identifier: keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/8C3BBD78F0D611EDAF996E15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:e500:40::/43 Signature Algorithm: sha256WithRSAEncryption 53:2d:7c:34:06:f2:11:10:f4:aa:cd:b8:22:f6:d9:90:fb:57: bc:4b:ca:8a:16:17:0e:3e:60:94:7d:a4:3c:00:c3:76:bd:51: 35:f3:a2:83:41:3d:f5:45:0f:5d:88:37:85:f2:e4:d7:0a:fb: 4b:3f:a1:6f:a7:47:f6:e8:b3:b0:08:c0:1a:7f:bc:27:8e:55: 82:dd:17:41:82:00:52:da:71:88:ed:90:a4:39:9e:c3:b4:88: aa:f5:e7:f8:6a:1b:ef:48:42:86:24:0a:0a:64:99:38:30:70: b1:56:db:7f:ed:83:c6:a5:33:30:bb:98:b5:55:c5:2f:cf:dd: dc:63:ab:c8:7a:57:52:31:98:9a:7c:30:14:8a:94:27:d9:85: e8:ad:b8:7b:e8:7d:bd:d6:5d:06:30:f8:70:58:81:90:3d:38: 4e:5d:dd:d0:e6:0e:39:c4:b3:bc:18:ff:b9:0d:d0:1b:ad:bd: e9:c6:51:77:e5:46:81:57:59:fa:de:a3:a0:03:b9:73:c5:88: 29:dc:ac:66:c4:32:a3:af:73:53:5a:3e:d7:c4:f8:9a:43:de: 82:b7:4e:5e:75:11:d9:4a:b0:21:7a:af:8b:f7:ba:97:5a:50: 96:f7:ca:3c:48:0d:17:dc:61:ea:5a:10:18:a2:c5:e2:70:6d: aa:77:b8:e7 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICGJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG NjQyNDZDN0MwHhcNMjUwODI2MTY1NTEyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFkZTZlZi05YTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IuOS/eEohsK6lyMpsL5Zlhcw6KCc5Rit3kcXm0rLlYworD4TRXOzJg2D/k1 IR+U0JooqIFq8RvPw6mdU9Go0v9chPorAY45eC70cP5AyAZxchq6XsS1K7MC5F5J BnTlJNTlpqmiADBHDYOG0zgnG9Rd2ZvOYBiFAvUXQdeIslVhgZixfQs6QZTQNNjh Mg/ezZ37xkg9k5R6Q9Mf6Eu1awd0IEPlXb2bReIvNzDjAPZaD1M1MWGwifqGJHv8 nBC1K7W754KFwILbnWHVVqwJU5IgX6FMqlx8Qw7YN6ED55Zc63ZQX/L15i4F1bjE 4tq1tsadHyKwYI+UCBfcW+vruQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFH3jKd1+ 8NMnb0amwYLnEW/CX8FvMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQzNkEvMzdBQkQ3MDhBQTlBMTFFN0JBQzQxMjUyQzRGOUFFMDIvOEMzQkJENzhG MEQ2MTFFREFGOTk2RTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwUkB+UAAEAwDQYJKoZIhvcNAQELBQADggEBAFMtfDQG8hEQ 9KrNuCL22ZD7V7xLyooWFw4+YJR9pDwAw3a9UTXzooNBPfVFD12IN4Xy5NcK+0s/ oW+nR/bos7AIwBp/vCeOVYLdF0GCAFLacYjtkKQ5nsO0iKr15/hqG+9IQoYkCgpk mTgwcLFW23/tg8alMzC7mLVVxS/P3dxjq8h6V1IxmJp8MBSKlCfZheituHvofb3W XQYw+HBYgZA9OE5d3dDmDjnEs7wY/7kN0ButvenGUXflRoFXWfreo6ADuXPFiCnc rGbEMqOvc1NaPtfE+JpD3oK3Tl51EdlKsCF6r4v3updaUJb3yjxIDRfcYepaEBii xeJwbap3uOc= -----END CERTIFICATE-----Generated at Mon Oct 20 05:39:54 2025 by rpki-client