$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa File: E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa (raw, json) Hash identifier: q+zKhGyTkhD9t3RA2sk/l2Z7I4u1fYSlG/t4K9NE2MA= Subject key identifier: 82:1F:12:4D:3B:E0:B4:25:26:B4:29:0B:E6:E6:91:70:EA:D3:75:4B Certificate issuer: /CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Certificate serial: 01A3 Authority key identifier: 90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa Signing time: Tue 27 May 2025 03:53:12 +0000 ROA not before: Tue 27 May 2025 03:53:12 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 151080 IP address blocks: 2001:df2:4340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C63, serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Validity Not Before: May 27 03:53:12 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68353728-e482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:7f:19:25:b8:64:13:c8:d8:53:fc:00:68: b5:76:aa:bd:81:c2:cf:bd:f6:34:48:25:a6:eb:7f: 35:ca:3c:30:4f:cb:47:28:93:a3:d6:e4:ba:6b:e5: bd:c7:ce:68:47:c5:9b:41:ff:eb:ec:b5:27:8f:3b: 68:0f:41:ba:46:0d:26:bb:33:86:23:a0:0b:7e:14: 51:38:87:5e:c8:b4:60:86:d8:be:f5:d9:de:5a:cc: 03:b8:69:61:98:bc:8b:7a:20:db:c3:86:d1:5a:ff: 59:81:54:04:54:97:a4:f4:50:75:df:d6:2d:4a:6c: d6:34:8b:90:46:6e:f0:54:c6:72:33:6f:72:00:c5: 00:0d:b0:6a:85:67:38:78:23:6d:85:ab:8e:8a:56: d5:c5:92:d2:4e:04:30:05:a8:8e:ea:e1:77:4b:89: 0b:87:fc:58:be:b1:04:4e:bb:c8:fc:e8:bc:44:e9: b1:58:4b:30:1c:f8:c3:31:b3:1d:4f:10:4c:ff:7e: c7:28:53:e9:8b:83:74:15:c0:24:26:e4:d9:f4:a8: 52:69:ef:c9:37:77:08:1a:68:b5:ee:d2:b2:35:be: 40:77:f5:64:08:77:fd:30:7a:42:98:cd:19:7e:7d: d0:c1:b3:bf:c8:d2:0a:3e:3e:9a:81:37:d9:86:b6: c3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1F:12:4D:3B:E0:B4:25:26:B4:29:0B:E6:E6:91:70:EA:D3:75:4B X509v3 Authority Key Identifier: keyid:90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df2:4340::/48 Signature Algorithm: sha256WithRSAEncryption df:b7:e3:af:55:d2:4f:60:b3:4d:b3:61:79:cc:6f:2c:00:1c: 1d:e2:91:f0:b8:b6:5e:3a:d9:2e:0f:ef:8e:d3:c1:1a:0d:ab: 29:85:f8:7f:e5:07:d6:15:55:86:e8:c6:33:64:9f:d5:7e:91: 37:b7:be:8e:b8:d9:d9:16:8e:ff:93:2d:42:ee:e6:32:93:d5: f7:1b:c7:fa:79:5d:08:8b:36:82:8f:d7:96:aa:b4:91:89:01: a9:3e:ac:50:bb:1c:7a:b2:8e:33:1c:8b:b0:8d:4f:22:f5:4d: 58:8a:34:33:f0:1a:12:2c:9e:9f:e4:c0:f0:b0:9e:80:77:c2: bb:db:b4:0b:11:51:e6:7d:c6:2b:50:98:72:32:de:da:79:e4: ed:18:aa:56:61:9b:ea:12:c2:05:dd:1e:07:52:54:9c:78:80: 84:cc:f0:47:30:b2:0a:99:5b:0e:8a:70:a3:5d:e2:e2:96:f7: d9:7e:1b:fd:27:e9:1d:b9:f1:d9:ff:d8:78:2d:cd:75:8e:ee: 6f:60:5b:77:66:af:81:b1:56:6a:f1:a4:54:96:03:9a:a4:d6: d1:a2:59:fa:34:f3:ec:38:bc:19:a6:02:bb:fe:04:5c:b2:97: 28:cb:fb:92:dc:af:99:4d:49:be:c7:69:ef:8f:27:96:a4:55: 45:e7:a9:e6 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDNjMxMTAvBgNVBAUTKDkwOEExODBGOTQ5NDk2MDdBREMwMTEzMTQ5QkU4ODJB RUFBOEU4OEYwHhcNMjUwNTI3MDM1MzEyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM1MzcyOC1lNDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAry9/GSW4ZBPI2FP8AGi1dqq9gcLPvfY0SCWm6381yjwwT8tHKJOj1uS6a+W9 x85oR8WbQf/r7LUnjztoD0G6Rg0muzOGI6ALfhRROIdeyLRghti+9dneWswDuGlh mLyLeiDbw4bRWv9ZgVQEVJek9FB139YtSmzWNIuQRm7wVMZyM29yAMUADbBqhWc4 eCNthauOilbVxZLSTgQwBaiO6uF3S4kLh/xYvrEETrvI/Oi8ROmxWEswHPjDMbMd TxBM/37HKFPpi4N0FcAkJuTZ9KhSae/JN3cIGmi17tKyNb5Ad/VkCHf9MHpCmM0Z fn3QwbO/yNIKPj6agTfZhrbDrwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIIfEk07 4LQlJrQpC+bmkXDq03VLMB8GA1UdIwQYMBaAFJCKGA+UlJYHrcARMUm+iCrqqOiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M2My80RDExMzE5Q0Q4 NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxnZXR3QkV4U2I2SUt1cW82 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJb1lENVNVbGdldHdCRXhTYjZJS3VxbzZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNDNjMvNEQxMTMxOUNEODVDMTFFRDgxODFBMjJGQzRGOUFFMDIvRThCMkJFNUFE QkNFMTFFRkE5RkMyQzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3yQ0AwDQYJKoZIhvcNAQELBQADggEBAN+3469V0k9g s02zYXnMbywAHB3ikfC4tl462S4P747TwRoNqymF+H/lB9YVVYboxjNkn9V+kTe3 vo642dkWjv+TLULu5jKT1fcbx/p5XQiLNoKP15aqtJGJAak+rFC7HHqyjjMci7CN TyL1TViKNDPwGhIsnp/kwPCwnoB3wrvbtAsRUeZ9xitQmHIy3tp55O0YqlZhm+oS wgXdHgdSVJx4gITM8EcwsgqZWw6KcKNd4uKW99l+G/0n6R258dn/2HgtzXWO7m9g W3dmr4GxVmrxpFSWA5qk1tGiWfo08+w4vBmmArv+BFyylyjL+5Lcr5lNSb7Hae+P J5akVUXnqeY= -----END CERTIFICATE-----Generated at Thu Jun 5 19:19:52 2025 by rpki-client