$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa File: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (raw, json) Hash identifier: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk= Subject key identifier: 50:F5:4C:03:21:32:C6:70:48:D8:2E:53:83:F2:00:7C:44:F6:47:5F Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 0395 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa Signing time: Wed 07 May 2025 01:07:32 +0000 ROA not before: Wed 07 May 2025 01:07:32 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 7586 IP address blocks: 2401:1740:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 00:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: May 7 01:07:32 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681ab254-85c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8a:4d:5d:b0:92:e4:3b:41:2f:95:d0:ea:a2: 07:95:ee:75:40:b9:41:15:e0:63:bc:68:d3:b2:f6: b1:3d:8f:65:0f:cb:65:49:ed:c5:89:1e:50:43:17: 5e:b9:bf:79:6e:d2:83:b8:b1:9f:3a:35:a6:5e:f1: 08:8b:cb:c8:9b:35:37:d6:35:ff:30:24:fb:ca:b3: 1f:90:a7:f2:17:94:cb:b8:d5:a5:e9:8b:79:60:5d: 78:a6:ba:7e:56:09:c6:8c:63:52:8a:33:0e:6c:d0: 6c:56:db:3f:6d:84:61:40:10:d4:fb:f6:42:20:a5: 1b:1b:bb:27:65:bd:c2:a1:d8:ab:33:b5:a3:92:ad: f9:ee:d3:6a:46:bf:33:4e:14:ad:11:64:45:5b:6f: c4:a3:ee:9a:bc:76:2c:ad:b3:2d:cd:22:5e:11:7e: 85:7e:51:9d:3a:33:05:43:f2:59:7d:b1:ce:7e:99: 79:6e:42:b5:f1:41:2a:b9:53:20:c7:4f:6c:4f:ca: 50:2c:cf:0f:48:63:aa:c4:fb:45:d0:55:96:80:60: f4:0a:49:fd:b9:c3:91:aa:b5:d4:3f:bf:90:ef:2a: f0:73:bf:27:e1:f8:a2:48:dc:7e:85:d7:8c:dc:4b: 79:27:41:bf:7c:ac:74:7e:3c:1a:76:75:76:83:34: 5a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F5:4C:03:21:32:C6:70:48:D8:2E:53:83:F2:00:7C:44:F6:47:5F X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:1740:2000::/48 Signature Algorithm: sha256WithRSAEncryption 82:5e:0f:97:2c:68:0e:3d:76:6f:f4:f2:74:54:fa:24:52:ad: ac:64:39:20:bc:03:b0:e6:3f:cd:e0:12:47:5b:f2:0c:fd:b3: b9:91:e0:3c:8a:f1:a8:7b:5f:7e:38:ae:81:d9:ff:7f:c2:cf: 90:d4:5d:ce:c9:a1:3f:90:27:36:73:7b:fc:74:a3:64:84:72: 30:76:8d:94:6c:9b:cd:27:30:da:86:d1:a8:72:35:a0:f3:c2: e2:f5:a7:2b:d7:fe:c1:8c:d2:d5:f6:ce:ab:2f:fb:bf:dc:67: a0:2e:91:2d:c8:a6:13:98:2a:c1:1f:0d:93:ac:2f:77:bf:ac: 82:2c:ba:9b:e6:33:58:01:5a:4e:64:49:77:33:b1:4d:e2:cf: a9:ac:ff:e2:1b:66:ff:85:f3:20:e0:ed:aa:bc:80:e5:77:b3: 02:01:b5:22:61:44:5c:21:57:29:6a:1b:b8:98:4b:e8:85:73: 85:f8:56:1c:47:1f:ac:10:b9:f6:63:af:62:53:a5:ae:c0:68: d1:aa:76:0c:6f:c6:c9:d0:9a:73:98:44:c8:f0:ce:7b:ef:3e: 5a:b8:ab:5e:b7:b3:ef:98:85:59:00:5c:5a:de:18:53:25:4a: e3:08:29:8b:dd:3b:c1:34:6b:7e:37:ca:cf:77:25:60:dd:4c: 98:29:63:b3 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUwNTA3MDEwNzMyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhYjI1NC04NWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIpNXbCS5DtBL5XQ6qIHle51QLlBFeBjvGjTsvaxPY9lD8tlSe3FiR5QQxde ub95btKDuLGfOjWmXvEIi8vImzU31jX/MCT7yrMfkKfyF5TLuNWl6Yt5YF14prp+ VgnGjGNSijMObNBsVts/bYRhQBDU+/ZCIKUbG7snZb3CodirM7Wjkq357tNqRr8z ThStEWRFW2/Eo+6avHYsrbMtzSJeEX6FflGdOjMFQ/JZfbHOfpl5bkK18UEquVMg x09sT8pQLM8PSGOqxPtF0FWWgGD0Ckn9ucORqrXUP7+Q7yrwc78n4fiiSNx+hdeM 3Et5J0G/fKx0fjwadnV2gzRafQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFD1TAMh MsZwSNguU4PyAHxE9kdfMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdGQzIvNUUzMEJGNzBCQkE2MTFFQ0JBRjQzMTU2QzRGOUFFMDIvQUI5NUVFQzRC Q0ZBMTFFREFEMzI4RDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkARdAIAAwDQYJKoZIhvcNAQELBQADggEBAIJeD5csaA49 dm/08nRU+iRSraxkOSC8A7DmP83gEkdb8gz9s7mR4DyK8ah7X344roHZ/3/Cz5DU Xc7JoT+QJzZze/x0o2SEcjB2jZRsm80nMNqG0ahyNaDzwuL1pyvX/sGM0tX2zqsv +7/cZ6AukS3IphOYKsEfDZOsL3e/rIIsupvmM1gBWk5kSXczsU3iz6ms/+IbZv+F 8yDg7aq8gOV3swIBtSJhRFwhVylqG7iYS+iFc4X4VhxHH6wQufZjr2JTpa7AaNGq dgxvxsnQmnOYRMjwznvvPlq4q163s++YhVkAXFreGFMlSuMIKYvdO8E0a343ys93 JWDdTJgpY7M= -----END CERTIFICATE-----Generated at Fri May 9 20:55:55 2025 by rpki-client