$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/0900F7CA7AE611EF8CE1F784C4F9AE02.roa File: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (raw, json) Hash identifier: qqBFkEJNiWCb2cCDSNMAUnOoY6M5apd24HqIJ4T1rMk= Subject key identifier: C1:17:7D:44:4E:16:43:04:BB:28:86:AC:21:74:A8:18:C4:26:28:0D Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 01D3 Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/0900F7CA7AE611EF8CE1F784C4F9AE02.roa Signing time: Sun 11 May 2025 02:31:46 +0000 ROA not before: Sun 11 May 2025 02:31:46 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 215304 IP address blocks: 2400:e3e0:aa00::/40 maxlen: 48 2400:e3e0:ab00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: May 11 02:31:46 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68200c12-60bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:0d:ab:79:b2:66:d4:45:87:f6:b3:fa:98: bb:34:c0:98:ba:df:05:f7:8e:f6:ed:8c:fa:c6:91: 35:58:ff:dd:03:6d:3f:65:c5:36:d6:cb:35:91:9d: 3b:97:23:49:e2:c4:b4:2f:d3:86:e9:51:a4:0b:af: a5:a0:87:d8:ea:b5:c5:a0:90:d8:37:a7:46:71:f9: 77:03:39:1d:8d:9e:07:b5:36:1e:ff:f4:36:2d:5a: 1b:84:6e:3f:09:fd:e4:86:ff:0a:f6:bf:7e:79:e8: 9d:7d:56:78:e7:83:11:86:25:48:1e:20:f2:24:b4: 2f:0e:0e:87:19:8b:b3:c1:3b:0a:b9:7f:95:2c:1e: 4c:f5:93:15:ec:f6:6b:12:8e:31:ae:4d:70:e4:53: 37:69:3a:a5:df:81:fa:73:82:35:07:2f:7e:2c:f9: 80:61:d2:ba:de:31:9f:55:c7:8b:ad:e1:2c:ef:4c: 75:f2:53:ad:ef:c5:f2:1d:91:8c:2c:71:cb:4b:8c: b6:59:35:24:01:3b:d0:e9:63:1a:61:62:1c:62:51: 2a:5e:5f:e3:9a:3c:df:1a:25:c6:ef:8f:53:82:8b: 80:4b:6c:f3:35:c4:84:14:34:dd:75:ef:03:fa:df: 44:d1:e7:05:8c:fb:09:ef:81:8e:51:c5:56:b7:12: 83:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:17:7D:44:4E:16:43:04:BB:28:86:AC:21:74:A8:18:C4:26:28:0D X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/0900F7CA7AE611EF8CE1F784C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:e3e0:aa00::/39 Signature Algorithm: sha256WithRSAEncryption ac:59:6c:43:45:55:9b:41:ed:31:68:2b:b4:8c:8f:45:c7:54: 57:6e:5d:30:df:b8:34:c9:d8:26:3e:33:c4:2e:d5:fd:9b:2f: 3b:95:ce:9a:0d:0c:f7:05:78:25:0c:35:4d:b4:23:c9:99:88: 86:29:bb:12:61:36:c5:9d:b4:a5:58:ab:de:01:98:d0:40:00: d0:64:25:0e:b5:34:ea:f4:96:34:09:88:17:8f:11:7c:b5:e9: 42:1c:f7:ac:49:8d:a3:46:25:c6:8b:22:ee:e2:6d:2d:41:04: 31:43:6b:47:61:09:59:e0:29:1c:b5:db:2b:dc:6b:66:31:2b: 26:90:04:11:60:8c:4a:a7:0a:fc:83:b5:8c:3d:3f:15:3a:09: 26:06:25:24:12:3f:ac:7c:7d:e8:b8:c2:83:c6:07:e4:88:91: b0:17:ee:e8:57:b7:78:54:d1:e5:2e:1a:d6:9a:da:cc:30:c6: 74:f1:5c:a4:bd:08:03:27:25:29:77:a7:c2:2c:d5:ce:d4:c9: 86:b6:7e:fe:a1:46:66:94:86:d4:d8:e0:e2:fe:49:26:78:0b: 0f:e4:5b:49:28:a0:de:06:fa:89:f7:c1:71:21:61:1c:f2:5b: e8:ff:6f:19:04:f8:f8:7a:89:32:5f:91:10:04:a8:58:03:17: f1:4e:de:8b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUwNTExMDIzMTQ2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODIwMGMxMi02MGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9ANq3myZtRFh/az+pi7NMCYut8F94727Yz6xpE1WP/dA20/ZcU21ss1kZ07 lyNJ4sS0L9OG6VGkC6+loIfY6rXFoJDYN6dGcfl3AzkdjZ4HtTYe//Q2LVobhG4/ Cf3khv8K9r9+eeidfVZ454MRhiVIHiDyJLQvDg6HGYuzwTsKuX+VLB5M9ZMV7PZr Eo4xrk1w5FM3aTql34H6c4I1By9+LPmAYdK63jGfVceLreEs70x18lOt78XyHZGM LHHLS4y2WTUkATvQ6WMaYWIcYlEqXl/jmjzfGiXG749TgouAS2zzNcSEFDTdde8D +t9E0ecFjPsJ74GOUcVWtxKDQQIDAQABo4IClzCCApMwHQYDVR0OBBYEFMEXfURO FkMEuyiGrCF0qBjEJigNMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJFOUEvOEZBMUY1NkVCODVFMTFFRDhFNkY0MjEzQzRGOUFFMDIvMDkwMEY3Q0E3 QUU2MTFFRjhDRTFGNzg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgEkAOPgqjANBgkqhkiG9w0BAQsFAAOCAQEArFlsQ0VVm0Ht MWgrtIyPRcdUV25dMN+4NMnYJj4zxC7V/ZsvO5XOmg0M9wV4JQw1TbQjyZmIhim7 EmE2xZ20pVir3gGY0EAA0GQlDrU06vSWNAmIF48RfLXpQhz3rEmNo0Ylxosi7uJt LUEEMUNrR2EJWeApHLXbK9xrZjErJpAEEWCMSqcK/IO1jD0/FToJJgYlJBI/rHx9 6LjCg8YH5IiRsBfu6Fe3eFTR5S4a1prazDDGdPFcpL0IAyclKXenwizVztTJhrZ+ /qFGZpSG1Njg4v5JJngLD+RbSSig3gb6iffBcSFhHPJb6P9vGQT4+HqJMl+REASo WAMX8U7eiw== -----END CERTIFICATE-----Generated at Sun Jun 15 09:53:40 2025 by rpki-client