$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3792F7E573C11F0B9BF376CC4F9AE02.roa File: F3792F7E573C11F0B9BF376CC4F9AE02.roa (raw, json) Hash identifier: HJUIT7VTm+5SD87UgxRYhqALYZR19q4i6ORxrEMkadI= Subject key identifier: 47:B6:F6:5C:A5:64:9B:CF:2A:44:37:65:0F:98:6C:B2:19:B8:B7:B8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BF50 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3792F7E573C11F0B9BF376CC4F9AE02.roa Signing time: Wed 02 Jul 2025 12:06:14 +0000 ROA not before: Wed 02 Jul 2025 12:06:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135181 IP address blocks: 2001:df0:5ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48976 (0xbf50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 2 12:06:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=686520b6-5d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:b9:76:3f:e9:fa:4b:59:4e:b9:18:42:ad: bc:b6:ce:41:79:c0:bc:db:a5:d4:d4:00:c6:24:86: 16:0a:04:89:17:d4:51:47:e2:5b:33:e7:55:76:10: 5c:90:aa:fe:2d:dc:25:d6:d9:d4:ba:2d:68:17:29: b1:f9:21:8c:b7:19:d5:18:4e:b6:f1:ab:7b:c1:b4: 16:21:ce:c8:a5:0e:44:b3:4a:d4:8c:64:8d:88:1b: de:12:2b:d2:60:63:18:ac:9d:25:7e:ee:55:b6:e4: 97:f6:97:17:3a:0a:13:d9:3c:0e:4e:cd:93:54:64: 5a:d8:6a:8f:4b:fe:82:19:f8:3a:00:49:3b:c5:3b: 6b:75:73:4d:0a:ba:5f:38:57:4f:55:1f:c5:0d:96: c0:b9:39:9b:24:2f:84:52:e4:7b:48:9b:bc:c6:83: 20:8e:8c:e8:43:20:cc:d3:63:9f:4d:36:ad:91:8f: b6:9f:01:b5:22:58:fe:5c:91:97:5f:6f:fc:93:25: 39:70:82:1f:af:3f:e1:03:53:60:60:75:8b:e9:f2: 5a:9c:d7:d3:47:a0:22:42:4f:33:2d:6a:5b:ed:e1: 7d:3d:26:34:c0:f4:47:98:8e:8e:e8:fe:10:28:59: bf:80:8e:9f:5e:20:1b:61:67:e7:fd:d6:d6:59:fe: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B6:F6:5C:A5:64:9B:CF:2A:44:37:65:0F:98:6C:B2:19:B8:B7:B8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3792F7E573C11F0B9BF376CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:5ec0::/48 Signature Algorithm: sha256WithRSAEncryption 1f:0a:e7:c5:3d:20:10:ba:b9:b7:ab:0c:9a:8a:66:36:cd:26: 77:81:22:30:92:40:2f:21:34:14:59:97:44:e9:64:e2:c3:da: b1:aa:f9:b3:bb:81:88:3c:63:7e:07:af:2b:0a:86:e9:19:05: 7a:66:19:a2:e5:c6:a0:79:d1:2e:f5:5e:10:07:6d:74:f4:a0: cc:f2:15:53:12:f9:43:08:ac:9b:ad:3c:81:61:30:fc:39:5e: 6e:12:d3:07:4a:e5:70:34:d2:09:ad:0e:71:dd:93:d5:c0:19: 1a:4f:23:01:93:7a:4f:69:23:4a:31:91:99:7b:33:30:5a:31: c3:e4:5f:69:f1:ad:8d:43:ff:47:c2:73:f9:95:22:6d:7f:86: d0:32:60:ee:7e:1c:2a:85:89:bd:27:69:15:a2:75:11:f4:13: f5:58:e2:85:3b:b1:5d:b1:36:38:04:32:ec:84:ab:04:57:a9: 6b:73:62:d7:1b:75:89:25:61:30:2d:86:22:e3:ee:34:63:4e: 97:d4:f6:13:85:3e:14:26:4b:7e:e1:33:eb:87:44:ac:1c:87: c4:c0:fd:68:b7:b7:78:20:b7:33:4f:2b:14:07:db:a2:1b:ee: 49:86:c3:25:52:08:7d:e9:70:ed:44:7a:fa:36:7f:00:6e:73: 16:1d:8e:14 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAL9QMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDcwMjEyMDYxNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg2NTIwYjYtNWQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlhuXY/6fpLWU65GEKtvLbOQXnAvNul1NQAxiSGFgoEiRfUUUfiWzPnVXYQ XJCq/i3cJdbZ1LotaBcpsfkhjLcZ1RhOtvGre8G0FiHOyKUORLNK1IxkjYgb3hIr 0mBjGKydJX7uVbbkl/aXFzoKE9k8Dk7Nk1RkWthqj0v+ghn4OgBJO8U7a3VzTQq6 XzhXT1UfxQ2WwLk5myQvhFLke0ibvMaDII6M6EMgzNNjn002rZGPtp8BtSJY/lyR l19v/JMlOXCCH68/4QNTYGB1i+nyWpzX00egIkJPMy1qW+3hfT0mNMD0R5iOjuj+ EChZv4COn14gG2Fn5/3W1ln+TGUCAwEAAaOCApgwggKUMB0GA1UdDgQWBBRHtvZc pWSbzypEN2UPmGyyGbi3uDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YzNzkyRjdF NTczQzExRjBCOUJGMzc2Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN8F7AMA0GCSqGSIb3DQEBCwUAA4IBAQAfCufFPSAQ urm3qwyaimY2zSZ3gSIwkkAvITQUWZdE6WTiw9qxqvmzu4GIPGN+B68rCobpGQV6 Zhmi5cagedEu9V4QB2109KDM8hVTEvlDCKybrTyBYTD8OV5uEtMHSuVwNNIJrQ5x 3ZPVwBkaTyMBk3pPaSNKMZGZezMwWjHD5F9p8a2NQ/9HwnP5lSJtf4bQMmDufhwq hYm9J2kVonUR9BP1WOKFO7FdsTY4BDLshKsEV6lrc2LXG3WJJWEwLYYi4+40Y06X 1PYThT4UJkt+4TPrh0SsHIfEwP1ot7d4ILczTysUB9uiG+5JhsMlUgh96XDtRHr6 Nn8AbnMWHY4U -----END CERTIFICATE-----Generated at Thu Jul 3 03:51:00 2025 by rpki-client