$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/1409168E1E3A11EE8485307CC4F9AE02.roa File: 1409168E1E3A11EE8485307CC4F9AE02.roa (raw, json) Hash identifier: R2unzPo0vV/yNS9/vpK5AzQ4ju39sQQVsnw2HUUIUOo= Subject key identifier: A0:39:09:89:89:70:CD:EA:54:FF:3E:7F:D0:F3:D2:01:27:1E:93:83 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 037C Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/1409168E1E3A11EE8485307CC4F9AE02.roa Signing time: Mon 19 May 2025 00:57:50 +0000 ROA not before: Mon 19 May 2025 00:57:50 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 201217 IP address blocks: 2400:70e0:bae::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: May 19 00:57:50 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682a820d-81b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:55:71:17:23:f5:e6:3a:3d:ed:9a:e6:27: 7d:b1:a5:88:47:1e:a0:bd:3a:d5:94:be:59:95:df: d6:48:8d:66:56:18:60:f9:c0:81:cb:0a:3e:9e:33: ae:fa:8f:f6:b3:12:96:9c:7a:fd:01:57:9f:f3:c9: d7:f9:2f:fa:52:27:3d:36:f8:50:94:19:bd:d2:9c: b0:78:a5:d9:60:5e:07:15:c7:92:32:f7:5a:0b:7f: 02:4a:f4:1d:8f:19:97:cc:73:ff:0f:43:40:0f:63: 66:65:fc:b6:ac:9d:3e:c6:52:cf:4a:62:63:a2:d9: a7:1c:e5:43:a5:05:be:63:80:41:c5:19:9f:d6:d2: 02:69:64:17:02:97:62:c4:25:95:e5:9a:23:9d:04: 71:a2:a9:46:d6:b1:7d:8f:b8:25:c7:20:ed:a6:13: c2:2a:88:c6:87:7c:ea:01:6f:d2:39:f0:fc:80:c9: 17:34:ef:1e:77:73:71:2f:3a:3f:8e:7d:cc:2a:46: 24:9b:88:b0:e7:6f:4c:db:20:0a:7d:10:49:f3:ab: f2:77:c6:4c:46:e5:c1:18:10:7e:a7:74:3d:07:09: 49:7a:47:40:77:2a:97:b2:a7:bc:6e:62:77:6a:0e: cf:53:0c:60:aa:cd:e4:ec:a8:10:a7:e4:74:1a:65: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:39:09:89:89:70:CD:EA:54:FF:3E:7F:D0:F3:D2:01:27:1E:93:83 X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/1409168E1E3A11EE8485307CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:70e0:bae::/48 Signature Algorithm: sha256WithRSAEncryption 89:f5:c8:92:2f:2e:43:a9:4c:d5:b9:7a:54:39:dc:0b:a9:d5: 3e:9a:c0:aa:57:e4:e2:a6:c3:3d:e4:8c:fc:08:98:0a:71:72: 87:8b:df:d5:32:17:6c:de:77:a1:de:ed:4f:af:4a:e5:ee:13: 5c:22:c0:45:cc:ae:ec:48:e2:87:08:c3:29:22:f8:ed:f8:10: c6:f3:95:09:22:da:2b:58:aa:55:fc:d9:08:02:6b:88:6b:02: 84:a9:77:b3:07:7d:f6:79:b0:b4:b7:a2:5c:09:52:31:23:56: bd:b3:96:fc:9a:7b:85:c4:7e:ee:d5:d4:da:2e:06:29:9d:82: fa:ce:2f:d1:d1:5f:fe:74:98:81:84:37:8b:88:60:22:16:3b: 5a:a4:da:1a:07:1c:c8:59:fd:7f:c0:45:6c:4c:9f:de:c9:59: 10:a6:51:51:2a:a6:39:5d:7a:59:99:a5:d0:39:c4:31:0e:15: f4:1f:82:20:c5:da:ad:f4:cc:b8:19:60:1e:32:5e:79:00:98: ba:f3:32:7b:fd:de:82:cf:70:6e:71:bb:72:8d:45:08:d5:1c: 0c:3c:35:91:80:5b:19:cd:77:d2:06:69:3d:d3:ec:75:5a:f8: 56:78:b5:9e:50:19:3d:96:b3:70:4f:7c:a0:d1:44:9d:ad:61: b2:c6:16:b3 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjUwNTE5MDA1NzUwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJhODIwZC04MWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtr9VcRcj9eY6Pe2a5id9saWIRx6gvTrVlL5Zld/WSI1mVhhg+cCBywo+njOu +o/2sxKWnHr9AVef88nX+S/6Uic9NvhQlBm90pyweKXZYF4HFceSMvdaC38CSvQd jxmXzHP/D0NAD2NmZfy2rJ0+xlLPSmJjotmnHOVDpQW+Y4BBxRmf1tICaWQXApdi xCWV5ZojnQRxoqlG1rF9j7glxyDtphPCKojGh3zqAW/SOfD8gMkXNO8ed3NxLzo/ jn3MKkYkm4iw529M2yAKfRBJ86vyd8ZMRuXBGBB+p3Q9BwlJekdAdyqXsqe8bmJ3 ag7PUwxgqs3k7KgQp+R0GmXDXwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKA5CYmJ cM3qVP8+f9Dz0gEnHpODMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI4MzcvOUQ5MEFCNjJDMTVBMTFFQ0E0NEY1MzYwQzRGOUFFMDIvMTQwOTE2OEUx RTNBMTFFRTg0ODUzMDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAHDgC64wDQYJKoZIhvcNAQELBQADggEBAIn1yJIvLkOp TNW5elQ53Aup1T6awKpX5OKmwz3kjPwImApxcoeL39UyF2zed6He7U+vSuXuE1wi wEXMruxI4ocIwyki+O34EMbzlQki2itYqlX82QgCa4hrAoSpd7MHffZ5sLS3olwJ UjEjVr2zlvyae4XEfu7V1NouBimdgvrOL9HRX/50mIGEN4uIYCIWO1qk2hoHHMhZ /X/ARWxMn97JWRCmUVEqpjldelmZpdA5xDEOFfQfgiDF2q30zLgZYB4yXnkAmLrz Mnv93oLPcG5xu3KNRQjVHAw8NZGAWxnNd9IGaT3T7HVa+FZ4tZ5QGT2Ws3BPfKDR RJ2tYbLGFrM= -----END CERTIFICATE-----Generated at Mon Jun 2 07:13:24 2025 by rpki-client