$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/DD73806ED3C811EF9D76942FC4F9AE02.roa File: DD73806ED3C811EF9D76942FC4F9AE02.roa (raw, json) Hash identifier: yV/SjGOrZoU6XjMAo/QC3pR5jQlSni/vmLDt0r4ftkA= Subject key identifier: D2:DC:EE:22:96:B9:5B:B8:53:B4:D7:90:E5:03:02:6B:5D:03:83:AF Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 22AA Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/DD73806ED3C811EF9D76942FC4F9AE02.roa Signing time: Fri 02 May 2025 16:23:51 +0000 ROA not before: Fri 02 May 2025 16:23:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136895 IP address blocks: 2404:7c00:4f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 15:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8874 (0x22aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: May 2 16:23:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6814f197-bb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:4e:46:97:24:4d:4e:7a:7d:01:91:6f:2c: 0d:91:cb:34:79:b7:01:e4:82:ff:16:9a:84:3b:86: 99:23:45:6b:49:21:5a:70:f0:37:cd:e2:71:51:74: 55:25:4b:54:6a:1a:0e:ae:63:e9:a1:f2:0c:5a:36: b1:f3:2d:6e:b1:1c:0d:92:43:d8:86:e9:ca:f5:91: 8b:cd:3b:b3:80:e3:22:fc:86:a4:32:a4:50:75:0b: 53:ea:29:fb:f1:6e:4e:40:72:df:4c:53:1f:00:3e: 0e:93:92:b3:0e:36:82:fb:5a:d1:1c:50:f7:b1:28: 1c:74:73:d1:9d:12:be:17:51:0f:62:e9:64:09:65: 49:11:f0:87:17:e2:c9:10:54:7a:73:43:c1:76:9c: 6b:51:0b:f2:04:21:2e:35:b5:d9:25:2e:84:f9:72: fb:89:89:34:45:92:52:fe:aa:cf:60:9d:da:19:22: cd:52:99:85:38:7a:7f:f3:86:9a:df:3a:27:41:0b: 93:91:86:cc:da:c2:1c:2c:da:cc:97:35:d5:10:20: 86:86:f6:d1:7e:61:dc:48:46:10:f6:c6:e5:b3:33: e0:ee:de:67:bd:89:d5:9f:2d:59:59:85:7d:9e:a2: 28:50:9b:33:45:df:9b:7f:ca:de:c1:ed:33:17:cb: 33:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DC:EE:22:96:B9:5B:B8:53:B4:D7:90:E5:03:02:6B:5D:03:83:AF X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/DD73806ED3C811EF9D76942FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:7c00:4f::/48 Signature Algorithm: sha256WithRSAEncryption 7a:0d:77:75:1e:c8:1f:5f:ad:cf:fb:68:c6:82:19:4c:8a:5b: f7:48:60:62:14:46:4e:76:d2:5e:9a:28:4e:04:0b:5d:45:14: e4:1d:04:a5:e1:a0:e7:35:79:6e:5b:63:7b:fb:e9:a5:e6:bc: 99:79:e5:80:b1:c2:dc:76:a9:2d:23:0d:15:99:7e:6c:d0:44: 7a:04:4d:b6:b3:2e:38:43:98:9f:c3:4f:7f:41:c4:ee:43:45: 7e:77:b4:51:1a:84:01:da:57:3d:2a:2f:7f:83:31:41:ec:10: a7:84:b3:9f:ce:4d:b1:b4:17:92:e7:46:60:b9:03:b4:7a:0f: 56:62:a2:5d:c1:16:d1:1f:07:d3:58:27:01:c0:3c:11:6f:7a: 9d:63:a5:14:57:32:26:dc:8e:d6:f2:cf:d9:eb:64:c4:36:ea: 77:65:76:4f:78:fd:34:ae:e5:4a:57:8e:81:29:49:4a:49:93: c1:7a:54:32:ae:89:16:cc:df:9d:52:12:c5:ee:50:ef:f1:ee: a8:74:ad:64:51:7d:e5:24:4e:e3:a4:eb:d6:26:7a:ba:b7:15: 18:fa:6e:13:a1:0f:50:aa:4d:9c:95:d6:53:d3:ee:d8:c7:01: bf:3f:da:7b:93:a0:79:9b:95:1b:0a:ae:45:7b:5f:86:3e:27: a1:13:6e:ec -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICIqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjUwNTAyMTYyMzUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE0ZjE5Ny1iYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArphORpckTU56fQGRbywNkcs0ebcB5IL/FpqEO4aZI0VrSSFacPA3zeJxUXRV JUtUahoOrmPpofIMWjax8y1usRwNkkPYhunK9ZGLzTuzgOMi/IakMqRQdQtT6in7 8W5OQHLfTFMfAD4Ok5KzDjaC+1rRHFD3sSgcdHPRnRK+F1EPYulkCWVJEfCHF+LJ EFR6c0PBdpxrUQvyBCEuNbXZJS6E+XL7iYk0RZJS/qrPYJ3aGSLNUpmFOHp/84aa 3zonQQuTkYbM2sIcLNrMlzXVECCGhvbRfmHcSEYQ9sblszPg7t5nvYnVny1ZWYV9 nqIoUJszRd+bf8rewe0zF8szvQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNLc7iKW uVu4U7TXkOUDAmtdA4OvMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkzMzMvMDY1REEzQkFCODQ0MTFFNUI1MzU3QjJGQzRGOUFFMDIvREQ3MzgwNkVE M0M4MTFFRjlENzY5NDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBHwAAE8wDQYJKoZIhvcNAQELBQADggEBAHoNd3UeyB9f rc/7aMaCGUyKW/dIYGIURk520l6aKE4EC11FFOQdBKXhoOc1eW5bY3v76aXmvJl5 5YCxwtx2qS0jDRWZfmzQRHoETbazLjhDmJ/DT39BxO5DRX53tFEahAHaVz0qL3+D MUHsEKeEs5/OTbG0F5LnRmC5A7R6D1Ziol3BFtEfB9NYJwHAPBFvep1jpRRXMibc jtbyz9nrZMQ26ndldk94/TSu5UpXjoEpSUpJk8F6VDKuiRbM351SEsXuUO/x7qh0 rWRRfeUkTuOk69Ymerq3FRj6bhOhD1CqTZyV1lPT7tjHAb8/2nuToHmblRsKrkV7 X4Y+J6ETbuw= -----END CERTIFICATE-----Generated at Fri May 9 02:53:23 2025 by rpki-client