$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/1CFC5814474611F087FA4A1DC4F9AE02.roa File: 1CFC5814474611F087FA4A1DC4F9AE02.roa (raw, json) Hash identifier: /bUmZK3GNNVLfX/JC5Le5EvDW4qNPqhqfyqkqK8mIkA= Subject key identifier: 39:76:D1:F8:4D:69:1E:C2:2D:34:DA:F6:0D:CC:E2:A0:28:3E:73:45 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0CFC Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/1CFC5814474611F087FA4A1DC4F9AE02.roa Signing time: Mon 22 Sep 2025 18:38:47 +0000 ROA not before: Mon 22 Sep 2025 18:38:47 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 133429 IP address blocks: 2401:31c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Sep 22 18:38:47 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d197b7-39d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:e9:46:a7:0f:15:fe:17:2c:d1:2f:c9:59: b4:e5:7b:ea:e4:cb:9a:45:c9:a6:22:f9:73:3b:33: 35:9e:60:5d:8d:41:29:18:c7:81:30:f0:a2:d4:53: d9:bd:b8:18:71:56:11:98:19:38:7b:74:e5:12:57: 3c:60:bb:83:ea:fa:2d:17:09:7b:7b:c0:67:4d:0f: 42:fc:b1:48:37:a1:eb:97:14:d2:1d:31:a9:7d:31: eb:6f:17:f4:6e:83:30:f6:b7:14:ef:d9:dd:fe:55: 6a:38:4a:86:f1:39:0f:44:b3:2a:17:e7:22:9d:34: ce:90:8f:e3:6c:9f:ca:c6:e4:2c:dc:39:22:2e:a4: 53:81:0b:24:04:f0:5d:76:b0:74:c2:93:38:74:d8: c1:7b:6d:7a:95:72:b9:70:9a:d7:0f:d7:42:42:0c: 2a:b7:cf:8f:34:8c:3a:b1:b4:0e:d7:11:3f:92:da: c7:52:05:84:69:ce:5c:20:d6:91:a2:f8:e0:cf:af: 84:d4:00:71:af:ec:15:e0:5b:5a:d7:e7:12:da:46: f5:36:32:b5:3f:84:b5:67:8f:41:fb:1f:db:7c:0e: 1f:11:ae:34:7f:f0:3e:3f:8f:25:ab:00:b3:a5:59: 7e:9d:e9:da:0e:20:4d:ec:4b:a0:73:de:2c:1a:5f: ce:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:76:D1:F8:4D:69:1E:C2:2D:34:DA:F6:0D:CC:E2:A0:28:3E:73:45 X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/1CFC5814474611F087FA4A1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:31c0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 25:8b:41:c5:7f:32:e5:88:c3:02:98:29:25:7d:b2:bf:34:df: 92:5c:bb:eb:d5:c3:32:1b:59:0e:f9:99:2f:04:8e:05:a6:4c: 61:f0:a1:86:e8:7e:77:e0:ae:fc:82:39:bc:73:fa:2e:9c:b0: 74:39:1b:48:38:91:0e:42:3e:ed:6b:3f:a9:e3:16:e1:30:9b: 0b:d8:a5:b6:ca:11:fa:77:37:7c:b9:31:e5:09:13:35:86:bd: 67:f7:e8:f9:de:a3:33:74:f2:2b:ad:a4:75:7b:2a:39:e7:5b: 14:a7:98:d6:a6:36:68:ab:fc:28:21:1c:50:6a:b8:cb:bd:33: b9:e0:cb:83:a7:87:57:5c:d0:2e:49:3c:e6:62:f2:46:36:68: 60:5c:b1:d2:4c:a1:fb:30:f5:71:3e:77:c2:85:93:94:86:ef: 44:13:b7:83:73:c1:79:76:18:1c:0b:fd:51:96:3f:22:4c:3e: cd:35:e2:68:e9:f7:3e:95:4a:8c:d4:8f:c0:47:86:e1:e4:c1: b8:32:c2:db:8e:95:ef:e5:25:d0:30:b6:5c:09:36:90:3b:ea: 51:42:3f:80:0c:91:2c:25:ce:3a:61:db:a2:5d:47:64:91:20: 73:ea:f8:85:0c:63:33:13:9d:37:50:a0:eb:d5:d6:c8:96:6e: 6e:cf:bd:e8 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjUwOTIyMTgzODQ3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxOTdiNy0zOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhvpRqcPFf4XLNEvyVm05Xvq5MuaRcmmIvlzOzM1nmBdjUEpGMeBMPCi1FPZ vbgYcVYRmBk4e3TlElc8YLuD6votFwl7e8BnTQ9C/LFIN6HrlxTSHTGpfTHrbxf0 boMw9rcU79nd/lVqOEqG8TkPRLMqF+cinTTOkI/jbJ/KxuQs3DkiLqRTgQskBPBd drB0wpM4dNjBe216lXK5cJrXD9dCQgwqt8+PNIw6sbQO1xE/ktrHUgWEac5cINaR ovjgz6+E1ABxr+wV4Fta1+cS2kb1NjK1P4S1Z49B+x/bfA4fEa40f/A+P48lqwCz pVl+nenaDiBN7Eugc94sGl/OmQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDl20fhN aR7CLTTa9g3M4qAoPnNFMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTMzN0YvMUUxN0UwMUNGMjU0MTFFOUFEM0JGQjYxQzRGOUFFMDIvMUNGQzU4MTQ0 NzQ2MTFGMDg3RkE0QTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkATHA//8wDQYJKoZIhvcNAQELBQADggEBACWLQcV/MuWI wwKYKSV9sr8035Jcu+vVwzIbWQ75mS8EjgWmTGHwoYbofnfgrvyCObxz+i6csHQ5 G0g4kQ5CPu1rP6njFuEwmwvYpbbKEfp3N3y5MeUJEzWGvWf36PneozN08iutpHV7 KjnnWxSnmNamNmir/CghHFBquMu9M7ngy4Onh1dc0C5JPOZi8kY2aGBcsdJMofsw 9XE+d8KFk5SG70QTt4NzwXl2GBwL/VGWPyJMPs014mjp9z6VSozUj8BHhuHkwbgy wtuOle/lJdAwtlwJNpA76lFCP4AMkSwlzjph26JdR2SRIHPq+IUMYzMTnTdQoOvV 1siWbm7Pveg= -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:34 2025 by rpki-client