$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/E3F7B966E5A811ECBE11DA6DC4F9AE02.roa File: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (raw, json) Hash identifier: vcJweEpuC7NNxaBhmTy2xwoTWrT/UiEQDd+Y5zN4QIc= Subject key identifier: 0C:49:84:4A:AE:51:F7:80:5C:E4:6C:D8:22:3A:4D:39:B2:D7:22:90 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 1714 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/E3F7B966E5A811ECBE11DA6DC4F9AE02.roa Signing time: Fri 30 May 2025 17:39:58 +0000 ROA not before: Fri 30 May 2025 17:39:58 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 202623 IP address blocks: 2400:cb00:420::/48 maxlen: 48 2400:cb00:1029::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5908 (0x1714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: May 30 17:39:58 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6839ed6e-b5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:1d:6e:df:e4:9b:89:34:02:ad:d4:de:99: e6:4d:37:2e:d9:94:e0:f9:9f:c2:96:cf:86:0e:3e: a9:16:3a:3b:20:e4:39:0c:84:84:d3:15:59:12:18: 3e:e9:fe:13:43:6e:4f:35:d2:3a:37:56:1f:e6:2f: 16:85:66:78:17:18:20:80:dd:c2:75:47:eb:a1:2d: dc:c7:3d:b0:94:5d:06:35:cd:86:4e:7c:27:ad:09: 3c:67:bd:0f:81:b9:19:bd:d7:f3:6c:2e:57:51:de: ec:b2:64:a9:ca:1c:91:5b:3b:9e:66:cb:3a:d2:91: 5c:a0:51:97:bf:8c:97:7c:dd:f8:e3:30:ec:1b:cb: 5e:32:7c:68:ab:f9:39:10:09:20:e9:30:b5:54:73: 24:e9:cc:77:51:fa:43:85:a6:97:f7:01:24:0a:22: 89:42:14:e0:26:15:1a:a3:7b:1e:fb:cb:0e:8c:39: a8:a2:12:e5:8a:88:56:82:9b:b2:61:b2:6a:23:84: 23:51:9b:1d:45:01:76:9f:ab:56:43:d4:1f:79:17: 79:2b:56:5b:ff:a1:6c:10:77:f8:5a:9b:f4:93:42: 3c:88:d8:c5:d4:fb:cb:26:7b:bb:48:c6:18:d5:16: 0b:b7:86:25:7e:08:53:8c:ea:91:09:7f:01:35:0b: 2a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:49:84:4A:AE:51:F7:80:5C:E4:6C:D8:22:3A:4D:39:B2:D7:22:90 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/E3F7B966E5A811ECBE11DA6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:cb00:420::/48 2400:cb00:1029::/48 Signature Algorithm: sha256WithRSAEncryption cc:ed:f7:ac:74:2a:6b:9c:92:22:c5:73:71:2f:eb:15:75:06: e5:6e:75:2d:7b:e1:d7:49:04:a8:2c:1e:e5:2e:8c:b9:7e:4e: 0a:56:87:fb:c5:ce:e0:08:a1:77:98:1b:aa:3d:94:e4:56:0e: fd:9c:30:ff:ff:3b:20:5a:e1:87:39:50:75:ef:34:4f:61:70: 0c:ff:16:fa:85:ef:17:6a:b4:8f:ba:ee:73:5b:3f:68:f0:8c: f2:8f:2b:b4:f4:d1:04:6d:fd:6b:6b:05:d6:49:b4:64:83:ad: 2c:93:d9:29:3f:89:6b:a4:41:49:d4:ed:18:e1:14:d0:d6:8b: f6:29:53:f5:54:74:c5:4f:0c:84:36:2c:a7:0f:35:36:b3:38: b0:28:52:be:ea:8d:d3:c2:fb:be:62:33:09:29:23:88:77:9b: 58:85:22:be:1e:58:7a:e3:7c:ff:73:20:ae:95:a7:16:d0:71: ec:83:86:88:d0:6c:0b:1f:40:f6:1e:c2:7f:1a:a5:31:89:4e: 77:ea:ff:e6:ee:37:79:c9:82:91:b5:f7:f9:b6:a2:6d:42:50: 1c:be:f3:ef:b8:5f:c9:7e:37:13:53:f0:9b:71:8e:5f:78:a4: 74:81:ac:87:66:aa:c6:f0:31:90:f1:56:53:4f:6b:88:af:29: 99:5b:37:4a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICFxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwNTMwMTczOTU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM5ZWQ2ZS1iNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkgdbt/km4k0Aq3U3pnmTTcu2ZTg+Z/Cls+GDj6pFjo7IOQ5DISE0xVZEhg+ 6f4TQ25PNdI6N1Yf5i8WhWZ4FxgggN3CdUfroS3cxz2wlF0GNc2GTnwnrQk8Z70P gbkZvdfzbC5XUd7ssmSpyhyRWzueZss60pFcoFGXv4yXfN344zDsG8teMnxoq/k5 EAkg6TC1VHMk6cx3UfpDhaaX9wEkCiKJQhTgJhUao3se+8sOjDmoohLliohWgpuy YbJqI4QjUZsdRQF2n6tWQ9QfeRd5K1Zb/6FsEHf4Wpv0k0I8iNjF1PvLJnu7SMYY 1RYLt4YlfghTjOqRCX8BNQsqDwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFAxJhEqu UfeAXORs2CI6TTmy1yKQMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJEQTQvMUVDNzAyQkNGMUE3MTFFODkwRjA2NjUwQzRGOUFFMDIvRTNGN0I5NjZF NUE4MTFFQ0JFMTFEQTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkAMsABCADBwAkAMsAECkwDQYJKoZIhvcNAQELBQADggEB AMzt96x0KmuckiLFc3Ev6xV1BuVudS174ddJBKgsHuUujLl+TgpWh/vFzuAIoXeY G6o9lORWDv2cMP//OyBa4Yc5UHXvNE9hcAz/FvqF7xdqtI+67nNbP2jwjPKPK7T0 0QRt/WtrBdZJtGSDrSyT2Sk/iWukQUnU7RjhFNDWi/YpU/VUdMVPDIQ2LKcPNTaz OLAoUr7qjdPC+75iMwkpI4h3m1iFIr4eWHrjfP9zIK6VpxbQceyDhojQbAsfQPYe wn8apTGJTnfq/+buN3nJgpG19/m2om1CUBy+8++4X8l+NxNT8Jtxjl94pHSBrIdm qsbwMZDxVlNPa4ivKZlbN0o= -----END CERTIFICATE-----Generated at Tue Jun 3 23:36:39 2025 by rpki-client