$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CFC56F10466711EBB87A5683C4F9AE02.roa File: CFC56F10466711EBB87A5683C4F9AE02.roa (raw, json) Hash identifier: 7VslaBR5oY3woX0AvM2q0XiUZvAicThJiJK4weERgO4= Subject key identifier: B5:AA:D2:1F:F2:A8:34:D4:84:DE:73:1D:1F:88:C7:FC:1C:48:D4:E5 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0E8C Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CFC56F10466711EBB87A5683C4F9AE02.roa Signing time: Thu 22 May 2025 20:06:31 +0000 ROA not before: Thu 22 May 2025 20:06:31 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 134477 IP address blocks: 2406:840:e100::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3724 (0xe8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:06:31 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f83c7-3201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:7e:50:92:7f:db:f1:08:24:ea:73:a2:cc: 6f:72:83:36:dd:4a:db:85:1b:6d:cf:e6:ac:ef:33: 4d:00:6b:77:31:9e:f6:7f:29:34:b3:0f:a3:e3:77: fe:6c:8e:95:7f:1a:5d:3b:22:eb:4f:8c:ec:b5:c5: 90:15:fb:e5:09:83:b4:80:19:da:e8:c1:28:1a:9b: d3:07:9b:0e:80:99:a5:ad:21:83:10:4e:17:5a:30: 6e:75:31:df:24:7c:bf:a6:4f:1e:45:92:0c:d4:7a: 6b:23:3d:26:da:ad:bd:a7:ac:50:75:31:e8:49:57: ac:17:d1:8b:10:7e:d4:17:23:23:62:e8:28:9d:85: 89:fc:0e:61:b2:d5:77:70:12:d7:0d:07:d9:1f:19: 8b:e4:e2:0b:61:a9:50:de:16:74:aa:45:f4:db:7b: 83:55:2e:78:8f:96:6d:59:bd:62:a9:f5:02:f2:e0: 01:7c:de:b2:95:26:a0:0b:a8:02:d7:58:d3:4b:8e: 74:c3:8b:62:f8:d4:71:f2:d0:33:0e:f8:5c:7d:1f: 81:d6:a5:67:01:e7:55:f5:3b:2d:ce:38:59:b5:cb: f7:74:fa:1e:de:f9:77:46:7b:a7:9a:ae:a5:51:13: b3:e5:d5:c6:e0:1a:86:c6:40:88:a5:ce:12:e0:d4: 89:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AA:D2:1F:F2:A8:34:D4:84:DE:73:1D:1F:88:C7:FC:1C:48:D4:E5 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CFC56F10466711EBB87A5683C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e100::/44 Signature Algorithm: sha256WithRSAEncryption 1f:35:24:b4:94:95:57:88:14:16:e1:f4:cb:1f:2e:13:b1:77: c7:2c:61:a1:57:c8:e5:ee:f3:9e:fa:ff:66:c4:b4:63:98:58: d5:c3:13:db:d5:b1:0a:e2:40:16:f3:7a:dd:a6:89:64:9c:f9: ed:05:53:38:93:f9:f6:d9:15:37:b5:87:3c:81:b4:de:cd:42: 25:8b:f2:6c:44:a5:90:f7:42:25:54:d2:00:c1:4b:c4:93:36: 45:da:a7:58:0f:d2:53:a1:42:4a:ed:c6:87:d6:64:44:99:b2: cb:3a:1b:d1:dd:80:e5:5b:8f:a4:a2:bd:39:b8:ac:67:3b:11: cd:69:a0:d1:bb:22:e9:71:64:35:b8:77:ba:da:cf:5f:e0:d6: 67:6b:d6:c3:44:14:97:99:a7:34:96:e1:56:7c:73:d1:e1:cb: 30:71:d3:d0:b7:1c:56:ee:46:75:7c:55:49:d3:24:f7:d7:ea: df:6d:5b:ca:68:56:8f:d5:1e:37:e3:e9:4f:99:9d:cf:80:4d: 83:d3:00:f4:eb:bc:e2:c0:3b:c0:32:dd:3e:38:59:85:cb:6e: d4:d0:99:0d:30:88:14:23:fd:aa:c6:a9:42:f6:68:34:4f:1b: af:6c:51:4f:16:fc:19:30:bf:b9:25:52:ad:25:56:6d:3a:e3: 73:6a:c9:c3 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjMxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmODNjNy0zMjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx41+UJJ/2/EIJOpzosxvcoM23UrbhRttz+as7zNNAGt3MZ72fyk0sw+j43f+ bI6VfxpdOyLrT4zstcWQFfvlCYO0gBna6MEoGpvTB5sOgJmlrSGDEE4XWjBudTHf JHy/pk8eRZIM1HprIz0m2q29p6xQdTHoSVesF9GLEH7UFyMjYugonYWJ/A5hstV3 cBLXDQfZHxmL5OILYalQ3hZ0qkX023uDVS54j5ZtWb1iqfUC8uABfN6ylSagC6gC 11jTS450w4ti+NRx8tAzDvhcfR+B1qVnAedV9TstzjhZtcv3dPoe3vl3Rnunmq6l UROz5dXG4BqGxkCIpc4S4NSJvwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLWq0h/y qDTUhN5zHR+Ix/wcSNTlMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQ0ZDNTZGMTA0 NjY3MTFFQkI4N0E1NjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA4QAwDQYJKoZIhvcNAQELBQADggEBAB81JLSUlVeI FBbh9MsfLhOxd8csYaFXyOXu8576/2bEtGOYWNXDE9vVsQriQBbzet2miWSc+e0F UziT+fbZFTe1hzyBtN7NQiWL8mxEpZD3QiVU0gDBS8STNkXap1gP0lOhQkrtxofW ZESZsss6G9HdgOVbj6SivTm4rGc7Ec1poNG7IulxZDW4d7raz1/g1mdr1sNEFJeZ pzSW4VZ8c9HhyzBx09C3HFbuRnV8VUnTJPfX6t9tW8poVo/VHjfj6U+Znc+ATYPT APTrvOLAO8Ay3T44WYXLbtTQmQ0wiBQj/arGqUL2aDRPG69sUU8W/Bkwv7klUq0l Vm0643NqycM= -----END CERTIFICATE-----Generated at Sat Jun 14 23:28:38 2025 by rpki-client