$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7B2DB2E062D611EDA3A90143C4F9AE02.roa File: 7B2DB2E062D611EDA3A90143C4F9AE02.roa (raw, json) Hash identifier: 75+4WVEQdQ6Jza863ndmCwwIeqUbQhbSto2daKJqQLY= Subject key identifier: 00:4A:7F:C8:4E:D9:D6:FF:16:3A:F3:51:3D:CE:97:37:AC:24:7D:BC Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EE5 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7B2DB2E062D611EDA3A90143C4F9AE02.roa Signing time: Thu 22 May 2025 20:07:54 +0000 ROA not before: Thu 22 May 2025 20:07:53 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 18041 IP address blocks: 2406:840:f337::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3813 (0xee5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:53 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f8419-de80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:cf:cb:0f:ab:58:bb:6a:34:4f:3e:6b:fb: e3:36:97:f4:c5:11:35:3a:32:03:02:c2:71:32:d4: f8:d0:f6:b9:e9:30:57:9c:63:99:00:3c:91:72:60: b7:c8:04:60:96:f7:54:76:07:1b:63:ba:85:db:9a: f5:4e:d5:64:fa:b9:93:69:5a:62:fe:86:75:65:ba: 54:9f:81:be:08:7a:68:ec:ed:1f:9f:04:4a:a5:61: 8e:b4:90:f5:1e:7f:55:80:d4:e0:cb:57:b0:14:1e: 20:d5:2f:58:38:fe:5d:1f:8f:c2:25:3a:95:e3:ab: ea:c6:a4:38:c5:9d:d5:18:83:93:5d:b0:46:da:b5: a9:51:f6:85:0a:ca:e5:3c:ba:d4:e5:a6:92:01:95: ff:b3:f8:76:4a:e2:06:b6:9e:89:30:5f:63:8c:d5: a0:5b:73:cf:c5:b0:da:28:05:d2:e4:b1:0e:02:3a: c5:43:d7:d4:8a:93:03:f0:a8:a9:dc:06:3c:e5:8d: 84:7c:5a:b9:16:83:f7:78:c0:84:09:01:e9:99:15: b4:5d:15:9b:27:a8:3c:93:96:d1:da:61:c4:e0:7a: 4c:7a:de:fc:1b:90:84:86:0d:14:73:76:6d:c3:57: b7:5c:56:23:43:0d:7e:9c:5a:2c:5c:8e:51:47:24: 70:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4A:7F:C8:4E:D9:D6:FF:16:3A:F3:51:3D:CE:97:37:AC:24:7D:BC X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7B2DB2E062D611EDA3A90143C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:f337::/48 Signature Algorithm: sha256WithRSAEncryption 4f:0b:e4:b6:93:6f:83:b7:64:3f:d8:d7:49:01:64:42:1c:27: 07:a0:7c:99:e8:6f:b6:49:8f:36:db:a0:b1:63:75:25:55:c1: cf:90:bf:ed:66:b8:b3:e9:7e:cf:ce:d4:6c:7d:59:28:7e:68: 6b:2e:10:f5:a0:43:0b:5e:2c:a9:42:2c:23:50:69:85:55:39: 76:98:e9:c5:c0:8c:d4:a2:c2:1a:09:9f:ae:ca:59:44:af:9a: 31:98:b2:bf:78:e9:0c:e7:26:56:20:46:80:b7:75:fe:e7:95: 17:65:ef:d2:22:d8:28:15:1c:c2:ac:68:95:fc:18:7e:d2:d1: ad:c4:6f:8a:bb:39:36:61:ae:5a:40:6b:44:ad:8e:12:53:2a: 8c:e2:25:52:af:0d:47:18:ad:df:29:50:ce:69:09:66:fa:56: c1:6d:81:da:fd:bb:9a:8d:2e:78:4e:ee:f5:b1:3b:39:13:7e: 61:b6:a1:77:bd:4c:b2:3e:e3:41:9c:87:84:2b:ba:48:fd:f0: 9c:df:77:89:9d:00:0d:a9:c7:70:6b:75:fc:2b:e1:35:ab:6b: d0:a6:7e:8b:c4:bc:41:c5:bc:89:16:e3:dc:2e:c0:09:1b:53: 31:aa:a9:9f:2a:2e:46:57:b3:54:93:62:22:ab:07:42:95:f6: 93:5c:91:f1 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzUzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQxOS1kZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmvPyw+rWLtqNE8+a/vjNpf0xRE1OjIDAsJxMtT40Pa56TBXnGOZADyRcmC3 yARglvdUdgcbY7qF25r1TtVk+rmTaVpi/oZ1ZbpUn4G+CHpo7O0fnwRKpWGOtJD1 Hn9VgNTgy1ewFB4g1S9YOP5dH4/CJTqV46vqxqQ4xZ3VGIOTXbBG2rWpUfaFCsrl PLrU5aaSAZX/s/h2SuIGtp6JMF9jjNWgW3PPxbDaKAXS5LEOAjrFQ9fUipMD8Kip 3AY85Y2EfFq5FoP3eMCECQHpmRW0XRWbJ6g8k5bR2mHE4HpMet78G5CEhg0Uc3Zt w1e3XFYjQw1+nFosXI5RRyRwpwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFABKf8hO 2db/FjrzUT3OlzesJH28MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvN0IyREIyRTA2 MkQ2MTFFREEzQTkwMTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBghA8zcwDQYJKoZIhvcNAQELBQADggEBAE8L5LaTb4O3 ZD/Y10kBZEIcJwegfJnob7ZJjzbboLFjdSVVwc+Qv+1muLPpfs/O1Gx9WSh+aGsu EPWgQwteLKlCLCNQaYVVOXaY6cXAjNSiwhoJn67KWUSvmjGYsr946QznJlYgRoC3 df7nlRdl79Ii2CgVHMKsaJX8GH7S0a3Eb4q7OTZhrlpAa0StjhJTKoziJVKvDUcY rd8pUM5pCWb6VsFtgdr9u5qNLnhO7vWxOzkTfmG2oXe9TLI+40Gch4Qrukj98Jzf d4mdAA2px3Brdfwr4TWra9CmfovEvEHFvIkW49wuwAkbUzGqqZ8qLkZXs1STYiKr B0KV9pNckfE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:55:07 2025 by rpki-client