$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/0A6D07FC913D11F092E92E65C4F9AE02.roa File: 0A6D07FC913D11F092E92E65C4F9AE02.roa (raw, json) Hash identifier: jnC/bVKzkBW2sgZUOJOTTr6DZW8ZjwQTZXz1lcwwzCM= Subject key identifier: 5F:FA:B3:49:C8:21:6F:34:55:90:28:EE:2F:47:B0:05:E7:AC:8D:BD Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3 Certificate serial: 06A4 Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/0A6D07FC913D11F092E92E65C4F9AE02.roa Signing time: Sun 14 Sep 2025 07:33:01 +0000 ROA not before: Sun 14 Sep 2025 07:33:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139325 IP address blocks: 2001:df6:5480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3 Validity Not Before: Sep 14 07:33:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68c66fac-672a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3a:4c:54:b6:75:11:47:21:92:79:7e:0b:aa: b9:25:7b:2d:ba:b2:66:74:88:00:5d:82:41:cc:d8: 2a:a5:30:74:1e:37:f4:d5:41:09:27:83:43:5b:5a: d0:e5:69:8b:38:ef:f4:7b:e1:9f:ec:33:f4:7c:dc: 86:6f:71:3b:8b:8d:50:ef:53:43:58:21:c0:a9:86: 2c:fc:8e:48:1f:fc:c6:c7:d7:04:0b:9e:d2:85:be: a3:7c:d2:45:b2:ef:48:33:df:2a:68:50:10:3b:bb: de:00:d0:52:a0:77:ed:0c:ba:e0:39:31:30:cd:9a: 82:10:9d:cb:c6:14:a0:22:cd:4a:5c:e6:e8:08:e2: 8e:6d:56:f1:80:b5:16:fc:41:c8:56:32:76:65:b5: 32:3b:82:05:83:0d:ca:bb:2b:c3:a3:db:4d:8e:4e: aa:37:c4:e7:76:b4:33:45:e2:2e:1f:70:47:15:58: 25:d1:c1:72:3b:6c:52:9c:a6:3f:8a:89:39:fd:87: b0:c3:bf:e1:7a:31:86:d0:2f:d0:70:dc:b1:7e:cf: 7f:9f:15:a0:7b:af:a7:01:31:6f:e7:ef:bf:6b:e2: a8:39:1b:9a:a7:38:75:20:8a:e7:3c:36:b8:f5:8d: b4:c7:1f:66:7b:75:c3:9e:3d:f5:22:ab:25:33:1d: 0b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FA:B3:49:C8:21:6F:34:55:90:28:EE:2F:47:B0:05:E7:AC:8D:BD X509v3 Authority Key Identifier: keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/0A6D07FC913D11F092E92E65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:5480::/48 Signature Algorithm: sha256WithRSAEncryption 1d:ce:4e:a2:e0:a8:3d:21:2c:21:7f:6d:d0:bb:de:6c:25:f6: fe:22:07:9a:d3:a4:08:9b:c5:0f:76:27:3c:3b:75:3a:f0:9f: c6:ab:d2:41:e8:69:ee:c9:4a:64:de:50:d8:b7:2f:b8:b1:c9: 2e:31:fa:77:97:1a:5f:ba:7b:d0:f3:87:4d:4c:1b:2c:e0:da: 88:b6:f7:00:a9:b8:b2:30:0c:82:6b:80:e1:0c:40:6a:2c:0f: fe:29:e9:d7:9c:1d:32:bc:89:d9:c6:a9:68:1c:24:19:94:4c: e9:f3:f4:82:9e:1e:c5:70:b4:34:01:d4:15:61:3a:69:38:36: 2f:22:6a:8d:68:bf:57:26:6e:dc:b2:5e:9e:d1:8f:72:ab:33: ff:6b:81:19:42:70:d2:97:c8:d4:d1:5b:12:39:80:74:4b:0a: cc:7a:ad:6a:57:d1:97:13:14:a8:e6:ad:6b:94:38:9c:84:63: f1:35:07:0d:4e:47:d0:c6:05:f7:e9:7c:16:0f:51:52:4f:2b: 10:89:9f:1f:57:58:f7:9d:b1:6d:f8:30:07:9b:8f:f6:25:b7: bd:a1:b4:d8:a4:fe:a4:0a:0e:df:da:50:69:7b:70:82:88:8d: c5:4e:70:a2:3a:0e:41:6d:c7:9f:15:b2:30:29:4c:48:8b:e2: c6:39:08:4e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEQjUxMTAvBgNVBAUTKDQ3RUM1M0JGREQzNTEzMjBFODlCMkM1NDFCQUNERDRE OEQ1MkEwQjMwHhcNMjUwOTE0MDczMzAxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM2NmZhYy02NzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DpMVLZ1EUchknl+C6q5JXsturJmdIgAXYJBzNgqpTB0Hjf01UEJJ4NDW1rQ 5WmLOO/0e+Gf7DP0fNyGb3E7i41Q71NDWCHAqYYs/I5IH/zGx9cEC57Shb6jfNJF su9IM98qaFAQO7veANBSoHftDLrgOTEwzZqCEJ3LxhSgIs1KXOboCOKObVbxgLUW /EHIVjJ2ZbUyO4IFgw3KuyvDo9tNjk6qN8TndrQzReIuH3BHFVgl0cFyO2xSnKY/ iok5/Yeww7/hejGG0C/QcNyxfs9/nxWge6+nATFv5++/a+KoORuapzh1IIrnPDa4 9Y20xx9me3XDnj31IqslMx0LMwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFF/6s0nI IW80VZAo7i9HsAXnrI29MB8GA1UdIwQYMBaAFEfsU7/dNRMg6JssVBus3U2NUqCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0RCNS8wQzk5OUVDMDhG QTExMUVCQTIyMDY2MUVDNEY5QUUwMi9SLXhUdjkwMUV5RG9teXhVRzZ6ZFRZMVNv TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IteFR2OTAxRXlEb215eFVHNnpkVFkxU29MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNEQjUvMEM5OTlFQzA4RkExMTFFQkEyMjA2NjFFQzRGOUFFMDIvMEE2RDA3RkM5 MTNEMTFGMDkyRTkyRTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ32VIAwDQYJKoZIhvcNAQELBQADggEBAB3OTqLgqD0h LCF/bdC73mwl9v4iB5rTpAibxQ92Jzw7dTrwn8ar0kHoae7JSmTeUNi3L7ixyS4x +neXGl+6e9Dzh01MGyzg2oi29wCpuLIwDIJrgOEMQGosD/4p6decHTK8idnGqWgc JBmUTOnz9IKeHsVwtDQB1BVhOmk4Ni8iao1ov1cmbtyyXp7Rj3KrM/9rgRlCcNKX yNTRWxI5gHRLCsx6rWpX0ZcTFKjmrWuUOJyEY/E1Bw1OR9DGBffpfBYPUVJPKxCJ nx9XWPedsW34MAebj/Ylt72htNik/qQKDt/aUGl7cIKIjcVOcKI6DkFtx58VsjAp TEiL4sY5CE4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:34:01 2025 by rpki-client