$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8E5C64CA8F6A11EAB0A06E6BC4F9AE02.roa File: 8E5C64CA8F6A11EAB0A06E6BC4F9AE02.roa (raw, json) Hash identifier: ADjD7iSLkQsz1nP8j+oIk8Q3qpa37EVsUL8GMB553+Q= Subject key identifier: 57:B9:9A:F0:9E:42:C4:38:DF:78:46:0C:BB:B2:BF:51:FA:5A:5F:42 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EF1 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8E5C64CA8F6A11EAB0A06E6BC4F9AE02.roa Signing time: Thu 22 May 2025 20:08:07 +0000 ROA not before: Thu 22 May 2025 20:08:07 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 209294 IP address blocks: 2406:840:e840::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 20:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3825 (0xef1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:08:07 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f8427-39b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a8:a2:8b:9b:99:63:dd:ab:ae:ad:57:7b:91: 19:fc:01:69:0c:87:15:63:09:8d:2e:5a:87:c3:de: 45:76:81:b9:a4:37:da:88:75:5b:24:04:23:b3:f7: ee:b4:f5:fc:b9:dd:80:07:f2:15:0d:ca:6c:35:f4: eb:eb:9d:8c:88:98:36:c9:d3:81:9e:25:97:34:e8: 6f:57:23:3b:a8:de:27:75:ec:3d:97:f3:2d:ee:33: 42:8a:35:d4:99:85:27:e6:76:e4:7b:53:1e:06:da: 10:d4:e0:fc:83:50:91:62:ec:5b:c7:88:62:29:5d: d6:dc:54:b4:d0:25:10:ee:44:cb:3e:3f:a9:7f:a2: de:2c:9b:77:59:68:95:26:8b:44:da:fa:65:e1:66: bb:bf:f6:6d:1e:44:30:79:36:9c:a8:0b:e3:5d:8e: fe:25:db:e1:bf:5a:3f:a4:c7:00:71:12:9d:68:71: 54:66:e1:d4:5c:ac:a0:36:52:90:89:cf:58:01:96: 26:24:b1:37:20:e3:47:d7:6f:62:a8:35:1f:5f:30: d5:b7:ea:e3:a7:2a:08:3b:13:7e:ed:c1:1b:a7:d6: 2c:37:3a:cd:b0:7a:18:e2:a4:d2:6b:61:3f:fa:d8: 37:77:83:aa:17:5b:e8:19:87:c1:e3:69:28:f4:68: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B9:9A:F0:9E:42:C4:38:DF:78:46:0C:BB:B2:BF:51:FA:5A:5F:42 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8E5C64CA8F6A11EAB0A06E6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e840::/44 Signature Algorithm: sha256WithRSAEncryption ac:15:14:5a:2f:ab:66:07:a9:d0:2d:0c:6b:19:9c:4e:0b:07: 3a:7e:7e:95:ed:73:88:d7:ba:5b:24:24:5d:5f:b8:d6:88:56: 5e:d6:01:15:8a:ec:72:8d:1e:43:05:31:08:90:c9:58:16:7c: a7:0c:b7:b0:19:7b:e9:6e:ae:40:bd:b1:3d:de:8c:fa:86:a4: ee:66:09:74:56:2e:3e:d8:42:e8:56:a7:b6:fd:2c:cf:ce:cd: 60:17:dc:62:a9:26:92:40:78:56:ac:2c:d1:05:a7:67:6d:9c: 27:f8:64:08:3f:0a:a7:d2:ae:11:f8:4a:91:dc:3b:50:41:11: 7d:6d:b8:00:bf:53:43:26:b2:5e:50:05:16:44:5c:4d:56:79: 05:29:be:f0:e5:18:74:26:dd:0e:5e:c2:d7:88:b7:25:bc:af: 20:e0:4f:54:4d:4d:58:dd:67:2e:d8:d7:75:b8:f6:ee:0a:bf: 1f:4e:11:ba:3a:16:d0:f8:a2:31:51:0e:36:1d:3d:b1:93:78: b2:d0:af:29:97:48:f1:7a:9c:9a:16:c0:5f:a5:10:e4:37:f4: 22:aa:50:93:5d:94:5e:c2:d3:a5:64:22:28:ea:54:86:c7:a1: 23:43:19:bd:1e:b9:d3:27:2f:27:56:91:ff:e1:78:33:3a:1f: 3f:be:c6:d3 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwODA3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQyNy0zOWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaiii5uZY92rrq1Xe5EZ/AFpDIcVYwmNLlqHw95FdoG5pDfaiHVbJAQjs/fu tPX8ud2AB/IVDcpsNfTr652MiJg2ydOBniWXNOhvVyM7qN4ndew9l/Mt7jNCijXU mYUn5nbke1MeBtoQ1OD8g1CRYuxbx4hiKV3W3FS00CUQ7kTLPj+pf6LeLJt3WWiV JotE2vpl4Wa7v/ZtHkQweTacqAvjXY7+Jdvhv1o/pMcAcRKdaHFUZuHUXKygNlKQ ic9YAZYmJLE3IONH129iqDUfXzDVt+rjpyoIOxN+7cEbp9YsNzrNsHoY4qTSa2E/ +tg3d4OqF1voGYfB42ko9Ghj8wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFe5mvCe QsQ433hGDLuyv1H6Wl9CMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOEU1QzY0Q0E4 RjZBMTFFQUIwQTA2RTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA6EAwDQYJKoZIhvcNAQELBQADggEBAKwVFFovq2YH qdAtDGsZnE4LBzp+fpXtc4jXulskJF1fuNaIVl7WARWK7HKNHkMFMQiQyVgWfKcM t7AZe+lurkC9sT3ejPqGpO5mCXRWLj7YQuhWp7b9LM/OzWAX3GKpJpJAeFasLNEF p2dtnCf4ZAg/CqfSrhH4SpHcO1BBEX1tuAC/U0Mmsl5QBRZEXE1WeQUpvvDlGHQm 3Q5ewteItyW8ryDgT1RNTVjdZy7Y13W49u4Kvx9OEbo6FtD4ojFRDjYdPbGTeLLQ rymXSPF6nJoWwF+lEOQ39CKqUJNdlF7C06VkIijqVIbHoSNDGb0eudMnLydWkf/h eDM6Hz++xtM= -----END CERTIFICATE-----Generated at Sat Oct 25 01:33:25 2025 by rpki-client