$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6DD477BC6AD411EE8DB0AF30C4F9AE02.roa File: 6DD477BC6AD411EE8DB0AF30C4F9AE02.roa (raw, json) Hash identifier: quU8ssvcUy6UjHwkMgNDHYKKyhjn+H710P4Mlhy5nR0= Subject key identifier: A1:91:9D:12:66:0D:1C:A9:7D:BD:E4:D6:D0:53:A9:33:5B:37:A5:6A Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EE7 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6DD477BC6AD411EE8DB0AF30C4F9AE02.roa Signing time: Thu 22 May 2025 20:07:55 +0000 ROA not before: Thu 22 May 2025 20:07:55 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 199436 IP address blocks: 2406:840:9990::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3815 (0xee7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:55 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f841b-4695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:f4:19:6c:69:28:ec:d2:87:70:c3:cf:95: 0d:2b:16:a7:10:61:14:34:ed:ec:f9:d2:58:b2:e5: ef:7e:1b:a5:bb:13:c9:ae:9a:57:0f:7d:e1:03:bb: b1:a0:56:d8:c3:4f:69:d3:b2:ff:1d:49:c5:0b:30: d0:e2:af:c8:69:c9:65:ad:be:f2:22:17:15:e8:9c: ee:ae:39:df:e5:2c:da:a6:ec:0b:58:e2:80:04:88: cb:c7:9c:7b:7b:0b:d7:37:3d:aa:ee:dd:50:ea:65: ef:14:9d:9a:e1:90:08:3d:53:bd:70:8c:3a:20:57: 81:91:39:6c:3a:f6:f3:7b:b1:58:1f:10:43:d9:be: 1e:0b:3c:d7:f2:14:14:4f:af:86:dc:b0:df:97:e1: 22:d9:d0:b9:83:69:31:f7:63:28:8a:b8:42:fc:21: 38:c4:40:cd:a4:1a:7f:86:24:2c:5a:18:09:98:e6: fd:cb:f6:24:5b:8e:7a:a6:26:77:e0:21:a7:94:66: 24:b2:d9:82:60:0a:0c:c1:7d:45:a9:5d:8d:f3:a7: 77:d9:6e:ec:56:68:63:70:8c:cd:a9:ec:f6:cc:30: e2:b3:20:f6:61:35:ec:47:a1:ff:e2:1b:7c:dd:1b: f9:2d:10:fc:90:eb:45:59:8d:e2:5e:6c:6f:73:42: af:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:91:9D:12:66:0D:1C:A9:7D:BD:E4:D6:D0:53:A9:33:5B:37:A5:6A X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6DD477BC6AD411EE8DB0AF30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9990::/44 Signature Algorithm: sha256WithRSAEncryption 75:a8:cf:2d:42:b4:8d:54:ff:27:04:34:17:ed:8e:7a:c4:06: 4a:b0:a3:7f:21:14:a9:6d:49:c2:24:6e:8a:6e:55:56:2e:bf: 59:2c:86:bf:8c:16:da:e5:4d:74:27:00:ec:27:d4:a6:14:34: ec:e6:94:30:56:2d:3e:7b:d5:ad:6b:2a:85:3b:ed:e3:48:69: 1b:e9:e5:0e:b6:35:22:91:db:5b:b0:73:fb:78:6a:a1:45:28: 87:28:50:34:ce:33:1a:12:cc:63:59:8d:5b:aa:67:d2:ba:e6: 4e:05:46:a9:ea:65:33:65:e8:78:c1:09:42:55:b1:9e:d0:b7: a9:90:d0:e0:b8:c1:e1:ea:d8:46:89:38:7a:3b:5b:57:b1:f5: e4:a0:f0:f6:dc:a8:01:ca:6f:ab:79:2a:30:d1:b9:3e:d5:25: df:e4:f6:4d:a6:9e:63:58:e6:15:0f:2e:e0:66:97:f2:88:67: bc:ae:eb:71:90:87:3d:b8:a8:94:83:00:22:59:54:39:c4:12: a9:7d:b5:5e:2e:2c:12:84:a9:d3:a2:ba:44:a1:93:e0:6f:33: 39:ee:8f:5c:03:ab:4b:3e:5b:69:3f:58:c2:9a:8d:7c:c5:2b: 27:b3:49:e2:9d:02:7f:32:11:7c:5f:1d:d6:29:48:9d:7d:a4: e9:68:31:51 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzU1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQxYi00Njk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+v0GWxpKOzSh3DDz5UNKxanEGEUNO3s+dJYsuXvfhuluxPJrppXD33hA7ux oFbYw09p07L/HUnFCzDQ4q/Iacllrb7yIhcV6Jzurjnf5SzapuwLWOKABIjLx5x7 ewvXNz2q7t1Q6mXvFJ2a4ZAIPVO9cIw6IFeBkTlsOvbze7FYHxBD2b4eCzzX8hQU T6+G3LDfl+Ei2dC5g2kx92MoirhC/CE4xEDNpBp/hiQsWhgJmOb9y/YkW456piZ3 4CGnlGYkstmCYAoMwX1FqV2N86d32W7sVmhjcIzNqez2zDDisyD2YTXsR6H/4ht8 3Rv5LRD8kOtFWY3iXmxvc0KvaQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKGRnRJm DRypfb3k1tBTqTNbN6VqMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNkRENDc3QkM2 QUQ0MTFFRThEQjBBRjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghAmZAwDQYJKoZIhvcNAQELBQADggEBAHWozy1CtI1U /ycENBftjnrEBkqwo38hFKltScIkbopuVVYuv1kshr+MFtrlTXQnAOwn1KYUNOzm lDBWLT571a1rKoU77eNIaRvp5Q62NSKR21uwc/t4aqFFKIcoUDTOMxoSzGNZjVuq Z9K65k4FRqnqZTNl6HjBCUJVsZ7Qt6mQ0OC4weHq2EaJOHo7W1ex9eSg8PbcqAHK b6t5KjDRuT7VJd/k9k2mnmNY5hUPLuBml/KIZ7yu63GQhz24qJSDACJZVDnEEql9 tV4uLBKEqdOiukShk+BvMznuj1wDq0s+W2k/WMKajXzFKyezSeKdAn8yEXxfHdYp SJ19pOloMVE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:58:13 2025 by rpki-client