$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/8A0E66D647FC11EE838F6160C4F9AE02.roa File: 8A0E66D647FC11EE838F6160C4F9AE02.roa (raw, json) Hash identifier: AzXEXHZ2GSh0FqrG3g/oL2focj1abqbuG/Rv3t+SJwo= Subject key identifier: 42:D9:9E:AC:AB:BD:CC:CE:A2:35:79:8F:48:A5:09:3B:77:67:20:AA Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 0686 Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/8A0E66D647FC11EE838F6160C4F9AE02.roa Signing time: Thu 12 Jun 2025 22:22:15 +0000 ROA not before: Thu 12 Jun 2025 22:22:15 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 150139 IP address blocks: 2403:6900:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Validity Not Before: Jun 12 22:22:15 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=684b5317-0f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:6b:c3:bf:46:cc:05:dd:3d:9e:09:eb:cb: 0f:4f:25:2a:06:e4:84:53:56:4a:72:dc:61:e6:f2: 98:d6:8f:c4:cf:f7:12:70:d4:82:14:c0:17:42:eb: 3f:25:4e:ca:21:f1:25:d0:16:e7:e4:e6:88:d7:84: 17:7c:12:b1:a1:6e:e6:f9:a4:e5:72:21:ee:f8:5c: 6d:5e:60:1e:d2:3c:0a:47:a7:03:a0:1b:33:b0:8f: a3:d9:0b:4a:39:ff:d6:ad:68:30:fb:e3:c9:c5:c5: 01:87:97:f5:21:bb:cf:c5:b7:72:49:ec:9e:2a:80: 0b:c2:f8:43:7a:86:66:88:8b:c3:cc:d5:f3:c6:52: 11:31:8d:e9:a6:dd:f8:80:7b:22:2c:7d:59:10:ea: 57:4f:c1:15:91:d1:06:75:fc:ae:be:85:0a:bc:e8: 43:e5:19:18:0b:d0:dc:52:64:6d:1a:9b:db:5c:a1: 20:10:15:f4:4a:0e:db:3e:42:b9:e2:f9:ee:5e:b0: 67:19:2f:ba:a6:66:28:90:3a:40:3a:89:02:15:9a: a2:3f:fa:50:96:45:6a:26:68:1b:14:65:82:4a:dc: 6e:4c:e8:cd:bb:74:69:d2:b7:3d:1d:0b:ec:de:47: 66:21:26:f7:1f:74:69:ea:b4:35:fc:02:ee:fe:f0: de:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D9:9E:AC:AB:BD:CC:CE:A2:35:79:8F:48:A5:09:3B:77:67:20:AA X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/8A0E66D647FC11EE838F6160C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:6900:c000::/36 Signature Algorithm: sha256WithRSAEncryption 85:e1:60:15:d4:30:6a:a8:0d:d1:8e:db:9a:7c:58:9a:a4:54: 28:08:3b:6c:44:6d:08:4b:2b:08:08:a3:68:f8:f4:26:35:f4: f7:f0:1a:b3:db:01:68:50:85:cf:ab:2b:7b:33:82:f9:e2:5d: a5:1b:9a:8d:fa:fe:18:44:25:e1:05:da:8b:73:e5:06:df:fa: 5e:f7:0b:2b:92:14:b9:dd:7b:bb:46:22:71:8a:af:37:74:6f: 17:bc:4c:ca:c3:52:77:98:18:af:31:62:5a:aa:d2:72:34:20: e1:25:fc:fc:9b:e1:54:e7:50:b2:7a:53:5f:73:05:b6:ce:a5: b1:47:54:2f:7a:27:26:2d:ca:22:a6:7b:d4:27:d5:0b:0f:b3: 7e:fc:7a:41:a6:f8:b8:0a:41:5e:44:e6:80:b8:c6:04:a3:66: 6b:cf:77:c2:a5:b0:4f:e0:03:6d:d8:69:65:1a:61:a2:29:cf: 5d:6b:52:aa:49:f5:8e:24:64:38:92:7c:f6:c9:9c:04:43:1f: d7:c8:bb:92:6e:4d:38:35:8a:d0:9a:fa:f6:98:e0:1b:1f:28: 2e:9b:8e:50:08:f5:c3:c2:cd:41:e6:5d:e8:ad:74:2d:ff:00: e9:42:e6:08:a6:47:a4:f7:d5:f7:cc:99:99:dc:a6:90:18:54: 22:c1:5a:54 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjUwNjEyMjIyMjE1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRiNTMxNy0wZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkJrw79GzAXdPZ4J68sPTyUqBuSEU1ZKctxh5vKY1o/Ez/cScNSCFMAXQus/ JU7KIfEl0Bbn5OaI14QXfBKxoW7m+aTlciHu+FxtXmAe0jwKR6cDoBszsI+j2QtK Of/WrWgw++PJxcUBh5f1IbvPxbdySeyeKoALwvhDeoZmiIvDzNXzxlIRMY3ppt34 gHsiLH1ZEOpXT8EVkdEGdfyuvoUKvOhD5RkYC9DcUmRtGpvbXKEgEBX0Sg7bPkK5 4vnuXrBnGS+6pmYokDpAOokCFZqiP/pQlkVqJmgbFGWCStxuTOjNu3Rp0rc9HQvs 3kdmISb3H3Rp6rQ1/ALu/vDeZQIDAQABo4IClzCCApMwHQYDVR0OBBYEFELZnqyr vczOojV5j0ilCTt3ZyCqMB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNCMkEvRTAxQzdBODQ5MEUwMTFFQkExMDU4NzFGQzRGOUFFMDIvOEEwRTY2RDY0 N0ZDMTFFRTgzOEY2MTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgQkA2kAwDANBgkqhkiG9w0BAQsFAAOCAQEAheFgFdQwaqgN 0Y7bmnxYmqRUKAg7bERtCEsrCAijaPj0JjX09/Aas9sBaFCFz6srezOC+eJdpRua jfr+GEQl4QXai3PlBt/6XvcLK5IUud17u0YicYqvN3RvF7xMysNSd5gYrzFiWqrS cjQg4SX8/JvhVOdQsnpTX3MFts6lsUdUL3onJi3KIqZ71CfVCw+zfvx6Qab4uApB XkTmgLjGBKNma893wqWwT+ADbdhpZRphoinPXWtSqkn1jiRkOJJ89smcBEMf18i7 km5NODWK0Jr69pjgGx8oLpuOUAj1w8LNQeZd6K10Lf8A6ULmCKZHpPfV98yZmdym kBhUIsFaVA== -----END CERTIFICATE-----Generated at Mon Jun 16 09:57:08 2025 by rpki-client