$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6AC8DC52B47F11EF9B6EE710C4F9AE02.roa File: 6AC8DC52B47F11EF9B6EE710C4F9AE02.roa (raw, json) Hash identifier: aEyK/9Lok6GhmXJRiujBqGK+a/ibkZnMKqMk6nx5Ui8= Subject key identifier: B8:58:F7:03:82:DC:86:77:8E:07:98:49:3B:A5:B4:AA:EC:22:22:89 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EFA Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6AC8DC52B47F11EF9B6EE710C4F9AE02.roa Signing time: Thu 22 May 2025 20:08:15 +0000 ROA not before: Thu 22 May 2025 20:08:15 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 212690 IP address blocks: 2406:840:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3834 (0xefa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:08:15 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f842f-1eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d3:89:86:7e:6d:3d:6d:1e:35:a3:ec:22:07: b4:6c:f6:8d:7a:cd:44:f4:52:07:0f:bb:b2:72:21: 38:54:f7:83:47:db:f8:15:98:a4:bc:43:f7:13:8a: 1d:56:58:9c:f3:23:7e:ba:75:e4:d1:1c:b9:c8:ac: de:ab:24:ed:e9:7d:50:dc:08:6c:58:40:d1:64:31: ff:35:34:1e:44:4c:42:cb:c7:ef:9d:89:39:71:58: 3c:f1:6d:91:d2:35:e3:64:5f:42:f7:c8:c0:da:dc: 53:78:68:dd:8f:c9:93:2a:c0:54:99:08:21:5b:9d: be:d8:a5:c1:03:a3:5a:9b:04:9b:82:e6:61:c7:01: 07:8b:ef:8b:dd:d0:68:c8:61:d8:ac:55:7e:f1:25: 56:6f:ed:fc:f8:42:40:bd:b4:eb:cc:ea:f9:a6:7f: 80:05:8b:20:86:9c:6e:a6:b0:0b:91:42:b7:99:17: 43:57:69:fd:a4:8c:54:5a:cf:08:a3:d0:f9:d2:10: b3:9b:e4:da:cd:92:89:b2:3a:9d:52:3f:3c:5a:c8: 65:a0:9c:5b:b4:2b:fe:f0:6a:bd:79:59:2d:f0:bd: d9:e1:ef:9c:30:0a:80:7c:11:1b:bf:65:34:64:5c: 88:27:14:14:11:49:44:8d:6d:5a:06:d5:80:57:c0: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:58:F7:03:82:DC:86:77:8E:07:98:49:3B:A5:B4:AA:EC:22:22:89 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6AC8DC52B47F11EF9B6EE710C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e000::/48 Signature Algorithm: sha256WithRSAEncryption 5c:d8:20:46:2a:93:9b:ee:97:c1:18:91:a3:08:df:c9:b2:69: 0c:e8:f9:5b:da:08:30:57:04:af:a3:fe:f7:91:68:2a:a5:eb: 2e:0e:2f:58:c5:e3:b1:7d:95:8c:78:2d:54:f0:f6:25:47:1f: 84:d9:fa:96:75:66:ca:97:74:a9:a4:55:a9:2c:42:85:4d:5b: b3:3c:69:c0:0b:c7:91:6e:f6:5a:a4:06:d1:7b:0c:25:d5:17: e5:18:60:f9:02:d8:36:27:33:36:9f:b9:b0:e9:e5:2a:c3:73: ba:ba:ca:b3:e7:2a:99:cd:19:7d:fb:03:a6:ce:b2:4e:60:4b: 52:df:d8:74:bf:af:15:d6:63:0c:ee:aa:92:5f:59:50:42:a5: 13:50:f3:a0:23:b9:94:21:35:46:d7:cc:1f:85:8f:ab:c6:11: 16:91:01:e6:eb:99:62:f4:53:cc:e0:65:b4:33:bc:8d:61:83: b4:55:99:da:7c:4c:ea:61:1d:b2:6d:ea:e8:3c:53:6e:f2:7b: 24:81:53:ce:d8:91:f1:73:65:87:64:6c:a8:0d:a3:d9:97:2d: e8:73:a6:67:a1:98:08:83:f2:d8:2f:63:f3:f0:67:c3:4d:f4: 78:41:d1:0b:a3:e0:02:39:5e:00:91:d7:b7:b9:4f:b2:24:88: 88:8c:b3:0b -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwODE1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQyZi0xZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9OJhn5tPW0eNaPsIge0bPaNes1E9FIHD7uyciE4VPeDR9v4FZikvEP3E4od Vlic8yN+unXk0Ry5yKzeqyTt6X1Q3AhsWEDRZDH/NTQeRExCy8fvnYk5cVg88W2R 0jXjZF9C98jA2txTeGjdj8mTKsBUmQghW52+2KXBA6NamwSbguZhxwEHi++L3dBo yGHYrFV+8SVWb+38+EJAvbTrzOr5pn+ABYsghpxuprALkUK3mRdDV2n9pIxUWs8I o9D50hCzm+TazZKJsjqdUj88WshloJxbtCv+8Gq9eVkt8L3Z4e+cMAqAfBEbv2U0 ZFyIJxQUEUlEjW1aBtWAV8DfYQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLhY9wOC 3IZ3jgeYSTultKrsIiKJMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNkFDOERDNTJC NDdGMTFFRjlCNkVFNzEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBghA4AAwDQYJKoZIhvcNAQELBQADggEBAFzYIEYqk5vu l8EYkaMI38myaQzo+VvaCDBXBK+j/veRaCql6y4OL1jF47F9lYx4LVTw9iVHH4TZ +pZ1ZsqXdKmkVaksQoVNW7M8acALx5Fu9lqkBtF7DCXVF+UYYPkC2DYnMzafubDp 5SrDc7q6yrPnKpnNGX37A6bOsk5gS1Lf2HS/rxXWYwzuqpJfWVBCpRNQ86AjuZQh NUbXzB+Fj6vGERaRAebrmWL0U8zgZbQzvI1hg7RVmdp8TOphHbJt6ug8U27yeySB U87YkfFzZYdkbKgNo9mXLehzpmehmAiD8tgvY/PwZ8NN9HhB0Quj4AI5XgCR17e5 T7IkiIiMsws= -----END CERTIFICATE-----Generated at Mon Jun 2 07:11:19 2025 by rpki-client