$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/35A4EFE0D75511EF80E68A39C4F9AE02.roa File: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (raw, json) Hash identifier: E255PQy8J0Om1w8sX22dbtF3FegoajHcFmWtic98DmU= Subject key identifier: 71:AC:92:C3:69:47:F6:0D:5F:F4:1A:18:92:D3:E6:FD:A7:F4:6A:1C Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Certificate serial: 06EA Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/35A4EFE0D75511EF80E68A39C4F9AE02.roa Signing time: Wed 02 Jul 2025 22:31:58 +0000 ROA not before: Wed 02 Jul 2025 22:31:58 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4785 IP address blocks: 2401:e9e0:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Validity Not Before: Jul 2 22:31:58 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6865b35e-bd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:a6:33:45:62:d8:8b:f1:86:e0:c0:e4:3d: be:ce:c2:ec:20:50:7c:e3:13:c2:e1:94:ca:da:bb: 0b:0c:68:17:82:59:20:a4:19:f2:e4:a4:62:fa:34: ff:6a:e6:a6:fb:a0:79:7f:2d:cd:3a:62:72:d7:62: 46:d3:5c:1a:b4:de:46:e4:ab:87:dc:9e:11:d6:e0: 74:c4:9a:f0:fa:aa:4f:fe:73:97:38:52:34:54:29: 4f:2a:74:d7:51:90:1c:14:4b:89:9a:00:c9:ea:61: e0:b6:f6:a1:41:66:f9:de:25:4e:de:61:2e:e7:c1: 18:f1:f5:47:b9:ad:b6:f3:7e:c7:de:96:40:df:1d: a5:e9:b0:2e:1c:90:36:fa:50:03:c8:75:4e:28:e5: 7b:57:a8:83:2a:2f:f2:e6:f5:cd:be:bf:41:30:5f: 52:b3:80:61:23:ea:0e:3b:d6:d2:fe:44:67:a6:90: 8b:ab:b4:2f:41:33:66:e0:af:c1:ad:e6:eb:c5:1b: 46:64:4e:6a:79:bb:24:1e:36:e1:2d:eb:06:ac:0a: b7:22:fd:91:ac:65:1f:88:70:58:b8:67:36:ec:dd: 55:c7:b2:fa:93:be:04:39:31:c3:a5:e7:09:c9:26: 14:b3:c3:33:60:85:aa:ef:fe:67:bb:a7:32:fa:62: a4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AC:92:C3:69:47:F6:0D:5F:F4:1A:18:92:D3:E6:FD:A7:F4:6A:1C X509v3 Authority Key Identifier: keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/35A4EFE0D75511EF80E68A39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:e9e0:3000::/36 Signature Algorithm: sha256WithRSAEncryption 12:64:2d:0c:3f:63:37:57:f4:4a:5c:be:82:5e:e0:10:2f:a9: c0:f6:d5:1d:fc:3c:d3:e4:45:c0:9c:fc:3b:84:43:ee:a8:da: 22:23:e3:62:5f:b1:f8:72:0b:88:1c:36:bd:46:1e:15:98:ed: 00:58:fe:ee:5c:78:68:78:14:45:3e:ef:60:c3:4e:0a:27:dd: 9c:47:8b:50:85:63:66:58:56:f6:8e:b2:a5:36:4c:a3:22:61: 0d:2d:e0:a7:94:6c:5a:b5:0e:d5:69:b1:e0:68:e9:eb:54:35: 09:64:c3:37:1d:0d:b9:41:7a:9c:9f:d4:82:92:52:e6:98:d5: 6e:a2:d2:99:66:04:ea:0a:21:3c:ff:e5:67:02:a7:e0:b4:a6: a6:71:91:a8:44:da:98:cd:a0:22:00:6d:5e:40:2e:39:5b:21: 35:46:3e:1a:f4:de:9e:d3:3c:45:73:b7:13:fa:3e:b6:31:40: 13:97:95:94:0a:f0:eb:73:e0:4f:5e:38:e5:83:9d:66:8a:88: ff:fa:db:73:f0:d8:4b:29:60:0c:f0:89:ff:67:fd:79:fa:c4: 7b:87:11:a3:d2:c7:b1:d7:2c:c1:3e:28:bd:ae:bf:27:75:42: 57:72:c7:ad:56:e1:74:c9:57:ce:c2:ce:f9:18:01:98:f9:63: f3:55:78:94 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0 QzkxNTRGMjQwHhcNMjUwNzAyMjIzMTU4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1YjM1ZS1iZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLemM0Vi2IvxhuDA5D2+zsLsIFB84xPC4ZTK2rsLDGgXglkgpBny5KRi+jT/ auam+6B5fy3NOmJy12JG01watN5G5KuH3J4R1uB0xJrw+qpP/nOXOFI0VClPKnTX UZAcFEuJmgDJ6mHgtvahQWb53iVO3mEu58EY8fVHua22837H3pZA3x2l6bAuHJA2 +lADyHVOKOV7V6iDKi/y5vXNvr9BMF9Ss4BhI+oOO9bS/kRnppCLq7QvQTNm4K/B rebrxRtGZE5qebskHjbhLesGrAq3Iv2RrGUfiHBYuGc27N1Vx7L6k74EOTHDpecJ ySYUs8MzYIWq7/5nu6cy+mKkfwIDAQABo4IClzCCApMwHQYDVR0OBBYEFHGsksNp R/YNX/QaGJLT5v2n9GocMB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1 MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJCNEQvQ0E1NjNCRTg2NTIyMTFFQjgwRjZFOTRCQzRGOUFFMDIvMzVBNEVGRTBE NzU1MTFFRjgwRTY4QTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgQkAengMDANBgkqhkiG9w0BAQsFAAOCAQEAEmQtDD9jN1f0 Sly+gl7gEC+pwPbVHfw80+RFwJz8O4RD7qjaIiPjYl+x+HILiBw2vUYeFZjtAFj+ 7lx4aHgURT7vYMNOCifdnEeLUIVjZlhW9o6ypTZMoyJhDS3gp5RsWrUO1Wmx4Gjp 61Q1CWTDNx0NuUF6nJ/UgpJS5pjVbqLSmWYE6gohPP/lZwKn4LSmpnGRqETamM2g IgBtXkAuOVshNUY+GvTentM8RXO3E/o+tjFAE5eVlArw63PgT1445YOdZoqI//rb c/DYSylgDPCJ/2f9efrEe4cRo9LHsdcswT4ova6/J3VCV3LHrVbhdMlXzsLO+RgB mPlj81V4lA== -----END CERTIFICATE-----Generated at Thu Jul 3 11:09:35 2025 by rpki-client