$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/BB17221E211611F08D31C34DC4F9AE02.roa File: BB17221E211611F08D31C34DC4F9AE02.roa (raw, json) Hash identifier: fycljHXNnk59uPrb51pHFnfOpO9Hxutgas1w6IAJ3gA= Subject key identifier: 9A:13:2C:7B:46:AB:67:DF:68:D0:AC:CA:0D:5A:D5:42:65:CF:BF:4B Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 0122 Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/BB17221E211611F08D31C34DC4F9AE02.roa Signing time: Thu 24 Apr 2025 14:16:36 +0000 ROA not before: Thu 24 Apr 2025 14:16:36 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 137897 IP address blocks: 2403:27c0:c02::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Apr 24 14:16:36 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=680a47c4-5f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1b:a4:68:c0:8a:98:90:65:21:9a:e5:31:0c: 94:2a:9a:53:55:00:23:04:13:bc:d8:ea:9a:ea:eb: 7c:15:5f:25:3e:5e:ff:73:0e:3b:a6:68:7f:c0:0f: 25:d6:1e:a9:4d:4a:8e:8f:5d:cb:c2:60:ba:65:50: 0f:78:b1:21:17:a9:dd:7a:fc:59:df:db:42:a8:c0: f3:42:9f:24:22:e2:a6:bd:df:41:f6:3c:11:fb:cf: 7c:5c:34:05:3b:cc:8a:87:47:00:9a:31:e0:61:57: bc:59:5d:f7:12:93:9b:07:71:bd:ec:b2:93:2f:fd: ee:91:50:04:4b:ef:70:36:56:7a:a1:f1:f5:30:69: 6b:56:90:4c:52:94:a4:42:61:cd:a0:da:b8:c7:9a: b5:62:41:d1:3f:d0:07:af:c1:29:1c:33:c3:de:7f: 46:a4:21:81:99:3d:55:f6:5b:0d:f8:c9:b0:04:91: d8:28:54:49:44:d8:54:7f:a2:05:7c:59:4a:b0:68: e4:05:d1:f5:cb:82:f5:e5:fe:76:52:b6:f4:cc:42: db:a7:c0:d1:ff:40:c3:0d:3f:1b:4e:d2:38:85:30: 83:40:9a:bd:01:f6:8c:d2:c1:ba:b4:81:52:8d:3e: 49:0a:9f:3a:c9:04:26:f9:41:b0:a3:f4:42:fd:ea: 11:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:13:2C:7B:46:AB:67:DF:68:D0:AC:CA:0D:5A:D5:42:65:CF:BF:4B X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/BB17221E211611F08D31C34DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:27c0:c02::/47 Signature Algorithm: sha256WithRSAEncryption 45:f0:bf:45:13:b3:37:8a:61:cb:65:13:26:7a:f4:d2:0e:89: f2:85:f3:87:6f:b0:66:98:39:53:77:26:b6:9b:7f:3b:1c:da: ff:7d:9b:78:bd:9a:1d:75:8f:51:a1:f0:f4:b2:e8:ec:53:4d: 62:7b:2f:52:7b:73:4e:fb:f2:ec:82:30:b0:8a:3e:ee:c8:2e: 8b:7c:50:62:19:de:bb:64:8f:b4:f0:a7:29:63:69:9f:3e:0a: 87:0e:ac:d8:5a:36:32:6c:60:d9:51:64:2c:2d:b4:ea:90:23: da:a3:15:12:cb:d0:64:40:e0:8e:b6:74:be:c0:f7:41:72:d7: 26:6b:5f:e4:55:ea:f6:64:1c:31:9d:ae:7d:d2:1c:6f:48:88: 2b:64:05:1e:b6:24:17:d6:88:86:72:a5:ca:1a:25:6a:fe:ba: 2f:44:29:12:32:cc:e6:69:cd:a2:e9:23:e7:72:e6:89:22:6c: 73:77:52:f3:b0:51:4d:0f:f2:b4:e5:45:ba:ff:d5:0f:cf:ec: 67:e3:78:db:16:23:e6:cd:09:84:f7:2b:3a:a7:c5:5f:18:dd: 77:0d:75:8a:13:7c:88:b1:f2:e2:be:79:20:f3:84:c9:56:d8: 18:c5:70:71:19:76:d4:eb:63:f8:8d:61:7f:90:76:d6:07:67: 5e:ab:f4:73 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwNDI0MTQxNjM2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhNDdjNC01ZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RukaMCKmJBlIZrlMQyUKppTVQAjBBO82Oqa6ut8FV8lPl7/cw47pmh/wA8l 1h6pTUqOj13LwmC6ZVAPeLEhF6ndevxZ39tCqMDzQp8kIuKmvd9B9jwR+898XDQF O8yKh0cAmjHgYVe8WV33EpObB3G97LKTL/3ukVAES+9wNlZ6ofH1MGlrVpBMUpSk QmHNoNq4x5q1YkHRP9AHr8EpHDPD3n9GpCGBmT1V9lsN+MmwBJHYKFRJRNhUf6IF fFlKsGjkBdH1y4L15f52Urb0zELbp8DR/0DDDT8bTtI4hTCDQJq9AfaM0sG6tIFS jT5JCp86yQQm+UGwo/RC/eoRlwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJoTLHtG q2ffaNCsyg1a1UJlz79LMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2NkYvOEZDQzlEMjhDNkY5MTFFRTk3RTZGQjFEQzRGOUFFMDIvQkIxNzIyMUUy MTE2MTFGMDhEMzFDMzREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkAyfADAIwDQYJKoZIhvcNAQELBQADggEBAEXwv0UTszeK YctlEyZ69NIOifKF84dvsGaYOVN3Jrabfzsc2v99m3i9mh11j1Gh8PSy6OxTTWJ7 L1J7c0778uyCMLCKPu7ILot8UGIZ3rtkj7TwpyljaZ8+CocOrNhaNjJsYNlRZCwt tOqQI9qjFRLL0GRA4I62dL7A90Fy1yZrX+RV6vZkHDGdrn3SHG9IiCtkBR62JBfW iIZypcoaJWr+ui9EKRIyzOZpzaLpI+dy5okibHN3UvOwUU0P8rTlRbr/1Q/P7Gfj eNsWI+bNCYT3KzqnxV8Y3XcNdYoTfIix8uK+eSDzhMlW2BjFcHEZdtTrY/iNYX+Q dtYHZ16r9HM= -----END CERTIFICATE-----Generated at Sat Apr 26 05:50:58 2025 by rpki-client