$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7DE7E76AF80D11EBAE08AF82C4F9AE02.roa File: 7DE7E76AF80D11EBAE08AF82C4F9AE02.roa (raw, json) Hash identifier: htgD2KPuSchRzey1Q7sXcqzKmCb2HJCgMfIOW1CPHXs= Subject key identifier: C4:AB:50:7D:A5:55:99:38:E0:04:14:3B:7E:3B:4C:E9:53:07:D2:FE Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EF7 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7DE7E76AF80D11EBAE08AF82C4F9AE02.roa Signing time: Thu 22 May 2025 20:08:12 +0000 ROA not before: Thu 22 May 2025 20:08:12 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 211843 IP address blocks: 2406:840:e666::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3831 (0xef7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:08:12 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f842c-e316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:4c:46:ee:0e:af:dc:af:10:1d:d0:35:65: 87:08:ae:b3:bf:27:fc:dd:7f:36:20:c8:d0:24:29: 97:e6:69:0d:8c:6f:b9:b9:b9:ad:19:de:6a:67:ee: 02:ac:17:ab:0c:bb:ba:0d:38:8f:e1:80:3d:9c:b8: d6:f6:2d:91:5c:07:02:0f:96:22:13:de:6f:e9:fe: fd:d9:a3:f7:8f:88:f9:83:d1:ee:57:76:6f:20:5b: bd:6f:ea:ac:f1:d5:b7:8f:65:62:15:4d:48:56:e1: f5:e1:db:4e:ef:bc:0f:22:da:30:c7:1b:1e:77:70: f6:b0:2d:75:11:90:71:91:88:44:c7:bb:fa:4a:ab: d1:ee:20:db:d0:f0:e7:39:0f:9f:be:09:db:fd:ce: 64:a4:51:93:8b:be:d4:64:52:7d:49:e9:d6:b1:2c: 1b:1a:33:8d:d4:52:8e:2b:83:7a:2a:01:c9:6b:51: 6d:71:55:52:22:15:63:9a:61:aa:50:9f:c6:2c:18: 9a:e4:f2:1c:5a:9e:ee:bc:c6:bd:a8:2a:3d:e5:9d: 02:58:5f:c1:89:1c:21:8e:34:f2:8b:b5:a3:47:7b: 40:a2:fe:a2:dd:6f:8d:ad:6c:50:93:1f:d7:33:3c: ce:15:f1:55:9d:56:98:ba:be:2f:7e:69:79:67:84: 1a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AB:50:7D:A5:55:99:38:E0:04:14:3B:7E:3B:4C:E9:53:07:D2:FE X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7DE7E76AF80D11EBAE08AF82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e666::/47 Signature Algorithm: sha256WithRSAEncryption a2:fb:fa:aa:11:f7:20:40:a5:fb:7c:1a:13:e9:f6:28:af:18: 30:8b:cf:96:32:5e:3d:4a:b1:fa:69:6d:d3:59:20:49:d0:b1: 78:06:50:f2:a0:ee:ed:de:70:00:40:74:ad:89:25:f9:2b:38: 4c:bb:b2:79:de:cf:e7:58:b7:a9:90:77:af:dd:c2:0d:d8:c7: c4:2a:37:d2:89:58:36:4e:76:f1:62:1a:a4:fa:90:7a:f9:c3: 38:e5:0e:8e:21:af:bd:c0:90:f6:f7:a5:f3:cc:8f:52:ef:47: b8:fa:38:63:02:a2:c3:7f:f5:0b:8d:fd:61:82:07:a4:36:b3: 2a:e4:09:b5:1c:b6:7a:03:f1:b1:89:61:7e:63:01:cf:05:d9: 7f:48:1b:a2:9f:c8:41:7b:8f:45:00:06:9f:98:c6:0b:83:04: 34:cb:a7:51:02:b8:4e:8b:54:07:d4:3d:e2:57:9e:0b:95:11: c1:5d:3b:09:70:dd:1d:0d:f1:dd:e9:46:54:d1:c3:37:d2:95: 31:6d:4d:d0:ee:09:97:81:7d:82:04:78:db:dc:5a:9c:7e:5b: 65:85:80:36:d3:44:7f:39:8a:65:10:6d:83:66:fa:52:22:61: dd:66:b5:0c:43:c1:18:37:9c:d1:e1:14:3f:e4:94:88:34:66: 8c:a9:04:97 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwODEyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQyYy1lMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsApMRu4Or9yvEB3QNWWHCK6zvyf83X82IMjQJCmX5mkNjG+5ubmtGd5qZ+4C rBerDLu6DTiP4YA9nLjW9i2RXAcCD5YiE95v6f792aP3j4j5g9HuV3ZvIFu9b+qs 8dW3j2ViFU1IVuH14dtO77wPItowxxsed3D2sC11EZBxkYhEx7v6SqvR7iDb0PDn OQ+fvgnb/c5kpFGTi77UZFJ9SenWsSwbGjON1FKOK4N6KgHJa1FtcVVSIhVjmmGq UJ/GLBia5PIcWp7uvMa9qCo95Z0CWF/BiRwhjjTyi7WjR3tAov6i3W+NrWxQkx/X MzzOFfFVnVaYur4vfml5Z4QaCQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMSrUH2l VZk44AQUO347TOlTB9L+MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvN0RFN0U3NkFG ODBEMTFFQkFFMDhBRjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkBghA5mYwDQYJKoZIhvcNAQELBQADggEBAKL7+qoR9yBA pft8GhPp9iivGDCLz5YyXj1KsfppbdNZIEnQsXgGUPKg7u3ecABAdK2JJfkrOEy7 snnez+dYt6mQd6/dwg3Yx8QqN9KJWDZOdvFiGqT6kHr5wzjlDo4hr73AkPb3pfPM j1LvR7j6OGMCosN/9QuN/WGCB6Q2syrkCbUctnoD8bGJYX5jAc8F2X9IG6KfyEF7 j0UABp+YxguDBDTLp1ECuE6LVAfUPeJXnguVEcFdOwlw3R0N8d3pRlTRwzfSlTFt TdDuCZeBfYIEeNvcWpx+W2WFgDbTRH85imUQbYNm+lIiYd1mtQxDwRg3nNHhFD/k lIg0ZoypBJc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:56:33 2025 by rpki-client