$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/BB982DDC211611F08D31C34DC4F9AE02.roa File: BB982DDC211611F08D31C34DC4F9AE02.roa (raw, json) Hash identifier: FkwQRUxW28jIhJPhgvAtX7RxgLtIHLVcqsk+XhOm1NE= Subject key identifier: 6F:40:8E:1D:CE:C4:91:03:5B:3B:C2:1B:FD:E8:79:4E:9E:C0:EE:96 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 0123 Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/BB982DDC211611F08D31C34DC4F9AE02.roa Signing time: Thu 24 Apr 2025 14:16:37 +0000 ROA not before: Thu 24 Apr 2025 14:16:37 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 4515 IP address blocks: 2403:27c0:c02::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Apr 24 14:16:37 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=680a47c5-abe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:94:a1:3d:47:20:9b:c6:e6:69:02:69:9d:e3: 5f:e0:92:b8:6c:b4:99:21:06:d8:3d:88:9b:a1:b8: db:2b:68:a9:91:cd:1d:96:73:8a:fa:3b:00:25:c3: 24:1c:d6:28:68:10:46:ad:01:32:f3:37:b6:b5:2c: c2:e3:de:04:5e:d6:b9:65:aa:9a:14:19:15:cb:59: cd:fc:58:01:37:d7:3d:01:8e:cf:71:ba:4a:fe:97: b3:41:df:0f:94:42:0f:6b:eb:c9:f5:ce:02:5e:0f: 05:3f:14:45:c6:80:cd:cc:53:00:a8:37:f4:a4:07: 41:62:12:7b:ad:f5:3d:b5:62:1a:e8:1f:93:5d:b7: fd:07:8f:ff:6f:ed:9c:3c:df:17:ff:9c:ec:12:99: 5e:77:2b:53:16:03:6b:d8:6a:a3:b9:fe:cf:15:a5: 0c:bf:22:4f:87:25:d7:ab:da:c2:2f:69:d2:f1:66: fa:bb:dc:8f:a9:58:4b:8b:1f:6d:fc:1b:54:aa:a3: 5f:06:70:61:8d:45:77:2c:b2:83:20:f9:e7:a2:c5: 2b:99:9f:76:0c:07:ad:0e:8b:68:3c:57:6b:ea:06: 2d:b2:35:42:c8:8e:c0:02:b3:9f:2c:48:8f:06:a2: 5c:77:42:94:9e:f6:78:d0:1e:7f:69:3d:3a:58:10: ea:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:40:8E:1D:CE:C4:91:03:5B:3B:C2:1B:FD:E8:79:4E:9E:C0:EE:96 X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/BB982DDC211611F08D31C34DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:27c0:c02::/47 Signature Algorithm: sha256WithRSAEncryption 0a:24:0d:d5:fd:34:87:fa:0f:d2:d9:47:f3:f0:d3:b3:9d:34: 59:4c:f7:09:20:ec:f3:5a:c5:9a:ab:53:ad:b3:e1:7e:7b:30: 09:98:65:7a:f6:a8:6c:03:62:0d:2e:a1:07:5b:44:05:92:47: 00:7c:a5:0e:f5:b9:7e:8a:0c:57:50:f4:5a:9d:b9:cb:5e:d3: 52:03:1b:a2:10:ea:01:e8:3e:89:77:bf:e5:d0:cb:d5:2a:0a: 2c:4b:a0:be:93:20:5d:83:6d:bc:4b:61:4b:a1:7a:71:75:e6: 7a:df:2c:e5:6e:eb:2e:84:83:c3:94:b9:cc:29:9c:99:71:50: 94:92:aa:4a:e0:c1:31:89:84:a7:ae:d9:18:b1:5c:38:e6:21: 31:3d:42:38:27:dd:e1:db:67:12:31:f7:eb:8a:5e:4d:23:1a: 9c:5b:5b:2c:95:fc:dd:0d:ef:e0:2e:25:fe:94:6c:2f:c4:51: 18:20:8c:8b:89:05:1c:18:ac:ee:4f:ef:ed:48:04:49:39:56: 8d:79:83:27:68:8a:67:d6:c8:44:c2:63:b6:c9:bf:e4:6d:0e: 54:96:95:8c:ad:cc:b4:63:e4:c4:14:fc:f6:69:a4:5e:f6:42: 0a:bf:af:8a:50:4c:39:3d:06:b5:f0:db:7d:b3:ea:c6:38:01: ae:c4:44:af -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwNDI0MTQxNjM3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhNDdjNS1hYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZShPUcgm8bmaQJpneNf4JK4bLSZIQbYPYibobjbK2ipkc0dlnOK+jsAJcMk HNYoaBBGrQEy8ze2tSzC494EXta5ZaqaFBkVy1nN/FgBN9c9AY7PcbpK/pezQd8P lEIPa+vJ9c4CXg8FPxRFxoDNzFMAqDf0pAdBYhJ7rfU9tWIa6B+TXbf9B4//b+2c PN8X/5zsEpledytTFgNr2Gqjuf7PFaUMvyJPhyXXq9rCL2nS8Wb6u9yPqVhLix9t /BtUqqNfBnBhjUV3LLKDIPnnosUrmZ92DAetDotoPFdr6gYtsjVCyI7AArOfLEiP BqJcd0KUnvZ40B5/aT06WBDq7wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFG9Ajh3O xJEDWzvCG/3oeU6ewO6WMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2NkYvOEZDQzlEMjhDNkY5MTFFRTk3RTZGQjFEQzRGOUFFMDIvQkI5ODJEREMy MTE2MTFGMDhEMzFDMzREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkAyfADAIwDQYJKoZIhvcNAQELBQADggEBAAokDdX9NIf6 D9LZR/Pw07OdNFlM9wkg7PNaxZqrU62z4X57MAmYZXr2qGwDYg0uoQdbRAWSRwB8 pQ71uX6KDFdQ9Fqducte01IDG6IQ6gHoPol3v+XQy9UqCixLoL6TIF2DbbxLYUuh enF15nrfLOVu6y6Eg8OUucwpnJlxUJSSqkrgwTGJhKeu2RixXDjmITE9Qjgn3eHb ZxIx9+uKXk0jGpxbWyyV/N0N7+AuJf6UbC/EURggjIuJBRwYrO5P7+1IBEk5Vo15 gydoimfWyETCY7bJv+RtDlSWlYytzLRj5MQU/PZppF72Qgq/r4pQTDk9BrXw232z 6sY4Aa7ERK8= -----END CERTIFICATE-----Generated at Sat Apr 26 05:44:33 2025 by rpki-client