$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1E59F9D4A11A11EDB1A0A23DC4F9AE02.roa File: 1E59F9D4A11A11EDB1A0A23DC4F9AE02.roa (raw, json) Hash identifier: akIuk1ued7SyGHZLzSiyXI4Go7WZ+pJ+SZF48DyaJyw= Subject key identifier: 84:5E:CF:3C:70:FC:E8:76:38:C1:8D:CA:57:22:5B:A0:26:99:08:17 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EEA Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1E59F9D4A11A11EDB1A0A23DC4F9AE02.roa Signing time: Thu 22 May 2025 20:07:58 +0000 ROA not before: Thu 22 May 2025 20:07:58 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 203236 IP address blocks: 2406:840:9ef0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3818 (0xeea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:58 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f841e-49e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:05:a4:a5:d5:7b:e2:d4:4a:7b:86:fc:52: fb:56:a9:99:60:d4:4a:f7:84:5a:4e:73:47:b2:da: 85:0b:ae:92:d7:cf:7e:ce:0f:b8:fc:64:1e:3f:32: ca:04:8f:8c:a2:e2:e1:0b:0d:00:94:45:8c:20:e4: 0d:67:81:4e:bd:bc:6d:c6:7a:07:43:b2:03:d9:be: f6:b7:35:7c:ba:e9:90:85:5e:06:5c:4a:cc:37:4c: 28:1f:5c:20:e8:ae:89:1a:04:f2:5f:44:4e:cf:7b: c9:b7:c9:6e:47:82:ee:86:36:97:92:be:fe:3d:3c: 79:91:81:b3:15:3b:6f:e9:d7:2d:40:7b:39:50:7c: db:4e:2e:f7:59:f5:1c:49:5b:07:8a:3e:f4:47:3e: 6f:06:44:b8:d8:fb:ac:49:86:dc:e2:4a:e3:e7:00: 53:ed:06:2b:2e:41:36:fc:95:b7:10:90:8d:88:1c: 51:f1:c1:c9:27:26:64:7f:fb:5e:a1:fd:03:24:59: a6:83:79:a1:80:60:bb:ff:dc:ec:b7:ff:40:e9:26: f7:3f:e1:44:c8:c8:3e:14:72:7d:af:c7:71:22:d6: 21:f7:24:0a:8a:5c:50:e4:9a:32:ff:35:08:09:bd: 50:4f:6e:b9:ee:77:08:42:15:ae:d5:2d:f9:76:05: c1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5E:CF:3C:70:FC:E8:76:38:C1:8D:CA:57:22:5B:A0:26:99:08:17 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1E59F9D4A11A11EDB1A0A23DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9ef0::/44 Signature Algorithm: sha256WithRSAEncryption aa:58:e8:74:18:ed:90:60:b8:94:34:a8:3e:84:ef:54:2a:51: a6:86:92:db:ca:c7:ae:cc:3f:99:44:2b:e6:5a:fe:b0:07:3b: be:32:55:c9:25:0d:2e:cf:a6:1b:02:52:cc:de:42:7f:c8:3a: 0d:e9:ea:9f:97:b1:8a:73:21:1d:3c:7a:03:36:e9:6f:2f:23: c7:99:c3:6a:71:d0:65:08:1f:63:7d:ab:e8:f8:3c:fb:21:cc: 98:3e:9f:f9:c6:4c:52:c3:20:39:23:dd:0d:db:a7:ff:47:bd: e4:42:ba:86:60:a5:d8:1a:90:52:5a:9f:a4:a0:e4:80:11:1f: 62:3f:5a:da:df:83:c5:fa:58:a6:a0:11:a4:ed:5a:9a:86:40: 20:a6:6c:10:bd:86:68:93:39:45:b4:8b:e5:57:da:c1:e5:3a: 08:26:f9:a8:01:32:bd:55:32:45:e1:0c:39:d6:57:67:52:aa: 24:c6:b7:9a:53:10:ec:65:9c:5d:da:f0:9a:93:46:5a:f9:2a: 5d:04:d5:f5:0b:7b:27:01:91:65:4a:a8:43:d7:6d:54:54:8f: 9f:ca:33:c3:e6:c8:e9:cd:58:24:e4:ce:f4:4e:ba:6e:1b:e5: bf:da:ed:1c:0f:48:46:40:93:be:7a:35:b5:dd:dc:19:18:3e: 20:54:f5:9d -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQxZS00OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVIFpKXVe+LUSnuG/FL7VqmZYNRK94RaTnNHstqFC66S189+zg+4/GQePzLK BI+MouLhCw0AlEWMIOQNZ4FOvbxtxnoHQ7ID2b72tzV8uumQhV4GXErMN0woH1wg 6K6JGgTyX0ROz3vJt8luR4LuhjaXkr7+PTx5kYGzFTtv6dctQHs5UHzbTi73WfUc SVsHij70Rz5vBkS42PusSYbc4krj5wBT7QYrLkE2/JW3EJCNiBxR8cHJJyZkf/te of0DJFmmg3mhgGC7/9zst/9A6Sb3P+FEyMg+FHJ9r8dxItYh9yQKilxQ5Joy/zUI Cb1QT2657ncIQhWu1S35dgXBDQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIRezzxw /Oh2OMGNylciW6AmmQgXMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMUU1OUY5RDRB MTFBMTFFREIxQTBBMjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghAnvAwDQYJKoZIhvcNAQELBQADggEBAKpY6HQY7ZBg uJQ0qD6E71QqUaaGktvKx67MP5lEK+Za/rAHO74yVcklDS7PphsCUszeQn/IOg3p 6p+XsYpzIR08egM26W8vI8eZw2px0GUIH2N9q+j4PPshzJg+n/nGTFLDIDkj3Q3b p/9HveRCuoZgpdgakFJan6Sg5IARH2I/Wtrfg8X6WKagEaTtWpqGQCCmbBC9hmiT OUW0i+VX2sHlOggm+agBMr1VMkXhDDnWV2dSqiTGt5pTEOxlnF3a8JqTRlr5Kl0E 1fULeycBkWVKqEPXbVRUj5/KM8PmyOnNWCTkzvROum4b5b/a7RwPSEZAk756NbXd 3BkYPiBU9Z0= -----END CERTIFICATE-----Generated at Wed Jun 4 00:07:37 2025 by rpki-client