$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3C0F4E20EABF11EF8452610BC4F9AE02.roa File: 3C0F4E20EABF11EF8452610BC4F9AE02.roa (raw, json) Hash identifier: 6VJewrgYojGohFiuvL3Lg7D3Y+fUdObJ6+0pYuJlMyw= Subject key identifier: 31:75:9A:EF:C7:D9:E0:90:52:18:88:73:AC:8B:3B:39:58:47:1B:2C Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0E95 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3C0F4E20EABF11EF8452610BC4F9AE02.roa Signing time: Thu 22 May 2025 20:06:39 +0000 ROA not before: Thu 22 May 2025 20:06:39 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138211 IP address blocks: 2406:840:f880::/44 maxlen: 48 2406:840:fea0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 19:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3733 (0xe95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:06:39 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f83ce-f01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:5e:e9:65:4f:7b:1f:7f:7b:34:c7:34:d5: d8:07:a9:3c:43:89:65:6a:82:a8:d5:3a:b3:20:ee: b9:cb:46:81:90:72:b2:87:cd:91:1d:26:34:d8:e3: 2f:49:12:9a:7a:3a:85:9a:c5:a0:f8:4b:59:28:ad: ec:55:71:c9:e9:ca:b2:f9:49:d2:ed:6c:a8:06:44: aa:49:90:47:ce:c2:1b:05:2a:35:c6:7d:29:6a:c8: 1b:ab:29:77:88:a7:10:e3:f0:50:31:fc:d1:58:51: b6:4c:8f:58:59:40:ed:c0:ca:96:ae:9d:ac:65:0a: b7:99:b6:3c:59:99:2c:98:cf:62:fb:89:84:3e:b4: 0b:64:cd:d0:87:5c:ab:36:f4:0b:c8:34:f8:f8:89: a5:9a:c5:f9:47:3e:ab:f8:a7:80:91:29:f6:85:fd: 95:09:e4:48:cd:23:3e:3d:6d:4a:c0:64:11:5e:3a: b5:67:c9:83:df:0f:bc:6e:ac:f6:4c:61:93:ff:14: 96:f0:69:4f:16:65:5d:e2:ee:30:41:1e:2c:65:45: 0b:7e:9a:2d:41:2c:4d:7a:f0:8d:54:f3:7b:8e:ba: 79:41:35:00:f1:4f:91:95:b0:39:f5:3b:2e:0b:64: 4f:e1:dc:c2:be:ba:86:17:18:d9:54:d7:88:b8:1f: 4a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:75:9A:EF:C7:D9:E0:90:52:18:88:73:AC:8B:3B:39:58:47:1B:2C X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3C0F4E20EABF11EF8452610BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:f880::/44 2406:840:fea0::/48 Signature Algorithm: sha256WithRSAEncryption 20:61:23:7a:39:54:0e:65:bc:55:9c:50:20:02:6b:ca:55:e0: 94:98:09:e1:90:34:6c:6d:4e:1b:cf:c2:42:a6:b6:b9:80:fe: 03:6c:11:81:fb:68:d6:98:49:86:db:fb:20:eb:8e:5b:f2:29: 1f:c5:36:c2:33:a6:68:22:80:97:02:8b:1f:5c:04:ab:b2:55: a4:ce:e9:65:d4:af:18:5f:b5:2e:0c:1b:5f:a5:eb:72:4d:9b: 28:b4:83:f7:f1:d1:3e:e1:df:91:f1:d6:0d:75:e6:0b:7c:a3: 1a:fd:f9:92:fe:fc:0b:ea:20:08:1f:a0:d4:54:32:7c:9d:eb: 4c:61:70:13:3f:f9:8a:b9:2c:26:02:54:b7:48:fd:e7:f3:7f: 08:02:01:9a:64:b4:f3:29:c9:3b:49:c9:80:41:f3:90:fc:c9: 3e:12:fb:3e:4a:8f:3c:8b:77:fe:bf:22:e1:02:74:83:e3:c4: e5:d6:34:e4:58:cb:d6:5b:ff:36:a3:e1:3b:1e:aa:56:80:9a: cc:0f:f8:ef:8a:54:7e:c6:63:7d:bb:67:a2:81:9d:65:d8:20: ef:cc:72:13:6b:a5:26:28:82:3e:cc:95:92:81:d2:40:11:86: 6b:03:9e:5c:97:36:36:62:00:42:cb:79:28:20:99:2f:2d:8f: cd:12:19:d1 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODNjZS1mMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwA9e6WVPex9/ezTHNNXYB6k8Q4llaoKo1TqzIO65y0aBkHKyh82RHSY02OMv SRKaejqFmsWg+EtZKK3sVXHJ6cqy+UnS7WyoBkSqSZBHzsIbBSo1xn0pasgbqyl3 iKcQ4/BQMfzRWFG2TI9YWUDtwMqWrp2sZQq3mbY8WZksmM9i+4mEPrQLZM3Qh1yr NvQLyDT4+ImlmsX5Rz6r+KeAkSn2hf2VCeRIzSM+PW1KwGQRXjq1Z8mD3w+8bqz2 TGGT/xSW8GlPFmVd4u4wQR4sZUULfpotQSxNevCNVPN7jrp5QTUA8U+RlbA59Tsu C2RP4dzCvrqGFxjZVNeIuB9KGQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDF1mu/H 2eCQUhiIc6yLOzlYRxssMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvM0MwRjRFMjBF QUJGMTFFRjg0NTI2MTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA+IADBwAkBghA/qAwDQYJKoZIhvcNAQELBQADggEB ACBhI3o5VA5lvFWcUCACa8pV4JSYCeGQNGxtThvPwkKmtrmA/gNsEYH7aNaYSYbb +yDrjlvyKR/FNsIzpmgigJcCix9cBKuyVaTO6WXUrxhftS4MG1+l63JNmyi0g/fx 0T7h35Hx1g115gt8oxr9+ZL+/AvqIAgfoNRUMnyd60xhcBM/+Yq5LCYCVLdI/efz fwgCAZpktPMpyTtJyYBB85D8yT4S+z5KjzyLd/6/IuECdIPjxOXWNORYy9Zb/zaj 4TseqlaAmswP+O+KVH7GY327Z6KBnWXYIO/MchNrpSYogj7MlZKB0kARhmsDnlyX NjZiAELLeSggmS8tj80SGdE= -----END CERTIFICATE-----Generated at Wed Oct 29 07:59:28 2025 by rpki-client