$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68BDB38E2E5011EFBBA04110C4F9AE02.roa File: 68BDB38E2E5011EFBBA04110C4F9AE02.roa (raw, json) Hash identifier: qnt/iawVw8qL/jNgL15UKLoXiJOlyNQa+OHEL7FIlVA= Subject key identifier: 60:3A:24:AB:51:29:60:F0:6B:7A:C3:0F:8B:EE:1A:E5:DD:17:03:A5 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0ECC Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68BDB38E2E5011EFBBA04110C4F9AE02.roa Signing time: Thu 22 May 2025 20:07:31 +0000 ROA not before: Thu 22 May 2025 20:07:31 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152920 IP address blocks: 2406:840:fcd0::/44 maxlen: 48 2406:840:fe96::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3788 (0xecc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:31 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f8403-7d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:e9:ac:fd:aa:ae:a7:89:3c:5e:f9:32:64: b0:c4:b7:6b:19:53:43:19:f8:40:7a:1a:49:6b:b6: 67:a8:f5:b5:eb:fe:28:ed:9e:91:7d:53:5b:ae:2a: fd:93:f4:46:5f:4d:8e:0e:60:fd:5b:a5:72:3b:89: 7e:aa:e3:dc:5a:a8:a1:3a:5f:9b:79:e5:ed:5a:6e: 6c:a6:29:58:0f:3a:1d:ff:4d:8b:4e:32:ff:e7:75: 19:71:bb:41:3f:0f:be:1f:7c:44:cf:15:db:cd:7f: 29:a8:a3:3e:f5:b0:f4:72:08:b6:95:32:85:4f:e8: 36:59:e2:9a:53:b3:4c:36:70:5d:5a:a3:8b:b6:9a: 22:bd:f7:63:12:bc:26:2a:0e:db:75:a3:e9:fe:9c: 72:e5:e1:2b:0e:91:f6:dd:ac:ca:81:be:85:f4:6f: 40:53:1b:9d:82:e2:4f:73:76:dc:b9:3f:e7:87:cb: 60:df:24:1d:b5:64:b5:de:68:38:2d:16:2b:84:d1: 39:b5:4e:49:ec:d8:86:6d:67:40:e8:6f:be:16:07: bc:47:02:45:5e:cc:d3:ed:9b:b1:5b:4d:09:4b:57: 26:41:3b:78:35:60:c8:63:2d:27:19:84:c3:51:3f: 74:f9:8b:a5:f6:b3:f3:34:8e:f0:c0:7d:ed:68:81: dd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3A:24:AB:51:29:60:F0:6B:7A:C3:0F:8B:EE:1A:E5:DD:17:03:A5 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68BDB38E2E5011EFBBA04110C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fcd0::/44 2406:840:fe96::/48 Signature Algorithm: sha256WithRSAEncryption 8a:a9:af:50:38:4f:10:54:88:e2:00:74:bf:49:a5:9f:c9:fe: 6c:03:b0:48:af:f1:c3:d8:ed:1f:50:41:48:59:03:4f:5f:53: 4e:50:10:da:e0:57:42:94:b6:c0:17:c3:94:4e:f2:4f:01:d6: 16:e9:f5:30:3b:12:73:d9:6b:4f:b9:7c:31:93:54:41:86:c7: 66:34:9f:65:ad:db:80:f5:65:d4:50:b7:61:10:04:d6:3b:5f: d8:b9:5f:f6:e9:00:25:ce:71:91:1d:71:64:68:39:8d:b9:94: 2e:8c:ec:01:dd:2e:93:e7:e1:ce:e8:89:07:60:b9:5b:92:04: 51:87:e5:32:d0:b5:69:c3:08:7f:f8:c4:35:1c:fa:34:d3:f8: e7:0a:53:d7:da:27:c9:e4:07:80:f8:89:99:49:22:c6:43:a5: 7a:7e:3d:22:ab:20:74:63:01:72:b5:9d:ed:51:db:83:02:22: 6d:c3:29:66:6f:a0:0f:26:86:27:91:5e:14:be:56:1a:de:97: 7d:6b:96:5d:a9:84:65:72:98:46:3f:fd:13:61:f4:07:13:bb: d9:b5:ee:93:4e:e1:ea:9b:68:83:ba:27:17:34:5a:3c:97:6a: 3d:4d:5b:8d:67:45:6f:aa:d1:0a:0c:cd:8f:59:ba:46:7d:69: a9:14:bc:09 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzMxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQwMy03ZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHjprP2qrqeJPF75MmSwxLdrGVNDGfhAehpJa7ZnqPW16/4o7Z6RfVNbrir9 k/RGX02ODmD9W6VyO4l+quPcWqihOl+beeXtWm5spilYDzod/02LTjL/53UZcbtB Pw++H3xEzxXbzX8pqKM+9bD0cgi2lTKFT+g2WeKaU7NMNnBdWqOLtpoivfdjErwm Kg7bdaPp/pxy5eErDpH23azKgb6F9G9AUxudguJPc3bcuT/nh8tg3yQdtWS13mg4 LRYrhNE5tU5J7NiGbWdA6G++Fge8RwJFXszT7ZuxW00JS1cmQTt4NWDIYy0nGYTD UT90+Yul9rPzNI7wwH3taIHdpwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGA6JKtR KWDwa3rDD4vuGuXdFwOlMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNjhCREIzOEUy RTUwMTFFRkJCQTA0MTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA/NADBwAkBghA/pYwDQYJKoZIhvcNAQELBQADggEB AIqpr1A4TxBUiOIAdL9JpZ/J/mwDsEiv8cPY7R9QQUhZA09fU05QENrgV0KUtsAX w5RO8k8B1hbp9TA7EnPZa0+5fDGTVEGGx2Y0n2Wt24D1ZdRQt2EQBNY7X9i5X/bp ACXOcZEdcWRoOY25lC6M7AHdLpPn4c7oiQdguVuSBFGH5TLQtWnDCH/4xDUc+jTT +OcKU9faJ8nkB4D4iZlJIsZDpXp+PSKrIHRjAXK1ne1R24MCIm3DKWZvoA8mhieR XhS+Vhrel31rll2phGVymEY//RNh9AcTu9m17pNO4eqbaIO6Jxc0WjyXaj1NW41n RW+q0QoMzY9ZukZ9aakUvAk= -----END CERTIFICATE-----Generated at Wed Jun 4 00:03:23 2025 by rpki-client