$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/25D1BB9A860911EAA740B02DC4F9AE02.roa File: 25D1BB9A860911EAA740B02DC4F9AE02.roa (raw, json) Hash identifier: /0HbGEJ+rKqPLFIiaUo7XwLY488Vi/xs9z57+NfaYb0= Subject key identifier: EF:14:02:B7:44:B1:11:23:34:6B:D3:FB:57:BE:A2:80:F5:EB:AF:3D Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EEE Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/25D1BB9A860911EAA740B02DC4F9AE02.roa Signing time: Thu 22 May 2025 20:08:02 +0000 ROA not before: Thu 22 May 2025 20:08:02 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 208618 IP address blocks: 2406:840:f990::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3822 (0xeee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:08:02 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f8422-ecc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:3f:db:b6:7b:56:b0:f6:87:e1:19:d4:cd: 7d:25:d3:3f:b8:b0:d9:95:6e:7f:88:75:1e:ab:b9: ef:8b:e1:56:5d:8e:a0:47:c9:23:92:76:95:58:f8: f6:00:61:48:38:37:cb:b9:51:0b:17:5e:77:37:47: 27:43:d4:aa:89:5c:bf:f3:98:a9:d6:40:87:d6:3e: 9d:df:c4:47:cb:40:5d:56:e3:f2:9c:13:46:01:99: 8e:d4:89:8a:d3:4a:66:79:35:e4:29:ac:68:35:cd: 23:16:4e:b2:b4:1e:38:81:ac:78:54:01:ea:39:ee: 28:9e:f1:3f:63:3c:13:db:a2:46:4c:40:e8:35:fd: 78:a5:2f:42:71:3b:60:a7:ad:b9:26:2b:03:0a:db: f0:47:71:5e:2d:0d:75:93:ca:50:27:f4:4b:82:a4: 7a:92:3e:f4:3c:0d:14:b0:74:a5:55:a9:b3:3b:2b: 56:95:54:c0:81:98:d5:61:a1:b3:72:a2:03:94:40: 7c:f2:c8:a5:70:d8:f6:63:07:1b:6f:ec:66:0f:d8: f4:08:c7:ee:35:a4:fa:1e:56:fc:6b:f4:de:b7:c2: 17:f6:8c:fa:d6:03:89:78:e8:81:69:f8:48:b6:56: 4f:78:96:b5:82:62:75:5e:58:a4:da:af:6c:66:f6: 2a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:14:02:B7:44:B1:11:23:34:6B:D3:FB:57:BE:A2:80:F5:EB:AF:3D X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/25D1BB9A860911EAA740B02DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:f990::/44 Signature Algorithm: sha256WithRSAEncryption 37:3f:c9:82:2b:f9:cc:e0:38:6d:b1:87:18:ff:60:4c:90:69: 0b:45:d8:19:37:72:72:7d:d5:e9:bf:a8:a8:4d:7e:cd:f0:97: e0:34:71:c5:31:4a:29:66:0f:51:f3:fa:3e:55:89:71:a0:ac: d4:2e:99:8a:e6:11:ac:b6:b0:fa:f3:e5:8b:9e:15:0a:03:11: d4:35:8b:a3:e1:68:05:f8:2c:18:6e:22:82:b7:39:22:7e:2b: 7c:e5:3b:72:2f:36:f1:d7:e3:8c:17:1d:79:f5:0d:a7:15:50: ff:c8:8a:45:2e:a8:ed:55:a6:1b:6d:7e:70:0b:ed:46:a9:69: f4:63:42:14:84:a9:85:91:6d:03:e1:ff:c0:84:77:1a:fc:3b: 15:1b:98:8d:64:37:af:30:08:12:85:ce:e8:1c:62:cc:66:ae: 2d:f9:2d:08:83:94:2c:03:e5:ed:be:36:f8:6e:9b:a4:dc:35: f1:f6:55:06:24:6e:60:30:d6:00:31:fe:84:ba:1a:ab:78:6f: 96:bb:22:f0:94:e0:cd:fa:7f:6b:38:d2:5d:65:a9:e4:f4:9e: f2:dc:8b:96:07:e8:6b:94:11:50:ed:c2:6f:fb:37:70:fc:8d: 91:6a:14:77:09:06:c9:ca:fd:fb:e4:60:cc:71:d6:f8:bc:82: c7:e6:93:59 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwODAyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQyMi1lY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ak/27Z7VrD2h+EZ1M19JdM/uLDZlW5/iHUeq7nvi+FWXY6gR8kjknaVWPj2 AGFIODfLuVELF153N0cnQ9SqiVy/85ip1kCH1j6d38RHy0BdVuPynBNGAZmO1ImK 00pmeTXkKaxoNc0jFk6ytB44gax4VAHqOe4onvE/YzwT26JGTEDoNf14pS9CcTtg p625JisDCtvwR3FeLQ11k8pQJ/RLgqR6kj70PA0UsHSlVamzOytWlVTAgZjVYaGz cqIDlEB88silcNj2Ywcbb+xmD9j0CMfuNaT6Hlb8a/Tet8IX9oz61gOJeOiBafhI tlZPeJa1gmJ1Xlik2q9sZvYqGwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFO8UArdE sREjNGvT+1e+ooD16689MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMjVEMUJCOUE4 NjA5MTFFQUE3NDBCMDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA+ZAwDQYJKoZIhvcNAQELBQADggEBADc/yYIr+czg OG2xhxj/YEyQaQtF2Bk3cnJ91em/qKhNfs3wl+A0ccUxSilmD1Hz+j5ViXGgrNQu mYrmEay2sPrz5YueFQoDEdQ1i6PhaAX4LBhuIoK3OSJ+K3zlO3IvNvHX44wXHXn1 DacVUP/IikUuqO1VphttfnAL7UapafRjQhSEqYWRbQPh/8CEdxr8OxUbmI1kN68w CBKFzugcYsxmri35LQiDlCwD5e2+Nvhum6TcNfH2VQYkbmAw1gAx/oS6Gqt4b5a7 IvCU4M36f2s40l1lqeT0nvLci5YH6GuUEVDtwm/7N3D8jZFqFHcJBsnK/fvkYMxx 1vi8gsfmk1k= -----END CERTIFICATE-----Generated at Wed Jun 4 00:05:43 2025 by rpki-client