$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83AF3E1A1C1211EFAD06D26DC4F9AE02.roa File: 83AF3E1A1C1211EFAD06D26DC4F9AE02.roa (raw, json) Hash identifier: w6Pm4tW5HAUCFPLf5WMCsQ3zCTii8Q95cy/3A5FdE04= Subject key identifier: 45:DB:1A:58:20:B7:83:52:99:2E:98:08:A7:49:99:0D:4E:82:62:86 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B97B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83AF3E1A1C1211EFAD06D26DC4F9AE02.roa Signing time: Thu 08 May 2025 16:28:36 +0000 ROA not before: Thu 08 May 2025 16:28:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152533 IP address blocks: 2400:4f20::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47483 (0xb97b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:28:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdbb4-8945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:95:6b:4a:65:30:bf:d1:73:b9:6a:ea:5b:a7: 8d:27:f8:1a:37:14:75:31:35:ab:2e:a2:d0:71:9a: ff:55:fd:bd:0b:e6:6e:55:e7:6c:f5:fa:ab:bb:a1: 84:a6:38:4e:e6:ab:d0:66:77:f1:a2:3e:0b:80:b1: 03:1e:85:f8:e8:a5:fd:3d:43:0d:43:9b:aa:b8:22: 05:7b:7e:f1:b8:73:89:f7:43:c2:82:04:76:96:5a: dc:13:84:9f:1e:95:12:ef:ed:3f:7d:14:c7:89:ca: 0c:f3:05:9f:d2:35:de:8f:62:a0:21:3d:94:cd:83: 77:50:1c:d6:12:3f:33:bb:e0:3f:d7:ef:90:c2:2d: b8:2c:d3:b8:2f:67:b9:8e:3f:3e:48:31:08:da:cb: 42:eb:22:77:97:ff:29:2f:8b:5c:87:b3:55:9e:01: 75:8e:d5:10:61:47:fc:51:b5:41:ec:37:2e:e5:d7: 6a:f0:ff:dd:ef:b3:3c:8f:8f:94:b3:0a:aa:dd:b3: 7f:8b:91:6a:16:81:b9:0c:95:cb:c9:63:33:fd:eb: 71:6e:2e:53:55:93:4b:bc:6b:ac:ef:f0:cc:32:bf: 91:a6:44:17:1f:c0:a6:17:d1:4d:57:41:c3:06:88: 79:07:69:25:59:45:09:57:39:a0:93:6b:69:25:f8: 21:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DB:1A:58:20:B7:83:52:99:2E:98:08:A7:49:99:0D:4E:82:62:86 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83AF3E1A1C1211EFAD06D26DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:4f20::/32 Signature Algorithm: sha256WithRSAEncryption aa:8e:0a:7f:83:a0:61:2c:0c:4f:05:a7:19:81:aa:9b:2a:58: 7a:c9:8b:0d:1d:9f:95:b2:c0:1d:ac:b0:35:68:62:8f:95:d3: 51:16:f6:ec:6f:77:02:90:ad:3d:4e:f0:93:ea:9f:41:49:c4: 87:0a:6c:95:76:bd:00:88:ec:c7:7b:48:6f:6d:da:96:a5:79: b0:d2:58:7a:f4:da:f5:fc:02:94:74:a5:43:55:4f:c1:ee:d8: 54:c2:52:1c:94:c4:c1:13:d4:a7:84:f8:ad:54:f2:2b:a7:38: 32:9d:bc:6b:74:6b:41:b5:a0:d4:54:52:ca:0e:3c:1b:d6:dd: 1f:b2:1f:ab:db:3c:f1:71:31:d0:73:c9:9b:b3:db:19:4a:a5: ed:db:b2:62:87:04:9c:1f:80:44:c0:93:27:cb:4c:26:5b:0a: c6:a0:29:03:58:b7:a1:f7:7c:5d:a9:74:43:96:27:5f:0a:f7: ff:e2:eb:2c:d2:1f:e6:3d:dc:63:31:4b:32:07:69:22:8a:4f: b2:f9:9a:9d:bf:04:fc:00:d7:98:d9:61:9e:9b:b6:89:96:c9: f5:76:f4:a9:b7:20:54:f4:f8:66:a6:43:23:69:d8:a8:77:6a: 76:24:5a:76:ac:0f:45:34:ea:8f:d9:ec:7a:4c:07:dd:da:8a: 6f:df:ad:e1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDALl7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjgzNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiYjQtODk0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOeVa0plML/Rc7lq6lunjSf4GjcUdTE1qy6i0HGa/1X9vQvmblXnbPX6q7uh hKY4Tuar0GZ38aI+C4CxAx6F+Oil/T1DDUObqrgiBXt+8bhzifdDwoIEdpZa3BOE nx6VEu/tP30Ux4nKDPMFn9I13o9ioCE9lM2Dd1Ac1hI/M7vgP9fvkMItuCzTuC9n uY4/PkgxCNrLQusid5f/KS+LXIezVZ4BdY7VEGFH/FG1Qew3LuXXavD/3e+zPI+P lLMKqt2zf4uRahaBuQyVy8ljM/3rcW4uU1WTS7xrrO/wzDK/kaZEFx/AphfRTVdB wwaIeQdpJVlFCVc5oJNraSX4IaMCAwEAAaOCApYwggKSMB0GA1UdDgQWBBRF2xpY ILeDUpkumAinSZkNToJihjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgzQUYzRTFB MUMxMjExRUZBRDA2RDI2REM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJABPIDANBgkqhkiG9w0BAQsFAAOCAQEAqo4Kf4OgYSwM TwWnGYGqmypYesmLDR2flbLAHaywNWhij5XTURb27G93ApCtPU7wk+qfQUnEhwps lXa9AIjsx3tIb23alqV5sNJYevTa9fwClHSlQ1VPwe7YVMJSHJTEwRPUp4T4rVTy K6c4Mp28a3RrQbWg1FRSyg48G9bdH7Ifq9s88XEx0HPJm7PbGUql7duyYocEnB+A RMCTJ8tMJlsKxqApA1i3ofd8Xal0Q5YnXwr3/+LrLNIf5j3cYzFLMgdpIopPsvma nb8E/ADXmNlhnpu2iZbJ9Xb0qbcgVPT4ZqZDI2nYqHdqdiRadqwPRTTqj9nsekwH 3dqKb9+t4Q== -----END CERTIFICATE-----Generated at Tue May 13 00:30:00 2025 by rpki-client