$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa File: E2D92650FE1A11EEBD74AE3AC4F9AE02.roa (raw, json) Hash identifier: wYTod0J4wyRzToeC9LXlokrkyyN1NjQNQ+xmVw8dqjc= Subject key identifier: 93:D3:F5:C5:9C:2B:BB:16:50:31:84:D6:1F:BA:30:EC:F2:58:A7:49 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EAE Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa Signing time: Thu 22 May 2025 20:07:01 +0000 ROA not before: Thu 22 May 2025 20:07:00 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142586 IP address blocks: 2406:840:ed00::/40 maxlen: 48 2406:840:fde0::/48 maxlen: 48 2406:840:fece::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 20:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3758 (0xeae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:00 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f83e4-7466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:aa:12:3a:0f:99:5b:44:76:e4:ef:d3:43: 8b:7e:da:1c:1f:dd:fe:cb:18:4a:ca:2c:30:5b:3b: 4e:a0:39:31:ce:49:5d:95:bd:5f:5d:e5:a2:8a:1f: 67:de:2f:d4:44:3b:60:42:61:3e:18:c3:30:8d:c5: 83:5f:a6:cf:1d:16:af:7e:60:52:0b:2a:3a:e5:73: 53:0c:e4:dc:bc:36:34:e7:d0:8c:bf:b2:b7:ab:be: 47:34:22:5e:02:d1:bc:f6:c3:d7:a5:1f:b2:e5:06: 7b:67:55:89:c8:f3:d3:0f:56:5b:de:81:60:74:7a: c7:c3:f9:df:67:8f:c6:16:b9:3a:39:0f:6c:8e:e7: 24:81:3a:e4:5b:8d:79:28:a4:b5:c1:7c:9e:95:fe: db:0d:4d:34:66:4d:c4:f9:4e:10:b0:78:73:89:2d: cf:54:d4:1b:0c:d8:be:eb:ea:93:e2:15:0c:ad:b6: 6d:bc:e8:f0:f8:42:3e:f9:08:fb:31:6d:1c:98:90: 07:73:08:e5:30:e7:48:89:71:d1:a5:07:da:e1:be: ab:22:94:d2:0d:c0:a5:aa:9d:c4:97:68:20:c0:59: 61:dc:10:82:78:6c:25:c2:94:05:50:92:15:33:a9: 15:a5:a4:d8:65:72:d4:89:ea:f2:32:96:43:97:a2: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D3:F5:C5:9C:2B:BB:16:50:31:84:D6:1F:BA:30:EC:F2:58:A7:49 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:ed00::/40 2406:840:fde0::/48 2406:840:fece::/48 Signature Algorithm: sha256WithRSAEncryption 5d:95:11:6c:d1:f8:19:01:48:ec:c0:86:a1:23:24:9c:c1:fa: f8:ee:35:67:ab:24:01:a7:43:fc:f8:df:76:d8:36:61:ce:e8: c8:7a:a7:19:3c:c9:d0:6c:e4:d3:16:57:e6:60:ee:44:a1:bf: 58:c9:8b:38:dc:71:14:ba:0f:88:66:a3:4c:76:90:a8:ae:f8: 84:dd:ba:19:f4:dd:37:bb:d9:9f:2b:19:a4:d9:81:13:eb:bd: d1:6b:7a:12:4b:37:51:c8:53:4f:22:dd:bf:72:01:49:0e:af: 4e:10:0e:ae:ee:6a:99:c4:7e:ac:4e:4f:ca:72:a5:ac:0f:32: 80:55:8c:80:7d:22:b2:1a:e3:c8:04:2b:16:7d:ae:28:b1:83: fd:ab:1a:e4:50:5c:a3:10:73:ef:81:d4:fc:84:70:b7:d7:b2: 81:49:1d:c7:5c:e4:95:b9:a0:b5:4e:a1:7a:07:43:2c:69:99: f1:c1:49:08:08:4d:63:88:a5:9b:2e:ed:e6:73:22:3e:bd:ff: de:da:e3:78:46:1c:af:ab:bf:66:7a:d5:c4:39:cc:82:e1:7e: f0:e5:97:a5:c9:1b:95:fd:49:ee:03:c6:ec:2b:33:27:b8:85: b2:1b:fc:b5:bb:71:5b:b5:74:63:5c:93:9d:07:ae:d1:dc:83: 2a:c4:15:8e -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICDq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODNlNC03NDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2iqEjoPmVtEduTv00OLftocH93+yxhKyiwwWztOoDkxzkldlb1fXeWiih9n 3i/URDtgQmE+GMMwjcWDX6bPHRavfmBSCyo65XNTDOTcvDY059CMv7K3q75HNCJe AtG89sPXpR+y5QZ7Z1WJyPPTD1Zb3oFgdHrHw/nfZ4/GFrk6OQ9sjuckgTrkW415 KKS1wXyelf7bDU00Zk3E+U4QsHhziS3PVNQbDNi+6+qT4hUMrbZtvOjw+EI++Qj7 MW0cmJAHcwjlMOdIiXHRpQfa4b6rIpTSDcClqp3El2ggwFlh3BCCeGwlwpQFUJIV M6kVpaTYZXLUieryMpZDl6LkUwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFJPT9cWc K7sWUDGE1h+6MOzyWKdJMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRTJEOTI2NTBG RTFBMTFFRUJENzRBRTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgACMBoDBgAkBghA7QMHACQGCED94AMHACQGCED+zjANBgkqhkiG9w0B AQsFAAOCAQEAXZURbNH4GQFI7MCGoSMknMH6+O41Z6skAadD/Pjfdtg2Yc7oyHqn GTzJ0Gzk0xZX5mDuRKG/WMmLONxxFLoPiGajTHaQqK74hN26GfTdN7vZnysZpNmB E+u90Wt6Eks3UchTTyLdv3IBSQ6vThAOru5qmcR+rE5PynKlrA8ygFWMgH0ishrj yAQrFn2uKLGD/asa5FBcoxBz74HU/IRwt9eygUkdx1zklbmgtU6hegdDLGmZ8cFJ CAhNY4ilmy7t5nMiPr3/3trjeEYcr6u/ZnrVxDnMguF+8OWXpckblf1J7gPG7Csz J7iFshv8tbtxW7V0Y1yTnQeu0dyDKsQVjg== -----END CERTIFICATE-----Generated at Sat Oct 25 02:46:20 2025 by rpki-client