$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E94C6FC986911F0B4DE7E28C4F9AE02.roa File: 5E94C6FC986911F0B4DE7E28C4F9AE02.roa (raw, json) Hash identifier: 4MkVvfbP5CCH2mwAzcRX+JjYv4zqLTbPrYSNkNU64YY= Subject key identifier: E5:EC:9E:D2:29:A4:F6:95:37:E5:4D:D4:E7:02:C5:A8:EE:27:D0:DD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C572 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E94C6FC986911F0B4DE7E28C4F9AE02.roa Signing time: Tue 23 Sep 2025 10:37:57 +0000 ROA not before: Tue 23 Sep 2025 10:37:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154238 IP address blocks: 2001:df4:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50546 (0xc572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 23 10:37:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68d27885-4bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a4:90:e0:a6:c8:3e:80:23:02:dd:4b:1c:6b: b5:c7:32:47:31:aa:da:f0:85:f1:5d:e9:7e:48:4b: c1:30:a1:01:5a:e3:23:b0:0c:c0:92:1c:35:03:25: 9d:29:6f:60:2d:ed:80:21:7c:3d:f9:59:68:76:f3: f6:19:c1:ce:b0:db:43:16:96:66:5b:40:d1:3c:f7: e3:d3:2c:8a:b7:c9:33:c9:01:9a:b9:69:35:d6:3c: 01:67:e1:bc:b2:d5:64:a1:b9:47:e7:1d:db:b2:b0: db:3f:ec:ae:c5:51:b6:a0:f3:58:51:dc:7b:0b:f8: ed:fa:ea:46:b7:e8:fd:0e:40:4b:2c:85:7c:72:a3: a0:2c:40:b9:fc:f5:4e:d2:df:9a:59:1e:3b:87:7c: c6:2c:72:3e:06:cc:8b:f7:7f:39:2d:dc:00:06:4b: 0d:b4:f5:e2:ed:89:c9:7d:b4:df:37:ec:f3:5b:d8: 87:8a:27:31:d2:19:a5:49:d6:6d:86:48:86:2f:74: bf:c1:99:b3:7d:ff:2d:85:44:df:34:9a:f8:8d:08: 4e:ab:e8:70:38:40:fc:c7:4b:14:82:31:58:66:29: f4:4c:69:9e:70:eb:df:f5:e9:73:f2:f3:d8:a4:0d: ec:54:3e:d0:88:2d:eb:41:36:68:54:53:4f:d2:f1: 72:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EC:9E:D2:29:A4:F6:95:37:E5:4D:D4:E7:02:C5:A8:EE:27:D0:DD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E94C6FC986911F0B4DE7E28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption 57:0c:f5:e5:19:61:13:1b:9e:f9:03:75:ec:a5:ed:3a:0c:d1: 12:0d:51:15:1a:27:bb:3e:29:d5:67:a7:f7:2f:fe:73:33:a6: 8f:3f:35:f9:b1:4a:b5:71:f5:32:a4:d9:47:16:87:b8:5c:a3: 16:ce:2a:e1:75:93:4d:ce:0c:c2:a9:7f:31:3c:ce:e1:db:7a: ca:11:3f:72:22:72:5e:cd:70:14:fe:46:58:d9:28:50:de:09: a6:a4:cf:8f:3c:05:61:30:eb:3b:ec:3b:ce:48:eb:e3:1a:41: 84:ea:6f:e5:0f:ee:c2:cb:71:0a:1f:60:19:f5:24:15:f1:97: 75:36:55:e7:80:cb:7a:3f:e1:eb:ec:0c:6f:2e:10:a5:4e:36: 9e:67:de:a9:09:8e:6e:9f:9b:59:06:62:1d:0c:64:38:df:89: 90:87:ad:bc:c7:8b:22:d7:79:b6:85:33:c6:47:ea:15:6a:10: 8f:18:77:23:4b:0e:82:6f:6d:96:0c:f7:71:84:69:49:ac:ac: 73:86:34:f9:7b:9c:c8:cc:f6:15:5d:ea:ce:13:31:2f:82:83: 41:46:ca:56:42:2c:72:14:de:fe:93:0c:79:38:5a:4a:86:3f: 28:cc:b5:6c:75:49:14:7c:0a:55:b7:ea:cb:e4:fc:0c:e3:19: 0d:c9:b1:0f -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAMVyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDkyMzEwMzc1N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhkMjc4ODUtNGJmZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOOkkOCmyD6AIwLdSxxrtccyRzGq2vCF8V3pfkhLwTChAVrjI7AMwJIcNQMl nSlvYC3tgCF8PflZaHbz9hnBzrDbQxaWZltA0Tz349MsirfJM8kBmrlpNdY8AWfh vLLVZKG5R+cd27Kw2z/srsVRtqDzWFHcewv47frqRrfo/Q5ASyyFfHKjoCxAufz1 TtLfmlkeO4d8xixyPgbMi/d/OS3cAAZLDbT14u2JyX203zfs81vYh4onMdIZpUnW bYZIhi90v8GZs33/LYVE3zSa+I0ITqvocDhA/MdLFIIxWGYp9ExpnnDr3/Xpc/Lz 2KQN7FQ+0Igt60E2aFRTT9LxckkCAwEAAaOCApgwggKUMB0GA1UdDgQWBBTl7J7S KaT2lTflTdTnAsWo7ifQ3TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVFOTRDNkZD OTg2OTExRjBCNERFN0UyOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN9ODAMA0GCSqGSIb3DQEBCwUAA4IBAQBXDPXlGWET G575A3Xspe06DNESDVEVGie7PinVZ6f3L/5zM6aPPzX5sUq1cfUypNlHFoe4XKMW zirhdZNNzgzCqX8xPM7h23rKET9yInJezXAU/kZY2ShQ3gmmpM+PPAVhMOs77DvO SOvjGkGE6m/lD+7Cy3EKH2AZ9SQV8Zd1NlXngMt6P+Hr7AxvLhClTjaeZ96pCY5u n5tZBmIdDGQ434mQh628x4si13m2hTPGR+oVahCPGHcjSw6Cb22WDPdxhGlJrKxz hjT5e5zIzPYVXerOEzEvgoNBRspWQixyFN7+kwx5OFpKhj8ozLVsdUkUfApVt+rL 5PwM4xkNybEP -----END CERTIFICATE-----Generated at Mon Oct 20 03:40:02 2025 by rpki-client