$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/E2E44CFAE53311EFAE86E460C4F9AE02.roa File: E2E44CFAE53311EFAE86E460C4F9AE02.roa (raw, json) Hash identifier: zaV2Oty1jL2/c4Uzu5/P7WaAjSXG8VvApwgNyQrGMos= Subject key identifier: DC:B0:08:13:37:7E:53:77:20:5F:E1:E8:32:A6:E1:DF:DB:60:86:DC Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 010A Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/E2E44CFAE53311EFAE86E460C4F9AE02.roa Signing time: Mon 17 Mar 2025 08:47:32 +0000 ROA not before: Mon 17 Mar 2025 08:47:32 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 4515 IP address blocks: 2403:27c0:c02::/47 maxlen: 47 2403:27c0:c03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F Validity Not Before: Mar 17 08:47:32 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67d7e1a4-1cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:17:d7:ab:72:f1:83:8a:ea:5b:a6:09:37: a2:89:e9:8e:eb:db:5b:56:42:89:0e:6a:c0:b2:8d: e6:82:f8:b9:fd:a4:06:5c:ae:16:f6:60:10:a1:ed: c9:76:1a:fd:ec:75:15:cb:c2:ab:94:25:70:35:db: 91:f7:3b:54:81:f4:05:9c:c8:2f:fd:a2:9b:cb:53: 71:78:46:f5:32:72:d2:f8:63:36:51:60:0b:84:76: 45:ad:f0:45:76:6c:1a:1b:8d:f1:4a:65:d2:7d:33: bd:48:0c:5a:73:f3:64:39:b4:ed:6a:84:28:6c:9e: e3:71:ca:d3:d8:38:a7:f8:1b:ac:6c:34:7f:72:46: 3f:f0:e9:f1:a4:7c:90:12:38:3a:d9:d3:52:dc:46: 44:b7:fe:62:03:3b:40:05:94:11:1b:d5:d7:30:b4: 52:99:d9:74:1b:65:8b:80:78:51:5f:dc:64:5a:7a: 0d:2e:bb:ea:ab:2b:92:1f:01:54:3a:bf:90:46:2a: b3:9c:d0:b7:6b:1a:a6:fb:76:d9:cc:f9:52:09:54: 8c:a0:b4:9a:ed:81:f3:da:ec:da:3c:be:38:e6:8a: f5:2c:dd:b7:2b:8f:37:b8:ca:27:f5:63:03:06:f0: ba:06:d4:65:c1:c7:8d:3d:fb:6a:12:7c:dc:39:4b: 8c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B0:08:13:37:7E:53:77:20:5F:E1:E8:32:A6:E1:DF:DB:60:86:DC X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/E2E44CFAE53311EFAE86E460C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:27c0:c02::/47 Signature Algorithm: sha256WithRSAEncryption 53:a5:e0:ee:51:33:43:6a:cb:b7:07:be:d2:7b:68:db:90:6e: 43:ab:2f:ea:00:16:c4:ac:6b:86:33:0b:2b:45:0f:c9:00:33: 99:01:ca:63:d5:f5:c8:05:16:3e:e5:cb:a0:8e:15:0e:67:1b: 0b:20:4c:b0:1a:3e:d3:63:a4:73:18:30:18:ba:69:20:ef:62: df:58:d6:bd:da:d5:57:61:d1:e8:74:2e:5c:7d:cd:ec:a5:6f: 01:8f:44:84:fa:84:e7:88:e8:71:78:8e:7d:06:c7:26:c8:90: fa:3f:ea:45:f8:76:a3:a5:5e:e1:86:03:67:8c:92:64:7e:7d: 0e:16:cf:aa:9a:66:93:ba:7a:fb:97:9f:1b:4f:ca:1a:bb:2e: 1c:93:5c:6c:43:03:ce:a6:70:61:30:5d:06:88:08:32:11:0a: 47:8f:00:ce:9f:b1:06:a4:93:71:0f:fc:95:15:20:f3:91:75: 0d:e3:b3:41:63:8a:17:94:86:78:ba:50:d7:1b:62:e5:f9:ef: 4f:0e:75:20:ca:ba:f2:e1:2c:74:5c:52:92:ee:81:14:0b:26: 9b:d6:13:f5:5f:eb:b8:c8:be:f1:e4:d2:66:2e:6a:56:91:39: e7:1b:1d:d2:a8:de:fa:ec:99:09:72:77:ce:f0:3d:69:e8:97: 3e:50:c5:73 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwMzE3MDg0NzMyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q3ZTFhNC0xY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0y4X16ty8YOK6lumCTeiiemO69tbVkKJDmrAso3mgvi5/aQGXK4W9mAQoe3J dhr97HUVy8KrlCVwNduR9ztUgfQFnMgv/aKby1NxeEb1MnLS+GM2UWALhHZFrfBF dmwaG43xSmXSfTO9SAxac/NkObTtaoQobJ7jccrT2Din+BusbDR/ckY/8OnxpHyQ Ejg62dNS3EZEt/5iAztABZQRG9XXMLRSmdl0G2WLgHhRX9xkWnoNLrvqqyuSHwFU Or+QRiqznNC3axqm+3bZzPlSCVSMoLSa7YHz2uzaPL445or1LN23K483uMon9WMD BvC6BtRlwceNPftqEnzcOUuMJwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNywCBM3 flN3IF/h6DKm4d/bYIbcMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2NkYvOEZDQzlEMjhDNkY5MTFFRTk3RTZGQjFEQzRGOUFFMDIvRTJFNDRDRkFF NTMzMTFFRkFFODZFNDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkAyfADAIwDQYJKoZIhvcNAQELBQADggEBAFOl4O5RM0Nq y7cHvtJ7aNuQbkOrL+oAFsSsa4YzCytFD8kAM5kBymPV9cgFFj7ly6COFQ5nGwsg TLAaPtNjpHMYMBi6aSDvYt9Y1r3a1Vdh0eh0Llx9zeylbwGPRIT6hOeI6HF4jn0G xybIkPo/6kX4dqOlXuGGA2eMkmR+fQ4Wz6qaZpO6evuXnxtPyhq7LhyTXGxDA86m cGEwXQaICDIRCkePAM6fsQakk3EP/JUVIPORdQ3js0FjiheUhni6UNcbYuX5708O dSDKuvLhLHRcUpLugRQLJpvWE/Vf67jIvvHk0mYualaROecbHdKo3vrsmQlyd87w PWnolz5QxXM= -----END CERTIFICATE-----Generated at Sat Apr 5 08:09:19 2025 by rpki-client