$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7767033E66EB11F0883E2C5BC4F9AE02.roa File: 7767033E66EB11F0883E2C5BC4F9AE02.roa (raw, json) Hash identifier: 5TF0sKet8I5QK08TXkwYcHNPhrvl6p7AH67nQsoxZTk= Subject key identifier: 9F:71:CC:4D:78:67:B0:59:CB:5A:3A:C5:BD:4F:16:CC:CE:78:EA:4D Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0F43 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7767033E66EB11F0883E2C5BC4F9AE02.roa Signing time: Tue 22 Jul 2025 11:03:16 +0000 ROA not before: Tue 22 Jul 2025 11:03:15 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 141712 IP address blocks: 2406:840:e110::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3907 (0xf43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Jul 22 11:03:15 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=687f6ff3-96c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9f:44:fd:a6:90:b9:3e:a7:ce:3f:24:1e:c8: f3:90:ba:47:75:63:a6:65:f6:5a:07:f7:de:48:5a: 40:38:10:5a:ec:45:c9:8a:23:ea:3a:6e:48:29:17: db:06:d0:1f:1c:00:eb:dc:2d:de:e0:c4:56:3b:ac: 5d:89:20:49:c4:87:59:be:4c:6c:f2:b6:5f:9d:b5: 2f:c5:84:84:cf:17:4b:98:12:36:cf:ea:0b:66:75: a8:20:93:ac:66:02:88:2b:ff:ce:4c:63:5f:e8:80: d6:b1:c0:a2:f4:62:94:06:66:bb:31:9d:ff:aa:81: 17:70:92:ba:0e:e0:f9:ee:2d:85:b3:26:96:fa:d3: ab:99:85:e4:55:14:3f:7d:a0:2a:88:89:4e:96:4e: d0:3b:72:dc:01:a8:43:a2:d1:ad:62:98:46:3a:1c: 8c:2e:82:62:d2:a3:56:7d:15:77:53:37:85:06:bb: 6b:6b:14:22:1d:69:04:4c:4f:85:52:b2:43:52:e1: 8d:83:86:c8:fa:80:8d:7d:83:5e:3b:46:a7:ed:a0: e5:16:23:68:7b:e2:c0:84:32:76:e2:2f:1d:f9:c3: cd:32:90:99:cc:41:0e:c8:b7:42:51:d7:b0:3b:e4: 8f:15:e9:95:86:8f:bf:80:72:8f:5c:e3:1c:0f:0f: 51:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:71:CC:4D:78:67:B0:59:CB:5A:3A:C5:BD:4F:16:CC:CE:78:EA:4D X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7767033E66EB11F0883E2C5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e110::/44 Signature Algorithm: sha256WithRSAEncryption 0b:32:40:2c:21:9e:31:83:dd:f1:6c:e8:b9:68:5e:af:4d:cf: b3:36:81:c3:ea:7f:38:7d:f7:e1:0e:65:82:82:a9:65:94:84: d9:1f:19:6a:4b:99:35:5b:1d:13:46:4f:ce:c5:3f:76:29:13: db:62:c7:02:8e:5a:d0:0a:6f:be:ce:10:cf:b5:cb:c5:ad:e3: d9:e1:58:28:9c:69:dd:8f:fe:44:11:fa:f9:b4:7a:d2:10:40: 5b:38:e3:0d:d4:68:f1:08:3c:f3:2d:98:8e:51:02:e7:8e:ce: c5:0b:40:7a:3f:43:08:74:f0:c5:c3:09:73:9a:20:2c:86:e1: a5:8d:6f:43:37:04:1a:ab:50:70:8b:5a:53:8f:f9:bd:ea:e8: 01:ff:7b:35:ef:4c:36:fa:f4:19:68:6f:87:36:a2:ab:1e:26: 64:a5:f0:9c:71:df:ff:87:49:29:f6:14:fe:c0:fd:27:c2:56: b5:91:f9:68:21:8a:c5:8b:d4:7f:23:19:f6:9c:9c:ee:67:fa: 7e:8f:17:ea:f3:39:a6:c1:20:1e:44:40:18:a5:d3:60:7e:92: 44:aa:dd:61:b6:a4:5b:16:2d:b1:89:eb:d5:15:3c:58:c7:44: 72:b9:47:d4:50:ea:bc:be:25:45:ca:6a:3c:d6:ef:38:b8:3c: a4:f6:6c:0c -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICD0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNzIyMTEwMzE1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdmNmZmMy05NmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2J9E/aaQuT6nzj8kHsjzkLpHdWOmZfZaB/feSFpAOBBa7EXJiiPqOm5IKRfb BtAfHADr3C3e4MRWO6xdiSBJxIdZvkxs8rZfnbUvxYSEzxdLmBI2z+oLZnWoIJOs ZgKIK//OTGNf6IDWscCi9GKUBma7MZ3/qoEXcJK6DuD57i2FsyaW+tOrmYXkVRQ/ faAqiIlOlk7QO3LcAahDotGtYphGOhyMLoJi0qNWfRV3UzeFBrtraxQiHWkETE+F UrJDUuGNg4bI+oCNfYNeO0an7aDlFiNoe+LAhDJ24i8d+cPNMpCZzEEOyLdCUdew O+SPFemVho+/gHKPXOMcDw9RzQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJ9xzE14 Z7BZy1o6xb1PFszOeOpNMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNzc2NzAzM0U2 NkVCMTFGMDg4M0UyQzVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA4RAwDQYJKoZIhvcNAQELBQADggEBAAsyQCwhnjGD 3fFs6LloXq9Nz7M2gcPqfzh99+EOZYKCqWWUhNkfGWpLmTVbHRNGT87FP3YpE9ti xwKOWtAKb77OEM+1y8Wt49nhWCicad2P/kQR+vm0etIQQFs44w3UaPEIPPMtmI5R AueOzsULQHo/Qwh08MXDCXOaICyG4aWNb0M3BBqrUHCLWlOP+b3q6AH/ezXvTDb6 9Blob4c2oqseJmSl8Jxx3/+HSSn2FP7A/SfCVrWR+WghisWL1H8jGfacnO5n+n6P F+rzOabBIB5EQBil02B+kkSq3WG2pFsWLbGJ69UVPFjHRHK5R9RQ6ry+JUXKajzW 7zi4PKT2bAw= -----END CERTIFICATE-----Generated at Sun Aug 10 21:17:11 2025 by rpki-client