$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/74C6D504AAED11EC87200C63C4F9AE02.roa File: 74C6D504AAED11EC87200C63C4F9AE02.roa (raw, json) Hash identifier: J7BMbcUoR9Z3Zw0gmIxV2wqKzN0GApwLTQB9DIRaB2g= Subject key identifier: D2:65:79:C8:75:60:67:91:B8:67:03:73:74:AF:13:94:E3:66:A7:EA Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EF3 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/74C6D504AAED11EC87200C63C4F9AE02.roa Signing time: Thu 22 May 2025 20:08:08 +0000 ROA not before: Thu 22 May 2025 20:08:08 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 210041 IP address blocks: 2406:840:9000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3827 (0xef3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:08:08 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f8428-a953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0a:73:81:6e:9d:f8:fd:c6:9e:b8:f4:8d:5a: 3d:b7:62:8f:d2:fc:06:90:2e:d2:a9:f5:7b:74:98: dd:90:34:9c:95:eb:8f:e7:6c:96:45:a3:3c:2a:8c: 44:ce:ad:cb:b2:93:f9:e1:08:84:c1:3d:43:51:9e: 5a:79:16:a7:8e:a4:4a:ef:83:1c:6a:75:07:87:9b: fd:68:1a:5e:69:cb:91:51:54:28:7f:66:fa:44:4f: 8a:74:6b:5d:32:52:65:9c:8d:e0:bb:2f:de:da:d7: e5:34:3b:0f:4c:32:08:ed:fc:3d:2f:f5:b7:91:41: df:94:37:f9:27:28:df:af:9e:ae:f0:91:11:26:e4: 60:22:81:62:32:92:5f:bd:61:b7:9e:53:1b:96:97: 68:8f:0f:c0:39:39:74:4b:d1:20:c7:0e:33:e0:6d: d6:e9:9b:16:b1:4d:b7:f4:48:aa:fd:f2:ac:ea:b8: 77:fc:2d:5c:4b:4a:79:78:09:d4:7a:3c:2a:9b:ab: 87:37:f9:0f:7c:7d:04:bd:78:99:d1:96:c0:61:f0: 7c:bb:4d:15:95:0f:f2:ae:e6:45:48:c1:f8:4b:7e: 82:8e:a2:09:f0:ad:02:44:f6:1d:7c:e4:b2:26:31: f8:c1:43:b3:a3:08:98:9d:5b:1b:d7:68:dd:5b:3b: f2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:65:79:C8:75:60:67:91:B8:67:03:73:74:AF:13:94:E3:66:A7:EA X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/74C6D504AAED11EC87200C63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9000::/44 Signature Algorithm: sha256WithRSAEncryption 82:84:91:62:d1:83:bb:91:b4:1b:64:94:d1:2c:43:83:06:8a: 12:c9:ff:72:39:3c:cb:e5:f3:f7:d5:1a:db:94:d6:cd:8e:18: 2e:72:7f:b4:ea:fc:30:30:6b:ee:66:de:8a:11:3f:5a:1d:e4: f0:04:92:d2:80:a2:6b:64:0e:4a:3d:9d:5d:25:07:09:e7:1b: 63:70:cc:df:af:2f:41:fc:da:22:6f:72:52:ba:82:18:eb:b9: 9f:14:29:7e:b3:cb:df:3b:2c:df:70:54:d7:a1:1a:86:38:7f: 25:47:48:15:4c:d7:da:9d:ed:6c:1c:f4:fe:7c:3d:2d:83:82: fc:d5:fc:62:14:a2:75:1b:a1:39:cf:28:b7:bc:23:ff:fb:cc: 93:e1:ca:cf:c1:11:51:b5:2e:74:05:c8:96:d2:95:36:98:39: 47:c7:1c:26:90:c0:8f:b0:d4:f6:3e:cc:fe:0f:e4:b3:16:7b: 31:1a:ea:d5:10:b2:28:e3:24:2b:7d:ff:d8:cd:42:85:8a:7c: e3:15:4d:52:66:41:79:1f:ae:27:ca:07:79:df:7d:0d:c8:c2: 13:cc:8a:bd:7d:10:b5:43:ec:87:9e:ee:9a:99:d7:5a:8a:60: 9d:a4:e2:0a:79:49:5e:d4:56:fc:a7:92:33:70:24:f3:d9:0b: d8:80:10:a6 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwODA4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQyOC1hOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QpzgW6d+P3Gnrj0jVo9t2KP0vwGkC7SqfV7dJjdkDScleuP52yWRaM8KoxE zq3LspP54QiEwT1DUZ5aeRanjqRK74McanUHh5v9aBpeacuRUVQof2b6RE+KdGtd MlJlnI3guy/e2tflNDsPTDII7fw9L/W3kUHflDf5Jyjfr56u8JERJuRgIoFiMpJf vWG3nlMblpdojw/AOTl0S9Egxw4z4G3W6ZsWsU239Eiq/fKs6rh3/C1cS0p5eAnU ejwqm6uHN/kPfH0EvXiZ0ZbAYfB8u00VlQ/yruZFSMH4S36CjqIJ8K0CRPYdfOSy JjH4wUOzowiYnVsb12jdWzvycwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNJlech1 YGeRuGcDc3SvE5TjZqfqMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNzRDNkQ1MDRB QUVEMTFFQzg3MjAwQzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghAkAAwDQYJKoZIhvcNAQELBQADggEBAIKEkWLRg7uR tBtklNEsQ4MGihLJ/3I5PMvl8/fVGtuU1s2OGC5yf7Tq/DAwa+5m3ooRP1od5PAE ktKAomtkDko9nV0lBwnnG2NwzN+vL0H82iJvclK6ghjruZ8UKX6zy987LN9wVNeh GoY4fyVHSBVM19qd7Wwc9P58PS2DgvzV/GIUonUboTnPKLe8I//7zJPhys/BEVG1 LnQFyJbSlTaYOUfHHCaQwI+w1PY+zP4P5LMWezEa6tUQsijjJCt9/9jNQoWKfOMV TVJmQXkfrifKB3nffQ3IwhPMir19ELVD7Iee7pqZ11qKYJ2k4gp5SV7UVvynkjNw JPPZC9iAEKY= -----END CERTIFICATE-----Generated at Mon Nov 3 23:12:50 2025 by rpki-client