$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58A89B282A6A11F0AEF7CB2EC4F9AE02.roa File: 58A89B282A6A11F0AEF7CB2EC4F9AE02.roa (raw, json) Hash identifier: LOASPU7pdo9IQ3tg9aTn9WG7zJi5xI1dGZEEJcOPEzQ= Subject key identifier: C8:5D:EA:C7:27:F2:B5:DD:61:32:66:B1:09:AF:C7:26:52:38:D8:99 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B91C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58A89B282A6A11F0AEF7CB2EC4F9AE02.roa Signing time: Thu 08 May 2025 16:27:12 +0000 ROA not before: Thu 08 May 2025 16:27:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151175 IP address blocks: 2400:ff20::/32 maxlen: 32 2400:ff20::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47388 (0xb91c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:27:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb5f-d1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cd:50:d8:c5:7d:b3:11:4c:1c:5a:a1:4d:06: 89:92:af:64:34:62:a7:f9:79:51:b3:fa:32:f8:d3: 28:42:ce:f4:b1:b5:b5:00:cc:d4:11:d7:00:f3:05: 09:f5:fa:57:e4:e3:33:2e:9c:74:ef:d4:bb:97:aa: 03:e6:d9:4d:38:f9:9f:88:ec:b2:ca:0e:10:5f:30: e9:8b:73:30:b8:a1:da:52:f0:84:3e:aa:5c:63:f1: 04:41:6a:d3:1f:2a:f9:8b:1a:15:ea:63:b9:c8:40: 1f:ce:05:94:e1:c6:45:86:7a:81:41:df:6a:7b:39: 27:5d:40:77:e9:e2:e1:6f:4a:f9:76:7e:e6:d0:cc: a3:36:4a:23:2f:c4:89:f3:ca:0a:0c:c2:94:bf:b3: e2:bf:e0:cf:8b:36:af:97:08:21:27:cc:3a:f9:7e: 90:d7:9b:79:94:b8:e2:d0:e3:88:b1:ce:9b:01:a0: a9:cb:6b:e4:e3:13:d7:93:ab:60:a1:45:e5:1b:42: 81:45:7b:ed:6f:34:9d:69:6c:d7:bf:24:0f:1f:f6: b8:4f:a4:c6:12:e9:e3:87:63:41:b6:48:e4:16:44: 2f:3b:55:07:8f:ca:56:2b:48:ff:03:80:64:0f:87: 2b:a2:c0:ad:44:45:f9:32:cd:1e:01:bb:5c:04:ec: 32:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5D:EA:C7:27:F2:B5:DD:61:32:66:B1:09:AF:C7:26:52:38:D8:99 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58A89B282A6A11F0AEF7CB2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:ff20::/32 Signature Algorithm: sha256WithRSAEncryption 65:fa:07:b2:42:b4:d8:d2:cc:74:21:7c:29:16:a1:bf:10:32: 11:6a:66:fd:22:3c:e0:0b:77:3c:a6:f4:e2:7c:cf:6e:6f:6a: 99:d9:ba:e0:12:47:55:c1:ba:c4:52:46:14:a4:93:c6:01:75: c5:8a:26:6c:06:80:31:1e:68:50:c0:94:bf:d8:e2:2a:9b:d5: 6e:07:86:95:83:b5:59:a9:c7:38:be:8d:8d:a7:7b:68:07:7c: 31:f0:0b:10:3c:30:9f:9e:c9:13:8d:95:b7:a8:8a:49:f8:bb: 55:fb:27:93:6f:f9:da:fc:f7:ff:52:b9:5a:2e:5d:32:30:c1: ff:ef:01:08:04:83:f0:97:a9:c2:29:03:21:26:dc:66:d2:b8: f0:6d:90:5e:e4:1a:a5:79:f4:b8:c8:7c:e0:29:73:f0:16:5b: 8b:7f:38:9d:7c:eb:fb:e0:62:fc:fb:f5:54:84:f2:6d:f5:6d: 18:44:ee:f2:be:29:92:b8:b0:6a:ee:63:14:3e:29:48:9a:f5: 5e:00:14:c0:38:79:88:e5:45:f3:98:d9:da:d9:f4:86:cb:d9: 85:84:46:13:80:7e:a4:50:00:74:61:9d:7e:ef:77:d9:47:5a: 65:cf:d3:e5:2d:5d:b1:a2:5c:8e:7d:9d:2e:0a:fb:47:ad:a0: 1a:d9:cd:07 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDALkcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjcxMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiNWYtZDFhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOXNUNjFfbMRTBxaoU0GiZKvZDRip/l5UbP6MvjTKELO9LG1tQDM1BHXAPMF CfX6V+TjMy6cdO/Uu5eqA+bZTTj5n4jsssoOEF8w6YtzMLih2lLwhD6qXGPxBEFq 0x8q+YsaFepjuchAH84FlOHGRYZ6gUHfans5J11Ad+ni4W9K+XZ+5tDMozZKIy/E ifPKCgzClL+z4r/gz4s2r5cIISfMOvl+kNebeZS44tDjiLHOmwGgqctr5OMT15Or YKFF5RtCgUV77W80nWls178kDx/2uE+kxhLp44djQbZI5BZELztVB4/KVitI/wOA ZA+HK6LArURF+TLNHgG7XATsMuMCAwEAAaOCApYwggKSMB0GA1UdDgQWBBTIXerH J/K13WEyZrEJr8cmUjjYmTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU4QTg5QjI4 MkE2QTExRjBBRUY3Q0IyRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJAD/IDANBgkqhkiG9w0BAQsFAAOCAQEAZfoHskK02NLM dCF8KRahvxAyEWpm/SI84At3PKb04nzPbm9qmdm64BJHVcG6xFJGFKSTxgF1xYom bAaAMR5oUMCUv9jiKpvVbgeGlYO1WanHOL6Njad7aAd8MfALEDwwn57JE42Vt6iK Sfi7Vfsnk2/52vz3/1K5Wi5dMjDB/+8BCASD8JepwikDISbcZtK48G2QXuQapXn0 uMh84Clz8BZbi384nXzr++Bi/Pv1VITybfVtGETu8r4pkriwau5jFD4pSJr1XgAU wDh5iOVF85jZ2tn0hsvZhYRGE4B+pFAAdGGdfu932UdaZc/T5S1dsaJcjn2dLgr7 R62gGtnNBw== -----END CERTIFICATE-----Generated at Tue May 13 01:05:10 2025 by rpki-client