$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/70253888478111EEAF9EB62EC4F9AE02.roa File: 70253888478111EEAF9EB62EC4F9AE02.roa (raw, json) Hash identifier: PqPcM9AknODy/bx8TAswPdKxA7piJbRMKnDsw8NBbDI= Subject key identifier: 64:31:A3:57:53:8C:A9:AB:50:3D:90:AB:41:21:C2:EC:C0:28:77:66 Certificate issuer: /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Certificate serial: 05E6 Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/70253888478111EEAF9EB62EC4F9AE02.roa Signing time: Tue 10 Jun 2025 23:32:33 +0000 ROA not before: Tue 10 Jun 2025 23:32:33 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 9291 IP address blocks: 2406:1540:9291::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1510 (0x5e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CDEC, serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Validity Not Before: Jun 10 23:32:33 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6848c091-5a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c5:b5:83:b3:5a:4f:1f:78:0f:ba:9d:08:c8: 57:98:fb:78:29:e7:80:6a:2c:ab:d3:0f:fd:dd:52: 71:53:62:09:f3:c3:c3:db:35:34:09:14:de:0c:d5: f5:51:85:92:3c:9f:8e:d2:10:56:10:a8:d6:10:80: f3:2e:97:e6:44:56:e8:04:ff:45:17:07:dc:9d:71: b3:31:93:74:36:db:2a:7d:ac:2d:92:22:cd:c5:5c: 31:59:0d:10:dc:fa:25:d6:25:ed:42:4a:e5:25:fe: ac:6a:24:a3:56:53:4f:b9:bc:1f:7d:06:48:cb:9e: 71:5a:64:e5:f2:4b:aa:ca:a2:a8:96:bf:02:ae:b5: 2a:ba:27:fa:0f:4c:2c:02:e3:39:44:eb:53:a8:62: 31:41:cd:18:51:fe:df:70:4c:89:00:34:22:56:5a: 55:99:a8:eb:6d:26:ad:de:49:c9:64:2d:83:61:36: ac:e9:93:27:ea:3d:8b:ad:c4:a1:4c:a5:f5:13:6f: ec:02:55:4e:3c:a2:98:29:1d:2b:e2:ab:81:da:ef: 60:db:27:80:85:5b:61:d2:41:eb:d8:19:96:2d:32: 6f:03:0d:5e:0d:8a:4b:78:d1:ed:74:32:28:05:4a: 34:94:3c:74:b1:7e:fa:62:c6:00:83:be:0a:fb:83: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:31:A3:57:53:8C:A9:AB:50:3D:90:AB:41:21:C2:EC:C0:28:77:66 X509v3 Authority Key Identifier: keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/70253888478111EEAF9EB62EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:1540:9291::/48 Signature Algorithm: sha256WithRSAEncryption 9d:a8:a3:17:08:ee:79:89:58:b1:45:58:d2:ae:ac:20:e8:a3: 2b:68:1f:17:f4:bb:9d:b4:4a:90:cb:da:df:d4:f0:fa:98:c3: 96:5d:da:19:ff:2a:b0:ec:be:b9:b9:21:ff:76:9b:77:7f:37: b3:93:09:33:da:7a:82:3e:e5:21:65:03:bb:72:90:cb:cb:4e: a6:87:a0:34:af:1a:d1:54:77:b1:32:52:6f:79:a8:b9:41:76: 0e:21:7d:34:23:de:f2:8d:98:c8:dc:6a:07:25:32:d9:19:e8: a9:2a:a3:d8:32:4f:b0:c0:43:9a:f3:33:bf:02:db:70:c7:3d: 2c:83:97:11:72:29:3d:f3:70:12:38:4a:ce:8e:45:a2:de:83: ca:05:12:4e:07:eb:43:77:30:15:9f:4b:3c:38:20:bd:d3:7e: 80:a4:e4:ba:b5:b0:f8:33:b9:71:9f:c9:b5:79:f6:1e:5d:26: 8c:25:e3:6b:9c:1d:23:46:b1:49:ea:8b:19:ca:8e:29:de:fe: e4:d3:63:6a:2b:8e:ed:c9:4f:bf:3d:5d:df:de:d4:92:e9:09: 64:75:b9:2c:7f:c7:05:51:f9:1f:09:f7:f5:17:3f:d9:df:c9: e0:bf:15:b6:a5:5d:45:07:0c:50:78:f0:74:87:fa:af:5b:30: 9e:a2:72:31 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENERUMxMTAvBgNVBAUTKEVCNTY5OTQzNTJFQjAxRTQwRTYwQzc4QTQzQjk1N0FF MjkwRUY3NDUwHhcNMjUwNjEwMjMzMjMzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ4YzA5MS01YTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48W1g7NaTx94D7qdCMhXmPt4KeeAaiyr0w/93VJxU2IJ88PD2zU0CRTeDNX1 UYWSPJ+O0hBWEKjWEIDzLpfmRFboBP9FFwfcnXGzMZN0NtsqfawtkiLNxVwxWQ0Q 3Pol1iXtQkrlJf6saiSjVlNPubwffQZIy55xWmTl8kuqyqKolr8CrrUquif6D0ws AuM5ROtTqGIxQc0YUf7fcEyJADQiVlpVmajrbSat3knJZC2DYTas6ZMn6j2LrcSh TKX1E2/sAlVOPKKYKR0r4quB2u9g2yeAhVth0kHr2BmWLTJvAw1eDYpLeNHtdDIo BUo0lDx0sX76YsYAg74K+4OC1QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGQxo1dT jKmrUD2Qq0EhwuzAKHdmMB8GA1UdIwQYMBaAFOtWmUNS6wHkDmDHikO5V64pDvdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0RFQy83RjlEOTg0MkJB QjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFlUU9ZTWVLUTdsWHJpa085 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxYVpRMUxyQWVRT1lNZUtRN2xYcmlrTzkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OENERUMvN0Y5RDk4NDJCQUI1MTFFQjhFN0EzNzI2QzRGOUFFMDIvNzAyNTM4ODg0 NzgxMTFFRUFGOUVCNjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBhVAkpEwDQYJKoZIhvcNAQELBQADggEBAJ2ooxcI7nmJ WLFFWNKurCDooytoHxf0u520SpDL2t/U8PqYw5Zd2hn/KrDsvrm5If92m3d/N7OT CTPaeoI+5SFlA7tykMvLTqaHoDSvGtFUd7EyUm95qLlBdg4hfTQj3vKNmMjcagcl MtkZ6Kkqo9gyT7DAQ5rzM78C23DHPSyDlxFyKT3zcBI4Ss6ORaLeg8oFEk4H60N3 MBWfSzw4IL3TfoCk5Lq1sPgzuXGfybV59h5dJowl42ucHSNGsUnqixnKjine/uTT Y2orju3JT789Xd/e1JLpCWR1uSx/xwVR+R8J9/UXP9nfyeC/FbalXUUHDFB48HSH +q9bMJ6icjE= -----END CERTIFICATE-----Generated at Wed Jul 2 19:55:12 2025 by rpki-client