$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/CCEE4F76CAC711EF80553A61C4F9AE02.roa File: CCEE4F76CAC711EF80553A61C4F9AE02.roa (raw, json) Hash identifier: i8rhzfoYVzIteA50gdYKsP0L/C+up3cTPTY1lRFjLJk= Subject key identifier: A6:3A:51:8C:20:B4:C6:76:3A:66:20:EF:1A:F8:F7:F3:1D:DB:05:43 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 02DE Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/CCEE4F76CAC711EF80553A61C4F9AE02.roa Signing time: Sat 09 Aug 2025 02:39:25 +0000 ROA not before: Sat 09 Aug 2025 02:39:25 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9664 IP address blocks: 2400:9ce0:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Aug 9 02:39:25 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6896b4dc-bcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:db:06:11:a6:5e:c1:7e:6b:24:df:f9:37:af: 6d:e0:38:a8:30:0a:55:00:d1:c9:b3:64:15:a5:1c: 76:8a:98:f2:4d:1c:6a:99:5e:35:06:f6:68:82:82: 1b:64:59:a3:91:04:e3:d3:f8:20:84:fe:59:b2:55: 82:17:70:b5:bd:a8:9f:52:95:47:d9:bd:01:c7:e1: 49:59:5d:fb:04:da:17:bb:f5:7d:7f:fc:1c:60:d2: dd:1d:d8:23:72:5a:8e:79:0a:56:9c:6d:8a:30:69: 9f:c8:8e:a1:c6:c8:7c:69:df:6c:53:f2:b6:a0:74: 65:07:fc:f1:fc:4c:4d:bf:32:85:13:83:11:d4:b7: 65:9e:d5:b7:a9:0d:b5:73:17:b1:d4:d0:a1:fb:f2: 2e:6c:14:71:85:34:ee:13:54:90:1a:10:43:8c:b2: b7:f0:a5:c7:45:ce:7f:7a:6a:22:f3:15:2d:56:7a: b0:bc:90:48:b3:d6:07:e6:77:57:03:52:a2:31:7c: 52:de:f3:db:ff:45:66:1f:78:d1:f6:bc:85:4e:b2: 4c:24:b3:67:78:ef:56:0f:51:0a:22:af:79:d2:76: 86:f1:cc:f4:e6:c8:ec:d2:ca:7f:c1:30:f9:67:bb: 49:72:d6:1b:16:a2:48:cd:6c:46:0d:dd:4f:1f:9b: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3A:51:8C:20:B4:C6:76:3A:66:20:EF:1A:F8:F7:F3:1D:DB:05:43 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/CCEE4F76CAC711EF80553A61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:9ce0:5000::/36 Signature Algorithm: sha256WithRSAEncryption 9d:4b:25:5e:b1:da:ae:db:6a:89:98:7e:b3:0a:91:11:90:ab: 30:25:e9:78:7c:d6:e1:c3:ec:71:13:c4:bb:87:bf:7b:07:c5: a3:23:5c:a5:17:5c:ad:cd:30:23:33:50:8d:e2:82:31:65:59: 2d:91:2e:2d:b6:39:38:20:7b:12:25:bf:c4:3e:50:eb:ca:07: a4:e8:14:9b:54:ec:93:80:74:5e:5b:7a:71:a0:28:de:da:48: 84:27:69:2a:73:1f:c3:38:26:cf:35:f9:cc:14:6e:cc:b5:e1: 56:22:55:8f:f6:02:46:83:7f:7c:d0:af:93:bb:a6:8a:9b:9b: 02:be:14:8a:78:70:70:8d:18:01:d2:12:18:c3:7d:fe:26:4a: 31:fb:13:7d:38:1b:ac:06:69:09:07:8e:38:f5:97:a6:e7:49: a5:dd:09:bf:f5:74:98:a6:1f:84:f8:8e:75:0c:37:52:1c:3a: af:3c:ae:a8:d9:70:4f:5d:d4:9e:30:cb:c1:a9:c6:f1:0b:a1: a6:d5:0f:d9:c2:fb:a2:c4:a5:89:23:da:c8:a5:06:6c:7b:8c: 27:51:0f:3e:d9:78:05:f3:cb:23:5c:0a:15:8b:07:84:ef:9f: 48:0b:19:c7:cd:38:61:93:c2:4a:39:14:11:2f:ab:f5:92:46: 31:45:f0:65 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUwODA5MDIzOTI1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk2YjRkYy1iY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09sGEaZewX5rJN/5N69t4DioMApVANHJs2QVpRx2ipjyTRxqmV41BvZogoIb ZFmjkQTj0/gghP5ZslWCF3C1vaifUpVH2b0Bx+FJWV37BNoXu/V9f/wcYNLdHdgj clqOeQpWnG2KMGmfyI6hxsh8ad9sU/K2oHRlB/zx/ExNvzKFE4MR1LdlntW3qQ21 cxex1NCh+/IubBRxhTTuE1SQGhBDjLK38KXHRc5/emoi8xUtVnqwvJBIs9YH5ndX A1KiMXxS3vPb/0VmH3jR9ryFTrJMJLNneO9WD1EKIq950naG8cz05sjs0sp/wTD5 Z7tJctYbFqJIzWxGDd1PH5tSowIDAQABo4IClzCCApMwHQYDVR0OBBYEFKY6UYwg tMZ2OmYg7xr49/Md2wVDMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JBQzUvNDcwQTYyMDQxNTMwMTFFREJBQTNEMDI3QzRGOUFFMDIvQ0NFRTRGNzZD QUM3MTFFRjgwNTUzQTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgQkAJzgUDANBgkqhkiG9w0BAQsFAAOCAQEAnUslXrHarttq iZh+swqREZCrMCXpeHzW4cPscRPEu4e/ewfFoyNcpRdcrc0wIzNQjeKCMWVZLZEu LbY5OCB7EiW/xD5Q68oHpOgUm1Tsk4B0Xlt6caAo3tpIhCdpKnMfwzgmzzX5zBRu zLXhViJVj/YCRoN/fNCvk7umipubAr4UinhwcI0YAdISGMN9/iZKMfsTfTgbrAZp CQeOOPWXpudJpd0Jv/V0mKYfhPiOdQw3Uhw6rzyuqNlwT13UnjDLwanG8QuhptUP 2cL7osSliSPayKUGbHuMJ1EPPtl4BfPLI1wKFYsHhO+fSAsZx804YZPCSjkUES+r 9ZJGMUXwZQ== -----END CERTIFICATE-----Generated at Sat Aug 23 23:53:57 2025 by rpki-client