$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AF6E03DA57C611EEB082153EC4F9AE02.roa File: AF6E03DA57C611EEB082153EC4F9AE02.roa (raw, json) Hash identifier: 2T97KZclw1YvtmsD3aAS0uGJ/Q9tBhzGhd9y8HZbL7c= Subject key identifier: 22:2A:71:50:38:F8:EC:09:3A:7E:32:1B:C9:97:F1:E0:20:60:D0:46 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0EEF Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AF6E03DA57C611EEB082153EC4F9AE02.roa Signing time: Thu 22 May 2025 20:08:05 +0000 ROA not before: Thu 22 May 2025 20:08:05 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 208698 IP address blocks: 2406:840:e0e0::/44 maxlen: 48 2406:840:eee0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3823 (0xeef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:08:05 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f8424-1970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c4:6c:6d:e1:e8:f4:9d:25:b1:46:42:9a:73: b4:4c:28:12:d4:da:ad:95:af:8b:e7:af:89:e6:61: a9:df:f6:40:23:2b:a2:cd:74:68:48:05:30:9a:60: ae:cf:0c:18:61:ba:4d:ba:43:5a:5a:60:bd:b9:bd: aa:48:96:72:2c:7a:a9:ad:17:cb:bf:53:67:48:a7: 90:b5:58:40:85:eb:a0:17:13:47:a2:2b:65:25:54: 51:d3:db:2c:57:ed:a1:a7:35:78:b0:0f:82:5f:e7: fc:67:38:3b:01:38:ac:ae:66:7f:d8:97:e9:22:95: ea:96:82:40:82:7c:38:5d:8c:9a:14:ba:10:f1:45: 61:c9:4a:ca:da:12:bc:87:ed:eb:bb:ae:21:e8:35: 17:58:04:8b:e5:34:55:83:dc:de:a6:63:cd:49:07: 78:99:95:0a:f3:80:c8:ef:24:0a:4e:51:96:53:a3: 04:e9:30:be:42:43:8d:e0:8f:67:07:35:91:e4:2e: be:6f:13:36:a2:91:40:72:97:47:30:6c:78:0f:b6: 8f:b4:2f:2f:91:f8:84:45:f4:a4:4b:ed:ea:4d:4c: 1f:3b:a6:7d:f4:25:0a:1e:62:65:b1:59:35:13:b6: 86:5a:e9:60:8d:63:22:03:8f:00:95:f8:df:8c:de: fc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2A:71:50:38:F8:EC:09:3A:7E:32:1B:C9:97:F1:E0:20:60:D0:46 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AF6E03DA57C611EEB082153EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e0e0::/44 2406:840:eee0::/44 Signature Algorithm: sha256WithRSAEncryption 26:3c:4e:2a:38:23:97:73:3e:db:a1:8a:39:94:5a:a8:f2:22: bd:cb:85:4c:cc:ae:1f:ae:c7:4e:ab:bb:7d:d5:28:3f:d6:10: 55:54:c3:18:a1:e8:d5:dc:41:e5:a4:c8:c5:f4:59:5f:66:f0: 55:31:6a:87:42:1b:72:38:3b:09:1b:93:16:85:55:f1:b1:ed: de:2f:ca:f5:4f:98:66:14:db:11:e6:7f:f2:2c:d3:51:e3:61: d8:ed:3c:d9:2b:aa:77:09:84:f4:ae:fb:6f:8e:af:74:5e:58: 79:ed:c4:cb:85:90:41:0f:86:ec:a9:40:31:29:32:46:55:b2: bc:7a:8a:14:fa:b9:73:a0:b6:5c:cb:f0:c2:1a:c1:51:81:80: 4e:ea:70:8c:70:a7:2d:80:b9:81:cd:bb:7d:4d:7a:5a:45:31: f9:60:fd:2e:d3:99:fe:7a:b7:84:96:03:c7:48:c3:c8:ea:ea: 11:06:85:e9:ea:82:e4:04:2f:b7:94:0e:2e:87:81:b8:f2:8f: 3f:9d:6a:7a:88:67:ae:51:a2:ad:0f:0c:6e:38:7d:5c:e9:5c: cf:3a:41:d7:55:ea:f4:b8:20:5f:18:0b:38:47:5e:51:97:a7: 16:b9:ed:4f:d6:04:a0:f4:7a:e2:3b:69:56:9b:39:ea:bd:3c: 1a:29:f7:0f -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwODA1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODQyNC0xOTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sRsbeHo9J0lsUZCmnO0TCgS1Nqtla+L56+J5mGp3/ZAIyuizXRoSAUwmmCu zwwYYbpNukNaWmC9ub2qSJZyLHqprRfLv1NnSKeQtVhAheugFxNHoitlJVRR09ss V+2hpzV4sA+CX+f8Zzg7ATisrmZ/2JfpIpXqloJAgnw4XYyaFLoQ8UVhyUrK2hK8 h+3ru64h6DUXWASL5TRVg9zepmPNSQd4mZUK84DI7yQKTlGWU6ME6TC+QkON4I9n BzWR5C6+bxM2opFAcpdHMGx4D7aPtC8vkfiERfSkS+3qTUwfO6Z99CUKHmJlsVk1 E7aGWulgjWMiA48AlfjfjN78SQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFCIqcVA4 +OwJOn4yG8mX8eAgYNBGMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQUY2RTAzREE1 N0M2MTFFRUIwODIxNTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA4OADBwQkBghA7uAwDQYJKoZIhvcNAQELBQADggEB ACY8Tio4I5dzPtuhijmUWqjyIr3LhUzMrh+ux06ru33VKD/WEFVUwxih6NXcQeWk yMX0WV9m8FUxaodCG3I4OwkbkxaFVfGx7d4vyvVPmGYU2xHmf/Is01HjYdjtPNkr qncJhPSu+2+Or3ReWHntxMuFkEEPhuypQDEpMkZVsrx6ihT6uXOgtlzL8MIawVGB gE7qcIxwpy2AuYHNu31NelpFMflg/S7Tmf56t4SWA8dIw8jq6hEGhenqguQEL7eU Di6Hgbjyjz+danqIZ65Roq0PDG44fVzpXM86QddV6vS4IF8YCzhHXlGXpxa57U/W BKD0euI7aVabOeq9PBop9w8= -----END CERTIFICATE-----Generated at Sat Jun 14 23:23:31 2025 by rpki-client