$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A54BE6216C811EFAA6A4727C4F9AE02.roa File: 1A54BE6216C811EFAA6A4727C4F9AE02.roa (raw, json) Hash identifier: gWwUrmK19fUEureF43ftjYJbR9Nm+IV2+oPVvz335cg= Subject key identifier: BA:E2:4D:79:70:7D:5C:B6:10:A9:36:CA:CC:86:90:2F:FB:DA:F1:69 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EE4 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A54BE6216C811EFAA6A4727C4F9AE02.roa Signing time: Thu 22 May 2025 20:07:53 +0000 ROA not before: Thu 22 May 2025 20:07:52 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 2406:840:e0e0::/44 maxlen: 48 2406:840:e666::/47 maxlen: 48 2406:840:fd9f::/48 maxlen: 48 2406:840:fdd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3812 (0xee4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:52 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f8418-ad00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:34:9c:40:77:30:ba:7a:0d:20:86:e3:f8:88: af:e5:a1:a4:e0:f3:d6:b7:5a:54:c3:33:76:68:2d: 87:af:5a:e7:89:a8:cf:d8:05:b7:70:9b:40:bd:be: 3c:a9:9b:61:b1:88:74:67:72:86:d9:24:9e:69:c9: af:c9:c5:d4:45:0d:61:3e:b9:e5:98:ea:6b:58:c4: b9:b9:8d:91:4a:40:89:23:98:03:4a:48:e6:5d:97: 23:31:22:43:62:1b:11:6e:11:72:7c:b1:9b:8f:a4: 60:2b:22:8b:f3:4e:15:a2:4b:18:35:82:4b:70:5c: f8:e6:38:52:37:89:88:bd:d3:d2:4b:0c:fa:c8:1b: df:91:b2:00:93:62:ee:29:72:f5:00:0c:50:05:41: 81:34:55:78:f1:70:f4:33:40:fb:93:f8:9a:23:d6: 2a:90:ad:13:f3:1c:cd:df:2f:a6:43:ff:34:72:35: a4:f8:b5:9e:b5:5c:32:36:80:a4:db:6e:75:af:52: da:2e:fb:ef:85:89:e2:ba:35:91:db:64:fa:f9:18: 4e:ca:05:27:48:02:17:86:c6:71:01:a0:aa:c0:ee: 8d:c6:29:c8:7c:02:05:61:dd:8d:18:ba:54:26:60: 2c:e2:7b:69:60:d8:3f:85:89:c1:2e:c6:25:46:ec: ec:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E2:4D:79:70:7D:5C:B6:10:A9:36:CA:CC:86:90:2F:FB:DA:F1:69 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A54BE6216C811EFAA6A4727C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e0e0::/44 2406:840:e666::/47 2406:840:fd9f::/48 2406:840:fdd0::/44 Signature Algorithm: sha256WithRSAEncryption 59:fa:b4:f6:c0:38:10:ec:9f:ea:7f:63:85:66:b5:e5:f9:bf: 42:a6:d4:c9:e7:af:2c:20:ad:de:55:29:63:6b:ee:12:ab:b6: 66:0a:20:c7:07:77:1f:45:95:77:85:4a:2d:96:ce:46:cb:31: 50:7b:a1:1e:d1:4b:6c:d0:62:85:2d:2b:8b:c8:db:2c:34:7e: 18:33:36:fb:d6:cc:bc:98:1d:ce:30:51:19:74:83:35:5b:18: d6:b2:17:e9:14:d6:d0:84:0b:7e:1e:70:65:36:b1:fb:bd:13: 4d:71:d7:2e:5f:27:6e:72:2f:15:0f:29:d8:e9:4a:e0:06:5b: 51:d9:61:a4:05:b1:70:9a:f4:a0:d6:d1:e1:15:e5:97:47:a7: 8d:c0:89:d9:6e:79:2d:cf:d8:93:32:17:83:c6:f8:26:10:5b: f3:01:d9:ec:56:8d:51:d0:35:59:12:ee:c8:1f:94:50:d3:f8: 15:d6:f4:40:fb:eb:a4:3c:dd:6a:0e:16:c9:d7:4a:e0:6b:e4: 42:cd:6d:4a:03:17:40:51:d2:eb:d8:48:57:b6:42:b0:d9:01: c8:41:42:9c:1f:2a:f1:23:90:11:a9:09:7b:38:57:1e:65:0d: 34:b6:2a:b1:99:95:59:96:7d:f8:29:0d:88:13:14:22:57:d5: c8:7c:c7:d2 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICDuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzUyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQxOC1hZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTScQHcwunoNIIbj+Iiv5aGk4PPWt1pUwzN2aC2Hr1rniajP2AW3cJtAvb48 qZthsYh0Z3KG2SSeacmvycXURQ1hPrnlmOprWMS5uY2RSkCJI5gDSkjmXZcjMSJD YhsRbhFyfLGbj6RgKyKL804VoksYNYJLcFz45jhSN4mIvdPSSwz6yBvfkbIAk2Lu KXL1AAxQBUGBNFV48XD0M0D7k/iaI9YqkK0T8xzN3y+mQ/80cjWk+LWetVwyNoCk 2251r1LaLvvvhYniujWR22T6+RhOygUnSAIXhsZxAaCqwO6NxinIfAIFYd2NGLpU JmAs4ntpYNg/hYnBLsYlRuzsLwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFLriTXlw fVy2EKk2ysyGkC/72vFpMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMUE1NEJFNjIx NkM4MTFFRkFBNkE0NzI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgACMCQDBwQkBghA4OADBwEkBghA5mYDBwAkBghA/Z8DBwQkBghA/dAw DQYJKoZIhvcNAQELBQADggEBAFn6tPbAOBDsn+p/Y4VmteX5v0Km1Mnnrywgrd5V KWNr7hKrtmYKIMcHdx9FlXeFSi2WzkbLMVB7oR7RS2zQYoUtK4vI2yw0fhgzNvvW zLyYHc4wURl0gzVbGNayF+kU1tCEC34ecGU2sfu9E01x1y5fJ25yLxUPKdjpSuAG W1HZYaQFsXCa9KDW0eEV5ZdHp43AidlueS3P2JMyF4PG+CYQW/MB2exWjVHQNVkS 7sgflFDT+BXW9ED766Q83WoOFsnXSuBr5ELNbUoDF0BR0uvYSFe2QrDZAchBQpwf KvEjkBGpCXs4Vx5lDTS2KrGZlVmWffgpDYgTFCJX1ch8x9I= -----END CERTIFICATE-----Generated at Wed Jun 4 00:11:54 2025 by rpki-client