$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CD00AFA60B7111EF96420153C4F9AE02.roa File: CD00AFA60B7111EF96420153C4F9AE02.roa (raw, json) Hash identifier: dQERtzrPx9Adq9zfd1PRl6sIXlXiKysiuHIHt7NaKsU= Subject key identifier: 3F:7B:72:11:9E:9B:BC:3C:78:4D:AE:B2:D4:48:DA:66:90:DD:BA:6C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B896 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CD00AFA60B7111EF96420153C4F9AE02.roa Signing time: Thu 08 May 2025 16:25:09 +0000 ROA not before: Thu 08 May 2025 16:25:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150581 IP address blocks: 2401:9120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47254 (0xb896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:25:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdae5-a334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:86:0e:ca:35:15:31:c0:31:d6:f5:20:62:a2: 81:5f:cd:80:d6:d2:81:a9:e9:9b:b6:e6:fc:45:7c: d2:9a:a0:40:af:d9:2f:74:02:a0:72:af:eb:1f:65: cc:34:25:2c:14:7b:da:cf:90:f7:d3:74:79:47:88: 90:99:e1:f3:ae:83:5d:79:72:c5:3b:95:69:35:35: e2:b3:36:01:6b:25:d2:a8:5d:0c:f6:c1:37:c6:67: 9b:af:9f:c6:76:5b:37:97:ba:c0:f7:d7:3b:4e:25: ec:d2:c8:57:ae:5d:15:76:f7:da:a6:81:14:4d:3f: f1:64:9d:01:b6:53:23:0e:78:d0:88:3d:f4:04:14: 84:d2:d3:56:0e:07:61:cb:6e:67:7d:82:3d:65:5f: a7:46:b8:b5:d2:61:40:da:e7:b6:26:f6:85:6d:b1: f5:77:90:36:32:8d:ea:6b:77:36:59:99:63:fa:09: c1:fb:c7:91:96:db:48:01:40:b6:6b:61:ad:53:f0: 0d:95:cb:c2:a1:b5:c4:60:88:04:76:02:57:5f:f7: f7:75:80:1c:bc:f3:30:76:35:58:d7:4d:b8:32:d4: 1f:44:52:f2:ba:4f:d8:d4:0b:f1:3b:ca:21:5e:32: 90:47:8c:16:a0:e4:62:c8:ff:20:d9:56:a7:9b:d6: 9e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7B:72:11:9E:9B:BC:3C:78:4D:AE:B2:D4:48:DA:66:90:DD:BA:6C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CD00AFA60B7111EF96420153C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:9120::/32 Signature Algorithm: sha256WithRSAEncryption 1a:c3:0b:d2:dc:b1:d9:3e:05:8c:03:19:80:44:f5:65:13:a1: 8e:f9:52:b8:e3:e2:22:c6:93:77:be:95:a5:ca:5b:9c:3d:a9: ed:27:3c:20:d0:70:63:80:43:25:93:41:f2:23:7a:4a:d6:98: e7:51:ed:f7:e3:c2:99:c7:75:08:27:e9:1d:ee:13:66:fc:53: 3c:a0:ad:dd:a1:64:a3:9b:cb:f6:d3:a5:a4:63:ae:57:bb:a6: 25:ac:f7:6d:e8:db:48:cd:1b:ab:23:42:40:8a:88:c4:6a:75: 7d:a8:b1:b8:01:63:12:d7:c7:6f:1f:9a:55:ae:4e:e1:bc:a4: d7:51:d6:2d:2e:1b:9c:62:8c:65:da:64:4f:95:04:94:7d:7c: 9b:29:93:9a:bf:b1:22:5a:7c:88:24:8b:51:18:97:37:a4:40: a2:fb:73:f1:b0:c5:26:e3:f3:86:ff:63:30:0d:53:48:fe:51: ed:a0:ec:b5:29:a7:97:4c:03:00:57:2b:28:49:06:84:16:c8: e5:51:1e:de:8c:df:c9:cf:94:ca:41:de:3b:fd:9b:fe:b8:50: ee:b9:89:bd:55:d8:90:9e:0e:af:57:78:90:f4:43:e1:8b:cf: d3:04:5a:6d:16:d6:bd:39:9f:2b:63:3f:a9:ea:85:5f:75:af: 79:48:9a:98 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDALiWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjUwOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhZTUtYTMzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6GDso1FTHAMdb1IGKigV/NgNbSganpm7bm/EV80pqgQK/ZL3QCoHKv6x9l zDQlLBR72s+Q99N0eUeIkJnh866DXXlyxTuVaTU14rM2AWsl0qhdDPbBN8Znm6+f xnZbN5e6wPfXO04l7NLIV65dFXb32qaBFE0/8WSdAbZTIw540Ig99AQUhNLTVg4H YctuZ32CPWVfp0a4tdJhQNrntib2hW2x9XeQNjKN6mt3NlmZY/oJwfvHkZbbSAFA tmthrVPwDZXLwqG1xGCIBHYCV1/393WAHLzzMHY1WNdNuDLUH0RS8rpP2NQL8TvK IV4ykEeMFqDkYsj/INlWp5vWnnsCAwEAAaOCApYwggKSMB0GA1UdDgQWBBQ/e3IR npu8PHhNrrLUSNpmkN26bDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NEMDBBRkE2 MEI3MTExRUY5NjQyMDE1M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJAGRIDANBgkqhkiG9w0BAQsFAAOCAQEAGsML0tyx2T4F jAMZgET1ZROhjvlSuOPiIsaTd76VpcpbnD2p7Sc8INBwY4BDJZNB8iN6StaY51Ht 9+PCmcd1CCfpHe4TZvxTPKCt3aFko5vL9tOlpGOuV7umJaz3bejbSM0bqyNCQIqI xGp1faixuAFjEtfHbx+aVa5O4byk11HWLS4bnGKMZdpkT5UElH18mymTmr+xIlp8 iCSLURiXN6RAovtz8bDFJuPzhv9jMA1TSP5R7aDstSmnl0wDAFcrKEkGhBbI5VEe 3ozfyc+UykHeO/2b/rhQ7rmJvVXYkJ4Or1d4kPRD4YvP0wRabRbWvTmfK2M/qeqF X3WveUiamA== -----END CERTIFICATE-----Generated at Tue May 13 01:24:37 2025 by rpki-client