$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98ABB92C71DC11EFAC022E35C4F9AE02.roa File: 98ABB92C71DC11EFAC022E35C4F9AE02.roa (raw, json) Hash identifier: rTx3wFPM/6Q9odfWrC2fCqXUNeynhANZcf2IU3TK4rU= Subject key identifier: C2:73:4C:E2:38:C5:9D:40:E6:21:3C:C8:B2:0F:21:CA:4D:0E:B9:DD Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EE0 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98ABB92C71DC11EFAC022E35C4F9AE02.roa Signing time: Thu 22 May 2025 20:07:49 +0000 ROA not before: Thu 22 May 2025 20:07:49 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153333 IP address blocks: 2406:840:fcb0::/44 maxlen: 48 2406:840:fea8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3808 (0xee0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:49 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f8415-9376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ff:bd:aa:ad:b1:3f:0c:0b:72:05:ae:4b:ae: ff:e6:3b:30:a5:72:cf:a1:29:03:2f:29:13:08:d9: 54:4a:8f:8d:c7:a2:ba:79:28:b2:f3:47:28:bf:91: 84:94:23:22:ba:6e:da:39:d5:cd:6a:a7:39:17:f7: 86:61:54:bd:15:ca:9f:dd:96:1d:6e:dc:80:bb:09: cf:9c:25:b1:e0:37:56:85:09:5c:a6:69:b3:da:af: 82:19:9d:4c:ca:76:3c:2e:b1:d6:b6:a7:f4:74:d5: bd:15:86:4b:26:b1:1e:b5:29:2d:51:d4:ff:8a:94: d9:0e:20:60:3b:22:a3:2b:76:62:f5:c5:06:c0:1d: 70:dc:d7:5d:b1:5b:b3:11:a7:22:e5:9a:bb:23:34: 3a:9b:be:65:27:cf:ae:19:b0:1a:44:26:c2:b7:f3: 77:e7:bb:ec:7a:51:32:2e:73:a6:92:ca:18:b9:8e: c7:b1:8e:0f:3c:f6:21:5c:1b:cd:88:ab:61:16:e3: 18:2f:e6:c4:82:a5:3d:d5:a4:14:d3:8c:21:50:46: 62:e0:5e:67:fa:5c:3e:92:c5:4d:f6:5e:a8:5f:99: 5d:9e:33:93:04:e9:4a:f6:ae:76:2d:69:cf:de:45: fc:a9:c8:20:3d:aa:83:bd:e7:dd:27:9e:11:da:0d: 2f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:73:4C:E2:38:C5:9D:40:E6:21:3C:C8:B2:0F:21:CA:4D:0E:B9:DD X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98ABB92C71DC11EFAC022E35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fcb0::/44 2406:840:fea8::/48 Signature Algorithm: sha256WithRSAEncryption 8e:c4:13:8b:24:49:ec:33:59:d8:3e:18:d6:23:ae:87:2f:b6: da:65:d4:14:98:23:e1:23:2e:21:15:3b:33:db:5d:c4:e4:31: 57:80:b7:71:c9:3a:c5:2b:a6:3c:30:2d:8f:fc:9f:7c:61:33: 1c:25:5f:94:92:e6:bd:a5:09:81:c5:68:ca:25:f6:00:e3:06: a9:7e:ed:ba:2a:88:db:10:02:85:9f:0a:e4:83:80:48:7c:17: 69:22:8c:25:bd:5a:99:74:56:71:e9:f3:7b:57:19:11:dc:ae: 93:fd:86:11:1f:0b:d0:92:69:d3:22:f6:a0:cd:ba:23:9b:cf: be:b2:54:53:88:fc:13:d1:b2:14:3e:d0:9f:02:fc:ac:f8:3f: d0:5a:f9:86:f0:4c:45:e7:02:61:e3:ed:1f:67:12:79:d2:2a: 7b:b9:67:ec:32:05:56:20:bb:b0:03:11:db:9a:ed:ce:e4:f2: ab:6c:9f:e2:67:b9:35:a4:af:cd:42:32:0b:db:b4:dd:6d:ec: ab:8d:41:e2:b5:b4:84:fc:68:c7:81:b7:9e:68:c6:eb:13:73: e7:a5:89:bf:95:ee:eb:82:d6:6a:88:ad:c3:2c:70:9e:05:db: 86:b4:e9:0a:66:44:bd:d6:ae:4b:96:9d:5d:21:33:fe:fd:ce: d0:cf:24:f6 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzQ5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQxNS05Mzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0v+9qq2xPwwLcgWuS67/5jswpXLPoSkDLykTCNlUSo+Nx6K6eSiy80cov5GE lCMium7aOdXNaqc5F/eGYVS9Fcqf3ZYdbtyAuwnPnCWx4DdWhQlcpmmz2q+CGZ1M ynY8LrHWtqf0dNW9FYZLJrEetSktUdT/ipTZDiBgOyKjK3Zi9cUGwB1w3NddsVuz Eaci5Zq7IzQ6m75lJ8+uGbAaRCbCt/N357vselEyLnOmksoYuY7HsY4PPPYhXBvN iKthFuMYL+bEgqU91aQU04whUEZi4F5n+lw+ksVN9l6oX5ldnjOTBOlK9q52LWnP 3kX8qcggPaqDvefdJ54R2g0vTwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMJzTOI4 xZ1A5iE8yLIPIcpNDrndMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOThBQkI5MkM3 MURDMTFFRkFDMDIyRTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA/LADBwAkBghA/qgwDQYJKoZIhvcNAQELBQADggEB AI7EE4skSewzWdg+GNYjrocvttpl1BSYI+EjLiEVOzPbXcTkMVeAt3HJOsUrpjww LY/8n3xhMxwlX5SS5r2lCYHFaMol9gDjBql+7boqiNsQAoWfCuSDgEh8F2kijCW9 Wpl0VnHp83tXGRHcrpP9hhEfC9CSadMi9qDNuiObz76yVFOI/BPRshQ+0J8C/Kz4 P9Ba+YbwTEXnAmHj7R9nEnnSKnu5Z+wyBVYgu7ADEdua7c7k8qtsn+JnuTWkr81C MgvbtN1t7KuNQeK1tIT8aMeBt55oxusTc+elib+V7uuC1mqIrcMscJ4F24a06Qpm RL3WrkuWnV0hM/79ztDPJPY= -----END CERTIFICATE-----Generated at Mon Jun 2 06:59:25 2025 by rpki-client