$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa File: A1A37268814211EDA138A00AC4F9AE02.roa (raw, json) Hash identifier: OzLqdWtdhx8mC3Zxv1qF5xRDqELNZLUcCyb9aOWOMnw= Subject key identifier: 7A:3B:58:C3:53:5B:89:18:F7:56:F6:EC:4D:C8:FA:9F:FB:4A:7B:BB Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EEB Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa Signing time: Thu 22 May 2025 20:07:59 +0000 ROA not before: Thu 22 May 2025 20:07:59 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 203472 IP address blocks: 2406:840:9840::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3819 (0xeeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:59 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f841f-e4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:92:39:d8:35:2c:1e:af:c8:aa:e5:02:75: 6a:d9:5b:0a:c7:0f:fb:d3:2a:b9:d1:d3:94:eb:29: c6:00:ea:6f:99:53:47:3f:8e:ec:75:55:1d:77:04: d4:2f:ef:bf:d1:37:b5:03:70:11:95:39:63:a6:74: e7:ff:65:33:a9:68:35:d2:a2:f1:40:8a:5d:12:de: 7f:fd:f2:d8:82:88:1a:27:79:35:63:7e:24:f1:70: ce:e8:d4:29:d9:fc:d4:32:98:a2:78:10:23:d1:18: 4b:41:ba:99:f4:e0:13:f7:73:97:d3:00:b1:19:3c: bd:f2:39:94:ed:0b:d3:d1:37:f8:29:5f:71:de:a9: 60:70:0d:42:e3:78:5f:94:53:47:37:ef:d6:0e:e7: df:81:4b:93:d6:f2:9f:71:eb:39:95:ee:ea:d9:80: ce:ca:d1:72:c2:91:13:e0:61:9b:ee:0f:a7:f0:d4: e5:0e:20:57:a9:53:3c:d5:2a:fd:ce:bf:03:b0:16: 1c:51:af:3e:87:7f:8b:8c:da:12:55:f1:b8:40:2c: bf:60:0b:69:08:98:f6:0d:33:56:0a:20:6d:ce:e2: ec:ff:7b:ba:09:26:c3:ab:60:42:03:ee:e4:7c:a6: 80:5c:0f:1f:fe:b4:d4:8f:ba:c8:0a:66:eb:70:a7: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3B:58:C3:53:5B:89:18:F7:56:F6:EC:4D:C8:FA:9F:FB:4A:7B:BB X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9840::/44 Signature Algorithm: sha256WithRSAEncryption 10:54:55:71:b1:f7:3d:b7:3d:bc:52:8d:ff:2f:fd:a5:7f:10: f4:9e:8b:68:98:a4:ba:c8:12:d1:68:3b:91:be:02:8a:27:a3: 45:a8:1f:c6:3e:e8:c7:b8:9f:84:98:1f:f0:16:d8:23:e0:a6: 82:73:a9:29:89:f6:76:72:cd:be:eb:0c:44:58:30:fa:58:50: ec:e8:0a:00:85:60:0b:6c:58:34:61:03:b4:2e:e1:72:be:04: e7:e7:62:94:19:6d:2d:8d:fa:e8:4e:46:15:0b:2b:5a:07:6f: 21:36:6b:6f:76:cc:da:10:12:4a:b3:9f:cc:64:81:ef:3d:52: 23:b7:3b:41:20:43:7f:9f:90:3d:46:85:64:63:1c:a4:fb:78: bb:37:c0:c7:87:3f:7d:9e:30:08:c3:5b:c6:47:7e:83:6d:7d: 4d:90:16:aa:87:3f:78:ca:3e:c2:84:17:de:cb:41:e4:9d:76: c5:14:da:ad:73:bd:0b:1e:a6:dc:44:01:86:b9:98:8b:0a:94: 41:0b:06:09:20:65:8c:2b:03:0f:d3:37:7a:7e:a4:f2:34:2a: f4:67:96:4f:f8:84:0c:08:cf:27:dc:98:78:8a:65:fb:a1:dc: 7e:bc:b8:01:0e:36:d0:2f:1b:d4:83:66:f2:0c:b9:27:66:0c: 00:ab:4d:44 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzU5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQxZi1lNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiWSOdg1LB6vyKrlAnVq2VsKxw/70yq50dOU6ynGAOpvmVNHP47sdVUddwTU L++/0Te1A3ARlTljpnTn/2UzqWg10qLxQIpdEt5//fLYgogaJ3k1Y34k8XDO6NQp 2fzUMpiieBAj0RhLQbqZ9OAT93OX0wCxGTy98jmU7QvT0Tf4KV9x3qlgcA1C43hf lFNHN+/WDuffgUuT1vKfces5le7q2YDOytFywpET4GGb7g+n8NTlDiBXqVM81Sr9 zr8DsBYcUa8+h3+LjNoSVfG4QCy/YAtpCJj2DTNWCiBtzuLs/3u6CSbDq2BCA+7k fKaAXA8f/rTUj7rICmbrcKdDcwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHo7WMNT W4kY91b27E3I+p/7Snu7MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQTFBMzcyNjg4 MTQyMTFFREExMzhBMDBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghAmEAwDQYJKoZIhvcNAQELBQADggEBABBUVXGx9z23 PbxSjf8v/aV/EPSei2iYpLrIEtFoO5G+Aoono0WoH8Y+6Me4n4SYH/AW2CPgpoJz qSmJ9nZyzb7rDERYMPpYUOzoCgCFYAtsWDRhA7Qu4XK+BOfnYpQZbS2N+uhORhUL K1oHbyE2a292zNoQEkqzn8xkge89UiO3O0EgQ3+fkD1GhWRjHKT7eLs3wMeHP32e MAjDW8ZHfoNtfU2QFqqHP3jKPsKEF97LQeSddsUU2q1zvQseptxEAYa5mIsKlEEL BgkgZYwrAw/TN3p+pPI0KvRnlk/4hAwIzyfcmHiKZfuh3H68uAEONtAvG9SDZvIM uSdmDACrTUQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:52:35 2025 by rpki-client