$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54893C302A6711F0B8C9F286C4F9AE02.roa File: 54893C302A6711F0B8C9F286C4F9AE02.roa (raw, json) Hash identifier: eIxS3981BRWnuwgYeEiHlWmDW9nieFrZ+5KeOUJQg/E= Subject key identifier: 76:2E:1D:D0:D1:8C:6E:05:60:EE:D7:86:75:6F:B1:77:FE:74:5D:B2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B6E5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54893C302A6711F0B8C9F286C4F9AE02.roa Signing time: Thu 08 May 2025 16:18:38 +0000 ROA not before: Thu 08 May 2025 16:18:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142461 IP address blocks: 2001:df2:2940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46821 (0xb6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:18:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd95d-76eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9b:ef:9b:c7:a7:20:3a:26:0f:0c:23:23:2c: 04:0d:01:0c:65:57:25:fd:2a:b9:fe:0a:8e:fd:57: 36:4b:a1:72:f2:da:64:d2:73:ba:63:2b:a9:db:85: 58:96:2b:f9:10:b1:23:57:ef:5e:01:af:a5:02:a5: 2f:09:46:03:fd:f4:98:28:0b:df:f1:1d:ef:26:98: 05:5e:af:28:17:16:c4:ef:6d:45:c1:31:8a:0a:05: 64:06:6f:ef:52:29:35:92:63:66:13:54:1c:f6:3f: 89:e2:06:3a:25:98:c8:77:18:9f:ed:e5:2b:a7:8e: b3:b9:39:09:87:72:14:e7:35:d3:bd:dc:9b:87:e1: 5d:d7:bc:e1:ea:61:19:d6:ce:45:4e:20:1b:b9:d9: 7d:17:35:cb:47:72:6b:01:d2:0a:b1:3e:f2:04:cf: bd:2d:c5:d6:f7:b2:6d:33:10:e5:64:52:56:30:9d: e2:e4:bb:9f:de:94:7c:48:12:0c:be:11:0a:d4:1d: 15:d6:dc:0f:b9:f5:f2:6f:1d:23:71:1e:0d:98:66: 5f:85:07:c7:9d:8d:9b:fe:ec:36:a1:ed:92:fb:a6: d0:ab:9b:5a:15:79:ec:ef:71:f6:63:04:1d:82:46: eb:df:12:2c:c4:61:bd:e5:31:e4:90:a9:e6:81:44: f7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2E:1D:D0:D1:8C:6E:05:60:EE:D7:86:75:6F:B1:77:FE:74:5D:B2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54893C302A6711F0B8C9F286C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df2:2940::/48 Signature Algorithm: sha256WithRSAEncryption 47:7e:10:93:e8:76:a9:b7:71:77:b8:31:c4:a0:80:df:ea:d8: 42:e0:e9:65:34:34:c6:d7:1e:ec:e6:f5:3d:d2:1b:ff:ee:1f: fd:46:79:76:50:94:40:26:f2:e7:77:13:58:0a:fe:af:c2:b2: 73:11:45:86:2d:b5:d0:cc:0e:ce:1f:1a:ad:ac:fa:7d:82:5d: 09:b7:b4:0a:f2:a9:61:13:93:54:dc:bd:fd:82:96:3e:1e:59: 4f:fc:a2:ff:ff:a1:8a:ec:5f:2e:ac:03:f1:6b:c8:a2:d2:e1: 78:de:cb:55:6c:4c:3d:19:69:da:b9:c9:ff:e2:c9:25:7e:42: 76:e5:42:b8:1c:83:8b:cf:b1:72:28:9b:5f:3b:e0:4a:b3:d8: f1:3f:ef:a8:cf:76:ce:7e:dd:b6:0d:4b:f9:ed:a6:6e:10:cb: a9:d3:24:ed:34:20:93:f4:9f:84:1a:bd:67:a3:37:29:29:c1: 24:18:ef:4f:99:15:64:d9:7c:3a:bb:2f:3a:88:5d:6a:fc:80: a4:62:ba:ec:95:f3:23:a6:9d:0a:82:ec:f4:40:2c:1c:28:53: a6:6b:5f:7a:ac:78:01:fb:45:45:20:d7:05:88:c2:02:39:79: 9e:7a:d0:ba:d4:23:c7:4f:55:9b:e7:ff:15:2a:4f:44:cb:d6: 84:6f:6c:35 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDALblMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTgzOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5NWQtNzZlYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPKb75vHpyA6Jg8MIyMsBA0BDGVXJf0quf4Kjv1XNkuhcvLaZNJzumMrqduF WJYr+RCxI1fvXgGvpQKlLwlGA/30mCgL3/Ed7yaYBV6vKBcWxO9tRcExigoFZAZv 71IpNZJjZhNUHPY/ieIGOiWYyHcYn+3lK6eOs7k5CYdyFOc1073cm4fhXde84eph GdbORU4gG7nZfRc1y0dyawHSCrE+8gTPvS3F1veybTMQ5WRSVjCd4uS7n96UfEgS DL4RCtQdFdbcD7n18m8dI3EeDZhmX4UHx52Nm/7sNqHtkvum0KubWhV57O9x9mME HYJG698SLMRhveUx5JCp5oFE93sCAwEAAaOCApgwggKUMB0GA1UdDgQWBBR2Lh3Q 0YxuBWDu14Z1b7F3/nRdsjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU0ODkzQzMw MkE2NzExRjBCOEM5RjI4NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN8ilAMA0GCSqGSIb3DQEBCwUAA4IBAQBHfhCT6Hap t3F3uDHEoIDf6thC4OllNDTG1x7s5vU90hv/7h/9Rnl2UJRAJvLndxNYCv6vwrJz EUWGLbXQzA7OHxqtrPp9gl0Jt7QK8qlhE5NU3L39gpY+HllP/KL//6GK7F8urAPx a8ii0uF43stVbEw9GWnaucn/4sklfkJ25UK4HIOLz7FyKJtfO+BKs9jxP++oz3bO ft22DUv57aZuEMup0yTtNCCT9J+EGr1nozcpKcEkGO9PmRVk2Xw6uy86iF1q/ICk YrrslfMjpp0Kguz0QCwcKFOma196rHgB+0VFINcFiMICOXmeetC61CPHT1Wb5/8V Kk9Ey9aEb2w1 -----END CERTIFICATE-----Generated at Tue May 13 00:26:53 2025 by rpki-client