$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B62D2E905C6F11EFAEA11916C4F9AE02.roa File: B62D2E905C6F11EFAEA11916C4F9AE02.roa (raw, json) Hash identifier: QZzAOiWemNcF0jk3vM42E3vroZBcHQI3gB7Ib86VX64= Subject key identifier: 61:D9:5E:76:92:40:E3:09:71:D0:E5:89:B5:9B:CB:A9:90:9A:B6:D6 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0F4E Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B62D2E905C6F11EFAEA11916C4F9AE02.roa Signing time: Thu 07 Aug 2025 16:17:23 +0000 ROA not before: Thu 07 Aug 2025 16:17:23 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 2406:840:9190::/44 maxlen: 48 2406:840:9888::/48 maxlen: 48 2406:840:b000::/40 maxlen: 48 2406:840:e060::/44 maxlen: 48 2406:840:e070::/44 maxlen: 48 2406:840:fa60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3918 (0xf4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Aug 7 16:17:23 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6894d193-e585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:2e:7e:23:95:e9:b0:57:95:47:5d:56:55: 7a:b9:08:bd:7e:5b:83:b6:c9:a8:d8:18:15:a9:13: 78:eb:21:a5:23:55:92:d3:32:b4:29:c7:b3:8a:80: f9:3c:37:68:f5:1e:23:64:d6:ea:7e:ae:31:f6:5c: 68:f6:d8:6a:0d:24:6f:d5:7f:2a:53:9c:ef:6e:43: 07:ec:3d:5f:d2:62:51:ce:80:b7:8c:a0:82:3d:e3: cd:5f:5e:d8:92:bb:ad:b5:bf:d5:3b:56:e5:42:89: 3b:c2:a4:87:5d:30:11:31:b1:60:83:07:44:68:d8: d7:29:8f:6e:ae:fb:b5:a0:ed:92:d8:e8:b1:e1:97: 54:ad:ce:d8:bf:e0:0c:e6:cc:66:cf:74:e0:b2:f9: 0c:a8:1d:f1:fb:3d:18:d2:47:1a:87:d1:b4:60:e2: 46:b1:0e:c8:55:6c:74:54:5e:67:5d:6b:0b:ca:b7: c5:8f:78:8c:25:24:41:73:45:46:25:62:28:2d:a5: 5d:df:c2:ab:b2:35:1c:fb:81:ec:68:36:da:7b:a6: 30:dd:bc:ed:85:2b:71:63:70:70:9f:07:36:3f:15: 8a:fd:94:2e:83:60:ef:c9:87:95:f9:00:34:aa:ab: a1:7d:6b:4e:aa:a7:41:c2:a6:03:00:99:3b:e2:1c: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D9:5E:76:92:40:E3:09:71:D0:E5:89:B5:9B:CB:A9:90:9A:B6:D6 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B62D2E905C6F11EFAEA11916C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9190::/44 2406:840:9888::/48 2406:840:b000::/40 2406:840:e060::/43 2406:840:fa60::/44 Signature Algorithm: sha256WithRSAEncryption 0a:10:c5:1d:52:7d:82:5e:aa:ec:d3:a5:03:98:27:46:2e:80: c9:7d:97:61:31:23:b5:95:34:c8:fd:aa:d0:0f:44:6e:97:78: b9:a0:b8:21:b4:37:3d:75:e0:aa:79:44:4d:87:56:cf:6d:86: 28:38:9e:c8:2c:36:9e:f3:04:54:94:9e:3f:33:58:52:b0:c1: ac:78:4b:de:0d:e8:dd:12:67:31:fa:a6:e8:56:55:f4:80:69: e1:12:1c:c2:61:a1:05:85:5b:81:12:f4:c7:c0:32:a4:5b:ad: c0:ae:27:c2:41:4d:86:8c:d0:4d:19:87:e6:05:53:33:ef:54: 23:70:e2:76:0f:01:d3:8d:d7:3e:08:98:10:e1:65:3b:d9:33: 80:3e:c4:cd:9c:cd:e5:e1:0c:da:28:75:08:b8:76:47:a2:90: eb:c1:0b:eb:74:ee:b8:76:63:dc:bd:c9:0b:57:ec:cf:d9:41: e1:28:f4:33:87:c5:74:61:fd:d8:1e:c0:93:cc:41:e9:cd:52: 7e:1d:9d:72:5b:3c:c0:57:7f:87:c1:ef:fa:d5:52:b0:b6:1d: 83:35:2f:67:95:b1:75:ef:a8:36:cd:88:9f:1f:44:91:fa:db: ef:2c:87:80:c0:f8:55:6d:37:e0:28:c1:cb:9e:6f:e2:79:f0: 8a:95:36:cc -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICD04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwODA3MTYxNzIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk0ZDE5My1lNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3kufiOV6bBXlUddVlV6uQi9fluDtsmo2BgVqRN46yGlI1WS0zK0KcezioD5 PDdo9R4jZNbqfq4x9lxo9thqDSRv1X8qU5zvbkMH7D1f0mJRzoC3jKCCPePNX17Y kruttb/VO1blQok7wqSHXTARMbFggwdEaNjXKY9urvu1oO2S2Oix4ZdUrc7Yv+AM 5sxmz3TgsvkMqB3x+z0Y0kcah9G0YOJGsQ7IVWx0VF5nXWsLyrfFj3iMJSRBc0VG JWIoLaVd38KrsjUc+4HsaDbae6Yw3bzthStxY3Bwnwc2PxWK/ZQug2DvyYeV+QA0 qquhfWtOqqdBwqYDAJk74hySbQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFGHZXnaS QOMJcdDlibWby6mQmrbWMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQjYyRDJFOTA1 QzZGMTFFRkFFQTExOTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgACMCwDBwQkBghAkZADBwAkBghAmIgDBgAkBghAsAMHBSQGCEDgYAMH BCQGCED6YDANBgkqhkiG9w0BAQsFAAOCAQEAChDFHVJ9gl6q7NOlA5gnRi6AyX2X YTEjtZU0yP2q0A9Ebpd4uaC4IbQ3PXXgqnlETYdWz22GKDieyCw2nvMEVJSePzNY UrDBrHhL3g3o3RJnMfqm6FZV9IBp4RIcwmGhBYVbgRL0x8AypFutwK4nwkFNhozQ TRmH5gVTM+9UI3Didg8B043XPgiYEOFlO9kzgD7EzZzN5eEM2ih1CLh2R6KQ68EL 63TuuHZj3L3JC1fsz9lB4Sj0M4fFdGH92B7Ak8xB6c1Sfh2dcls8wFd/h8Hv+tVS sLYdgzUvZ5Wxde+oNs2Inx9Ekfrb7yyHgMD4VW034CjBy55v4nnwipU2zA== -----END CERTIFICATE-----Generated at Mon Aug 11 07:31:50 2025 by rpki-client