$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B119B7D2D03311EBA12FCF3CC4F9AE02.roa File: B119B7D2D03311EBA12FCF3CC4F9AE02.roa (raw, json) Hash identifier: vVMb+Mh0+K4YVqpi+DBa8Ml321CNHJvpASTVTLLag2Q= Subject key identifier: 20:92:75:1D:2B:2D:31:11:3E:3A:A6:5F:8A:C9:40:47:25:17:24:F3 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EAC Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B119B7D2D03311EBA12FCF3CC4F9AE02.roa Signing time: Thu 22 May 2025 20:06:59 +0000 ROA not before: Thu 22 May 2025 20:06:59 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142438 IP address blocks: 2406:840:8000::/36 maxlen: 48 2406:840:fef8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3756 (0xeac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:06:59 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f83e3-fd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:9d:7d:b1:47:e1:cd:21:67:98:4c:15:7d: 17:65:8a:19:f8:43:99:ab:9e:d8:3b:37:20:3e:a8: c4:e5:87:c4:88:37:a2:d0:c6:6c:04:2b:d1:ca:a6: a9:99:2d:49:2a:de:9a:d6:3d:ca:44:a8:9c:47:51: 00:19:48:7f:b6:e7:3a:c7:a2:be:33:1a:cd:c0:b3: fc:35:be:66:fb:e8:0f:1f:d9:1e:11:92:41:2a:a6: 6a:8a:6d:03:5b:62:d4:56:c0:3c:92:25:cf:6e:ac: 8b:bc:e3:37:9d:9d:3e:a6:50:72:61:c6:01:2f:97: 2c:f9:6d:bd:8a:f0:92:4a:f6:3d:c1:b9:97:c1:c9: 09:8b:24:c4:f3:a5:76:c0:54:8a:71:9a:64:de:8d: 99:a0:1c:56:04:fd:2a:ff:e1:d2:05:2c:05:dc:9d: 35:20:bc:78:d6:56:43:99:c4:95:80:c5:24:6d:32: 9a:b6:70:39:89:7d:5c:df:b0:76:be:ad:3d:06:18: 0b:21:1e:fd:81:30:d1:04:d4:22:81:e8:01:32:24: 93:75:96:8c:7c:0d:ea:b4:33:1e:ff:6b:64:ea:3a: 5c:2e:36:d0:f3:81:86:c4:a3:08:b0:db:e3:97:f9: 14:ef:fb:5b:c9:0a:1d:b6:56:5a:2a:53:51:45:f5: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:92:75:1D:2B:2D:31:11:3E:3A:A6:5F:8A:C9:40:47:25:17:24:F3 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B119B7D2D03311EBA12FCF3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:8000::/36 2406:840:fef8::/48 Signature Algorithm: sha256WithRSAEncryption 46:ff:9b:13:e5:b8:b0:6c:47:b2:7e:bd:7d:54:ff:6c:4e:d3: b1:59:2b:ff:4b:6a:46:17:7d:c0:60:cf:34:eb:7c:c8:79:5d: 1d:a2:fa:83:b4:60:a6:0e:7e:e0:02:53:91:08:85:fe:7e:9c: 5c:c7:7d:71:5b:00:52:b4:7f:11:7b:8d:36:cc:b2:be:4a:8a: 3e:0b:4f:0a:78:0d:9b:bb:6a:9b:b0:47:c8:1e:6c:cd:b3:3e: fa:89:71:9c:d8:0a:df:e9:bc:ac:06:50:92:2f:e2:cc:57:62: e8:d5:aa:58:49:fc:ce:4e:8e:96:19:3b:73:e5:d2:b3:56:50: d7:52:95:5d:38:4d:d1:eb:ac:3d:56:ce:6c:09:73:b3:b8:f6: 9f:43:0e:4b:10:45:61:2e:ce:0b:3e:98:6d:42:3c:1a:70:39: cb:a5:3c:0b:1e:ae:ce:0e:0e:75:ce:9e:64:9e:5e:8c:8b:c4: f0:67:cc:ba:9c:4f:5f:8a:7b:91:2a:db:37:c2:20:8c:6f:bf: 3c:af:a2:a6:12:13:35:39:07:93:56:3d:d6:6e:62:86:41:4a: ac:43:6f:2e:5e:17:8b:7e:67:87:61:63:d0:e1:f2:d8:4c:bf: 5f:9c:34:6c:b5:2c:36:a9:da:69:8d:f6:52:54:e5:0e:3f:6d: 57:0e:27:1d -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICDqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjU5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODNlMy1mZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLqdfbFH4c0hZ5hMFX0XZYoZ+EOZq57YOzcgPqjE5YfEiDei0MZsBCvRyqap mS1JKt6a1j3KRKicR1EAGUh/tuc6x6K+MxrNwLP8Nb5m++gPH9keEZJBKqZqim0D W2LUVsA8kiXPbqyLvOM3nZ0+plByYcYBL5cs+W29ivCSSvY9wbmXwckJiyTE86V2 wFSKcZpk3o2ZoBxWBP0q/+HSBSwF3J01ILx41lZDmcSVgMUkbTKatnA5iX1c37B2 vq09BhgLIR79gTDRBNQigegBMiSTdZaMfA3qtDMe/2tk6jpcLjbQ84GGxKMIsNvj l/kU7/tbyQodtlZaKlNRRfXc5wIDAQABo4ICoDCCApwwHQYDVR0OBBYEFCCSdR0r LTERPjqmX4rJQEclFyTzMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQjExOUI3RDJE MDMzMTFFQkExMkZDRjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKgYIKwYBBQUHAQcBAf8E GzAZMBcEAgACMBEDBgQkBghAgAMHACQGCED++DANBgkqhkiG9w0BAQsFAAOCAQEA Rv+bE+W4sGxHsn69fVT/bE7TsVkr/0tqRhd9wGDPNOt8yHldHaL6g7Rgpg5+4AJT kQiF/n6cXMd9cVsAUrR/EXuNNsyyvkqKPgtPCngNm7tqm7BHyB5szbM++olxnNgK 3+m8rAZQki/izFdi6NWqWEn8zk6Olhk7c+XSs1ZQ11KVXThN0eusPVbObAlzs7j2 n0MOSxBFYS7OCz6YbUI8GnA5y6U8Cx6uzg4Odc6eZJ5ejIvE8GfMupxPX4p7kSrb N8IgjG+/PK+iphITNTkHk1Y91m5ihkFKrENvLl4Xi35nh2Fj0OHy2Ey/X5w0bLUs NqnaaY32UlTlDj9tVw4nHQ== -----END CERTIFICATE-----Generated at Tue Jun 3 23:59:15 2025 by rpki-client