$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/8BAFDC4C691E11EF9AC4F168C4F9AE02.roa File: 8BAFDC4C691E11EF9AC4F168C4F9AE02.roa (raw, json) Hash identifier: CaDrsHhMr2SW3agEhOrGpPTbVn2zv/JRiQ35B1c4T/I= Subject key identifier: CC:6D:67:60:A1:A8:B0:36:95:B0:76:29:C4:68:89:26:8E:73:09:2C Certificate issuer: /CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364 Certificate serial: CD Authority key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/8BAFDC4C691E11EF9AC4F168C4F9AE02.roa Signing time: Wed 01 Oct 2025 07:04:48 +0000 ROA not before: Wed 01 Oct 2025 07:04:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 140244 IP address blocks: 2001:df4:3540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A695, serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364 Validity Not Before: Oct 1 07:04:48 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dcd290-f121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:40:08:75:18:64:70:8a:61:8e:87:98:6c: 6f:fc:c5:d8:7e:53:e2:13:fc:14:ed:5d:31:00:ac: cb:9a:bd:49:37:91:53:d9:9e:49:8c:bc:a6:f7:84: 40:5d:c4:e6:dd:30:ca:17:dd:d2:d0:78:a1:35:7b: 8a:8d:df:12:f3:76:8b:87:56:bf:ce:9f:63:62:32: 2a:e3:49:1b:eb:97:0b:c1:e0:87:e5:cb:f6:31:72: 96:93:b7:50:82:7c:e0:0a:1e:15:d1:6b:16:b0:c6: 0d:71:9e:f7:48:2d:f7:9d:71:a9:1d:81:58:48:92: 7d:43:5e:0a:85:e3:b8:57:02:44:b6:b2:00:50:d4: d1:90:51:18:7d:db:0b:88:06:15:a7:d3:32:a5:4d: 68:a5:e5:f1:c8:07:8d:57:a3:d6:fd:dd:8b:aa:40: cf:b5:2f:f2:6e:8f:e1:21:34:64:24:52:0c:f4:8a: 21:00:64:f3:16:d0:ef:cf:6c:ac:af:52:d8:a9:5c: 16:1f:4b:39:cb:4a:c4:61:46:92:f7:cd:9c:4f:cd: 97:93:5e:45:ef:78:e1:47:09:1e:b1:80:33:ac:25: cc:04:a0:3f:8d:40:b1:3c:a6:e8:fe:86:4f:da:4a: 2c:e0:d1:16:0e:12:49:40:bd:df:2f:ea:6d:e7:8e: ee:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6D:67:60:A1:A8:B0:36:95:B0:76:29:C4:68:89:26:8E:73:09:2C X509v3 Authority Key Identifier: keyid:71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/8BAFDC4C691E11EF9AC4F168C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:3540::/48 Signature Algorithm: sha256WithRSAEncryption 96:ef:5a:68:7f:27:f9:f8:f0:67:62:d0:09:19:64:0d:2b:1a: 1a:7c:47:fd:ff:28:f2:61:05:3b:42:f5:2a:be:c7:84:c5:6d: fa:a1:48:08:98:cf:67:fe:ad:81:a3:9c:68:45:da:3e:35:31: f6:09:20:78:c5:1f:26:b0:66:ef:7a:5b:43:25:f5:bf:70:b7: 68:a6:09:44:23:e1:54:39:39:06:a8:a6:65:c0:f6:fb:7a:93: ca:40:ac:56:5e:a4:89:24:f6:8d:19:b3:d2:08:ab:df:69:61: 3f:12:61:df:22:26:d0:1c:d3:a7:30:bd:85:24:cb:95:77:78: f8:d5:6d:63:2a:86:5e:c9:a6:c9:38:69:d0:85:7e:fd:43:61: fd:c9:3c:7e:20:9b:55:65:63:bc:b7:36:7b:f5:7d:fd:72:03: 8b:be:04:48:01:e2:31:81:0e:55:c6:00:4f:ff:dd:8b:43:17: 5a:d9:da:f1:8a:f0:bd:49:9f:e9:f5:3d:1d:a9:4c:9b:6c:c7: f8:38:ad:01:2d:1e:79:09:07:2b:ce:35:45:32:60:d8:f6:3c: c5:b4:4d:5a:4c:32:96:98:e1:b7:4a:44:df:7b:d2:67:12:0d: f2:41:88:66:11:68:1c:2b:61:bf:1b:65:5f:34:31:74:e4:62: 2e:0f:f3:06 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2OTUxMTAvBgNVBAUTKDcxNUQzRERGRDdEMkE3OTkxMzdCMTM5M0Q0QThDRkEy QjFENEQzNjQwHhcNMjUxMDAxMDcwNDQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjZDI5MC1mMTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXdACHUYZHCKYY6HmGxv/MXYflPiE/wU7V0xAKzLmr1JN5FT2Z5JjLym94RA XcTm3TDKF93S0HihNXuKjd8S83aLh1a/zp9jYjIq40kb65cLweCH5cv2MXKWk7dQ gnzgCh4V0WsWsMYNcZ73SC33nXGpHYFYSJJ9Q14KheO4VwJEtrIAUNTRkFEYfdsL iAYVp9MypU1opeXxyAeNV6PW/d2LqkDPtS/ybo/hITRkJFIM9IohAGTzFtDvz2ys r1LYqVwWH0s5y0rEYUaS982cT82Xk15F73jhRwkesYAzrCXMBKA/jUCxPKbo/oZP 2kos4NEWDhJJQL3fL+pt547u0QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMxtZ2Ch qLA2lbB2KcRoiSaOcwksMB8GA1UdIwQYMBaAFHFdPd/X0qeZE3sTk9Soz6Kx1NNk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTY5NS85NkJERjM0QTY5 MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi9jVjA5MzlmU3A1a1RleE9UMUtqUG9ySFUw MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWMDkzOWZTcDVrVGV4T1QxS2pQb3JIVTAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEE2OTUvOTZCREYzNEE2OTFEMTFFRkI4RkQxRTY0QzRGOUFFMDIvOEJBRkRDNEM2 OTFFMTFFRjlBQzRGMTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30NUAwDQYJKoZIhvcNAQELBQADggEBAJbvWmh/J/n4 8Gdi0AkZZA0rGhp8R/3/KPJhBTtC9Sq+x4TFbfqhSAiYz2f+rYGjnGhF2j41MfYJ IHjFHyawZu96W0Ml9b9wt2imCUQj4VQ5OQaopmXA9vt6k8pArFZepIkk9o0Zs9II q99pYT8SYd8iJtAc06cwvYUky5V3ePjVbWMqhl7Jpsk4adCFfv1DYf3JPH4gm1Vl Y7y3Nnv1ff1yA4u+BEgB4jGBDlXGAE//3YtDF1rZ2vGK8L1Jn+n1PR2pTJtsx/g4 rQEtHnkJByvONUUyYNj2PMW0TVpMMpaY4bdKRN970mcSDfJBiGYRaBwrYb8bZV80 MXTkYi4P8wY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:59 2025 by rpki-client