$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/1A8324E28DF311E7B616ED66C4F9AE02.roa File: 1A8324E28DF311E7B616ED66C4F9AE02.roa (raw, json) Hash identifier: nq0Uzk8SuEDu3ZbDp3B41hYz4SbibvM9axOdjGoUmDE= Subject key identifier: 71:64:55:B7:52:0B:26:D1:CB:98:A9:B8:8F:77:3E:6B:3B:49:30:7F Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 248D Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/1A8324E28DF311E7B616ED66C4F9AE02.roa Signing time: Fri 02 May 2025 16:23:23 +0000 ROA not before: Fri 02 May 2025 16:23:23 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 4690 IP address blocks: 2001:200:e00::/40 maxlen: 40 2001:200:8000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9357 (0x248d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: May 2 16:23:23 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6814f17a-b2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:5d:24:c1:d8:3f:de:ce:81:a8:ad:a3:6a: d6:98:65:e2:8d:3c:f5:07:92:12:19:28:a2:bd:d3: 71:4c:bd:94:ee:a3:2c:12:ef:d9:a5:c8:07:95:7a: 48:fa:68:e8:5d:a0:08:7a:bb:92:34:51:39:47:2e: ab:b9:82:ee:62:2d:49:98:6e:58:a6:4d:78:33:70: 7e:6d:10:20:57:2d:a5:9a:92:4a:91:2b:2b:db:74: 98:28:3d:9c:af:d7:19:fa:89:0d:3e:dc:3c:63:3c: 1f:4f:f0:1c:53:2e:83:a9:51:2a:d6:30:a0:21:68: 2e:76:09:bb:67:9b:ac:c1:97:0a:aa:e8:bf:6e:55: b3:4b:aa:7e:d3:90:56:7e:91:34:12:b7:45:8b:c7: f6:11:c8:7e:f2:26:60:6b:30:be:ac:93:bc:2a:59: 30:04:ee:e2:69:08:c2:8d:2e:2b:5a:8d:8a:23:44: 2f:1c:dd:9e:f5:85:42:66:7d:16:52:b6:5b:3e:09: 50:67:30:6f:24:bf:f7:be:0a:ea:bf:51:64:21:4a: bc:a1:c3:48:33:0f:43:3d:99:2d:2a:ba:22:35:9d: ad:e4:96:21:76:61:cb:b3:a7:bb:43:46:81:0d:61: 43:b6:8b:d1:7e:96:6a:6a:dc:f1:ad:ed:8a:1a:a5: bc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:64:55:B7:52:0B:26:D1:CB:98:A9:B8:8F:77:3E:6B:3B:49:30:7F X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/1A8324E28DF311E7B616ED66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:200:e00::/40 2001:200:8000::/35 Signature Algorithm: sha256WithRSAEncryption b1:53:3f:e6:31:20:dc:c8:5c:23:8a:ea:2d:35:5a:1b:a3:9c: f9:f7:fd:9b:69:1f:bd:29:86:b0:8f:1c:e0:97:51:c1:07:45: 3f:bb:9f:2d:3f:8d:80:07:f7:e3:70:45:be:7b:f6:63:7d:4c: f4:83:98:aa:3c:3d:96:93:33:3c:04:ad:05:3f:79:f7:15:79: 79:25:cd:d8:05:2a:37:4e:f9:a7:77:50:03:84:c4:c7:b4:f2: 9c:d0:f9:f2:26:0f:11:be:ff:e8:47:b1:85:ed:0e:84:54:e3: aa:d7:35:22:68:18:f5:5a:83:7f:40:03:69:4c:98:37:a5:3d: bf:f4:72:41:ac:20:8d:f6:3d:1e:7d:d5:03:c8:70:aa:51:41: 3d:d9:b3:ae:ab:6b:91:95:6c:73:3c:64:79:4c:dd:0f:51:06: 72:65:94:43:b2:1c:11:7e:27:9e:ae:85:ad:73:20:ee:8b:2f: ce:10:42:1f:f4:b1:2c:e0:d5:78:d2:00:08:a8:8f:8f:cf:aa: e7:06:c7:89:df:8c:1d:2c:cc:be:b5:3d:ae:8b:15:68:b0:5e: a6:5c:95:f0:18:bb:20:59:87:8f:46:45:e6:d4:98:4c:7e:de: 75:7e:26:8c:0f:65:bf:42:5c:35:52:51:86:56:73:93:67:85: ae:ec:50:a8 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICJI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjUwNTAyMTYyMzIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE0ZjE3YS1iMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+JdJMHYP97Ogaito2rWmGXijTz1B5ISGSiivdNxTL2U7qMsEu/ZpcgHlXpI +mjoXaAIeruSNFE5Ry6ruYLuYi1JmG5Ypk14M3B+bRAgVy2lmpJKkSsr23SYKD2c r9cZ+okNPtw8YzwfT/AcUy6DqVEq1jCgIWgudgm7Z5uswZcKqui/blWzS6p+05BW fpE0ErdFi8f2Ech+8iZgazC+rJO8KlkwBO7iaQjCjS4rWo2KI0QvHN2e9YVCZn0W UrZbPglQZzBvJL/3vgrqv1FkIUq8ocNIMw9DPZktKroiNZ2t5JYhdmHLs6e7Q0aB DWFDtovRfpZqatzxre2KGqW8zwIDAQABo4ICnzCCApswHQYDVR0OBBYEFHFkVbdS CybRy5ipuI93Pms7STB/MB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI2QUEvNDZDN0YxNzI0RjE2MTFFNThEMkEzMzI3QzRGOUFFMDIvMUE4MzI0RTI4 REYzMTFFN0I2MTZFRDY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQcBAf8E GjAYMBYEAgACMBADBgAgAQIADgMGBSABAgCAMA0GCSqGSIb3DQEBCwUAA4IBAQCx Uz/mMSDcyFwjiuotNVobo5z59/2baR+9KYawjxzgl1HBB0U/u58tP42AB/fjcEW+ e/ZjfUz0g5iqPD2WkzM8BK0FP3n3FXl5Jc3YBSo3Tvmnd1ADhMTHtPKc0PnyJg8R vv/oR7GF7Q6EVOOq1zUiaBj1WoN/QANpTJg3pT2/9HJBrCCN9j0efdUDyHCqUUE9 2bOuq2uRlWxzPGR5TN0PUQZyZZRDshwRfieeroWtcyDuiy/OEEIf9LEs4NV40gAI qI+Pz6rnBseJ34wdLMy+tT2uixVosF6mXJXwGLsgWYePRkXm1JhMft51fiaMD2W/ Qlw1UlGGVnOTZ4Wu7FCo -----END CERTIFICATE-----Generated at Mon Jun 2 07:09:25 2025 by rpki-client