$ rpki-client -vvf rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/E1CA8E9C1E5F11EFA3C7AD2CC4F9AE02.roa File: E1CA8E9C1E5F11EFA3C7AD2CC4F9AE02.roa (raw, json) Hash identifier: DzUiLJ+hiXjzOllRaK2tXrYHSzvpJBBPSRK/2a4e0yY= Subject key identifier: 88:CF:30:E6:E2:D7:28:85:03:C6:AF:64:20:7A:0B:60:4D:53:30:00 Certificate issuer: /CN=A917CC94/serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA Certificate serial: 0AEE Authority key identifier: 8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/E1CA8E9C1E5F11EFA3C7AD2CC4F9AE02.roa Signing time: Fri 02 May 2025 20:00:27 +0000 ROA not before: Fri 02 May 2025 20:00:27 +0000 ROA not after: Tue 02 Sep 2025 00:00:00 +0000 asID: 138473 IP address blocks: 2404:a40::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.crl rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CC94, serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA Validity Not Before: May 2 20:00:27 2025 GMT Not After : Sep 2 00:00:00 2025 GMT Subject: CN=6815245a-ad2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bd:62:27:82:c5:b2:e9:26:ed:ec:89:26:06: 0d:3d:35:49:3e:63:26:b4:7e:c2:1f:c4:74:61:25: d1:3e:e2:85:2e:57:1b:cc:66:de:7d:2f:4f:da:f4: e6:85:2a:c2:3f:ab:52:fe:f4:c5:82:e2:99:17:5a: 52:cc:34:b8:6e:08:76:ae:dc:df:a5:40:e5:cd:a4: 75:04:72:72:bd:53:f5:6d:87:2b:59:ac:57:4b:d7: 71:0d:ef:57:80:d2:d0:58:72:9a:38:94:f3:82:11: 17:ac:39:6c:33:5d:08:f4:7c:a8:65:66:ab:fc:a8: ff:38:5b:84:af:f0:28:af:8f:20:e9:02:56:0e:01: 3c:45:f0:d2:b6:78:02:4c:2b:bf:c7:b9:d5:2c:e6: 4b:71:47:ff:5c:7e:4b:1c:78:d8:57:8d:28:bc:af: af:d4:9e:24:3d:83:bc:5e:5f:19:5d:ac:6b:8f:fc: a4:09:68:80:be:86:cb:f8:49:63:00:32:9f:dc:58: 6d:f0:7b:80:6b:16:2a:f5:44:cd:35:d9:7f:d1:ec: a8:c1:47:a3:fb:90:18:29:60:5d:98:68:83:30:af: 8c:fd:92:35:09:88:ef:5f:35:2e:8f:09:a4:d1:4a: 1a:32:4a:fa:a3:3b:a7:68:82:93:d8:9c:7e:9f:0c: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CF:30:E6:E2:D7:28:85:03:C6:AF:64:20:7A:0B:60:4D:53:30:00 X509v3 Authority Key Identifier: keyid:8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/E1CA8E9C1E5F11EFA3C7AD2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:a40::/32 Signature Algorithm: sha256WithRSAEncryption 73:0d:d7:7a:93:34:f8:62:d6:64:bb:e6:36:90:19:9e:0d:94: 11:7e:ba:5b:f9:06:ec:be:5a:96:c2:e9:ed:01:ba:d7:e2:1e: 5e:a2:ee:37:6c:b0:ea:62:2c:31:6d:20:95:df:92:0b:47:0d: fc:66:9d:20:ca:ce:bf:2a:3c:59:a9:c8:b9:00:f8:aa:fb:e9: a5:19:71:f2:8a:0b:2a:60:97:f0:0a:65:d9:41:67:b5:1a:9b: bb:8d:7b:63:96:42:d8:f3:e0:85:f4:07:21:e3:40:13:c1:5a: 09:2a:35:dc:c8:6d:5d:1c:90:8d:00:de:35:95:1f:65:c2:31: a8:fb:64:41:5a:ab:b5:41:b7:c1:23:d8:de:80:16:fd:96:1c: 30:ba:c2:2e:2c:3c:8a:95:14:1e:10:ef:e4:a5:ad:03:93:53: 01:13:de:68:68:37:93:93:37:a1:b7:a6:b2:5f:19:39:28:6c: c7:33:b7:01:ce:eb:bc:b4:d2:b6:bd:38:41:72:ce:fa:ad:9b: bb:7a:97:34:a9:4f:3f:d5:a0:38:0b:c9:4b:d0:5b:36:0c:ff: 30:49:57:f8:b3:7b:38:cb:0e:c0:0e:e8:ef:aa:a1:32:59:35: 9f:3c:f6:b8:35:20:bd:73:75:73:39:aa:8f:c1:76:5e:26:ae: 00:d1:1c:f8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NDOTQxMTAvBgNVBAUTKDhCRDgzQUQ3MzhEQzRDNTc5ODREQzJFQ0IyMUQ1RTkw MTlCQkM4Q0EwHhcNMjUwNTAyMjAwMDI3WhcNMjUwOTAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1MjQ1YS1hZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4r1iJ4LFsukm7eyJJgYNPTVJPmMmtH7CH8R0YSXRPuKFLlcbzGbefS9P2vTm hSrCP6tS/vTFguKZF1pSzDS4bgh2rtzfpUDlzaR1BHJyvVP1bYcrWaxXS9dxDe9X gNLQWHKaOJTzghEXrDlsM10I9HyoZWar/Kj/OFuEr/Aor48g6QJWDgE8RfDStngC TCu/x7nVLOZLcUf/XH5LHHjYV40ovK+v1J4kPYO8Xl8ZXaxrj/ykCWiAvobL+Elj ADKf3Fht8HuAaxYq9UTNNdl/0eyowUej+5AYKWBdmGiDMK+M/ZI1CYjvXzUujwmk 0UoaMkr6ozunaIKT2Jx+nwx3lQIDAQABo4ICljCCApIwHQYDVR0OBBYEFIjPMObi 1yiFA8avZCB6C2BNUzAAMB8GA1UdIwQYMBaAFIvYOtc43ExXmE3C7LIdXpAZu8jK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0M5NC82NkRFQkU2NDQ3 RjAxMUVBODNFM0U3MUJDNEY5QUUwMi9pOWc2MXpqY1RGZVlUY0xzc2gxZWtCbTd5 TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5ZzYxempjVEZlWVRjTHNzaDFla0JtN3lNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0NDOTQvNjZERUJFNjQ0N0YwMTFFQTgzRTNFNzFCQzRGOUFFMDIvRTFDQThFOUMx RTVGMTFFRkEzQzdBRDJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBApAMA0GCSqGSIb3DQEBCwUAA4IBAQBzDdd6kzT4YtZk u+Y2kBmeDZQRfrpb+QbsvlqWwuntAbrX4h5eou43bLDqYiwxbSCV35ILRw38Zp0g ys6/KjxZqci5APiq++mlGXHyigsqYJfwCmXZQWe1Gpu7jXtjlkLY8+CF9Ach40AT wVoJKjXcyG1dHJCNAN41lR9lwjGo+2RBWqu1QbfBI9jegBb9lhwwusIuLDyKlRQe EO/kpa0Dk1MBE95oaDeTkzeht6ayXxk5KGzHM7cBzuu8tNK2vThBcs76rZu7epc0 qU8/1aA4C8lL0Fs2DP8wSVf4s3s4yw7ADujvqqEyWTWfPPa4NSC9c3VzOaqPwXZe Jq4A0Rz4 -----END CERTIFICATE-----Generated at Fri May 16 09:35:34 2025 by rpki-client