$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A1E7A58D8FB11EC9827D678C4F9AE02.roa File: 1A1E7A58D8FB11EC9827D678C4F9AE02.roa (raw, json) Hash identifier: K0et4zZwL9fHqAtnILYZxyWX6EI76dPJr2CH9LHqbjc= Subject key identifier: 88:7D:41:96:37:3B:FD:D2:05:1A:8C:47:0E:D1:50:87:1C:F0:46:B4 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EA1 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A1E7A58D8FB11EC9827D678C4F9AE02.roa Signing time: Thu 22 May 2025 20:06:49 +0000 ROA not before: Thu 22 May 2025 20:06:49 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 140731 IP address blocks: 2406:840:9200::/40 maxlen: 48 2406:840:9700::/40 maxlen: 48 2406:840:eb80::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 20:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3745 (0xea1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:06:49 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f83d9-844a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f3:75:ee:6b:af:b5:c0:06:3f:d5:8b:e5:1a: 94:65:5b:91:3b:45:ef:22:58:7f:8b:fd:6e:d4:bb: 25:22:25:78:04:c1:60:94:3a:42:e2:49:55:62:41: d7:6b:f5:73:85:6f:56:9d:67:21:a0:eb:d6:cd:70: cd:27:72:a8:32:30:bb:95:31:83:fe:a4:f9:f8:c0: 05:2c:53:96:e2:5f:79:cb:20:57:08:f0:d7:ab:79: 8f:06:48:bc:b0:6e:74:c9:a0:4a:35:12:0e:01:f0: 92:f2:0d:86:e2:02:54:09:f3:f0:7c:2f:1a:e1:09: 00:15:99:12:4f:0c:22:bc:d1:9e:26:4b:f3:72:63: c4:9f:c4:f4:f9:bc:36:cd:55:8a:30:30:4b:8e:6a: d4:90:71:6d:2e:de:2c:a3:79:d2:9c:61:1a:99:59: da:67:af:a2:dd:56:ef:ea:b3:3a:e5:74:04:46:b4: 50:ca:b9:80:37:6f:c7:e8:c9:78:b5:26:91:f7:df: 71:c2:e6:b7:5e:4c:8e:79:e8:cd:bf:a5:a9:b7:68: ce:18:1b:3b:bd:5b:d1:af:af:6f:73:31:64:d3:d6: 6e:ca:56:c0:19:8f:59:1b:d4:a4:94:33:45:87:17: 7f:90:47:20:00:21:ae:ff:c0:14:06:88:aa:2a:aa: b0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7D:41:96:37:3B:FD:D2:05:1A:8C:47:0E:D1:50:87:1C:F0:46:B4 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A1E7A58D8FB11EC9827D678C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9200::/40 2406:840:9700::/40 2406:840:eb80::/42 Signature Algorithm: sha256WithRSAEncryption 1e:2b:3b:b0:90:bc:f0:eb:55:be:26:de:4e:a4:07:31:56:bc: dc:44:dc:11:63:c6:a7:73:52:1b:cf:b2:f0:27:ff:37:04:c8: a3:98:cb:27:f1:f9:8e:6d:eb:42:84:58:72:c6:d9:a3:79:72: 8a:61:05:f3:91:62:cd:d3:a2:9a:c3:7e:8a:81:50:81:23:e7: cb:0c:b1:ab:8c:1e:70:cb:65:bb:aa:dd:11:24:ae:f0:0d:44: a7:22:89:48:57:fd:57:b6:d8:f8:f1:b9:7c:a4:e0:9d:81:05: 1e:21:97:d5:52:1d:dc:1a:69:71:3f:a2:e1:d9:a6:6e:ba:37: 2f:61:fa:40:55:ea:5d:8f:7d:78:6e:9a:af:54:bb:cf:77:d7: 50:b5:65:ce:ca:8a:c1:95:06:1b:d9:7c:7b:c2:99:18:54:da: 79:b0:76:19:bf:50:42:80:a3:d9:d9:40:ac:75:10:8c:0d:6a: 20:6d:83:be:7b:58:79:f9:b1:a1:36:fa:04:ed:39:47:a7:ec: 9f:bc:02:c5:c0:d0:45:b8:37:3a:3a:f3:42:fc:89:67:76:3a: 21:30:05:87:2d:8c:5d:5f:47:ea:ab:e3:0b:72:5f:a9:3f:47: 89:30:09:55:5d:89:a7:0f:ca:44:35:6b:23:bb:77:92:be:8a: 7c:63:70:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjQ5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODNkOS04NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfN17muvtcAGP9WL5RqUZVuRO0XvIlh/i/1u1LslIiV4BMFglDpC4klVYkHX a/VzhW9WnWchoOvWzXDNJ3KoMjC7lTGD/qT5+MAFLFOW4l95yyBXCPDXq3mPBki8 sG50yaBKNRIOAfCS8g2G4gJUCfPwfC8a4QkAFZkSTwwivNGeJkvzcmPEn8T0+bw2 zVWKMDBLjmrUkHFtLt4so3nSnGEamVnaZ6+i3Vbv6rM65XQERrRQyrmAN2/H6Ml4 tSaR999xwua3XkyOeejNv6Wpt2jOGBs7vVvRr69vczFk09ZuylbAGY9ZG9SklDNF hxd/kEcgACGu/8AUBoiqKqqw4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIh9QZY3 O/3SBRqMRw7RUIcc8Ea0MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMUExRTdBNThE OEZCMTFFQzk4MjdENjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQcBAf8E IzAhMB8EAgACMBkDBgAkBghAkgMGACQGCECXAwcGJAYIQOuAMA0GCSqGSIb3DQEB CwUAA4IBAQAeKzuwkLzw61W+Jt5OpAcxVrzcRNwRY8anc1Ibz7LwJ/83BMijmMsn 8fmObetChFhyxtmjeXKKYQXzkWLN06Kaw36KgVCBI+fLDLGrjB5wy2W7qt0RJK7w DUSnIolIV/1Xttj48bl8pOCdgQUeIZfVUh3cGmlxP6Lh2aZuujcvYfpAVepdj314 bpqvVLvPd9dQtWXOyorBlQYb2Xx7wpkYVNp5sHYZv1BCgKPZ2UCsdRCMDWogbYO+ e1h5+bGhNvoE7TlHp+yfvALFwNBFuDc6OvNC/IlndjohMAWHLYxdX0fqq+MLcl+p P0eJMAlVXYmnD8pENWsju3eSvop8Y3Ab -----END CERTIFICATE-----Generated at Sat Oct 25 19:18:51 2025 by rpki-client