$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/6F09FF784B3111F0AED6945EC4F9AE02.roa File: 6F09FF784B3111F0AED6945EC4F9AE02.roa (raw, json) Hash identifier: I1sNkwrJ9A9oI4DVJU2qBgFfehpgUx5dO53gjYthp7w= Subject key identifier: 0E:B8:7E:4D:A0:37:45:22:4E:A0:E9:EB:82:C8:5D:7F:62:9D:64:69 Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Certificate serial: ED Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/6F09FF784B3111F0AED6945EC4F9AE02.roa Signing time: Tue 17 Jun 2025 04:13:34 +0000 ROA not before: Tue 17 Jun 2025 04:13:34 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152459 IP address blocks: 2401:7d60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B6D, serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Validity Not Before: Jun 17 04:13:34 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6850eb6d-481f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c7:ac:6d:18:6c:2d:7d:bd:36:36:75:00:47: d2:28:7f:ce:90:10:fa:74:46:bb:48:8c:05:b1:3a: c8:59:23:5c:d0:d3:95:39:7c:68:62:3c:17:38:f8: 7e:7d:31:20:9f:8c:ae:dd:3e:ab:04:69:18:f3:ab: 2f:29:4d:fb:99:4f:22:7c:1d:a5:43:1a:2f:a2:50: a3:bc:12:8e:e7:58:d6:77:aa:00:ca:93:d7:85:77: f6:69:80:dc:17:3b:62:17:f1:c6:8a:62:1d:98:e8: 27:69:a3:d3:f5:c1:16:a4:94:e8:64:58:71:d4:06: ab:73:4a:ec:e7:1a:a0:cd:4a:cc:37:69:6d:ac:61: cb:4a:f3:f3:9e:cb:2e:b9:5a:f3:63:a7:f9:34:43: 01:f5:40:84:5a:04:a0:65:e9:cf:42:69:71:23:08: 4f:a5:ab:8c:8f:16:12:5b:e4:2c:c7:0d:88:41:1c: ff:67:be:8a:d7:06:0e:f2:fb:01:c8:c1:b7:5e:3a: 99:ff:a6:2e:92:6a:ce:37:dc:93:61:f2:e2:0a:40: ad:28:5f:68:7c:47:19:40:30:b0:40:22:ee:e4:56: f7:39:7b:b1:4f:13:b8:e5:8d:29:dc:47:70:f3:c5: f5:2e:3d:24:78:b1:6d:97:71:61:6c:8d:52:71:cc: 99:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B8:7E:4D:A0:37:45:22:4E:A0:E9:EB:82:C8:5D:7F:62:9D:64:69 X509v3 Authority Key Identifier: keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/6F09FF784B3111F0AED6945EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:7d60::/32 Signature Algorithm: sha256WithRSAEncryption bd:cb:42:37:40:cb:db:32:16:6a:dc:8b:58:4a:ae:ff:b5:fc: ec:f6:87:f1:24:e5:e3:1d:8c:71:0c:ef:72:c6:2d:e5:16:6f: d5:fa:65:47:76:71:60:50:53:49:ed:9e:b1:fb:71:cc:9e:9c: 9a:19:e2:a1:10:d8:91:9a:6c:1a:9f:eb:1a:63:e3:b4:dd:f8: 84:bb:a5:3e:14:ed:3e:85:94:83:bc:7b:f2:68:79:6e:65:e5: c9:da:7b:a5:3f:d4:80:f9:bc:fc:ec:0e:a7:53:56:cc:ed:85: f4:89:2d:6c:a3:8e:54:2d:73:a1:b4:1e:4a:bc:ac:4c:b7:3e: 65:b7:51:c4:71:63:d6:75:46:6f:83:e3:b0:3c:1d:5f:0e:82: 04:39:cc:5c:43:64:e4:d9:8a:b0:2f:b9:a5:47:2f:98:28:aa: 4f:c3:05:f7:39:66:35:79:c5:93:af:c2:e9:68:ce:05:ff:6d: d1:c2:0a:71:90:59:93:df:83:2c:ea:ac:97:24:56:1b:81:68: 53:7b:f4:d6:1e:5f:d0:66:62:7f:4f:ae:81:b5:22:8b:e8:4f: 33:1c:4e:30:9b:c0:91:4e:1a:06:67:d6:c8:24:6c:e1:01:c4: 11:50:fb:a4:dc:4b:83:fc:c4:47:74:4f:a7:1b:34:c8:89:63: aa:9c:fe:92 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNkQxMTAvBgNVBAUTKDhFMDJCNUM0REVCNTNGMkI3MTJGRjA3N0RFMDQ5MDgz NzVFODEzREIwHhcNMjUwNjE3MDQxMzM0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODUwZWI2ZC00ODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8esbRhsLX29NjZ1AEfSKH/OkBD6dEa7SIwFsTrIWSNc0NOVOXxoYjwXOPh+ fTEgn4yu3T6rBGkY86svKU37mU8ifB2lQxovolCjvBKO51jWd6oAypPXhXf2aYDc FztiF/HGimIdmOgnaaPT9cEWpJToZFhx1Aarc0rs5xqgzUrMN2ltrGHLSvPznssu uVrzY6f5NEMB9UCEWgSgZenPQmlxIwhPpauMjxYSW+Qsxw2IQRz/Z76K1wYO8vsB yMG3XjqZ/6YukmrON9yTYfLiCkCtKF9ofEcZQDCwQCLu5Fb3OXuxTxO45Y0p3Edw 88X1Lj0keLFtl3FhbI1SccyZGwIDAQABo4ICljCCApIwHQYDVR0OBBYEFA64fk2g N0UiTqDp64LIXX9inWRpMB8GA1UdIwQYMBaAFI4CtcTetT8rcS/wd94EkIN16BPb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8yMTUyMjE4MkU3 OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5dHhMX0IzM2dTUWczWG9F OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pnSzF4TjYxUHl0eExfQjMzZ1NRZzNYb0U5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVCNkQvMjE1MjIxODJFNzhFMTFFRTk4MzFFQjdFQzRGOUFFMDIvNkYwOUZGNzg0 QjMxMTFGMEFFRDY5NDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAX1gMA0GCSqGSIb3DQEBCwUAA4IBAQC9y0I3QMvbMhZq 3ItYSq7/tfzs9ofxJOXjHYxxDO9yxi3lFm/V+mVHdnFgUFNJ7Z6x+3HMnpyaGeKh ENiRmmwan+saY+O03fiEu6U+FO0+hZSDvHvyaHluZeXJ2nulP9SA+bz87A6nU1bM 7YX0iS1so45ULXOhtB5KvKxMtz5lt1HEcWPWdUZvg+OwPB1fDoIEOcxcQ2Tk2Yqw L7mlRy+YKKpPwwX3OWY1ecWTr8LpaM4F/23RwgpxkFmT34Ms6qyXJFYbgWhTe/TW Hl/QZmJ/T66BtSKL6E8zHE4wm8CRThoGZ9bIJGzhAcQRUPuk3EuD/MRHdE+nGzTI iWOqnP6S -----END CERTIFICATE-----Generated at Sat Jul 5 20:50:27 2025 by rpki-client