$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/10D2721054C311EFB296F71BC4F9AE02.roa File: 10D2721054C311EFB296F71BC4F9AE02.roa (raw, json) Hash identifier: 91NrD+lqWUe12NPvsi11UDLxnH/V/+8+QE/4YK+LJLA= Subject key identifier: 9A:F6:11:71:CB:14:96:8F:D2:FA:51:B7:8D:2A:8A:7D:A5:FE:F7:DF Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0ED7 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/10D2721054C311EFB296F71BC4F9AE02.roa Signing time: Thu 22 May 2025 20:07:40 +0000 ROA not before: Thu 22 May 2025 20:07:40 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153185 IP address blocks: 2406:840:fc30::/44 maxlen: 48 2406:840:fec2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3799 (0xed7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:40 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f840c-97f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:28:7a:42:ec:22:df:f4:1c:52:52:d0:89:71: 14:bf:45:c4:e8:d0:2d:e5:40:95:1d:eb:6f:22:7a: 06:ef:f4:aa:d8:fb:42:23:e0:f5:69:86:c0:ad:8d: 10:2c:ca:b6:61:9b:4c:8b:52:48:f6:74:92:f0:0c: df:6e:d6:9d:ed:5b:a9:ef:a9:cb:1f:a3:2f:02:ac: 0e:f6:e2:81:fe:8a:b8:dd:fb:14:31:74:15:55:48: 9e:c7:b0:63:d7:4e:db:e9:04:15:53:c9:71:ef:49: e5:86:07:f7:cd:a1:df:b7:bd:62:84:62:4d:08:1e: 48:52:c3:34:ed:b0:0d:d4:12:7e:53:c7:98:0b:b0: 8c:ae:b8:a1:5d:b8:8d:77:0a:17:3a:b5:28:fa:94: fc:ae:ce:e1:be:2a:3a:bc:71:4f:a4:b4:89:b5:e1: 24:34:91:ab:fb:f5:37:8c:9d:8c:0b:a5:83:e1:ef: 0e:53:05:68:36:f0:2b:83:ae:9d:a5:85:e8:3f:19: b7:f9:75:00:cf:4d:e5:03:d8:1d:98:cd:b0:75:24: c4:b6:28:2c:84:25:f0:43:11:b3:9a:26:12:0a:fa: 89:49:f5:0b:26:9b:4e:ae:74:c8:41:14:d0:d8:4e: 6d:58:0e:cd:ef:e7:ee:73:d5:fc:eb:1c:51:71:59: 1e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F6:11:71:CB:14:96:8F:D2:FA:51:B7:8D:2A:8A:7D:A5:FE:F7:DF X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/10D2721054C311EFB296F71BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fc30::/44 2406:840:fec2::/48 Signature Algorithm: sha256WithRSAEncryption 81:08:43:50:e2:75:df:cd:87:6c:5b:2d:32:46:ec:c8:b7:e6: 58:44:8f:64:29:37:87:b0:03:1c:06:96:e9:74:2c:9f:6b:0a: ee:7e:a2:e6:a1:92:71:81:2d:9f:a0:c7:77:5d:b6:67:27:ce: db:88:3b:e0:c0:ed:43:2e:03:35:4e:23:c5:22:46:b0:e6:63: 8c:68:3d:6c:78:c5:a1:7b:c6:e8:69:4e:1b:2c:21:1b:fa:7f: d3:16:f5:59:ba:60:46:a7:c0:d0:40:04:f1:8d:4a:07:58:eb: 1c:8f:32:ab:c3:74:f0:b5:5f:e4:f4:ef:4b:4b:47:c7:2e:09: a1:9d:c7:40:54:e1:0a:f0:dd:f3:d1:6c:80:48:c9:3c:6b:f4: d9:93:5e:c8:99:16:f3:f4:d3:ba:92:3f:3f:50:66:62:a5:de: 13:92:67:1e:e6:d2:d6:b1:cb:77:28:78:76:6c:90:d3:1c:4c: fa:18:ca:bc:18:fc:5b:21:7b:46:1d:36:95:cd:c2:4a:fd:69: aa:23:e2:9e:51:9f:a7:39:f9:68:35:67:86:8b:8c:9a:cd:c6: 23:86:18:50:e4:de:a0:b5:50:11:e1:2d:c8:aa:f8:df:9a:25: f5:52:90:1b:da:cc:bd:c7:17:b6:ee:9d:72:a5:0f:94:3f:85: 8e:54:12:52 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQwYy05N2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Sh6Quwi3/QcUlLQiXEUv0XE6NAt5UCVHetvInoG7/Sq2PtCI+D1aYbArY0Q LMq2YZtMi1JI9nSS8Azfbtad7Vup76nLH6MvAqwO9uKB/oq43fsUMXQVVUiex7Bj 107b6QQVU8lx70nlhgf3zaHft71ihGJNCB5IUsM07bAN1BJ+U8eYC7CMrrihXbiN dwoXOrUo+pT8rs7hvio6vHFPpLSJteEkNJGr+/U3jJ2MC6WD4e8OUwVoNvArg66d pYXoPxm3+XUAz03lA9gdmM2wdSTEtigshCXwQxGzmiYSCvqJSfULJptOrnTIQRTQ 2E5tWA7N7+fuc9X86xxRcVke0wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJr2EXHL FJaP0vpRt40qin2l/vffMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMTBEMjcyMTA1 NEMzMTFFRkIyOTZGNzFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA/DADBwAkBghA/sIwDQYJKoZIhvcNAQELBQADggEB AIEIQ1Didd/Nh2xbLTJG7Mi35lhEj2QpN4ewAxwGlul0LJ9rCu5+ouahknGBLZ+g x3ddtmcnztuIO+DA7UMuAzVOI8UiRrDmY4xoPWx4xaF7xuhpThssIRv6f9MW9Vm6 YEanwNBABPGNSgdY6xyPMqvDdPC1X+T070tLR8cuCaGdx0BU4Qrw3fPRbIBIyTxr 9NmTXsiZFvP007qSPz9QZmKl3hOSZx7m0taxy3coeHZskNMcTPoYyrwY/Fshe0Yd NpXNwkr9aaoj4p5Rn6c5+Wg1Z4aLjJrNxiOGGFDk3qC1UBHhLciq+N+aJfVSkBva zL3HF7bunXKlD5Q/hY5UElI= -----END CERTIFICATE-----Generated at Wed Jun 4 00:11:33 2025 by rpki-client