$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/12F6CA2854C311EFB296F71BC4F9AE02.roa File: 12F6CA2854C311EFB296F71BC4F9AE02.roa (raw, json) Hash identifier: LxBu+8zYYZ8mbUldtFT2+h/ubaaodDALfApbFuxKmQc= Subject key identifier: 63:23:9D:63:BE:74:ED:3C:97:EA:37:30:A5:2D:36:D5:B2:6C:05:2B Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EDB Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/12F6CA2854C311EFB296F71BC4F9AE02.roa Signing time: Thu 22 May 2025 20:07:44 +0000 ROA not before: Thu 22 May 2025 20:07:44 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153190 IP address blocks: 2406:840:fc70::/44 maxlen: 48 2406:840:fedc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3803 (0xedb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:44 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f8410-4694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:56:22:24:32:32:98:3b:e1:58:af:19:d3:79: ce:fb:00:59:46:41:b6:25:20:93:03:f5:a5:0d:d9: 50:71:b8:22:b9:d3:65:6d:1b:36:a6:09:7a:a1:83: 49:c5:f5:f9:1c:e0:b9:3c:cb:5a:f0:73:82:d7:70: 65:f1:99:59:42:1f:27:5a:c8:16:58:f7:61:ce:f2: 7e:16:0d:55:67:3b:bb:f5:15:50:6c:ce:39:ad:ba: 29:5e:7a:d7:07:e9:d4:e7:cf:68:a3:30:f1:e7:9a: af:5a:dc:7b:d7:b1:e4:ff:04:43:ba:07:21:b6:77: 1f:b5:30:75:5d:5e:0e:fe:ef:8b:35:a6:fb:db:1f: 1f:15:af:8d:93:60:5e:6c:cf:c1:a8:36:f8:68:ba: 9b:60:97:e8:c6:a2:43:77:a7:8b:08:3f:0c:07:4a: eb:3d:9b:9a:14:43:cb:0f:86:e4:ef:14:2e:89:33: 85:a0:b7:37:91:24:9d:7c:15:61:3a:3c:6e:6c:c6: bb:3d:67:89:a0:a9:ba:f3:f5:f3:bd:80:5c:57:05: 35:28:7e:4a:01:65:6d:b6:9a:4d:8d:59:ce:fc:54: f4:97:e2:e3:76:2c:13:1c:c3:a2:0e:73:0a:28:30: 31:27:2f:05:0c:75:66:d9:3b:38:18:59:73:be:21: 50:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:23:9D:63:BE:74:ED:3C:97:EA:37:30:A5:2D:36:D5:B2:6C:05:2B X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/12F6CA2854C311EFB296F71BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fc70::/44 2406:840:fedc::/48 Signature Algorithm: sha256WithRSAEncryption 78:29:77:f4:78:88:ed:98:d0:ff:e3:30:7a:55:d1:fd:6d:6b: b5:42:a5:08:eb:48:71:09:a1:e7:93:d8:33:43:b6:2f:0d:95: 89:5e:4b:75:51:f7:8c:34:32:66:de:96:26:b7:61:7e:ae:a7: b1:05:31:af:a5:fb:3c:0f:2b:06:1a:bb:33:bd:e2:70:41:9e: 8c:ee:5f:d5:8e:29:a8:58:e8:65:a8:de:f1:ba:31:7a:b7:cf: c5:d7:d8:1b:c9:c5:cc:ae:fc:f3:8f:90:dd:25:a3:73:1d:0e: 93:cb:4f:39:ce:61:e6:e5:a7:9e:06:ff:c8:ea:4a:cf:f5:20: 60:fb:57:d7:05:bb:d2:5e:3e:da:25:28:74:5d:cb:91:7e:76: 37:7e:3a:50:b5:0c:83:24:30:7d:72:6a:72:5e:a1:e6:93:41: 3b:89:c0:8b:ab:bc:39:fc:3b:bb:e7:c4:4e:1f:56:a9:e4:cc: 89:7f:75:76:c0:f9:04:a9:50:33:54:af:34:f6:62:a7:03:1a: 98:12:34:ca:e9:b6:3f:c1:6d:ec:15:5a:43:40:12:3a:ab:d4: 24:d4:35:06:d8:75:0b:d7:2f:ae:f6:50:0f:51:65:85:6e:b1: 21:59:4f:97:fe:70:b3:7f:6a:25:5a:5f:f9:3d:7b:c0:49:23: dc:eb:6a:67 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzQ0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQxMC00Njk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VYiJDIymDvhWK8Z03nO+wBZRkG2JSCTA/WlDdlQcbgiudNlbRs2pgl6oYNJ xfX5HOC5PMta8HOC13Bl8ZlZQh8nWsgWWPdhzvJ+Fg1VZzu79RVQbM45rbopXnrX B+nU589oozDx55qvWtx717Hk/wRDugchtncftTB1XV4O/u+LNab72x8fFa+Nk2Be bM/BqDb4aLqbYJfoxqJDd6eLCD8MB0rrPZuaFEPLD4bk7xQuiTOFoLc3kSSdfBVh OjxubMa7PWeJoKm68/XzvYBcVwU1KH5KAWVttppNjVnO/FT0l+LjdiwTHMOiDnMK KDAxJy8FDHVm2Ts4GFlzviFQ5wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGMjnWO+ dO08l+o3MKUtNtWybAUrMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMTJGNkNBMjg1 NEMzMTFFRkIyOTZGNzFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA/HADBwAkBghA/twwDQYJKoZIhvcNAQELBQADggEB AHgpd/R4iO2Y0P/jMHpV0f1ta7VCpQjrSHEJoeeT2DNDti8NlYleS3VR94w0Mmbe lia3YX6up7EFMa+l+zwPKwYauzO94nBBnozuX9WOKahY6GWo3vG6MXq3z8XX2BvJ xcyu/POPkN0lo3MdDpPLTznOYeblp54G/8jqSs/1IGD7V9cFu9JePtolKHRdy5F+ djd+OlC1DIMkMH1yanJeoeaTQTuJwIurvDn8O7vnxE4fVqnkzIl/dXbA+QSpUDNU rzT2YqcDGpgSNMrptj/BbewVWkNAEjqr1CTUNQbYdQvXL672UA9RZYVusSFZT5f+ cLN/aiVaX/k9e8BJI9zramc= -----END CERTIFICATE-----Generated at Wed Jun 4 00:12:41 2025 by rpki-client