$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/501915BA8A7811EF90D24F15C4F9AE02.roa File: 501915BA8A7811EF90D24F15C4F9AE02.roa (raw, json) Hash identifier: cVVWr7/z2I2WkQJlZvi0Ng5eZYkwR7YINg8VlfxOv7w= Subject key identifier: 65:DF:C1:57:37:54:DB:0E:74:D9:D8:F8:3E:EC:48:6F:40:E2:95:87 Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 071F Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/501915BA8A7811EF90D24F15C4F9AE02.roa Signing time: Fri 20 Jun 2025 22:11:26 +0000 ROA not before: Fri 20 Jun 2025 22:11:26 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 150092 IP address blocks: 2400:8180:41::/48 maxlen: 48 2400:8180:42::/48 maxlen: 48 2400:8180:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Jun 20 22:11:26 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6855dc8e-7b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:91:fb:55:79:2c:86:ab:74:8e:fb:a8:19:b9: 8a:3e:bc:ea:a1:2b:b8:22:d2:d9:0c:f9:13:17:c4: d6:4a:f7:40:3c:6c:2a:4b:ff:ec:85:07:5a:42:b9: a6:69:53:9f:e0:95:a4:6e:95:2e:2a:08:77:eb:bf: 45:cb:4f:de:b9:5a:13:46:01:2f:2d:f1:4e:0d:b9: fe:1e:44:f9:eb:6b:b2:8f:b3:38:5c:f2:78:01:d6: 92:b3:b6:42:4d:f2:fd:0a:da:e3:7c:f6:10:01:c9: 51:dd:40:63:39:28:df:97:4d:ab:87:e0:bf:c7:34: 95:11:11:4c:7d:fd:3f:e8:d8:2a:a3:4a:4b:58:bb: 37:75:5b:fc:8a:ef:76:ca:37:26:71:1a:01:78:da: 25:45:b7:8d:84:ef:bf:5c:30:9d:77:22:a1:f4:52: 8e:29:6a:92:65:de:ca:4f:ec:8e:82:da:51:73:8c: 60:72:bc:dc:20:90:30:12:fa:a7:53:e2:31:22:2e: 19:a1:5b:41:3d:f0:ab:71:0d:5d:9b:d0:27:90:f1: 34:81:88:b7:b7:42:70:db:c2:75:57:72:02:dc:cb: a7:2b:b7:45:93:65:db:2d:16:cd:25:b7:72:fb:45: b2:bc:73:0f:60:d9:01:20:8b:ab:6a:c0:87:38:06: f6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DF:C1:57:37:54:DB:0E:74:D9:D8:F8:3E:EC:48:6F:40:E2:95:87 X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/501915BA8A7811EF90D24F15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8180:41::-2400:8180:43:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 33:d7:a6:e6:17:42:58:60:4a:34:c8:de:f4:a9:5f:6a:61:14: 9c:7f:a3:52:d9:4c:39:dc:58:52:e3:78:c7:c0:32:ad:b7:38: 02:d1:80:d5:fe:df:a3:c2:77:11:4c:e7:3d:c3:6c:51:4b:d1: b1:b9:b6:0a:59:cc:fc:7a:c6:ba:a7:ef:00:62:61:7f:c5:67: e5:ad:15:4e:b1:90:05:26:46:eb:88:b6:4a:c4:05:93:b9:1a: 8e:05:29:67:1a:78:b7:4d:df:05:4f:2f:9f:ff:fa:89:ad:93: e7:52:cd:fe:7b:ca:19:b4:1b:32:6d:c1:80:89:71:7b:0f:b0: fa:7f:a6:02:0f:d8:40:32:13:0a:11:11:a7:34:c7:c7:00:3f: c6:b5:f0:36:cd:be:17:e3:2b:ac:f4:fe:d9:f7:28:a6:8c:91: fb:a7:6f:cd:21:71:32:99:e8:52:c1:f2:ea:0c:99:7e:74:d3: 12:19:49:e5:43:90:2b:75:eb:3e:56:a1:d9:a3:25:7d:1d:19: a8:d1:59:cb:48:b5:a4:cf:26:83:37:51:40:31:2a:1f:ea:61: db:6d:b9:e8:b7:7b:06:dc:79:35:8b:b0:eb:ee:39:cd:77:95: ab:78:57:4e:1e:55:d9:87:7a:24:64:1c:23:25:fb:f9:b4:d4: 63:bb:61:c8 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwNjIwMjIxMTI2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU1ZGM4ZS03YjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZH7VXkshqt0jvuoGbmKPrzqoSu4ItLZDPkTF8TWSvdAPGwqS//shQdaQrmm aVOf4JWkbpUuKgh3679Fy0/euVoTRgEvLfFODbn+HkT562uyj7M4XPJ4AdaSs7ZC TfL9CtrjfPYQAclR3UBjOSjfl02rh+C/xzSVERFMff0/6Ngqo0pLWLs3dVv8iu92 yjcmcRoBeNolRbeNhO+/XDCddyKh9FKOKWqSZd7KT+yOgtpRc4xgcrzcIJAwEvqn U+IxIi4ZoVtBPfCrcQ1dm9AnkPE0gYi3t0Jw28J1V3IC3MunK7dFk2XbLRbNJbdy +0WyvHMPYNkBIIurasCHOAb2qQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFGXfwVc3 VNsOdNnY+D7sSG9A4pWHMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvNTAxOTE1QkE4 QTc4MTFFRjkwRDI0RjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgACMBQwEgMHACQAgYAAQQMHAiQAgYAAQDANBgkqhkiG9w0BAQsFAAOC AQEAM9em5hdCWGBKNMje9KlfamEUnH+jUtlMOdxYUuN4x8Ayrbc4AtGA1f7fo8J3 EUznPcNsUUvRsbm2ClnM/HrGuqfvAGJhf8Vn5a0VTrGQBSZG64i2SsQFk7kajgUp Zxp4t03fBU8vn//6ia2T51LN/nvKGbQbMm3BgIlxew+w+n+mAg/YQDITChERpzTH xwA/xrXwNs2+F+MrrPT+2fcopoyR+6dvzSFxMpnoUsHy6gyZfnTTEhlJ5UOQK3Xr Plah2aMlfR0ZqNFZy0i1pM8mgzdRQDEqH+ph22256Ld7Btx5NYuw6+45zXeVq3hX Th5V2Yd6JGQcIyX7+bTUY7thyA== -----END CERTIFICATE-----Generated at Fri Jul 4 08:24:39 2025 by rpki-client