$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0C4B4D8B2C711EB897C7A52C4F9AE02.roa File: F0C4B4D8B2C711EB897C7A52C4F9AE02.roa (raw, json) Hash identifier: Hx9OH6t5ZueOj6FGBak0AJJbha0juaFBpJGMUJ0PIJc= Subject key identifier: 3A:04:B4:A9:3F:27:93:C4:1C:76:AE:5C:B7:D5:99:F3:4A:C9:EC:51 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EAA Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0C4B4D8B2C711EB897C7A52C4F9AE02.roa Signing time: Thu 22 May 2025 20:06:57 +0000 ROA not before: Thu 22 May 2025 20:06:57 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142164 IP address blocks: 2406:840:e140::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3754 (0xeaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:06:57 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f83e1-6999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cd:9a:d1:72:88:41:bf:af:96:71:9f:fd:45: 5a:e4:04:17:6a:29:64:3b:73:2b:f3:85:2f:ed:6a: de:dc:5b:7a:60:57:2e:ac:b3:f5:a2:ee:fe:b8:8a: 42:56:e6:30:e6:61:f4:9f:df:42:02:22:b2:25:ae: 4b:fe:25:ab:05:34:ab:80:cf:82:5b:70:c8:df:bd: 01:4d:60:29:91:ba:97:95:a6:ee:02:2a:72:e7:c3: 58:c9:b0:8c:e9:0c:5a:f8:94:19:50:01:20:39:e1: a8:d6:72:37:af:e7:db:e0:f4:f5:36:5e:95:96:f6: 13:6b:c6:e3:82:ec:f8:d9:a7:84:41:49:e6:d2:01: 12:82:be:9e:1f:68:d4:c4:3e:9b:72:a9:cd:03:1f: f5:d0:3f:88:30:17:7c:81:55:b7:d0:12:1f:d7:17: 65:05:41:61:1a:0c:46:b1:05:db:4f:c2:d7:9a:a6: c5:b6:ac:95:12:c1:e4:11:65:f3:2b:99:e7:ec:c7: 0f:54:49:c7:0b:b1:ef:06:96:42:6f:d3:f3:2b:85: 9d:02:47:cc:f5:ff:76:db:e7:32:ae:4b:94:bf:05: 9a:5f:f5:b4:17:ea:5f:08:04:83:26:44:61:25:35: b1:ee:ef:13:a3:d6:0e:af:dd:6c:f9:e4:88:94:54: 2d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:04:B4:A9:3F:27:93:C4:1C:76:AE:5C:B7:D5:99:F3:4A:C9:EC:51 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0C4B4D8B2C711EB897C7A52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e140::/44 Signature Algorithm: sha256WithRSAEncryption 5d:61:31:bb:7e:b2:50:78:8c:2a:c7:c3:1f:95:45:ca:d4:f9: a5:5c:8b:39:c1:6d:08:7d:af:d5:66:2b:24:2e:24:96:10:68: 6e:fc:7e:90:d4:1e:ad:6c:bb:a4:7f:6d:d6:4b:b7:93:ae:98: 03:00:65:b6:e8:8c:4a:2c:36:3c:0a:ef:cd:c8:d0:68:a9:8b: b5:73:04:34:4a:46:b5:c9:cd:f6:3c:37:32:23:a0:b4:c9:a2: 63:be:d8:65:e4:4e:4f:53:d1:17:47:5b:75:d5:09:bd:1c:8a: 10:cc:11:43:68:ee:42:46:84:0c:c3:64:b2:4b:76:98:dd:aa: 52:0f:71:fa:91:7f:3a:c9:2b:ce:25:f7:1b:ef:80:5b:34:0d: 02:78:67:6a:9e:a4:bb:b4:b0:03:f3:47:ca:4b:44:04:85:fa: 08:77:44:1d:f9:46:ae:7b:99:df:52:13:2f:9d:6e:87:68:d3: 2a:c1:9e:e2:aa:76:41:43:09:ee:6a:07:71:30:ac:f9:be:77: 85:85:a3:b4:6e:f5:92:fb:91:15:f9:2d:63:6f:2b:a0:47:83: 69:cf:54:b0:22:dc:2e:ac:33:c1:53:38:08:e8:d4:06:a5:83: 4f:03:1b:40:ed:e5:5c:5b:dd:a2:98:97:f4:84:4f:fb:09:ba: 1d:79:7d:56 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjU3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODNlMS02OTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAks2a0XKIQb+vlnGf/UVa5AQXailkO3Mr84Uv7Wre3Ft6YFcurLP1ou7+uIpC VuYw5mH0n99CAiKyJa5L/iWrBTSrgM+CW3DI370BTWApkbqXlabuAipy58NYybCM 6Qxa+JQZUAEgOeGo1nI3r+fb4PT1Nl6VlvYTa8bjguz42aeEQUnm0gESgr6eH2jU xD6bcqnNAx/10D+IMBd8gVW30BIf1xdlBUFhGgxGsQXbT8LXmqbFtqyVEsHkEWXz K5nn7McPVEnHC7HvBpZCb9PzK4WdAkfM9f922+cyrkuUvwWaX/W0F+pfCASDJkRh JTWx7u8To9YOr91s+eSIlFQtOQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDoEtKk/ J5PEHHauXLfVmfNKyexRMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRjBDNEI0RDhC MkM3MTFFQjg5N0M3QTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA4UAwDQYJKoZIhvcNAQELBQADggEBAF1hMbt+slB4 jCrHwx+VRcrU+aVciznBbQh9r9VmKyQuJJYQaG78fpDUHq1su6R/bdZLt5OumAMA ZbbojEosNjwK783I0Gipi7VzBDRKRrXJzfY8NzIjoLTJomO+2GXkTk9T0RdHW3XV Cb0cihDMEUNo7kJGhAzDZLJLdpjdqlIPcfqRfzrJK84l9xvvgFs0DQJ4Z2qepLu0 sAPzR8pLRASF+gh3RB35Rq57md9SEy+dbodo0yrBnuKqdkFDCe5qB3EwrPm+d4WF o7Ru9ZL7kRX5LWNvK6BHg2nPVLAi3C6sM8FTOAjo1Aalg08DG0Dt5Vxb3aKYl/SE T/sJuh15fVY= -----END CERTIFICATE-----Generated at Wed Jun 4 00:12:48 2025 by rpki-client