$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B62D2E905C6F11EFAEA11916C4F9AE02.roa File: B62D2E905C6F11EFAEA11916C4F9AE02.roa (raw, json) Hash identifier: yiWDy7cdxKQoi1JKwMGKfkoInu1whKsmxG2JIqf179g= Subject key identifier: 4E:E3:62:20:9C:41:CD:65:DE:86:B9:F9:FA:41:5F:75:C4:95:73:66 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EED Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B62D2E905C6F11EFAEA11916C4F9AE02.roa Signing time: Thu 22 May 2025 20:08:01 +0000 ROA not before: Thu 22 May 2025 20:08:01 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 2406:840:9190::/44 maxlen: 48 2406:840:9888::/48 maxlen: 48 2406:840:e060::/44 maxlen: 48 2406:840:fa60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3821 (0xeed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:08:01 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f8420-6891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8f:5c:2b:69:df:40:57:3b:4e:c6:02:0e:bc: f3:fd:b6:34:fc:77:ed:c6:48:6f:de:b6:24:c3:43: 3d:d6:5d:78:0e:7a:92:42:ca:56:43:34:b5:a5:ea: e4:64:f6:6c:ef:90:57:d0:82:4b:ea:fd:e2:01:39: 61:f8:a0:4f:1b:96:93:27:d8:2b:38:e2:b8:eb:3a: fd:1d:fc:d1:25:b8:19:18:1c:c9:e9:92:bc:47:5d: ee:0f:5a:26:9c:e0:cb:41:cb:71:a6:98:48:58:4c: a3:11:a2:ee:b3:e8:ec:b0:59:53:51:56:ff:6d:47: a9:72:7d:db:fd:4b:22:56:e4:fe:b9:77:4a:81:66: 48:cf:91:fb:cc:35:d2:cf:c6:c0:98:d9:00:77:41: 07:6b:ae:e3:1a:28:b1:19:d7:5e:63:6a:31:87:aa: 43:75:9d:ab:41:9b:f1:7c:57:81:12:18:73:b1:95: 20:cf:3a:6c:e3:24:fa:7f:e5:bf:87:d1:5f:2d:5c: eb:21:76:cb:f8:1d:1e:b7:ee:22:09:52:80:04:db: dc:32:53:e8:18:99:07:2a:39:ee:11:a6:b1:22:dd: 22:9e:9c:68:07:86:d3:14:bc:96:5d:45:87:a2:27: ed:4e:40:5d:0e:ae:22:73:db:81:1c:24:ad:1a:18: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E3:62:20:9C:41:CD:65:DE:86:B9:F9:FA:41:5F:75:C4:95:73:66 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B62D2E905C6F11EFAEA11916C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9190::/44 2406:840:9888::/48 2406:840:e060::/44 2406:840:fa60::/44 Signature Algorithm: sha256WithRSAEncryption 50:76:dc:bf:f1:b5:71:c1:eb:64:66:e9:79:f9:40:05:08:44: 59:cf:a8:00:4a:e6:15:0f:7f:3b:1b:19:32:24:d5:d3:51:b5: 56:48:37:f8:62:37:26:e3:fb:c1:e0:5b:be:9e:d7:15:30:00: 7a:e3:ff:36:10:55:99:fe:30:d6:e7:4e:4b:0d:d2:12:06:32: 14:35:76:07:0c:00:51:1f:1b:99:69:78:5e:70:8e:8c:3b:e9: 9a:77:48:74:0c:9e:1f:5a:f5:10:5f:de:7b:6a:60:ca:52:0c: f7:e8:4d:bf:e1:df:65:73:e3:fb:6a:36:0a:d5:98:50:a4:5e: 25:a4:96:36:49:2c:8f:0c:cb:2d:27:c3:cd:fe:07:47:1d:a6: 53:eb:3f:eb:90:e0:b4:fb:36:5e:ce:e7:c6:8e:ae:9d:f1:92: 6c:57:a7:7d:ce:6d:88:ad:77:d3:30:7f:fe:e8:80:f3:38:54: 2f:ea:e4:6b:f2:aa:8c:53:5d:11:ec:98:7e:7d:d6:a1:db:34: 15:2b:6b:80:96:74:c4:a0:9a:e7:df:f8:0a:5d:4c:25:11:4b: b3:1c:3b:8b:72:be:71:f0:54:41:b9:0d:da:0f:0e:a3:b4:53: ed:8e:80:3e:c8:61:ab:ac:ef:cc:bf:95:af:9f:20:76:33:1a: c7:b9:84:66 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICDu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwODAxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQyMC02ODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Y9cK2nfQFc7TsYCDrzz/bY0/Hftxkhv3rYkw0M91l14DnqSQspWQzS1perk ZPZs75BX0IJL6v3iATlh+KBPG5aTJ9grOOK46zr9HfzRJbgZGBzJ6ZK8R13uD1om nODLQctxpphIWEyjEaLus+jssFlTUVb/bUepcn3b/UsiVuT+uXdKgWZIz5H7zDXS z8bAmNkAd0EHa67jGiixGddeY2oxh6pDdZ2rQZvxfFeBEhhzsZUgzzps4yT6f+W/ h9FfLVzrIXbL+B0et+4iCVKABNvcMlPoGJkHKjnuEaaxIt0inpxoB4bTFLyWXUWH oiftTkBdDq4ic9uBHCStGhibCQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFE7jYiCc Qc1l3oa5+fpBX3XElXNmMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQjYyRDJFOTA1 QzZGMTFFRkFFQTExOTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgACMCQDBwQkBghAkZADBwAkBghAmIgDBwQkBghA4GADBwQkBghA+mAw DQYJKoZIhvcNAQELBQADggEBAFB23L/xtXHB62Rm6Xn5QAUIRFnPqABK5hUPfzsb GTIk1dNRtVZIN/hiNybj+8HgW76e1xUwAHrj/zYQVZn+MNbnTksN0hIGMhQ1dgcM AFEfG5lpeF5wjow76Zp3SHQMnh9a9RBf3ntqYMpSDPfoTb/h32Vz4/tqNgrVmFCk XiWkljZJLI8Myy0nw83+B0cdplPrP+uQ4LT7Nl7O58aOrp3xkmxXp33ObYitd9Mw f/7ogPM4VC/q5GvyqoxTXRHsmH591qHbNBUra4CWdMSgmuff+ApdTCURS7McO4ty vnHwVEG5DdoPDqO0U+2OgD7IYaus78y/la+fIHYzGse5hGY= -----END CERTIFICATE-----Generated at Mon Jun 2 07:15:12 2025 by rpki-client