$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/16D76086A0A811EF88ED2026C4F9AE02.roa File: 16D76086A0A811EF88ED2026C4F9AE02.roa (raw, json) Hash identifier: xXVPh1g488DDZ2eC7px+JMoDM3ZGXGyVRE09L+pr9Pc= Subject key identifier: 4D:17:C2:DC:88:14:74:AE:E3:5A:5D:DF:C9:DB:8E:35:80:6A:F9:6C Certificate issuer: /CN=A914FA25/serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB Certificate serial: B9 Authority key identifier: B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/16D76086A0A811EF88ED2026C4F9AE02.roa Signing time: Mon 28 Apr 2025 19:28:36 +0000 ROA not before: Mon 28 Apr 2025 19:28:36 +0000 ROA not after: Thu 28 Aug 2025 00:00:00 +0000 asID: 137496 IP address blocks: 2402:8dc0::/32 maxlen: 32 2402:8dc0::/48 maxlen: 48 2402:8dc0:1::/48 maxlen: 48 2402:8dc0:2::/48 maxlen: 48 2402:8dc0:3::/48 maxlen: 48 2402:8dc0:4::/48 maxlen: 48 2402:8dc0:10::/48 maxlen: 48 2402:8dc0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25, serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB Validity Not Before: Apr 28 19:28:36 2025 GMT Not After : Aug 28 00:00:00 2025 GMT Subject: CN=680fd6e4-cca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:5b:8a:e2:97:3b:72:56:53:31:24:c3:5e: 87:71:6f:70:d7:8e:1e:9f:02:d8:b8:3c:76:0b:ca: 9c:94:b2:45:d7:4f:16:4a:90:36:51:d5:4a:7c:c5: 04:79:ed:3f:b9:bc:14:55:2c:e7:5a:19:d4:15:67: f0:8f:f3:6e:3f:9f:bf:1d:cd:f8:03:89:15:2e:f5: 68:d4:fc:25:9c:00:2d:48:2b:14:c9:62:43:70:e3: 2d:03:0f:20:60:76:df:e3:e1:8c:10:b0:8f:a4:95: 0a:e0:49:ab:3f:ab:9d:d9:7f:75:22:9a:e8:fd:7f: 4a:41:de:ac:08:7f:b1:50:3c:30:3c:1a:8c:f8:fb: 8c:52:ad:a6:2f:60:15:d1:bd:52:16:3c:ef:67:ab: 12:10:10:08:3d:5d:4e:80:19:11:4b:6a:77:44:71: d3:dd:80:b2:06:7b:f4:60:55:a7:74:6f:1c:a5:45: 47:6e:6b:19:ea:bc:bb:e7:ae:6e:b4:fa:14:91:59: 87:fc:df:37:75:99:2f:32:e0:7d:86:1e:1b:1f:cd: 94:4b:3f:f1:28:06:83:c6:bb:5f:b6:62:2a:41:c4: 3c:98:96:1f:5c:14:6e:ee:c8:4d:38:f8:e2:3a:67: 92:ac:62:70:d7:d8:7a:20:67:6f:f1:f1:2e:ad:3d: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:17:C2:DC:88:14:74:AE:E3:5A:5D:DF:C9:DB:8E:35:80:6A:F9:6C X509v3 Authority Key Identifier: keyid:B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/16D76086A0A811EF88ED2026C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:8dc0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:12:d6:c7:2d:b8:d6:7d:ca:da:85:3d:7c:e9:b5:34:87:de: dd:32:34:38:7f:27:6c:02:5c:67:02:24:08:ff:3f:a0:24:ac: 29:85:bb:c2:74:27:f0:a0:aa:90:70:db:91:b1:73:31:8d:3b: f3:37:80:e2:b9:5d:0a:fa:e9:e1:05:94:ec:17:a4:b3:e1:c2: 49:35:b0:d5:85:19:13:4f:26:ae:05:f4:31:64:a1:d5:67:f2: 57:90:ff:1c:89:1b:5f:0e:b7:ad:6e:b4:8f:93:3f:75:8b:f2: 06:93:31:02:2e:ee:4d:55:0a:1c:b1:16:84:e9:a8:5a:3e:36: 53:74:8a:a9:d6:f1:86:7f:f0:c3:8a:c4:80:9e:81:e1:91:ac: a2:80:5b:d0:c4:1e:06:6a:71:60:80:32:70:ed:50:be:68:14: 34:59:bd:14:09:d0:d3:b6:48:55:a4:9a:73:66:ee:7f:4b:7f: 63:40:85:ba:07:f7:fe:d6:6b:13:89:49:fe:a7:a9:95:c7:c8: 57:30:1d:00:9b:d7:7a:a4:cb:05:de:42:d6:92:af:8d:94:20: 73:69:a6:90:b4:ed:b0:f2:12:e4:aa:2a:1b:cb:99:a2:d5:6b: 02:f8:5c:8f:86:c6:fb:f3:c6:10:6d:75:82:61:71:44:ef:73: d9:5e:98:bb -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKEIwMDE0QTgzMDZDNTJFNDA0RjY3Q0EyRjhFNTg2RjlC ODY4RThDQUIwHhcNMjUwNDI4MTkyODM2WhcNMjUwODI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODBmZDZlNC1jY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyJbiuKXO3JWUzEkw16HcW9w144enwLYuDx2C8qclLJF108WSpA2UdVKfMUE ee0/ubwUVSznWhnUFWfwj/NuP5+/Hc34A4kVLvVo1PwlnAAtSCsUyWJDcOMtAw8g YHbf4+GMELCPpJUK4EmrP6ud2X91Ipro/X9KQd6sCH+xUDwwPBqM+PuMUq2mL2AV 0b1SFjzvZ6sSEBAIPV1OgBkRS2p3RHHT3YCyBnv0YFWndG8cpUVHbmsZ6ry7565u tPoUkVmH/N83dZkvMuB9hh4bH82USz/xKAaDxrtftmIqQcQ8mJYfXBRu7shNOPji OmeSrGJw19h6IGdv8fEurT0CmwIDAQABo4ICljCCApIwHQYDVR0OBBYEFE0XwtyI FHSu41pd38nbjjWAavlsMB8GA1UdIwQYMBaAFLABSoMGxS5AT2fKL45Yb5uGjoyr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9zQUZLZ3diRkxrQlBaOG92amxodm00YU9q S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NBRktnd2JGTGtCUFo4b3ZqbGh2bTRhT2pLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEZBMjUvMkJCQ0JDQUExREFDMTFFQUFGNEEzNzYzQzRGOUFFMDIvMTZENzYwODZB MEE4MTFFRjg4RUQyMDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAo3AMA0GCSqGSIb3DQEBCwUAA4IBAQAOEtbHLbjWfcra hT186bU0h97dMjQ4fydsAlxnAiQI/z+gJKwphbvCdCfwoKqQcNuRsXMxjTvzN4Di uV0K+unhBZTsF6Sz4cJJNbDVhRkTTyauBfQxZKHVZ/JXkP8ciRtfDretbrSPkz91 i/IGkzECLu5NVQocsRaE6ahaPjZTdIqp1vGGf/DDisSAnoHhkayigFvQxB4GanFg gDJw7VC+aBQ0Wb0UCdDTtkhVpJpzZu5/S39jQIW6B/f+1msTiUn+p6mVx8hXMB0A m9d6pMsF3kLWkq+NlCBzaaaQtO2w8hLkqioby5mi1WsC+FyPhsb788YQbXWCYXFE 73PZXpi7 -----END CERTIFICATE-----Generated at Mon May 12 06:52:53 2025 by rpki-client