$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/23C2512042CE11F0A606855EC4F9AE02.roa File: 23C2512042CE11F0A606855EC4F9AE02.roa (raw, json) Hash identifier: PHb2r6dvH2/f+dZQbhJmZwNFt6GbAF+4pgNQjItOD4s= Subject key identifier: 63:DE:9D:1F:06:77:27:1D:9B:9F:CE:E2:EF:15:A5:25:2D:6D:FA:F4 Certificate issuer: /CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Certificate serial: 084B Authority key identifier: 17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/23C2512042CE11F0A606855EC4F9AE02.roa Signing time: Fri 06 Jun 2025 12:02:38 +0000 ROA not before: Fri 06 Jun 2025 12:02:38 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135352 IP address blocks: 2404:cc80::/32 maxlen: 33 2404:cc80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E, serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Validity Not Before: Jun 6 12:02:38 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6842d8de-5529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:79:ce:cc:f8:9f:23:1e:1e:70:e7:d2:3d: e5:ac:c2:23:fc:68:32:1b:e8:1b:d6:51:4f:33:77: 30:15:10:ea:d6:11:70:50:fc:b4:09:ba:6e:ca:c0: 2b:b9:2a:ec:4d:86:df:ab:c6:b3:d4:1c:7a:36:9b: 25:3f:e9:2c:09:95:95:98:55:6a:6d:dd:56:7e:8b: a6:90:6d:c3:7e:57:6c:45:36:ab:df:2e:8f:ff:76: 34:ab:f7:67:7f:f8:b1:83:34:38:e9:be:ac:e0:d1: 8f:e8:52:e9:f7:71:f8:90:ad:ff:5e:c7:5c:cc:a6: 03:81:40:87:f8:41:79:b7:0c:87:e9:52:0e:2c:bc: db:f1:f8:d0:17:79:6b:6e:42:02:67:c5:6c:61:4f: 6c:48:d6:96:bf:d0:de:31:0d:e2:9f:c6:a3:c1:be: 9f:72:91:a2:0e:73:cb:87:51:46:10:b1:91:68:ef: 70:17:d6:1e:04:2c:f3:56:44:a7:9a:fc:63:27:23: 65:28:68:77:3e:2a:09:3d:e6:a0:4d:87:4d:af:d2: bf:09:49:34:97:34:20:80:75:e8:41:70:6d:83:fa: 37:ab:f2:68:b1:2d:d3:22:cd:ef:90:ca:64:a7:35: d5:34:f4:8e:2d:84:28:bb:02:6c:ed:eb:54:32:59: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DE:9D:1F:06:77:27:1D:9B:9F:CE:E2:EF:15:A5:25:2D:6D:FA:F4 X509v3 Authority Key Identifier: keyid:17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/23C2512042CE11F0A606855EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:cc80::/32 Signature Algorithm: sha256WithRSAEncryption 0c:f9:4c:9e:6e:92:1c:5f:d4:e8:8b:f2:af:ba:39:6e:6f:16: 96:7c:e9:dc:51:bd:8a:90:e4:68:a7:62:51:01:f5:fc:c7:cf: 2d:90:86:e9:f3:57:38:94:85:48:d9:b8:c5:8a:e6:5f:92:e2: 61:94:ef:d5:1d:08:bc:f7:cb:91:d9:9b:c3:e7:af:2f:64:9c: bf:e4:28:08:b5:87:f6:43:31:07:f5:cb:3b:53:14:05:40:3f: 16:c3:59:e2:d6:ae:8d:5d:0f:26:10:f4:47:87:41:e1:1f:ce: ee:35:c2:4a:76:b5:c8:20:01:4f:09:d7:65:f4:dd:9b:90:c4: 3b:d6:1a:1f:93:fd:c8:0d:e3:c9:ef:54:cb:89:47:96:07:a4: 74:e4:55:94:72:33:cf:39:b8:c0:81:ea:37:2b:89:e3:d3:82: 17:b5:9e:16:60:f2:d3:7b:51:1d:dd:17:8e:b6:88:53:e0:dd: 99:88:02:a7:db:31:3d:f5:d2:e9:54:96:61:ca:6c:34:a0:d9: 60:30:4e:35:d5:bc:67:f8:7f:db:fe:27:d9:f9:53:12:f3:c1: 7b:ea:f2:a0:c4:b6:a6:83:2f:ea:40:4f:88:0e:e6:27:e4:7f: 84:d7:57:1d:bb:6d:94:c6:8f:90:55:2b:2f:b2:a2:a1:ad:a8: 16:d1:33:f0 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDE3ODJGQzJDNEQyNEEwRTI2NDBEMTVCMzE5MERFRTk4 RjM2QjhGM0MwHhcNMjUwNjA2MTIwMjM4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQyZDhkZS01NTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnx5zsz4nyMeHnDn0j3lrMIj/GgyG+gb1lFPM3cwFRDq1hFwUPy0CbpuysAr uSrsTYbfq8az1Bx6NpslP+ksCZWVmFVqbd1WfoumkG3DfldsRTar3y6P/3Y0q/dn f/ixgzQ46b6s4NGP6FLp93H4kK3/XsdczKYDgUCH+EF5twyH6VIOLLzb8fjQF3lr bkICZ8VsYU9sSNaWv9DeMQ3in8ajwb6fcpGiDnPLh1FGELGRaO9wF9YeBCzzVkSn mvxjJyNlKGh3PioJPeagTYdNr9K/CUk0lzQggHXoQXBtg/o3q/JosS3TIs3vkMpk pzXVNPSOLYQouwJs7etUMlkM4QIDAQABo4ICljCCApIwHQYDVR0OBBYEFGPenR8G dycdm5/O4u8VpSUtbfr0MB8GA1UdIwQYMBaAFBeC/CxNJKDiZA0VsxkN7pjza488 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29PSmtEUld6R1EzdW1QTnJq encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0TDhMRTBrb09Ka0RSV3pHUTN1bVBOcmp6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU5MkUvQTAwOTlBODAyN0QxMTFFNkFFN0JGMjdDQzRGOUFFMDIvMjNDMjUxMjA0 MkNFMTFGMEE2MDY4NTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBMyAMA0GCSqGSIb3DQEBCwUAA4IBAQAM+UyebpIcX9To i/KvujlubxaWfOncUb2KkORop2JRAfX8x88tkIbp81c4lIVI2bjFiuZfkuJhlO/V HQi898uR2ZvD568vZJy/5CgItYf2QzEH9cs7UxQFQD8Ww1ni1q6NXQ8mEPRHh0Hh H87uNcJKdrXIIAFPCddl9N2bkMQ71hofk/3IDePJ71TLiUeWB6R05FWUcjPPObjA geo3K4nj04IXtZ4WYPLTe1Ed3ReOtohT4N2ZiAKn2zE99dLpVJZhymw0oNlgME41 1bxn+H/b/ifZ+VMS88F76vKgxLamgy/qQE+IDuYn5H+E11cdu22Uxo+QVSsvsqKh ragW0TPw -----END CERTIFICATE-----Generated at Fri Jun 20 15:54:05 2025 by rpki-client