$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F19DE94A377D11EF809A4F1AC4F9AE02.roa File: F19DE94A377D11EF809A4F1AC4F9AE02.roa (raw, json) Hash identifier: lwhPvLDdfPAD1MjvRRZObAjPpoPhvDdk1Q12CVmRNSk= Subject key identifier: ED:5B:FC:45:EB:D4:C4:25:A7:A8:24:05:19:5B:22:40:EE:12:5C:BF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B972 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F19DE94A377D11EF809A4F1AC4F9AE02.roa Signing time: Thu 08 May 2025 16:28:29 +0000 ROA not before: Thu 08 May 2025 16:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152507 IP address blocks: 2001:df3:f5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 11:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47474 (0xb972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdbad-9b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:d7:be:ba:8d:d0:24:ca:93:2f:ed:87:1b: e0:37:1a:c7:7f:a5:48:6a:4f:81:1b:34:20:ff:cb: 6d:69:a5:46:9a:cb:af:71:61:2e:c4:b3:fc:da:50: 03:19:df:b2:e8:ad:7e:62:c9:cc:22:18:28:a7:78: b6:1e:43:5e:1d:8f:27:3d:fc:56:d1:0e:4a:7e:14: 32:89:16:f4:9d:07:32:22:eb:df:62:f5:19:5d:c2: 9e:bf:5e:cd:a1:34:53:fe:ec:52:6c:10:7a:5c:9b: 63:ba:cd:f9:34:af:da:59:c3:1f:5c:68:a2:1c:7d: 46:94:92:42:9f:ac:38:58:d4:11:eb:8e:e5:b6:11: 30:b0:44:b5:3d:79:d1:b7:39:a7:c0:9a:9b:17:22: 54:da:a1:b8:46:2a:aa:88:2d:26:b3:c8:ed:5a:a2: fc:7e:1b:e1:7f:a0:77:b7:44:df:f2:c0:d3:a1:78: 86:9a:6b:58:84:28:a6:4c:68:69:a0:a1:8a:da:fd: 1e:52:e4:67:b2:a9:84:83:ed:7c:12:e9:db:f5:6c: 74:50:77:10:02:fb:f6:45:16:d4:7e:3d:2e:ab:44: b4:ed:60:81:de:4e:b6:2e:0f:03:d6:21:d0:18:9e: b4:36:d2:99:80:c8:7a:c4:0b:bd:78:e7:3b:f2:a4: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5B:FC:45:EB:D4:C4:25:A7:A8:24:05:19:5B:22:40:EE:12:5C:BF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F19DE94A377D11EF809A4F1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:f5c0::/48 Signature Algorithm: sha256WithRSAEncryption 5a:bf:10:96:b4:5f:ab:e4:fc:1e:c2:4c:b8:7f:13:36:f7:50: 3f:1d:7f:97:2e:b9:1e:f1:88:1d:c4:10:0b:12:cf:80:77:85: 9d:92:eb:75:25:5c:7d:b4:8a:fc:62:39:24:13:79:7c:8b:5c: a1:74:36:b5:a2:86:5e:53:e1:af:b9:8f:58:03:14:d8:64:9b: 74:b4:44:39:1a:4e:e9:f2:84:f7:e0:f8:c5:01:5a:7b:cb:d5: 08:e5:ec:07:78:c6:b3:d6:c2:fc:14:45:0e:3a:ee:8b:13:8a: 15:25:4f:b5:be:26:48:7d:78:39:4d:ab:27:07:f9:cf:27:1f: fc:d9:a4:78:38:4a:68:da:3f:b2:37:0f:9b:61:56:b1:b7:df: e3:d0:ae:32:56:1d:61:5c:c5:8f:3a:97:ab:c8:46:0a:5d:d8: 1b:d2:31:75:a5:1f:52:6a:79:ae:cf:2a:08:2c:03:88:49:36: 8d:71:a2:cf:64:90:ae:5f:91:ce:98:9a:02:70:7c:9a:42:b8: 93:fe:3f:a3:61:ec:ef:73:7b:1d:bb:e6:5b:0c:6c:16:38:96: 63:8f:e4:64:f4:d9:9b:60:fa:b7:c7:8b:13:e4:5c:d0:fa:ce: f0:3c:13:cc:3b:af:af:2d:ce:f5:77:0a:db:e6:bb:d8:5e:9d: 12:8c:66:68 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDALlyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjgyOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiYWQtOWIwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIn1766jdAkypMv7Ycb4Dcax3+lSGpPgRs0IP/LbWmlRprLr3FhLsSz/NpQ AxnfsuitfmLJzCIYKKd4th5DXh2PJz38VtEOSn4UMokW9J0HMiLr32L1GV3Cnr9e zaE0U/7sUmwQelybY7rN+TSv2lnDH1xoohx9RpSSQp+sOFjUEeuO5bYRMLBEtT15 0bc5p8CamxciVNqhuEYqqogtJrPI7Vqi/H4b4X+gd7dE3/LA06F4hpprWIQopkxo aaChitr9HlLkZ7KphIPtfBLp2/VsdFB3EAL79kUW1H49LqtEtO1ggd5Oti4PA9Yh 0BietDbSmYDIesQLvXjnO/KkUEsCAwEAAaOCApgwggKUMB0GA1UdDgQWBBTtW/xF 69TEJaeoJAUZWyJA7hJcvzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YxOURFOTRB Mzc3RDExRUY4MDlBNEYxQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN8/XAMA0GCSqGSIb3DQEBCwUAA4IBAQBavxCWtF+r 5Pwewky4fxM291A/HX+XLrke8YgdxBALEs+Ad4Wdkut1JVx9tIr8YjkkE3l8i1yh dDa1ooZeU+GvuY9YAxTYZJt0tEQ5Gk7p8oT34PjFAVp7y9UI5ewHeMaz1sL8FEUO Ou6LE4oVJU+1viZIfXg5TasnB/nPJx/82aR4OEpo2j+yNw+bYVaxt9/j0K4yVh1h XMWPOperyEYKXdgb0jF1pR9SanmuzyoILAOISTaNcaLPZJCuX5HOmJoCcHyaQriT /j+jYezvc3sdu+ZbDGwWOJZjj+Rk9NmbYPq3x4sT5FzQ+s7wPBPMO6+vLc71dwrb 5rvYXp0SjGZo -----END CERTIFICATE-----Generated at Thu May 15 22:22:02 2025 by rpki-client