$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6016C3C6AD3A11ED97191A15C4F9AE02.roa File: 6016C3C6AD3A11ED97191A15C4F9AE02.roa (raw, json) Hash identifier: iGTLGpy7RJEQ+NtR6mz7u4s9ppOnPginIupor2dVB/0= Subject key identifier: 60:B0:FA:CF:2A:60:2F:19:FE:6F:BD:68:7B:2D:77:07:EA:BA:79:EE Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0E98 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6016C3C6AD3A11ED97191A15C4F9AE02.roa Signing time: Thu 22 May 2025 20:06:42 +0000 ROA not before: Thu 22 May 2025 20:06:41 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138632 IP address blocks: 2406:840:fe71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3736 (0xe98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:06:41 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f83d1-66ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:07:32:0d:99:cf:d1:89:10:1d:1e:bb:6a: 59:68:40:33:98:f2:8f:70:c6:2b:a2:e4:48:03:3a: 8b:70:72:03:c5:91:b1:f7:df:77:37:13:bc:f3:ba: 49:92:ea:1a:41:cd:6e:d5:62:d8:c9:7d:3a:60:06: c2:0d:db:6c:e0:46:64:6a:c6:d2:84:ff:34:21:12: b7:9f:d8:e8:1f:b6:3a:a8:55:2a:ba:a5:59:b9:0d: fd:1d:72:a7:17:b6:a3:21:24:20:5a:95:42:26:7f: dc:c5:59:46:67:33:39:7a:46:de:45:43:ea:1b:35: e0:20:76:fe:e4:59:e8:6c:6a:fd:7f:50:e7:49:c9: 15:8a:23:a9:cf:a5:80:08:0d:22:2a:a4:9e:7e:d4: d5:1f:d3:59:f8:5d:9e:0b:16:8a:eb:0f:73:db:5f: 39:7c:75:cc:4b:a4:b0:b3:9b:40:f5:31:e5:32:6d: d2:4b:65:90:bc:fe:5e:12:23:72:fb:85:8a:e7:4b: 39:e5:31:0c:8e:4e:53:04:39:09:41:3f:8e:a0:88: 8f:cd:ab:d9:ad:ec:bb:8d:d9:08:f5:e3:98:2b:32: 92:49:f6:93:45:1d:cf:78:9a:ab:2a:a1:76:e2:b0: 98:12:8d:ba:e0:78:c0:da:99:b0:71:a0:c7:19:35: 63:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B0:FA:CF:2A:60:2F:19:FE:6F:BD:68:7B:2D:77:07:EA:BA:79:EE X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6016C3C6AD3A11ED97191A15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fe71::/48 Signature Algorithm: sha256WithRSAEncryption 20:58:b0:3f:5b:10:4c:71:ed:ef:ca:af:f8:5a:0c:3a:a3:90: dd:5e:1a:1b:9d:bb:0b:b0:e4:21:8d:80:a3:71:19:53:3f:6a: 7e:86:06:cc:71:e6:b6:52:04:09:84:89:9e:3f:34:22:fd:15: 70:57:3e:d0:70:0c:53:21:a6:2c:86:3f:fa:81:3b:55:6d:02: 51:fc:82:f9:af:45:eb:9a:68:37:96:f2:8e:75:16:ed:58:16: c3:7f:2c:8e:b6:d3:92:a3:3f:ee:a3:33:e1:fd:aa:d3:52:ca: 6e:bc:e5:78:7a:9e:1a:fb:a2:3b:3d:0a:40:27:86:86:5e:37: 75:ac:6a:2a:98:4f:a3:04:05:9e:68:17:0d:24:24:ea:c8:9d: 60:f7:b2:14:cb:80:29:66:22:1e:ef:33:86:12:c7:84:b1:3c: df:d8:8c:f0:fd:fd:a0:93:97:ec:e9:e2:a4:af:f2:2d:73:5a: 76:88:24:65:b1:b5:1e:66:6d:a7:de:cf:e3:3b:95:93:98:55: 92:7c:ad:c6:05:df:a4:30:44:0e:c1:bd:26:e3:6d:22:85:3f: 38:72:05:53:18:bb:b8:0c:bf:7e:74:55:67:e0:a6:20:d9:d8: 77:c1:ae:04:fd:e8:f9:ba:9b:e9:d5:02:1c:cd:f0:0f:70:ff: a2:39:21:b2 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjQxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODNkMS02NmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvy0HMg2Zz9GJEB0eu2pZaEAzmPKPcMYrouRIAzqLcHIDxZGx9993NxO887pJ kuoaQc1u1WLYyX06YAbCDdts4EZkasbShP80IRK3n9joH7Y6qFUquqVZuQ39HXKn F7ajISQgWpVCJn/cxVlGZzM5ekbeRUPqGzXgIHb+5FnobGr9f1DnSckViiOpz6WA CA0iKqSeftTVH9NZ+F2eCxaK6w9z2185fHXMS6Sws5tA9THlMm3SS2WQvP5eEiNy +4WK50s55TEMjk5TBDkJQT+OoIiPzavZrey7jdkI9eOYKzKSSfaTRR3PeJqrKqF2 4rCYEo264HjA2pmwcaDHGTVj4QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGCw+s8q YC8Z/m+9aHstdwfqunnuMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNjAxNkMzQzZB RDNBMTFFRDk3MTkxQTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBghA/nEwDQYJKoZIhvcNAQELBQADggEBACBYsD9bEExx 7e/Kr/haDDqjkN1eGhuduwuw5CGNgKNxGVM/an6GBsxx5rZSBAmEiZ4/NCL9FXBX PtBwDFMhpiyGP/qBO1VtAlH8gvmvReuaaDeW8o51Fu1YFsN/LI6205KjP+6jM+H9 qtNSym685Xh6nhr7ojs9CkAnhoZeN3WsaiqYT6MEBZ5oFw0kJOrInWD3shTLgClm Ih7vM4YSx4SxPN/YjPD9/aCTl+zp4qSv8i1zWnaIJGWxtR5mbafez+M7lZOYVZJ8 rcYF36QwRA7BvSbjbSKFPzhyBVMYu7gMv350VWfgpiDZ2HfBrgT96Pm6m+nVAhzN 8A9w/6I5IbI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:59:22 2025 by rpki-client