$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98082E58663A11F09330C842C4F9AE02.roa File: 98082E58663A11F09330C842C4F9AE02.roa (raw, json) Hash identifier: VyPyaAs25Z0dGbkfUIGhCS9nYMzNFJi53PJvVnJIWi8= Subject key identifier: 7E:F6:57:E3:D8:8A:2F:77:A2:7B:88:3D:95:21:AB:66:C0:DD:42:4D Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0F40 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98082E58663A11F09330C842C4F9AE02.roa Signing time: Mon 21 Jul 2025 13:57:09 +0000 ROA not before: Mon 21 Jul 2025 13:57:09 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 212831 IP address blocks: 2406:840:b100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 20:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3904 (0xf40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Jul 21 13:57:09 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=687e4735-9537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:9b:ee:65:bd:ee:f3:4b:8b:19:22:c1:16: 65:40:05:fa:07:56:98:cb:0a:5a:06:90:0c:ab:02: 36:b2:47:dd:bd:b1:ed:dd:da:70:66:67:60:a4:ac: 0d:a5:c1:ac:7e:c1:14:63:84:c5:75:df:84:14:be: 2e:37:b9:a5:36:84:e5:79:83:fc:f3:a2:31:37:e0: 53:78:60:25:d8:3c:eb:7e:54:a7:bf:67:90:6b:46: bf:e2:8b:6e:1e:eb:3d:77:1c:50:dd:d9:be:23:75: bb:c4:3d:c0:82:ef:b1:2c:63:fe:cd:11:b2:37:65: ec:20:5b:e8:a1:77:7c:31:b5:bb:dc:b4:ef:50:5a: 3f:29:9b:5e:5f:34:7e:00:4c:aa:3a:69:a3:18:ef: 88:3b:4f:42:61:be:27:01:df:75:e0:55:51:81:ca: 5b:9a:b1:a2:35:04:9a:28:56:7c:19:3d:aa:2a:09: 11:fb:b8:e6:0f:f6:9b:59:c0:b2:43:c4:4b:46:38: c5:62:16:48:c7:f4:ee:03:a7:f3:b5:f1:bf:eb:e4: 32:14:19:78:10:67:d8:ea:59:7b:f2:79:dd:5a:ba: cb:d3:f3:0f:f7:73:65:8c:b9:a3:8f:15:78:4d:be: 24:50:c2:78:89:77:c2:78:45:08:bc:2c:15:82:57: 2f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F6:57:E3:D8:8A:2F:77:A2:7B:88:3D:95:21:AB:66:C0:DD:42:4D X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98082E58663A11F09330C842C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:b100::/40 Signature Algorithm: sha256WithRSAEncryption 00:22:9b:6f:7e:bf:63:c8:ee:29:e7:4e:ac:3a:51:36:dd:6b: b8:47:f8:31:95:40:ba:b1:13:af:b6:72:60:98:69:6c:0d:7b: d0:be:e5:6e:0b:39:57:97:02:c5:8f:e8:db:4e:9a:c7:79:8c: 04:d0:4e:a5:29:fc:a3:77:cf:bc:6e:81:37:26:f4:5d:08:ab: 62:7c:14:c2:e1:b8:56:19:ca:71:81:d7:b2:26:d9:39:53:a9: eb:2b:c2:e1:4d:57:74:a8:db:18:de:17:ca:a5:df:6d:c7:80: dc:57:3f:3f:26:ba:b9:db:24:cb:0a:9e:f6:a5:4c:5b:02:ae: 0b:8e:3f:39:7b:3b:93:6e:84:b2:cd:72:5f:59:c8:05:e8:da: ab:fa:d5:d8:af:89:61:bc:be:88:10:87:9f:4a:93:10:7e:14: 00:c1:c7:ea:5b:ba:8a:8a:7a:6b:98:65:49:df:55:09:71:30: 3d:8e:62:6a:73:5f:85:0f:7c:a1:d6:ae:36:df:63:86:87:17: d1:80:61:97:ed:d5:1e:a6:09:74:83:a9:d8:ad:5f:1d:7c:0a: cc:48:07:cf:fa:2f:64:ae:ad:22:db:0b:cf:d3:fd:8e:8c:27: 74:16:1f:37:e3:64:88:81:08:2e:24:19:eb:41:68:16:da:ef: ca:07:2d:09 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICD0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNzIxMTM1NzA5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdlNDczNS05NTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyeb7mW97vNLixkiwRZlQAX6B1aYywpaBpAMqwI2skfdvbHt3dpwZmdgpKwN pcGsfsEUY4TFdd+EFL4uN7mlNoTleYP886IxN+BTeGAl2DzrflSnv2eQa0a/4otu Hus9dxxQ3dm+I3W7xD3Agu+xLGP+zRGyN2XsIFvooXd8MbW73LTvUFo/KZteXzR+ AEyqOmmjGO+IO09CYb4nAd914FVRgcpbmrGiNQSaKFZ8GT2qKgkR+7jmD/abWcCy Q8RLRjjFYhZIx/TuA6fztfG/6+QyFBl4EGfY6ll78nndWrrL0/MP93NljLmjjxV4 Tb4kUMJ4iXfCeEUIvCwVglcvfwIDAQABo4IClzCCApMwHQYDVR0OBBYEFH72V+PY ii93onuIPZUhq2bA3UJNMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOTgwODJFNTg2 NjNBMTFGMDkzMzBDODQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkBghAsTANBgkqhkiG9w0BAQsFAAOCAQEAACKbb36/Y8ju KedOrDpRNt1ruEf4MZVAurETr7ZyYJhpbA170L7lbgs5V5cCxY/o206ax3mMBNBO pSn8o3fPvG6BNyb0XQirYnwUwuG4VhnKcYHXsibZOVOp6yvC4U1XdKjbGN4XyqXf bceA3Fc/Pya6udskywqe9qVMWwKuC44/OXs7k26Ess1yX1nIBejaq/rV2K+JYby+ iBCHn0qTEH4UAMHH6lu6iop6a5hlSd9VCXEwPY5ianNfhQ98odauNt9jhocX0YBh l+3VHqYJdIOp2K1fHXwKzEgHz/ovZK6tItsLz9P9jowndBYfN+NkiIEILiQZ60Fo FtrvygctCQ== -----END CERTIFICATE-----Generated at Sat Jul 26 15:21:43 2025 by rpki-client