$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/4DD66E3C347F11EFB73F4074C4F9AE02.roa File: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (raw, json) Hash identifier: UdSNL+M5bhbjwAkTjKkIwiTAoopRDA15sbVDq+xd/Mo= Subject key identifier: 0F:40:8F:19:AE:44:7D:27:7D:62:71:CE:0A:68:6E:F4:77:7A:8A:98 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 01D0 Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/4DD66E3C347F11EFB73F4074C4F9AE02.roa Signing time: Sun 11 May 2025 02:31:43 +0000 ROA not before: Sun 11 May 2025 02:31:43 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 199436 IP address blocks: 2400:e3e0:aa00::/40 maxlen: 48 2400:e3e0:ab00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: May 11 02:31:43 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68200c0f-2f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:a2:f7:88:60:ae:96:a3:55:73:22:b2:f7: e6:55:cd:69:0f:9b:0f:4f:d0:d1:3a:92:cc:b8:8b: a3:94:f0:ef:21:fa:e0:40:20:73:89:cf:85:e1:25: a7:df:9f:e2:e8:ec:7e:e7:7d:25:16:05:60:fc:d0: 38:fe:4b:5f:48:c4:b9:18:7a:8b:d3:e8:71:2b:75: 5a:37:82:da:49:4f:0c:71:87:e3:9b:70:3c:70:a1: fe:88:3c:8e:fe:c0:5b:0b:6b:d9:01:97:10:86:43: 51:9a:16:e9:68:9c:b2:72:96:7b:fc:77:08:d5:d2: 5f:26:25:c6:83:d7:80:a0:05:32:f9:7f:14:c1:4c: 6c:77:0e:53:48:67:a1:0f:c0:33:fb:09:be:2d:56: 9e:6a:69:d0:ea:19:bb:3e:03:ff:67:5d:1c:0a:3f: 32:86:98:c8:12:0f:60:ce:75:b3:86:39:72:7b:7a: 1a:82:ae:c8:d5:b3:02:63:f0:96:ae:67:bd:a4:e8: 9c:55:54:e0:6d:d9:17:61:6a:68:58:84:58:15:bb: 1b:99:f4:b2:8c:2b:64:58:f9:e0:8b:75:55:ae:a7: ba:b4:5b:0b:27:23:24:be:04:9c:5d:57:60:97:6d: 1a:06:c7:12:0e:cd:a2:ff:f5:35:ce:19:d9:62:cd: 7c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:40:8F:19:AE:44:7D:27:7D:62:71:CE:0A:68:6E:F4:77:7A:8A:98 X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/4DD66E3C347F11EFB73F4074C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:e3e0:aa00::/39 Signature Algorithm: sha256WithRSAEncryption 30:5e:83:e9:26:2f:3f:9c:54:83:03:9c:b1:84:88:5b:ff:9e: 8a:41:6d:e8:a4:fa:35:e9:da:b3:15:37:93:e6:fe:f2:d3:ee: ce:75:d5:d0:ea:be:76:e4:c1:f4:4e:4a:5c:8e:5b:5e:1f:e4: 5e:39:d7:73:0d:59:41:24:a2:96:2f:3e:aa:20:6e:b7:f4:29: 8f:2f:43:75:01:70:fc:ff:d4:96:07:b3:ef:e2:c0:f0:4f:c8: d7:bf:69:dc:a1:5e:47:cf:59:1b:1a:e6:a8:5d:b6:ca:3f:88: 52:90:74:14:91:e0:50:e9:55:c6:27:ee:47:8a:6f:0a:0f:c8: 70:bc:ba:25:86:93:47:a5:a6:a3:06:de:fb:f5:a3:d5:f3:14: 00:a3:ee:4f:19:47:24:55:f3:00:37:ae:32:32:90:43:e2:dc: ee:41:46:37:ea:e9:55:9a:df:9d:42:bc:2e:a7:65:cd:dd:52: 55:21:92:93:bb:13:f1:df:ce:c0:3e:86:cd:e4:52:3c:0c:e2: dd:73:b8:1a:df:8e:87:c7:6d:73:d8:8e:5e:31:9e:b2:db:e9: b7:5c:96:49:08:04:39:d5:6e:ad:e6:8a:af:bf:39:24:64:25: 9b:d2:0e:c1:63:c6:33:ea:e4:9c:9b:20:d0:24:07:b0:69:5a: 32:d9:e8:50 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUwNTExMDIzMTQzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODIwMGMwZi0yZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPai94hgrpajVXMisvfmVc1pD5sPT9DROpLMuIujlPDvIfrgQCBzic+F4SWn 35/i6Ox+530lFgVg/NA4/ktfSMS5GHqL0+hxK3VaN4LaSU8McYfjm3A8cKH+iDyO /sBbC2vZAZcQhkNRmhbpaJyycpZ7/HcI1dJfJiXGg9eAoAUy+X8UwUxsdw5TSGeh D8Az+wm+LVaeamnQ6hm7PgP/Z10cCj8yhpjIEg9gznWzhjlye3oagq7I1bMCY/CW rme9pOicVVTgbdkXYWpoWIRYFbsbmfSyjCtkWPngi3VVrqe6tFsLJyMkvgScXVdg l20aBscSDs2i//U1zhnZYs18cQIDAQABo4IClzCCApMwHQYDVR0OBBYEFA9Ajxmu RH0nfWJxzgpobvR3eoqYMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJFOUEvOEZBMUY1NkVCODVFMTFFRDhFNkY0MjEzQzRGOUFFMDIvNERENjZFM0Mz NDdGMTFFRkI3M0Y0MDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgEkAOPgqjANBgkqhkiG9w0BAQsFAAOCAQEAMF6D6SYvP5xU gwOcsYSIW/+eikFt6KT6NenasxU3k+b+8tPuznXV0Oq+duTB9E5KXI5bXh/kXjnX cw1ZQSSili8+qiBut/Qpjy9DdQFw/P/Ulgez7+LA8E/I179p3KFeR89ZGxrmqF22 yj+IUpB0FJHgUOlVxifuR4pvCg/IcLy6JYaTR6Wmowbe+/Wj1fMUAKPuTxlHJFXz ADeuMjKQQ+Lc7kFGN+rpVZrfnUK8Lqdlzd1SVSGSk7sT8d/OwD6GzeRSPAzi3XO4 Gt+Oh8dtc9iOXjGestvpt1yWSQgEOdVureaKr785JGQlm9IOwWPGM+rknJsg0CQH sGlaMtnoUA== -----END CERTIFICATE-----Generated at Wed May 14 20:46:27 2025 by rpki-client