$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4C7CC8E200611EB9EA5567DC4F9AE02.roa File: C4C7CC8E200611EB9EA5567DC4F9AE02.roa (raw, json) Hash identifier: lD6Vy9TqeYqEqmE+m7fJJPaDcF/+I3jbrQ7xplcZ6mI= Subject key identifier: 85:9B:48:2B:0F:9A:E6:59:7B:BF:A4:61:25:A5:60:F1:31:3D:20:0C Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0E89 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4C7CC8E200611EB9EA5567DC4F9AE02.roa Signing time: Thu 22 May 2025 20:06:28 +0000 ROA not before: Thu 22 May 2025 20:06:28 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132623 IP address blocks: 2406:840:fcc0::/44 maxlen: 48 2406:840:fef7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3721 (0xe89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:06:28 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f83c4-46d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:85:d5:01:63:3b:ed:15:7b:bc:f0:d4:42: 67:b0:00:cd:05:64:a6:a6:c1:d5:73:69:a7:e4:0b: 91:5b:f1:f7:0f:ff:d7:ba:75:6b:a0:58:f2:d3:a4: e2:ee:09:2d:5a:40:2f:f0:41:37:e6:2b:d9:02:09: f1:f0:e7:77:db:c5:8d:66:38:c3:50:36:d9:a5:64: 3c:af:7e:79:22:99:b5:fa:7e:13:0a:ae:6c:31:bc: 1a:91:2f:33:a5:97:84:57:e1:f4:24:37:8f:b1:ce: 04:2c:65:29:34:1e:81:f6:7d:84:ee:30:38:21:57: 7c:d2:64:e1:f2:3f:0c:49:ce:da:ec:c1:c5:42:7e: 2e:02:3a:9b:56:4f:3e:81:ed:b8:65:c1:c1:42:0f: 5a:57:84:a1:da:0b:ac:6e:fa:06:7c:0b:a0:4f:5e: cc:44:10:d4:6b:50:46:37:7a:cf:eb:e0:0f:8c:cf: 57:0c:71:cb:7a:14:b3:06:bb:e6:b9:46:24:d3:9e: ea:d6:9e:0e:a7:42:0f:a6:6b:5b:b7:b4:51:3b:8e: b8:18:e1:86:9d:7c:d3:ee:f5:ec:6b:e0:47:76:38: a2:1c:c4:15:a4:70:7a:b3:18:65:54:0f:ca:a5:46: c3:f0:eb:73:40:54:27:65:ca:0b:32:5d:c4:47:94: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9B:48:2B:0F:9A:E6:59:7B:BF:A4:61:25:A5:60:F1:31:3D:20:0C X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4C7CC8E200611EB9EA5567DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fcc0::/44 2406:840:fef7::/48 Signature Algorithm: sha256WithRSAEncryption 34:f2:64:6e:0a:21:4b:38:ac:9e:04:10:92:7c:4d:9f:a5:ed: 1e:a2:57:9d:30:fe:9b:2c:07:f2:98:39:63:58:fa:54:e8:49: 00:a5:69:24:27:ab:7b:f3:a9:be:8a:ce:19:e6:fb:08:45:2a: fb:c5:5e:da:8f:68:ca:38:04:02:cb:96:2e:c4:82:db:d8:48: fd:5c:7b:3f:e1:b8:59:87:8a:8c:dc:e2:73:b0:09:94:74:d2: f9:d8:69:c3:27:b1:f5:84:89:48:c0:79:ba:76:32:48:57:3d: b5:27:00:29:ce:b1:fe:4d:ba:8c:64:b1:f4:9e:d3:b9:79:d0: ca:76:bb:1e:1d:a5:a9:d4:44:46:d8:55:06:45:66:d8:de:6b: c1:ae:1d:16:70:06:07:25:32:28:f8:6c:fa:19:e8:fc:55:42: 87:6a:1e:93:f7:bc:35:39:ec:b1:77:8a:15:d7:4e:dc:73:57: 14:37:9c:a5:35:55:22:f7:52:d0:4a:a3:dc:9a:bf:3d:ff:d9: 1e:01:be:d6:b7:2f:a5:65:5c:f8:95:ef:32:2e:86:bc:50:4b: 3f:7b:d6:b2:73:80:43:76:82:ea:11:55:f7:9a:fb:b7:13:6b: 2a:ec:d1:cf:a1:39:c5:4a:ee:c1:5a:a7:fb:1d:17:47:12:77: 8e:29:fe:32 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjI4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODNjNC00NmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2+F1QFjO+0Ve7zw1EJnsADNBWSmpsHVc2mn5AuRW/H3D//XunVroFjy06Ti 7gktWkAv8EE35ivZAgnx8Od328WNZjjDUDbZpWQ8r355Ipm1+n4TCq5sMbwakS8z pZeEV+H0JDePsc4ELGUpNB6B9n2E7jA4IVd80mTh8j8MSc7a7MHFQn4uAjqbVk8+ ge24ZcHBQg9aV4Sh2gusbvoGfAugT17MRBDUa1BGN3rP6+APjM9XDHHLehSzBrvm uUYk057q1p4Op0IPpmtbt7RRO464GOGGnXzT7vXsa+BHdjiiHMQVpHB6sxhlVA/K pUbD8OtzQFQnZcoLMl3ER5SgpwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIWbSCsP muZZe7+kYSWlYPExPSAMMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQzRDN0NDOEUy MDA2MTFFQjlFQTU1NjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA/MADBwAkBghA/vcwDQYJKoZIhvcNAQELBQADggEB ADTyZG4KIUs4rJ4EEJJ8TZ+l7R6iV50w/pssB/KYOWNY+lToSQClaSQnq3vzqb6K zhnm+whFKvvFXtqPaMo4BALLli7EgtvYSP1cez/huFmHiozc4nOwCZR00vnYacMn sfWEiUjAebp2MkhXPbUnACnOsf5NuoxksfSe07l50Mp2ux4dpanUREbYVQZFZtje a8GuHRZwBgclMij4bPoZ6PxVQodqHpP3vDU57LF3ihXXTtxzVxQ3nKU1VSL3UtBK o9yavz3/2R4Bvta3L6VlXPiV7zIuhrxQSz971rJzgEN2guoRVfea+7cTayrs0c+h OcVK7sFap/sdF0cSd44p/jI= -----END CERTIFICATE-----Generated at Mon Jun 2 07:09:51 2025 by rpki-client