$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/533EA4DADAD211EA9DD74774C4F9AE02.roa File: 533EA4DADAD211EA9DD74774C4F9AE02.roa (raw, json) Hash identifier: aFHwHpu/1OVR4l89Z7Dz4jVQRGzNUOQUQKPOde0zu8c= Subject key identifier: 7F:88:1B:D6:9F:34:E7:0E:0E:89:51:46:E3:B4:74:A7:88:CB:74:18 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0E8A Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/533EA4DADAD211EA9DD74774C4F9AE02.roa Signing time: Thu 22 May 2025 20:06:29 +0000 ROA not before: Thu 22 May 2025 20:06:29 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 133555 IP address blocks: 2406:840:f380::/44 maxlen: 48 2406:840:fefc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3722 (0xe8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:06:29 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f83c5-1377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:04:a4:0e:09:8d:d1:b0:72:3b:93:1b:41: 69:75:bf:92:6c:ea:c3:2d:7a:9c:28:4b:c4:4f:7a: 1d:35:eb:bf:21:a8:f4:ec:38:a0:e6:86:11:cd:c6: a5:22:50:68:eb:6e:55:70:79:f8:a8:20:d7:73:a2: d1:35:4c:ac:7d:68:4e:46:2c:69:41:e4:48:c3:21: 92:a0:53:48:22:13:9d:c4:bb:87:78:18:b4:88:f5: 10:db:bf:d4:8d:6a:e7:ef:f3:fd:22:bb:40:80:44: 18:e6:34:92:2f:fb:5f:17:40:d7:ef:23:c2:31:a6: 7a:be:4f:78:44:77:7d:08:4d:d4:a1:84:d2:82:f6: 9b:ec:5e:0b:d5:c0:2e:62:76:bd:e7:e6:71:76:11: 24:df:2a:b3:e3:9d:67:2f:d4:ac:24:ba:01:48:28: 75:38:a8:2d:9c:79:7e:7c:fc:08:a6:47:bb:03:0f: 8f:1c:fe:6a:15:4b:f4:9e:8d:87:0c:76:52:79:d5: b1:13:32:4b:0c:3f:16:3e:d6:42:3d:51:28:6a:d7: 86:bb:39:e0:62:ef:76:fa:5e:62:26:33:0e:1b:96: 58:b1:58:1b:2a:15:aa:8e:77:e9:be:32:4a:12:01: 85:ec:5b:96:17:a4:a3:7a:60:3d:8d:5e:74:63:88: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:88:1B:D6:9F:34:E7:0E:0E:89:51:46:E3:B4:74:A7:88:CB:74:18 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/533EA4DADAD211EA9DD74774C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:f380::/44 2406:840:fefc::/48 Signature Algorithm: sha256WithRSAEncryption 11:b0:ba:49:ec:fe:ff:91:2c:eb:ac:92:f5:f7:61:ea:bf:be: 9e:1e:f6:c4:32:fb:1d:60:dc:d7:0e:a3:f1:c8:55:15:69:4b: 7b:5f:4b:82:42:f2:18:48:0e:6a:59:a9:38:23:a2:cb:ec:5f: 79:b8:8d:9a:20:6e:a3:f8:e6:41:8b:de:08:52:d5:eb:8f:3d: f5:14:c6:b9:55:8f:14:17:2d:6b:21:fc:4c:07:09:cc:92:c7: d8:8e:45:66:3f:ae:a7:d5:6d:05:4d:47:69:d7:fa:24:03:8e: 8e:56:03:a5:c5:1c:ad:87:98:df:5b:b5:ec:ec:59:72:bc:2f: 42:3e:5e:ee:e8:d8:ae:1c:20:fb:fc:42:e5:7b:f3:be:85:69: 9b:3c:66:e8:25:97:dd:fc:9f:b0:69:0a:7a:9f:37:df:26:e7: 20:49:67:e0:30:f6:31:f8:24:d2:31:b5:f1:77:26:91:f3:1b: e2:31:52:13:ad:34:4a:97:29:ca:27:86:19:64:1c:7a:5e:85: 29:76:8c:d3:3b:3e:d2:6c:2b:b2:aa:79:1e:7f:01:7c:a6:51: 58:5c:85:f1:bf:3c:f8:d6:bb:21:db:ed:23:9d:44:50:44:77: 67:3f:04:25:d3:cb:43:91:bc:0c:1b:64:90:4a:e8:a9:89:a4: 6d:2e:7b:1a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjI5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODNjNS0xMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnR8EpA4JjdGwcjuTG0Fpdb+SbOrDLXqcKEvET3odNeu/Iaj07Dig5oYRzcal IlBo625VcHn4qCDXc6LRNUysfWhORixpQeRIwyGSoFNIIhOdxLuHeBi0iPUQ27/U jWrn7/P9IrtAgEQY5jSSL/tfF0DX7yPCMaZ6vk94RHd9CE3UoYTSgvab7F4L1cAu Yna95+ZxdhEk3yqz451nL9SsJLoBSCh1OKgtnHl+fPwIpke7Aw+PHP5qFUv0no2H DHZSedWxEzJLDD8WPtZCPVEoateGuzngYu92+l5iJjMOG5ZYsVgbKhWqjnfpvjJK EgGF7FuWF6SjemA9jV50Y4g+5wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFH+IG9af NOcODolRRuO0dKeIy3QYMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNTMzRUE0REFE QUQyMTFFQTlERDc0Nzc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA84ADBwAkBghA/vwwDQYJKoZIhvcNAQELBQADggEB ABGwukns/v+RLOuskvX3Yeq/vp4e9sQy+x1g3NcOo/HIVRVpS3tfS4JC8hhIDmpZ qTgjosvsX3m4jZogbqP45kGL3ghS1euPPfUUxrlVjxQXLWsh/EwHCcySx9iORWY/ rqfVbQVNR2nX+iQDjo5WA6XFHK2HmN9btezsWXK8L0I+Xu7o2K4cIPv8QuV7876F aZs8Zugll938n7BpCnqfN98m5yBJZ+Aw9jH4JNIxtfF3JpHzG+IxUhOtNEqXKcon hhlkHHpehSl2jNM7PtJsK7KqeR5/AXymUVhchfG/PPjWuyHb7SOdRFBEd2c/BCXT y0ORvAwbZJBK6KmJpG0uexo= -----END CERTIFICATE-----Generated at Wed Jun 4 00:15:15 2025 by rpki-client