$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04A6C29A009D11EF8CC8927AC4F9AE02.roa File: 04A6C29A009D11EF8CC8927AC4F9AE02.roa (raw, json) Hash identifier: QudhxQ0ORv778MGKhsoswrgzPI/03haVgtkwbfUfxUU= Subject key identifier: A5:D4:2D:87:8C:F3:0C:F7:B9:ED:27:16:79:A5:AC:93:D0:80:97:62 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B942 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04A6C29A009D11EF8CC8927AC4F9AE02.roa Signing time: Thu 08 May 2025 16:27:46 +0000 ROA not before: Thu 08 May 2025 16:27:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151726 IP address blocks: 2401:73e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47426 (0xb942) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:27:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb82-749f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:a3:31:60:28:87:b1:b1:80:eb:4d:8e:46: 92:f1:f3:3a:8f:08:4f:6b:5f:1f:95:3f:43:45:e3: f4:b4:2c:4d:eb:c4:ad:19:9c:af:41:21:0b:d7:32: fd:f3:48:8a:6f:bc:68:59:9f:3d:d5:33:21:4c:b2: 70:6b:6d:ed:a6:e2:40:90:1e:df:8c:70:d1:34:fb: 06:41:3c:8e:0c:b3:9f:13:0b:56:04:7b:e3:23:e0: 48:18:bc:c0:88:39:55:89:a7:a5:09:67:2e:37:2a: f4:c8:c1:9e:14:3b:38:e8:ab:b3:2d:51:b0:3d:e3: 27:29:69:99:da:ef:24:47:7f:24:28:e5:bb:81:d0: be:25:cd:0d:1b:33:7c:c1:4f:55:73:f3:66:d7:75: 8f:d6:d4:76:d2:ba:b9:dd:f7:eb:bd:a9:cb:2a:26: de:33:16:9e:02:e5:a4:b8:a2:d3:56:93:8a:8b:50: 16:f4:15:fc:68:0d:cb:3b:fc:d6:99:fe:e8:07:e5: f5:9c:46:b1:14:aa:0e:34:95:62:57:6c:42:01:75: fa:c2:64:ff:77:9f:71:78:e5:3f:5a:3d:92:0b:7e: d4:90:70:81:84:c2:8f:0e:5d:8a:6a:f4:7a:56:31: a1:eb:34:92:b1:e9:67:af:1d:1d:a1:b8:b3:b6:a5: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D4:2D:87:8C:F3:0C:F7:B9:ED:27:16:79:A5:AC:93:D0:80:97:62 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04A6C29A009D11EF8CC8927AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:73e0::/32 Signature Algorithm: sha256WithRSAEncryption b1:b4:5c:06:5c:68:1d:94:cd:8f:7f:8c:5a:19:10:94:d1:bb: d4:d2:9b:cc:58:3a:b3:d3:77:60:20:c9:d6:65:7f:f7:72:39: 80:f2:2b:2b:b4:63:c8:09:85:fd:f1:f2:f9:fc:c7:57:0d:cb: b9:1d:ef:aa:7b:2c:1e:37:b9:4e:83:a8:19:22:90:8a:f4:c2: d9:15:e1:4f:52:ed:67:c3:35:f5:a6:4b:68:ae:bd:0f:37:5f: 9a:d4:22:e0:8b:bf:05:35:a4:2e:e9:d8:41:ab:06:47:57:e2: 81:a0:3b:19:ea:df:c6:c0:84:b9:29:01:61:a4:00:dd:34:7a: 44:03:d9:a9:55:28:aa:15:72:7f:2e:d9:82:6f:ec:02:a3:d8: 4f:ec:36:33:f9:9a:f4:cf:f0:ba:b2:52:25:0d:ab:74:74:c5: fe:6e:fa:96:50:85:db:36:ab:d8:40:c4:84:d9:cc:17:35:34: fc:b7:ea:a3:aa:5d:66:9e:d1:d4:6c:6e:6e:a8:a9:d7:ec:bc: 6c:bf:7e:f5:98:0d:50:97:43:80:47:34:38:37:73:42:6a:af: c2:0d:2b:ec:18:df:22:03:da:ba:37:ed:48:d9:0f:92:cd:b0: c6:ca:35:31:3e:52:be:04:e9:7a:df:1c:19:3a:bd:eb:00:c7: ac:05:d1:b8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDALlCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2Mjc0NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiODItNzQ5ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHkozFgKIexsYDrTY5GkvHzOo8IT2tfH5U/Q0Xj9LQsTevErRmcr0EhC9cy /fNIim+8aFmfPdUzIUyycGtt7abiQJAe34xw0TT7BkE8jgyznxMLVgR74yPgSBi8 wIg5VYmnpQlnLjcq9MjBnhQ7OOirsy1RsD3jJylpmdrvJEd/JCjlu4HQviXNDRsz fMFPVXPzZtd1j9bUdtK6ud33672pyyom3jMWngLlpLii01aTiotQFvQV/GgNyzv8 1pn+6Afl9ZxGsRSqDjSVYldsQgF1+sJk/3efcXjlP1o9kgt+1JBwgYTCjw5dimr0 elYxoes0krHpZ68dHaG4s7alj/cCAwEAAaOCApYwggKSMB0GA1UdDgQWBBSl1C2H jPMM97ntJxZ5payT0ICXYjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA0QTZDMjlB MDA5RDExRUY4Q0M4OTI3QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJAFz4DANBgkqhkiG9w0BAQsFAAOCAQEAsbRcBlxoHZTN j3+MWhkQlNG71NKbzFg6s9N3YCDJ1mV/93I5gPIrK7RjyAmF/fHy+fzHVw3LuR3v qnssHje5ToOoGSKQivTC2RXhT1LtZ8M19aZLaK69DzdfmtQi4Iu/BTWkLunYQasG R1figaA7GerfxsCEuSkBYaQA3TR6RAPZqVUoqhVyfy7Zgm/sAqPYT+w2M/ma9M/w urJSJQ2rdHTF/m76llCF2zar2EDEhNnMFzU0/Lfqo6pdZp7R1Gxubqip1+y8bL9+ 9ZgNUJdDgEc0ODdzQmqvwg0r7BjfIgPaujftSNkPks2wxso1MT5SvgTpet8cGTq9 6wDHrAXRuA== -----END CERTIFICATE-----Generated at Tue May 13 01:39:02 2025 by rpki-client