$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/84C145D230D911F082B14974C4F9AE02.roa File: 84C145D230D911F082B14974C4F9AE02.roa (raw, json) Hash identifier: mP2QQWqHYPeK0WY2IdG9TiulT78Yh4TwS3eeLc1a48k= Subject key identifier: 1B:20:8A:25:E8:45:5A:9C:3F:B6:7A:17:80:CE:E5:14:47:D0:84:87 Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Certificate serial: 02 Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/84C145D230D911F082B14974C4F9AE02.roa Signing time: Wed 14 May 2025 15:38:44 +0000 ROA not before: Wed 14 May 2025 15:38:44 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140919 IP address blocks: 2402:960::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Validity Not Before: May 14 15:38:44 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6824b904-24e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:4c:04:c0:8f:43:2e:ba:20:bb:ff:39:75: 50:ac:de:67:4a:6b:50:5d:e5:00:f5:46:7f:8d:c9: bd:d2:0d:0b:51:7f:2b:b0:46:d6:11:72:c8:f5:18: d3:9f:fc:b4:a9:15:0b:23:db:06:a1:e4:81:d5:6f: 24:68:30:a2:97:cb:63:45:f2:eb:04:a3:70:90:66: b1:02:61:a8:78:d3:cf:5c:32:a9:7a:8f:7b:a4:cb: fe:f8:74:ed:85:2b:0b:be:a4:41:90:b0:b4:4c:d5: ce:9b:c2:04:22:fa:cd:d9:34:f9:48:0d:58:c2:b4: 1b:5e:2a:7c:92:e8:69:b5:ec:97:a5:47:c5:77:4a: 53:2f:0d:16:e3:6b:03:d3:93:58:12:db:73:f0:58: 97:1f:a9:b5:12:89:03:54:68:f1:2e:56:bc:13:72: f3:b9:60:75:f0:e3:83:79:19:20:14:46:c4:87:44: c1:02:14:d9:dd:9b:41:72:81:41:68:74:af:03:13: 62:a2:91:20:89:05:33:e9:8d:13:85:ab:5c:b6:bb: b1:a2:9f:fc:2b:ae:3f:12:d7:5e:2b:a4:2f:e8:00: 32:0b:d6:40:db:a8:f2:54:3a:41:b2:20:f3:59:5b: b9:b6:8a:64:21:29:df:ec:da:16:a6:14:70:91:4f: f0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:20:8A:25:E8:45:5A:9C:3F:B6:7A:17:80:CE:E5:14:47:D0:84:87 X509v3 Authority Key Identifier: keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/84C145D230D911F082B14974C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:960::/32 Signature Algorithm: sha256WithRSAEncryption 98:ca:f9:be:96:33:2f:b6:9f:16:2e:3c:3b:4c:15:50:17:a9: b0:11:4e:2f:7d:0a:7e:42:4c:16:86:cd:c9:c1:d4:00:39:70: bd:8f:14:f4:45:f5:ce:72:d0:0a:73:6c:b0:0c:4a:64:f6:1c: 6f:96:94:07:f5:73:c8:43:fa:13:9a:f0:50:7d:08:51:bc:bd: 03:8e:d3:b2:ab:f7:57:6c:23:05:a8:c7:17:56:4b:a5:68:7d: e6:1f:dc:eb:72:54:ca:2e:a7:63:40:36:b9:e6:92:00:09:f3: 79:5c:9d:29:99:4f:4f:b8:ec:0d:f9:9b:63:e4:69:2f:bb:12: c4:ec:6e:6b:56:8a:f1:ff:0d:cd:ea:9b:5f:bc:dc:39:6f:44: 3e:9b:b4:6d:83:49:e8:20:c1:04:82:02:b7:7c:25:b9:07:d4: a5:60:f4:63:0b:9b:b1:66:19:c0:b1:bc:2d:34:02:81:3b:6d: 8e:a6:15:e9:ab:5c:2e:cb:7a:eb:60:94:db:7b:bb:9b:07:13: 7e:c6:8a:a7:8d:a9:28:0a:9e:47:e0:d2:47:0a:a9:74:c7:62: 86:a2:3e:71:22:5a:5b:31:f8:b1:5a:4a:af:2c:b0:09:2d:f7: 14:2c:c6:bc:e0:25:2b:9f:23:8c:b6:b0:bb:20:d3:10:5a:f4: c4:43:d1:1f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoRUY3NjJDQzk0MjE5RTA5OTIzQTExQjBEM0M0MzBFN0Yz NUM4RDg2NDAeFw0yNTA1MTQxNTM4NDRaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MjRiOTA0LTI0ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrB0wEwI9DLrogu/85dVCs3mdKa1Bd5QD1Rn+Nyb3SDQtRfyuwRtYRcsj1GNOf /LSpFQsj2wah5IHVbyRoMKKXy2NF8usEo3CQZrECYah4089cMql6j3uky/74dO2F Kwu+pEGQsLRM1c6bwgQi+s3ZNPlIDVjCtBteKnyS6Gm17JelR8V3SlMvDRbjawPT k1gS23PwWJcfqbUSiQNUaPEuVrwTcvO5YHXw44N5GSAURsSHRMECFNndm0FygUFo dK8DE2KikSCJBTPpjROFq1y2u7Gin/wrrj8S114rpC/oADIL1kDbqPJUOkGyIPNZ W7m2imQhKd/s2hamFHCRT/DzAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUGyCKJehF Wpw/tnoXgM7lFEfQhIcwHwYDVR0jBBgwFoAU73YsyUIZ4JkjoRsNPEMOfzXI2GQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzI3QkU4NDBFMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzNZc3lVSVo0Smtqb1JzTlBFTU9melhJMkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTQ1OC8yN0JFODQwRTMwRDgxMUYwQTdCRTJFNEZDNEY5QUUwMi84NEMxNDVEMjMw RDkxMUYwODJCMTQ5NzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCCWAwDQYJKoZIhvcNAQELBQADggEBAJjK+b6WMy+2nxYu PDtMFVAXqbARTi99Cn5CTBaGzcnB1AA5cL2PFPRF9c5y0ApzbLAMSmT2HG+WlAf1 c8hD+hOa8FB9CFG8vQOO07Kr91dsIwWoxxdWS6VofeYf3OtyVMoup2NANrnmkgAJ 83lcnSmZT0+47A35m2PkaS+7EsTsbmtWivH/Dc3qm1+83DlvRD6btG2DSeggwQSC Ard8JbkH1KVg9GMLm7FmGcCxvC00AoE7bY6mFemrXC7LeutglNt7u5sHE37GiqeN qSgKnkfg0kcKqXTHYoaiPnEiWlsx+LFaSq8ssAkt9xQsxrzgJSufI4y2sLsg0xBa 9MRD0R8= -----END CERTIFICATE-----Generated at Mon Jun 2 07:18:07 2025 by rpki-client