$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/385FE4729A3011EA97979D38C4F9AE02.roa File: 385FE4729A3011EA97979D38C4F9AE02.roa (raw, json) Hash identifier: uGKHxJEvNl0v/oOASSaru/610+ksqZUJ33uXwzmbAtI= Subject key identifier: 39:7B:5E:69:06:30:44:59:8F:01:CA:89:37:3D:CF:4F:6D:E2:84:DB Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EFB Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/385FE4729A3011EA97979D38C4F9AE02.roa Signing time: Thu 22 May 2025 20:08:17 +0000 ROA not before: Thu 22 May 2025 20:08:17 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 213215 IP address blocks: 2406:840:ece0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3835 (0xefb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:08:17 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f8430-55af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:c1:ea:46:2a:68:e5:34:29:00:1e:64:61: 54:18:26:d4:3d:88:2e:fa:9f:d1:dc:cc:00:03:4e: ca:48:e1:25:ca:35:1c:04:24:ca:42:7f:9e:d8:b6: 64:85:14:3c:fc:53:cb:71:a4:32:61:32:a4:13:ba: dd:77:f7:67:a6:d7:9d:b7:bb:94:58:33:27:65:f2: d8:7d:85:38:5a:06:d7:72:28:33:7b:e5:48:5a:dd: cd:e6:64:3e:76:43:ed:39:1a:8e:27:e9:87:11:2e: 8f:44:27:bc:38:c5:47:f4:09:98:6a:af:97:82:bf: b9:e7:a2:ed:ed:7b:2a:85:38:e6:9d:b4:2d:06:39: 07:97:b0:8a:60:5d:93:b7:64:58:69:da:b1:76:34: 45:28:54:a3:59:be:45:c5:e3:23:86:14:9e:8b:fc: d0:7d:7d:7f:88:21:cd:97:8c:71:f2:f1:30:3f:fb: 97:7a:b6:bf:8b:dc:c6:41:0a:19:33:95:ce:07:8f: 20:54:5f:2b:90:dc:1e:3f:9c:af:64:d9:73:dc:53: 5a:fd:d6:9c:51:75:28:3a:27:e8:17:30:64:a9:d6: 5a:53:3d:fa:f8:07:51:b5:f5:45:6e:f8:3d:5a:4f: 7f:00:e0:22:88:75:12:a1:66:53:b2:3e:08:89:a4: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7B:5E:69:06:30:44:59:8F:01:CA:89:37:3D:CF:4F:6D:E2:84:DB X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/385FE4729A3011EA97979D38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:ece0::/44 Signature Algorithm: sha256WithRSAEncryption 30:77:96:a0:c8:8e:86:6a:d7:c5:5b:f0:dd:2d:18:bc:11:dd: 2b:05:42:b6:50:87:5f:72:a8:c3:cc:79:80:7a:48:34:60:41: c3:76:e5:1e:f0:5f:de:dc:e3:5c:0d:0a:b3:64:d4:d2:11:84: 89:ed:c6:d3:6e:8a:38:27:7b:91:d2:13:54:b2:4b:40:41:fc: ca:52:60:d4:6b:c5:5e:fc:d1:bc:b9:be:11:89:95:20:bf:43: ec:21:38:1e:c4:ea:3a:e9:11:8d:66:3c:ef:ea:71:2b:17:ea: c9:85:37:a3:ca:b0:22:ac:4e:1d:60:76:52:08:e8:67:89:a1: fe:02:95:09:26:7a:50:6a:ed:03:35:bd:8d:f5:a3:d9:33:c2: 1f:fd:87:d3:f9:1a:64:fb:1c:c6:59:c9:19:08:e7:5c:1f:86: 92:01:fc:2d:85:af:8b:6d:1b:71:5a:61:06:47:37:d5:0d:31: e1:41:0a:44:97:7d:34:92:e0:65:fa:54:b5:f0:79:a4:89:39: 3f:03:27:e2:d1:c8:db:77:9c:9f:73:17:a0:a8:33:44:89:63: 60:5b:0c:28:8f:2b:61:29:2a:87:db:05:95:09:02:e4:92:83: f2:f8:6a:b0:02:fd:53:fb:f7:9e:cc:b2:d0:18:57:1e:73:db: 11:2b:73:5a -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwODE3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQzMC01NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6jB6kYqaOU0KQAeZGFUGCbUPYgu+p/R3MwAA07KSOElyjUcBCTKQn+e2LZk hRQ8/FPLcaQyYTKkE7rdd/dnptedt7uUWDMnZfLYfYU4WgbXcigze+VIWt3N5mQ+ dkPtORqOJ+mHES6PRCe8OMVH9AmYaq+Xgr+556Lt7XsqhTjmnbQtBjkHl7CKYF2T t2RYadqxdjRFKFSjWb5FxeMjhhSei/zQfX1/iCHNl4xx8vEwP/uXera/i9zGQQoZ M5XOB48gVF8rkNweP5yvZNlz3FNa/dacUXUoOifoFzBkqdZaUz36+AdRtfVFbvg9 Wk9/AOAiiHUSoWZTsj4IiaQihQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDl7XmkG MERZjwHKiTc9z09t4oTbMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMzg1RkU0NzI5 QTMwMTFFQTk3OTc5RDM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA7OAwDQYJKoZIhvcNAQELBQADggEBADB3lqDIjoZq 18Vb8N0tGLwR3SsFQrZQh19yqMPMeYB6SDRgQcN25R7wX97c41wNCrNk1NIRhInt xtNuijgne5HSE1SyS0BB/MpSYNRrxV780by5vhGJlSC/Q+whOB7E6jrpEY1mPO/q cSsX6smFN6PKsCKsTh1gdlII6GeJof4ClQkmelBq7QM1vY31o9kzwh/9h9P5GmT7 HMZZyRkI51wfhpIB/C2Fr4ttG3FaYQZHN9UNMeFBCkSXfTSS4GX6VLXweaSJOT8D J+LRyNt3nJ9zF6CoM0SJY2BbDCiPK2EpKofbBZUJAuSSg/L4arAC/VP7957MstAY Vx5z2xErc1o= -----END CERTIFICATE-----Generated at Mon Nov 3 23:19:52 2025 by rpki-client