$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa File: 610B51267AE711EFACC0CA34C4F9AE02.roa (raw, json) Hash identifier: 0osuZSPKtRbkTEe2rjpJx0+V/IP2FJnFJRtn1br7+ws= Subject key identifier: F1:DD:E5:CD:F6:AD:53:0A:77:9E:2C:38:70:75:4B:93:18:37:73:93 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 01CF Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa Signing time: Sun 11 May 2025 02:31:43 +0000 ROA not before: Sun 11 May 2025 02:31:43 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 151331 IP address blocks: 2400:e3e0:aa00::/40 maxlen: 48 2400:e3e0:ab00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: May 11 02:31:43 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68200c0e-45a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:d3:fc:93:96:aa:93:a0:52:f0:26:8c:2e: fd:7d:d1:53:1f:f9:58:48:aa:cd:d7:03:7f:bf:aa: 81:1d:eb:21:c6:8f:f5:58:2f:19:a1:69:c0:25:86: fa:21:24:f1:8c:25:f1:94:d7:c2:75:24:a3:97:f9: 17:26:96:40:4c:38:d8:ae:71:e1:e6:97:fa:fb:2e: 99:50:cf:58:fa:8f:8e:25:3a:a0:4e:86:41:7c:03: bd:1e:51:fd:75:16:bd:37:61:dd:a4:f9:67:42:99: 28:9c:ad:43:07:fb:df:06:95:1a:5e:d9:cc:b8:b8: b5:23:d6:ec:18:06:3c:a5:98:60:b8:92:d0:45:81: 4f:3c:ed:56:df:cd:94:5b:05:87:97:02:8c:0c:74: 9a:ac:49:07:7d:ab:25:35:7e:31:ff:b4:66:03:8b: 3a:20:a0:5c:2d:d0:af:c4:4a:71:56:9f:78:d9:53: 38:89:4f:ee:a2:9a:12:c9:32:03:0d:22:cf:1a:4a: 6a:19:19:47:81:5d:c8:5a:d4:75:ac:c2:1f:bf:c1: ba:24:89:cf:aa:ce:8d:eb:69:bc:bc:2f:c7:46:1e: 0a:70:35:89:35:90:c6:03:a3:9a:61:67:2d:a0:43: 12:aa:23:44:6f:e8:c9:9d:1b:48:11:ab:94:ce:bf: bd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DD:E5:CD:F6:AD:53:0A:77:9E:2C:38:70:75:4B:93:18:37:73:93 X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:e3e0:aa00::/39 Signature Algorithm: sha256WithRSAEncryption 83:a0:c6:1b:b4:d4:79:dd:99:d2:5d:c8:c3:8e:a1:b6:83:a6: 3e:1a:82:2f:6b:e3:4b:7d:0b:5c:63:30:33:c6:ea:e9:7a:20: 36:9f:c9:3b:bc:a2:68:bd:cd:20:99:6b:fd:60:b0:ff:2c:51: 2d:b2:65:74:02:4b:0d:6b:9f:d7:87:be:6d:ea:fe:6d:27:5b: 47:fe:f4:c5:4f:91:06:0e:d2:2f:52:1e:5c:ee:7e:44:6c:ce: 06:c3:ee:54:3c:93:4e:e2:76:49:53:d1:4b:c6:f8:86:dc:63: db:2d:24:32:2a:a6:a3:31:87:c5:9a:43:56:69:4d:87:41:51: 77:21:35:fe:8a:1a:5d:35:f6:18:77:b7:be:f6:a5:94:f7:6a: 9f:df:7f:f5:6c:fc:dc:82:39:34:14:4b:15:60:be:58:65:58: 81:68:02:5b:f1:4f:a3:3f:81:35:d5:83:f4:f9:c1:0f:35:1c: 55:7e:d4:03:2f:9a:69:2a:5c:6a:c7:00:b1:cd:ca:27:78:96: 03:1a:57:2a:d1:59:73:03:ca:16:50:57:01:47:77:fc:17:04: 47:0c:ba:6d:cb:8f:be:2f:3f:4f:b9:54:1e:1b:55:ea:35:3a: b8:bd:8f:03:eb:d7:ad:88:ba:dd:f4:55:46:fa:3e:fb:f8:a6: 01:4b:2a:d5 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUwNTExMDIzMTQzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODIwMGMwZS00NWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyzT/JOWqpOgUvAmjC79fdFTH/lYSKrN1wN/v6qBHeshxo/1WC8ZoWnAJYb6 ISTxjCXxlNfCdSSjl/kXJpZATDjYrnHh5pf6+y6ZUM9Y+o+OJTqgToZBfAO9HlH9 dRa9N2HdpPlnQpkonK1DB/vfBpUaXtnMuLi1I9bsGAY8pZhguJLQRYFPPO1W382U WwWHlwKMDHSarEkHfaslNX4x/7RmA4s6IKBcLdCvxEpxVp942VM4iU/uopoSyTID DSLPGkpqGRlHgV3IWtR1rMIfv8G6JInPqs6N62m8vC/HRh4KcDWJNZDGA6OaYWct oEMSqiNEb+jJnRtIEauUzr+9QQIDAQABo4IClzCCApMwHQYDVR0OBBYEFPHd5c32 rVMKd54sOHB1S5MYN3OTMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJFOUEvOEZBMUY1NkVCODVFMTFFRDhFNkY0MjEzQzRGOUFFMDIvNjEwQjUxMjY3 QUU3MTFFRkFDQzBDQTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgEkAOPgqjANBgkqhkiG9w0BAQsFAAOCAQEAg6DGG7TUed2Z 0l3Iw46htoOmPhqCL2vjS30LXGMwM8bq6XogNp/JO7yiaL3NIJlr/WCw/yxRLbJl dAJLDWuf14e+ber+bSdbR/70xU+RBg7SL1IeXO5+RGzOBsPuVDyTTuJ2SVPRS8b4 htxj2y0kMiqmozGHxZpDVmlNh0FRdyE1/ooaXTX2GHe3vvallPdqn99/9Wz83II5 NBRLFWC+WGVYgWgCW/FPoz+BNdWD9PnBDzUcVX7UAy+aaSpcascAsc3KJ3iWAxpX KtFZcwPKFlBXAUd3/BcERwy6bcuPvi8/T7lUHhtV6jU6uL2PA+vXrYi63fRVRvo+ +/imAUsq1Q== -----END CERTIFICATE-----Generated at Fri May 16 18:01:23 2025 by rpki-client