$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EECC4AAC0DF11EE8F84FA79C4F9AE02.roa File: 5EECC4AAC0DF11EE8F84FA79C4F9AE02.roa (raw, json) Hash identifier: Iq7CDhE5sDm/ch9/VT9KBNpcKhmGA17hkMiqlZ+RT9Q= Subject key identifier: B2:2F:0A:3A:71:69:DB:88:72:83:83:C1:D7:82:FF:66:86:19:09:A9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B945 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EECC4AAC0DF11EE8F84FA79C4F9AE02.roa Signing time: Thu 08 May 2025 16:27:48 +0000 ROA not before: Thu 08 May 2025 16:27:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151731 IP address blocks: 2401:7ca0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 06:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47429 (0xb945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:27:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb84-e447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:35:59:71:3c:d8:34:3a:91:b8:db:46:0b: be:2f:d8:d5:6d:bd:e6:68:be:bc:ca:e6:3a:ea:c2: e4:f6:09:f5:e3:a1:4b:2b:99:bd:ba:3d:63:52:90: 0d:08:84:c2:a2:e2:23:96:d6:c8:32:d1:a3:83:bb: e4:96:eb:9d:a1:75:16:ba:0c:c3:f7:dd:fe:1e:14: 55:4c:d7:aa:df:56:fc:76:11:99:74:f5:d6:de:84: b0:e4:2d:28:02:bd:d8:a7:1d:27:87:fd:61:33:fe: 38:aa:48:95:fe:93:76:08:18:49:48:2a:04:57:29: 27:05:1a:d8:aa:e2:7f:47:e8:d8:01:f3:62:dd:09: 08:cd:f6:fd:b5:68:5c:93:34:1f:9a:b0:65:96:b0: 5f:76:58:1f:de:1e:26:6e:df:62:48:90:12:42:52: 63:03:d4:21:72:83:92:8a:76:d1:3a:ee:8f:31:06: eb:c6:84:cb:75:a5:48:13:f5:d1:01:2d:e3:49:75: ae:8b:c9:de:fc:a5:cc:95:62:70:23:df:18:f1:7b: 76:cd:5f:76:f5:97:4a:bc:c5:1b:ad:07:4b:37:6d: 25:42:42:8f:c7:50:5c:c0:0d:8e:fc:b6:4c:03:ed: 69:0e:40:78:18:2b:36:a8:f1:fb:b4:27:d3:6d:47: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2F:0A:3A:71:69:DB:88:72:83:83:C1:D7:82:FF:66:86:19:09:A9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EECC4AAC0DF11EE8F84FA79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:7ca0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:1b:f1:f7:6c:f4:07:96:ad:1b:d0:55:a0:e8:53:e6:69:f5: 9c:d8:ef:79:96:19:d4:a6:44:1b:df:a8:6a:0c:d3:ed:fe:6f: ca:a8:fa:ab:58:95:9a:de:12:f6:06:15:33:2b:61:68:8a:ab: 61:ac:2a:61:d7:86:ea:d4:c1:aa:bf:3c:26:88:fa:26:bc:20: 43:56:4d:7c:64:f9:d2:62:bc:67:f9:66:94:f5:b6:51:fc:ba: 03:9a:85:e9:3f:69:64:67:4d:27:46:57:66:da:96:50:ec:e8: 53:ac:f8:88:2f:ab:f5:24:96:0e:ad:42:34:14:ba:4b:1a:74: a5:fb:17:41:3c:1f:e8:68:76:0c:48:bb:0e:73:e5:b3:a5:18: 07:95:cf:4d:ec:6a:0f:03:4d:f6:09:d6:5b:9f:c6:d9:0a:25: 85:eb:c1:06:02:48:f0:9e:e4:36:34:91:36:f7:f9:6f:5d:b2: 6d:f9:32:fc:d9:70:49:e3:59:12:f6:4c:67:3f:0f:77:44:e9: 32:66:f0:46:47:47:4f:b8:59:bd:92:78:29:a4:8f:b4:55:ab: 52:58:3a:3a:05:fd:8e:01:fd:e2:c2:f6:67:bc:10:03:9f:62: d5:6d:a3:d3:3a:b9:b6:e6:a6:f0:6e:42:9a:63:b1:ed:4e:dd: 31:76:fa:0b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDALlFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2Mjc0OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiODQtZTQ0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJssNVlxPNg0OpG420YLvi/Y1W295mi+vMrmOurC5PYJ9eOhSyuZvbo9Y1KQ DQiEwqLiI5bWyDLRo4O75JbrnaF1FroMw/fd/h4UVUzXqt9W/HYRmXT11t6EsOQt KAK92KcdJ4f9YTP+OKpIlf6TdggYSUgqBFcpJwUa2Krif0fo2AHzYt0JCM32/bVo XJM0H5qwZZawX3ZYH94eJm7fYkiQEkJSYwPUIXKDkop20TrujzEG68aEy3WlSBP1 0QEt40l1rovJ3vylzJVicCPfGPF7ds1fdvWXSrzFG60HSzdtJUJCj8dQXMANjvy2 TAPtaQ5AeBgrNqjx+7Qn021H79sCAwEAAaOCApYwggKSMB0GA1UdDgQWBBSyLwo6 cWnbiHKDg8HXgv9mhhkJqTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVFRUNDNEFB QzBERjExRUU4Rjg0RkE3OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJAF8oDANBgkqhkiG9w0BAQsFAAOCAQEAfRvx92z0B5at G9BVoOhT5mn1nNjveZYZ1KZEG9+oagzT7f5vyqj6q1iVmt4S9gYVMythaIqrYawq YdeG6tTBqr88Joj6JrwgQ1ZNfGT50mK8Z/lmlPW2Ufy6A5qF6T9pZGdNJ0ZXZtqW UOzoU6z4iC+r9SSWDq1CNBS6Sxp0pfsXQTwf6Gh2DEi7DnPls6UYB5XPTexqDwNN 9gnWW5/G2QolhevBBgJI8J7kNjSRNvf5b12ybfky/NlwSeNZEvZMZz8Pd0TpMmbw RkdHT7hZvZJ4KaSPtFWrUlg6OgX9jgH94sL2Z7wQA59i1W2j0zq5tuam8G5CmmOx 7U7dMXb6Cw== -----END CERTIFICATE-----Generated at Mon May 12 10:54:33 2025 by rpki-client