$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/987A530C663A11F09330C842C4F9AE02.roa File: 987A530C663A11F09330C842C4F9AE02.roa (raw, json) Hash identifier: +Ox4e10GuDSO1ORM0W2Ms6cdi3cdm/05hj3/TeIBXWQ= Subject key identifier: 4D:17:CC:50:04:E6:59:43:8E:5F:59:68:B3:88:57:C1:53:AA:1D:7F Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0F41 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/987A530C663A11F09330C842C4F9AE02.roa Signing time: Mon 21 Jul 2025 13:57:10 +0000 ROA not before: Mon 21 Jul 2025 13:57:10 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 213903 IP address blocks: 2406:840:c100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3905 (0xf41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Jul 21 13:57:10 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=687e4736-bdae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:47:b0:11:e4:a1:45:b1:89:be:11:3a:1b:8f: dc:0a:ce:9d:d1:69:2c:82:9b:95:a1:c9:7a:06:0f: e8:e4:ec:1c:81:53:af:25:fc:c2:5a:df:58:9e:77: f0:46:29:dd:10:e2:2e:fb:47:0d:10:e9:6e:b9:de: 87:e9:fa:3b:5f:64:da:e5:5c:8c:da:30:d9:47:50: 11:82:d3:39:9f:60:7a:50:d4:a0:c2:e0:ee:d7:04: 31:98:55:2a:64:28:1b:49:ca:f8:bd:af:f2:a4:40: d9:bb:f6:51:a6:cc:e8:02:6d:7e:23:4a:62:25:47: b8:34:3f:45:9b:0e:5b:3c:89:ac:9b:6f:d4:aa:ce: d1:36:f4:0e:d2:17:6f:84:31:19:dc:28:29:20:3b: ae:52:ec:f6:1a:32:c8:88:ed:79:58:0c:63:70:aa: 8c:b9:d7:2e:86:38:98:eb:3b:4f:89:6a:53:39:03: a1:8d:97:74:1e:2a:b5:9a:c4:89:2d:7c:f9:dc:01: 6d:da:46:e2:cc:87:d1:d4:66:b7:fb:2c:17:48:03: 9d:de:a4:27:3b:54:a0:87:ae:a3:2e:e5:89:55:17: 30:2e:db:bb:da:a8:7e:b4:06:f2:9f:39:2d:53:ba: 98:57:08:c8:79:97:e5:0e:f2:96:c5:fa:19:2a:3b: 96:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:17:CC:50:04:E6:59:43:8E:5F:59:68:B3:88:57:C1:53:AA:1D:7F X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/987A530C663A11F09330C842C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:c100::/40 Signature Algorithm: sha256WithRSAEncryption 39:26:27:72:1a:65:5c:3e:0e:ec:78:86:d8:e1:f5:0e:bd:9a: 91:8c:93:1d:c9:7b:53:37:d2:a6:89:ca:34:e3:84:3e:29:73: b7:5c:49:4c:1d:f8:e0:79:13:21:92:82:99:f4:c3:c7:95:c5: 21:b1:df:54:48:eb:14:4e:ff:1a:ac:a8:f2:ee:63:57:13:1b: b0:da:30:74:30:18:28:0d:b0:b9:53:f1:5f:09:d7:0d:27:f2: 29:1e:05:98:42:26:30:2c:88:35:30:e3:7c:fc:4d:96:fe:98: ab:f6:68:37:62:e5:f2:62:53:92:58:3e:d2:68:71:ee:48:18: 07:47:d4:ee:c4:49:d1:ba:55:4d:00:70:b1:5a:44:02:fe:94: ac:6d:0f:8a:70:f0:4b:c4:b9:ba:c5:f3:c8:9f:f4:90:66:f5: bf:1d:2c:bf:85:7f:78:07:75:ed:b1:32:96:15:cc:1d:8c:b6: a8:68:9a:7c:c0:66:e7:be:64:80:07:bb:20:06:93:23:10:3d: be:48:a2:4c:37:6c:4a:29:3a:b5:a0:ca:6f:30:3e:d5:32:8c: fc:df:52:b8:28:03:ca:64:fb:0b:83:95:b7:b5:74:2e:9e:5a: d3:94:61:11:36:e2:f0:54:60:e4:3c:43:6f:e8:12:92:54:a2: 81:0c:c7:01 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICD0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNzIxMTM1NzEwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdlNDczNi1iZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkewEeShRbGJvhE6G4/cCs6d0WksgpuVocl6Bg/o5OwcgVOvJfzCWt9Ynnfw RindEOIu+0cNEOluud6H6fo7X2Ta5VyM2jDZR1ARgtM5n2B6UNSgwuDu1wQxmFUq ZCgbScr4va/ypEDZu/ZRpszoAm1+I0piJUe4ND9Fmw5bPImsm2/Uqs7RNvQO0hdv hDEZ3CgpIDuuUuz2GjLIiO15WAxjcKqMudcuhjiY6ztPiWpTOQOhjZd0Hiq1msSJ LXz53AFt2kbizIfR1Ga3+ywXSAOd3qQnO1Sgh66jLuWJVRcwLtu72qh+tAbynzkt U7qYVwjIeZflDvKWxfoZKjuWMQIDAQABo4IClzCCApMwHQYDVR0OBBYEFE0XzFAE 5llDjl9ZaLOIV8FTqh1/MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOTg3QTUzMEM2 NjNBMTFGMDkzMzBDODQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkBghAwTANBgkqhkiG9w0BAQsFAAOCAQEAOSYnchplXD4O 7HiG2OH1Dr2akYyTHcl7UzfSponKNOOEPilzt1xJTB344HkTIZKCmfTDx5XFIbHf VEjrFE7/Gqyo8u5jVxMbsNowdDAYKA2wuVPxXwnXDSfyKR4FmEImMCyINTDjfPxN lv6Yq/ZoN2Ll8mJTklg+0mhx7kgYB0fU7sRJ0bpVTQBwsVpEAv6UrG0PinDwS8S5 usXzyJ/0kGb1vx0sv4V/eAd17bEylhXMHYy2qGiafMBm575kgAe7IAaTIxA9vkii TDdsSik6taDKbzA+1TKM/N9SuCgDymT7C4OVt7V0Lp5a05RhETbi8FRg5DxDb+gS klSigQzHAQ== -----END CERTIFICATE-----Generated at Sun Aug 10 18:29:37 2025 by rpki-client