$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa File: 6579B1188F5811F0BE083D3DC4F9AE02.roa (raw, json) Hash identifier: j+lAAPB9v9s39rB3XeTq/mQabzWIrT+uwwVzKJaE2Fw= Subject key identifier: 4D:BB:B3:1D:D0:2B:A5:D3:40:26:7F:7F:B1:8B:30:8C:43:0F:18:42 Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Certificate serial: 02 Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa Signing time: Thu 11 Sep 2025 21:43:47 +0000 ROA not before: Thu 11 Sep 2025 21:43:47 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 15224 IP address blocks: 2406:fb00:1000::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Validity Not Before: Sep 11 21:43:47 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68c34293-b5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:69:4d:83:fe:62:26:64:52:c2:df:d5:47:1d: c2:4c:4f:8e:d2:c3:62:01:0f:e5:7f:15:6f:bb:74: ee:da:ee:8b:ff:93:b2:8d:07:8b:e0:62:cc:ef:2e: 2a:2e:5d:78:4f:f4:34:89:5d:97:37:38:02:78:fc: 91:34:d1:76:08:83:32:8c:16:c8:b2:3d:44:6f:7e: 90:49:b9:34:9f:40:a4:6f:fa:6f:6b:e6:db:be:8c: a1:dc:1f:4a:e3:41:13:3c:58:8e:28:d8:36:96:5c: f7:ec:8f:dc:e7:d5:86:c0:42:00:17:5a:a4:0d:2a: 05:32:99:ae:f9:0c:ee:df:22:8d:7c:40:67:43:ad: 8f:b3:5c:68:47:1e:de:cb:57:5e:47:3b:de:e3:12: 1e:f1:19:d2:a9:4d:2c:26:ac:51:99:93:c3:ed:3e: 63:61:76:db:50:85:1f:45:d5:96:20:bd:44:38:c3: 8a:88:64:26:31:1e:b5:71:ca:42:25:5e:79:e3:c3: be:da:3a:7f:c6:39:3e:e2:61:ae:cb:33:f2:13:95: 7c:ae:40:9b:fd:4f:b4:84:fd:a7:0c:1a:63:29:e1: 7f:9a:b6:f0:f3:d2:dc:91:3a:02:61:15:cd:fa:c0: 02:5f:fb:3b:69:9b:1c:10:c8:ef:a2:0a:39:d3:c2: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BB:B3:1D:D0:2B:A5:D3:40:26:7F:7F:B1:8B:30:8C:43:0F:18:42 X509v3 Authority Key Identifier: keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:fb00:1000::/47 Signature Algorithm: sha256WithRSAEncryption 9a:fe:cf:57:33:59:51:bf:b9:74:b0:01:45:6f:55:3e:fd:19: 09:67:9b:69:ec:c1:cf:e3:ed:68:2e:38:90:34:cf:11:28:11: f4:b5:a3:29:60:49:a2:24:55:d3:f5:d8:fe:d7:e4:85:e1:94: 20:55:d0:9b:bb:69:e4:e4:c5:72:b7:30:0f:f0:ba:70:c5:54: ae:f6:57:9f:ba:87:c1:ab:62:37:86:24:79:2c:f4:21:4a:70: c4:3c:39:cb:42:cf:0f:27:36:51:84:d8:19:5a:a1:0a:29:4b: fc:c1:6c:2b:e9:3e:67:66:ae:c5:70:f3:de:af:7d:c0:a8:d7: b8:53:d4:93:d4:07:b1:d6:51:5f:5b:e4:a4:77:25:b1:15:bc: 71:c3:a2:47:d8:5a:a9:b2:70:a7:7a:36:18:0d:90:e1:31:d0: 3e:14:c8:ec:3e:4b:97:c3:1b:43:a2:f0:b0:7a:de:50:aa:67: 90:08:5f:a1:bd:f0:6d:47:c9:5b:9d:33:43:77:3d:61:7c:e6: 28:c4:76:ba:3d:23:53:0f:82:2f:fb:16:84:22:66:98:af:26: 62:42:63:a7:25:d7:f3:64:66:e6:b6:1e:0c:be:73:2c:43:22: e8:7c:83:d2:8a:cd:e1:6a:99:dd:b1:a9:cf:80:88:f7:88:de: 45:1e:53:34 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzBDQzExMC8GA1UEBRMoMERDQUZBQzE0NUIyMkYxNTYwNzgwMTY2Q0QxRjE1MTUw NEVFRjhBMTAeFw0yNTA5MTEyMTQzNDdaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YzM0MjkzLWI1ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZaU2D/mImZFLC39VHHcJMT47Sw2IBD+V/FW+7dO7a7ov/k7KNB4vgYszvLiou XXhP9DSJXZc3OAJ4/JE00XYIgzKMFsiyPURvfpBJuTSfQKRv+m9r5tu+jKHcH0rj QRM8WI4o2DaWXPfsj9zn1YbAQgAXWqQNKgUyma75DO7fIo18QGdDrY+zXGhHHt7L V15HO97jEh7xGdKpTSwmrFGZk8PtPmNhdttQhR9F1ZYgvUQ4w4qIZCYxHrVxykIl Xnnjw77aOn/GOT7iYa7LM/ITlXyuQJv9T7SE/acMGmMp4X+atvDz0tyROgJhFc36 wAJf+ztpmxwQyO+iCjnTwk+3AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUTbuzHdAr pdNAJn9/sYswjEMPGEIwHwYDVR0jBBgwFoAUDcr6wUWyLxVgeAFmzR8VFQTu+KEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMENDLzhGQ0NDN0Y4OEY1 NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhWZ2VBRm16UjhWRlFUdS1L RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGNyNndVV3lMeFZnZUFGbXpSOFZGUVR1LUtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBDQy84RkNDQzdGODhGNTcxMUYwOUM1MUVDM0JDNEY5QUUwMi82NTc5QjExODhG NTgxMUYwQkUwODNEM0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHASQG+wAQADANBgkqhkiG9w0BAQsFAAOCAQEAmv7PVzNZUb+5 dLABRW9VPv0ZCWebaezBz+PtaC44kDTPESgR9LWjKWBJoiRV0/XY/tfkheGUIFXQ m7tp5OTFcrcwD/C6cMVUrvZXn7qHwatiN4YkeSz0IUpwxDw5y0LPDyc2UYTYGVqh CilL/MFsK+k+Z2auxXDz3q99wKjXuFPUk9QHsdZRX1vkpHclsRW8ccOiR9haqbJw p3o2GA2Q4THQPhTI7D5Ll8MbQ6LwsHreUKpnkAhfob3wbUfJW50zQ3c9YXzmKMR2 uj0jUw+CL/sWhCJmmK8mYkJjpyXX82Rm5rYeDL5zLEMi6HyD0orN4WqZ3bGpz4CI 94jeRR5TNA== -----END CERTIFICATE-----Generated at Mon Oct 20 14:50:05 2025 by rpki-client