$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/083311E2FD8C11EFA3BBA60FC4F9AE02.roa File: 083311E2FD8C11EFA3BBA60FC4F9AE02.roa (raw, json) Hash identifier: tkxQJGc/Blcsj9mYF8orgSrepYknz7sV5iKyJMxsOak= Subject key identifier: 2A:D4:B3:8F:C8:DA:47:15:F6:AE:A9:A8:03:FB:E7:F2:98:A6:E9:9D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B754 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/083311E2FD8C11EFA3BBA60FC4F9AE02.roa Signing time: Thu 08 May 2025 16:20:22 +0000 ROA not before: Thu 08 May 2025 16:20:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 146937 IP address blocks: 2001:df7:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46932 (0xb754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:20:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd9c6-dd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:91:64:5a:30:d2:2d:5d:ab:84:18:98:aa: 2b:9f:38:33:9b:6f:97:e8:74:d5:47:62:ec:37:65: 4e:4d:02:2c:94:bc:78:e1:64:3b:ac:01:3f:63:26: 49:ac:60:f3:c0:db:ee:3e:90:0f:83:58:da:a3:b6: c6:b7:a8:a2:4c:02:66:23:af:96:05:40:37:d4:6d: 23:dd:4e:c2:38:5b:b1:19:e5:e6:6a:11:e0:b9:09: d1:7d:67:76:b0:84:23:26:8e:9a:f5:17:2a:dd:41: 77:93:fb:2e:45:15:b0:87:a1:78:56:a2:a1:45:c6: ab:3c:17:71:30:d7:ef:05:fc:82:83:a0:1c:9e:e7: c9:7c:02:55:56:e2:4b:8f:8c:dd:5e:02:24:aa:ec: f2:36:6f:a0:a9:75:4b:ae:7a:44:dd:d8:99:ee:26: f5:99:dd:a8:ba:4a:84:bf:89:2c:3e:55:df:15:05: 40:6e:b8:af:4d:49:19:d4:e5:82:ef:60:15:1f:0b: 05:63:99:dd:0a:d2:b8:39:a9:69:1c:86:9a:1d:45: a4:ef:87:69:97:89:52:94:dc:3f:47:19:4e:ce:bb: 26:99:e4:b6:63:0e:7e:6e:36:5e:ac:e2:68:db:7a: d9:71:08:e6:87:1f:80:1c:98:2e:79:25:ea:30:ae: 01:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D4:B3:8F:C8:DA:47:15:F6:AE:A9:A8:03:FB:E7:F2:98:A6:E9:9D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/083311E2FD8C11EFA3BBA60FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df7:6080::/48 Signature Algorithm: sha256WithRSAEncryption 6a:c3:78:c3:62:2b:29:83:1d:85:1d:f7:b4:9b:1a:ee:db:8f: ac:f2:f1:51:18:c8:08:af:3f:d7:99:36:56:99:a9:89:a0:9b: 63:f3:9a:15:56:f8:19:ff:8e:5a:32:ef:80:9f:b3:92:e0:14: 7b:35:87:12:7d:d0:94:3f:00:a8:18:5d:b0:39:c0:27:aa:3f: fe:ee:d8:6d:13:a5:98:5a:27:27:18:d2:85:2c:4b:af:c7:7b: 15:ae:ad:96:7e:2a:6c:4b:98:b3:90:a0:bf:da:5e:d1:cc:9b: 11:3b:35:7d:c4:78:55:54:23:59:79:79:a4:90:0f:ba:b5:c1: 8c:1d:af:57:1a:50:ed:d4:3d:e6:fd:28:b4:7f:a2:55:e2:50: f0:89:71:95:ca:fb:f7:44:ca:8f:eb:82:92:2c:58:e8:8f:02: da:20:c4:bd:da:a7:92:86:8f:82:54:c5:71:33:44:94:e0:ec: 10:47:77:d7:c2:b2:d4:af:3e:57:ca:b0:e1:e1:3c:01:c2:15: 61:b7:aa:03:cb:0e:3b:17:7d:d5:b3:d6:32:69:a6:73:72:9b: cf:2c:af:70:ef:49:aa:67:25:dd:ce:8f:ad:be:ee:b1:47:d5: cb:24:19:b0:c5:91:2b:b9:fa:a0:99:d6:5c:bf:07:2f:09:91: 47:7e:b2:38 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDALdUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjAyMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5YzYtZGQyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJVKkWRaMNItXauEGJiqK584M5tvl+h01Udi7DdlTk0CLJS8eOFkO6wBP2Mm Saxg88Db7j6QD4NY2qO2xreookwCZiOvlgVAN9RtI91OwjhbsRnl5moR4LkJ0X1n drCEIyaOmvUXKt1Bd5P7LkUVsIeheFaioUXGqzwXcTDX7wX8goOgHJ7nyXwCVVbi S4+M3V4CJKrs8jZvoKl1S656RN3Yme4m9ZndqLpKhL+JLD5V3xUFQG64r01JGdTl gu9gFR8LBWOZ3QrSuDmpaRyGmh1FpO+HaZeJUpTcP0cZTs67JpnktmMOfm42Xqzi aNt62XEI5ocfgByYLnkl6jCuAVkCAwEAAaOCApgwggKUMB0GA1UdDgQWBBQq1LOP yNpHFfauqagD++fymKbpnTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA4MzMxMUUy RkQ4QzExRUZBM0JCQTYwRkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN92CAMA0GCSqGSIb3DQEBCwUAA4IBAQBqw3jDYisp gx2FHfe0mxru24+s8vFRGMgIrz/XmTZWmamJoJtj85oVVvgZ/45aMu+An7OS4BR7 NYcSfdCUPwCoGF2wOcAnqj/+7thtE6WYWicnGNKFLEuvx3sVrq2WfipsS5izkKC/ 2l7RzJsROzV9xHhVVCNZeXmkkA+6tcGMHa9XGlDt1D3m/Si0f6JV4lDwiXGVyvv3 RMqP64KSLFjojwLaIMS92qeSho+CVMVxM0SU4OwQR3fXwrLUrz5XyrDh4TwBwhVh t6oDyw47F33Vs9YyaaZzcpvPLK9w70mqZyXdzo+tvu6xR9XLJBmwxZErufqgmdZc vwcvCZFHfrI4 -----END CERTIFICATE-----Generated at Mon May 12 23:56:11 2025 by rpki-client