$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a613030303a3a2f33362d3336203d3e20313437303230.roa File: 323430313a323036303a613030303a3a2f33362d3336203d3e20313437303230.roa (raw, json) Hash identifier: etXTXI6lbK25AX21MqAoN1F7hKLAxARtW9oHZFK0R+o= Subject key identifier: CA:CC:44:6F:42:37:07:9A:BC:FA:D5:96:05:63:B7:8A:7D:C3:5F:CD Certificate issuer: /CN=A9150E4D0000/serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E Certificate serial: 17DC02A8D2BE4089CE84E9AB788A2FBFA7BF9C0B Authority key identifier: 11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a613030303a3a2f33362d3336203d3e20313437303230.roa Signing time: Wed 04 Jun 2025 05:28:46 +0000 ROA not before: Wed 04 Jun 2025 05:23:46 +0000 ROA not after: Wed 03 Jun 2026 05:28:46 +0000 asID: 147020 IP address blocks: 2401:2060:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 16:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:dc:02:a8:d2:be:40:89:ce:84:e9:ab:78:8a:2f:bf:a7:bf:9c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E4D0000, serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E Validity Not Before: Jun 4 05:23:46 2025 GMT Not After : Jun 3 05:28:46 2026 GMT Subject: CN=CACC446F4237079ABCFAD5960563B78A7DC35FCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:83:d0:37:7d:e2:10:f0:b2:8d:ec:f8:f9: 76:18:ae:80:71:c1:1a:20:96:96:1e:bb:f2:08:e8: 57:4c:3f:93:55:55:3e:ee:50:90:6b:4a:3a:01:76: 01:4d:b0:19:1c:2e:5d:ab:a2:13:00:3e:c0:c5:b9: 5a:da:f6:d6:7f:61:36:69:74:51:cf:67:fe:32:31: f8:84:0d:e7:a9:ef:2a:a9:9e:58:fa:10:24:52:eb: d1:89:a0:c7:07:d5:12:5d:38:50:7e:3e:3d:b4:2a: ec:e1:35:d9:ca:8a:62:b6:3f:10:f6:ea:1f:d0:fe: fc:37:a4:e3:a1:4c:78:4f:e6:35:1c:05:06:fb:ce: 3a:88:63:a0:ce:33:e4:1f:a4:8f:3b:b1:e0:25:9d: 0f:bb:a7:e4:33:16:cf:3a:c7:71:a2:5b:e3:ae:11: 1b:9d:dc:4f:4a:10:c7:e0:6d:62:7c:89:ce:de:83: ac:3c:bd:c5:79:c5:42:fa:4f:5f:1e:85:ab:6c:f4: 3b:8f:68:24:3f:cf:10:a7:cc:45:95:dd:ae:db:f8: 29:e4:b5:7e:b5:86:cc:0c:a9:d2:04:c8:62:01:89: 04:89:98:c1:53:ef:b2:8a:56:90:40:86:50:13:43: cf:19:1f:3d:2c:a4:03:a8:85:30:4c:b5:02:7a:19: 18:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CC:44:6F:42:37:07:9A:BC:FA:D5:96:05:63:B7:8A:7D:C3:5F:CD X509v3 Authority Key Identifier: keyid:11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a613030303a3a2f33362d3336203d3e20313437303230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:a000::/36 Signature Algorithm: sha256WithRSAEncryption ab:62:e4:14:78:7d:54:ad:6a:25:ae:1d:ac:d6:c1:0f:ae:58: b2:72:d6:fb:cb:03:c6:a1:ff:d2:80:61:d1:d7:a1:40:f0:47: a7:0c:bf:cf:94:60:c9:60:7e:08:5c:fe:13:3c:6d:f6:29:ce: ad:0f:05:d8:fe:00:ca:42:40:47:03:f1:fc:08:f6:8f:a2:5e: 5e:c7:0f:01:b5:ef:fb:c9:df:94:98:7c:dc:44:4d:a5:4d:ed: 02:05:be:53:5e:b0:e9:df:7b:3b:3a:ab:88:97:82:c7:6b:97: 2f:e2:e5:b4:66:98:aa:2a:84:1b:f4:b9:a4:44:7f:2a:69:e7: 9a:71:ef:88:e5:33:dc:c0:69:11:6f:0b:29:4f:40:36:a8:31: 2f:ac:05:b4:fd:1b:c1:27:7b:39:30:11:d7:c6:75:0a:5f:8d: 74:f9:d4:65:a3:96:08:73:78:94:1d:28:45:e4:b9:6b:e1:1a: c4:25:69:17:47:1b:dc:05:ad:bb:71:f1:9d:61:86:cc:bf:df: ed:a5:f8:3d:5c:92:d3:f4:15:76:fb:34:37:b3:89:2c:5d:18: f7:b4:37:7b:2b:8f:a0:47:05:7d:76:0c:42:fa:15:ce:99:09: e2:61:5d:21:90:dc:1e:1c:b5:e7:77:2a:5b:e1:44:c0:5a:9b: 02:a8:27:63 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUF9wCqNK+QInOhOmreIovv6e/nAswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEygxMUY5OEYzRjhE RDRGNTVDQzdGRkI3QTRCQUNDNjU2RTBEMTkzRDFFMB4XDTI1MDYwNDA1MjM0NloX DTI2MDYwMzA1Mjg0NlowMzExMC8GA1UEAxMoQ0FDQzQ0NkY0MjM3MDc5QUJDRkFE NTk2MDU2M0I3OEE3REMzNUZDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwPg9A3feIQ8LKN7Pj5dhiugHHBGiCWlh678gjoV0w/k1VVPu5QkGtKOgF2 AU2wGRwuXauiEwA+wMW5Wtr21n9hNml0Uc9n/jIx+IQN56nvKqmeWPoQJFLr0Ymg xwfVEl04UH4+PbQq7OE12cqKYrY/EPbqH9D+/Dek46FMeE/mNRwFBvvOOohjoM4z 5B+kjzux4CWdD7un5DMWzzrHcaJb464RG53cT0oQx+BtYnyJzt6DrDy9xXnFQvpP Xx6Fq2z0O49oJD/PEKfMRZXdrtv4KeS1frWGzAyp0gTIYgGJBImYwVPvsopWkECG UBNDzxkfPSykA6iFMEy1AnoZGK8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTKzERv QjcHmrz61ZYFY7eKfcNfzTAfBgNVHSMEGDAWgBQR+Y8/jdT1XMf/t6S6zGVuDRk9 HjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0RDAwMDAvMC8xMUY5OEYz RjhERDRGNTVDQzdGRkI3QTRCQUNDNjU2RTBEMTkzRDFFLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9FZm1QUDQzVTlW ekhfN2VrdXN4bGJnMFpQUjQuY2VyMIGYBggrBgEFBQcBCwSBizCBiDCBhQYIKwYB BQUHMAuGeXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkx NTBFNEQwMDAwLzAvMzIzNDMwMzEzYTMyMzAzNjMwM2E2MTMwMzAzMDNhM2EyZjMz MzYyZDMzMzYyMDNkM2UyMDMxMzQzNzMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQBIGCgMA0G CSqGSIb3DQEBCwUAA4IBAQCrYuQUeH1UrWolrh2s1sEPrliyctb7ywPGof/SgGHR 16FA8EenDL/PlGDJYH4IXP4TPG32Kc6tDwXY/gDKQkBHA/H8CPaPol5exw8Bte/7 yd+UmHzcRE2lTe0CBb5TXrDp33s7OquIl4LHa5cv4uW0ZpiqKoQb9LmkRH8qaeea ce+I5TPcwGkRbwspT0A2qDEvrAW0/RvBJ3s5MBHXxnUKX410+dRlo5YIc3iUHShF 5Llr4RrEJWkXRxvcBa27cfGdYYbMv9/tpfg9XJLT9BV2+zQ3s4ksXRj3tDd7K4+g RwV9dgxC+hXOmQniYV0hkNweHLXndypb4UTAWpsCqCdj -----END CERTIFICATE-----Generated at Wed Jul 2 16:37:30 2025 by rpki-client