$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/71B166364EAA11F0ADAB654EC4F9AE02.roa File: 71B166364EAA11F0ADAB654EC4F9AE02.roa (raw, json) Hash identifier: oRMWJXNcLZAmQIkjTJmtOcsVMSyfQfAIHLa88mGQeXk= Subject key identifier: 2E:9C:4C:69:80:5A:CA:7E:95:1B:1A:C0:AC:A8:8C:A6:D9:F2:EB:0C Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0F27 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/71B166364EAA11F0ADAB654EC4F9AE02.roa Signing time: Sat 21 Jun 2025 14:18:10 +0000 ROA not before: Sat 21 Jun 2025 14:18:10 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138535 IP address blocks: 2406:840:e620::/47 maxlen: 48 2406:840:feab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3879 (0xf27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Jun 21 14:18:10 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6856bf22-70a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:71:e9:02:53:90:08:09:95:c5:74:92:30: 33:79:30:53:2d:b8:d3:38:16:39:bd:df:da:0e:56: ff:fc:30:24:0e:3f:28:d2:99:92:8b:4e:89:07:ae: 66:e7:63:d1:39:0e:7d:1e:01:e6:bc:3c:bf:b9:a9: d7:13:7a:30:99:36:b4:f4:82:99:2f:98:da:c3:e7: 2c:0c:3b:dd:c6:f5:08:8b:b3:2d:54:ee:93:88:5d: 3c:fa:fe:96:1d:4b:59:78:32:d3:ba:42:3f:5e:93: d5:80:a4:b6:13:d5:be:fb:58:17:cb:cb:6f:1d:6d: 05:4a:95:93:35:9d:ef:92:dd:2d:04:cd:9f:67:02: 50:bb:70:92:53:48:55:81:93:bb:16:d7:0e:d0:29: cf:48:12:ce:c1:35:52:e0:24:d5:2d:97:1a:4e:71: e7:ca:a1:0b:e7:4a:0c:b5:55:75:aa:47:ee:cc:7e: 33:35:90:f7:0c:14:38:0e:3e:3b:18:d8:b5:49:9c: 20:88:a0:84:35:5e:4c:a2:d2:b2:25:18:ca:d3:7b: cb:6a:72:7b:43:fa:b6:31:1a:e2:cb:51:2e:69:58: 2a:2a:f2:7e:34:a5:f9:92:5c:d2:3e:7a:cb:df:51: 71:c6:19:22:64:32:18:d7:dd:04:1b:fc:5b:62:ed: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9C:4C:69:80:5A:CA:7E:95:1B:1A:C0:AC:A8:8C:A6:D9:F2:EB:0C X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/71B166364EAA11F0ADAB654EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e620::/47 2406:840:feab::/48 Signature Algorithm: sha256WithRSAEncryption 77:4b:0c:f5:05:8e:2c:75:a9:08:5e:90:c7:68:68:8e:e4:cb: ec:21:c0:64:a9:b3:8a:f6:6d:f4:d1:03:18:4e:d8:b6:9a:3e: c1:87:07:aa:cb:d2:50:4a:1b:61:89:46:24:64:25:63:2c:8f: af:a3:51:5f:08:7e:bc:17:f7:37:33:ab:0f:4d:92:c9:62:8f: 4d:93:90:3a:ce:e2:7a:c9:95:53:26:4e:41:d8:fe:d6:07:27: 16:2f:1b:55:c8:e4:2a:e9:d6:ac:13:85:dd:70:28:0e:f3:d3: 95:f2:9e:4d:34:18:82:d0:2d:83:e1:fa:c0:c9:42:d9:c4:90: 9e:21:51:39:f5:2a:b1:13:f1:28:7f:d9:80:57:43:85:03:4d: 44:19:a0:54:c6:e1:c2:ce:c8:81:be:be:46:e9:4b:50:7d:b1: 29:b9:be:33:13:6f:c1:4e:4c:5b:f3:cb:e2:5d:fd:25:cf:06: 4a:e6:29:fd:ae:0d:44:52:05:93:0a:6d:98:a1:45:e3:60:0d: 32:3c:76:af:29:0b:29:e2:2d:9f:61:82:52:e4:fd:6c:79:3d: 67:68:c1:0b:a4:0a:6b:a8:0a:d2:72:2f:05:5e:0f:39:40:c6: e2:8a:89:0a:85:38:aa:06:d7:13:4c:7a:51:2c:a4:1c:ff:73: aa:49:ba:6d -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNjIxMTQxODEwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU2YmYyMi03MGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzI9x6QJTkAgJlcV0kjAzeTBTLbjTOBY5vd/aDlb//DAkDj8o0pmSi06JB65m 52PROQ59HgHmvDy/uanXE3owmTa09IKZL5jaw+csDDvdxvUIi7MtVO6TiF08+v6W HUtZeDLTukI/XpPVgKS2E9W++1gXy8tvHW0FSpWTNZ3vkt0tBM2fZwJQu3CSU0hV gZO7FtcO0CnPSBLOwTVS4CTVLZcaTnHnyqEL50oMtVV1qkfuzH4zNZD3DBQ4Dj47 GNi1SZwgiKCENV5MotKyJRjK03vLanJ7Q/q2MRriy1EuaVgqKvJ+NKX5klzSPnrL 31FxxhkiZDIY190EG/xbYu1kjQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFC6cTGmA Wsp+lRsawKyojKbZ8usMMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNzFCMTY2MzY0 RUFBMTFGMEFEQUI2NTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwEkBghA5iADBwAkBghA/qswDQYJKoZIhvcNAQELBQADggEB AHdLDPUFjix1qQhekMdoaI7ky+whwGSps4r2bfTRAxhO2LaaPsGHB6rL0lBKG2GJ RiRkJWMsj6+jUV8IfrwX9zczqw9Nkslij02TkDrO4nrJlVMmTkHY/tYHJxYvG1XI 5Crp1qwThd1wKA7z05Xynk00GILQLYPh+sDJQtnEkJ4hUTn1KrET8Sh/2YBXQ4UD TUQZoFTG4cLOyIG+vkbpS1B9sSm5vjMTb8FOTFvzy+Jd/SXPBkrmKf2uDURSBZMK bZihReNgDTI8dq8pCyniLZ9hglLk/Wx5PWdowQukCmuoCtJyLwVeDzlAxuKKiQqF OKoG1xNMelEspBz/c6pJum0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:23:22 2025 by rpki-client