$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/6CD78FE8B69B11EFAECD660BC4F9AE02.roa File: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (raw, json) Hash identifier: bbD/CkiY8PoLpDlyreN0bTO0yQS0iLZL1KAfcB5xBxE= Subject key identifier: 5F:A5:30:E8:0E:00:6B:F4:2E:01:06:1D:E8:69:91:DD:E4:5E:1E:CE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 0782 Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/6CD78FE8B69B11EFAECD660BC4F9AE02.roa Signing time: Tue 10 Dec 2024 02:06:54 +0000 ROA not before: Tue 10 Dec 2024 02:06:54 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132198 IP address blocks: 2405:2900::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B Validity Not Before: Dec 10 02:06:54 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6757a23d-1c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:2b:2f:25:35:46:a4:1f:0d:ba:1b:5b:bc: b8:9d:bd:3f:10:2c:82:31:67:64:02:b8:52:04:a6: b5:7d:6b:1e:71:55:85:cb:b7:46:0d:4a:95:5f:82: ac:28:b6:32:3c:2c:ee:74:d0:8c:5b:23:37:a1:7a: ea:c6:08:21:43:52:ec:af:25:d7:83:e3:4f:8f:ee: 73:61:92:10:68:f8:b2:55:7c:23:3b:7f:c7:c1:d5: 99:4b:54:17:e5:6e:df:e3:81:b3:5d:a6:4a:21:14: c5:e2:7f:f8:24:b9:f7:85:51:0f:e9:23:d7:84:92: f2:8f:53:32:cf:28:8e:00:35:f4:81:77:3f:fe:c5: 37:61:b6:d2:01:f4:60:ad:0e:af:5e:36:80:54:ad: 83:d5:37:53:ba:0a:ba:e4:a5:20:91:5f:2a:87:e4: 6a:1c:d8:b7:85:5f:5d:a6:b9:3c:30:c6:8e:79:ad: 86:57:99:99:64:1a:3a:60:10:29:23:88:66:b7:69: 57:d5:08:a8:18:e5:e3:08:12:b1:ec:cd:41:67:0b: 76:06:a2:1c:ac:da:56:c4:bc:74:9a:a5:ae:33:be: 9d:18:fb:0c:d0:5c:74:d5:f5:9a:1e:8c:fa:4c:47: 89:dd:4c:b4:cf:22:55:58:c8:4b:33:9f:c6:97:ac: 85:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A5:30:E8:0E:00:6B:F4:2E:01:06:1D:E8:69:91:DD:E4:5E:1E:CE X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/6CD78FE8B69B11EFAECD660BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:2900::/36 Signature Algorithm: sha256WithRSAEncryption 85:77:b8:26:7b:75:dd:fe:2c:f4:bc:a4:b8:ca:d3:3f:fa:1f: 3a:bd:71:36:c3:89:bd:5c:b5:5d:32:46:87:bd:c1:69:76:c9: 87:9d:d7:b2:f7:a5:46:7f:55:03:46:b1:df:24:e2:d0:10:39: ad:dc:40:a3:3e:75:1d:e5:4a:d0:46:c3:df:c1:5a:3c:de:5e: 4c:14:f2:14:23:a3:f3:90:fa:f2:a3:43:15:f0:24:a6:93:6b: 9f:ff:2d:f3:32:3b:96:b8:fc:d8:6f:c9:7f:78:e6:d2:81:87: bc:3a:ed:5d:76:cc:35:c9:d0:e9:29:0b:65:8a:35:7f:71:97: 67:70:be:9a:6c:d2:bd:58:44:a6:f0:7f:fe:46:fa:5a:62:ab: bf:a0:d3:95:cd:52:a5:ed:71:44:82:37:fc:d6:b3:b8:95:e1: fd:65:ce:b2:96:e3:f7:0f:8e:7a:c1:d3:3c:01:09:f6:10:f5: 83:33:bd:fe:7f:f5:85:67:9d:92:be:25:66:b3:5d:55:00:bb: b2:25:63:72:b6:e9:00:ee:d8:a7:d6:c3:bb:b2:5f:7a:0e:28: 17:c5:ac:99:c0:8d:6e:39:3b:31:16:12:a4:c0:bb:b3:74:7b: 48:79:46:7e:8f:c5:a2:4c:b2:ee:6d:c6:46:8e:1a:1b:99:6a: ba:05:1c:79 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjQxMjEwMDIwNjU0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU3YTIzZC0xYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAwrLyU1RqQfDbobW7y4nb0/ECyCMWdkArhSBKa1fWsecVWFy7dGDUqVX4Ks KLYyPCzudNCMWyM3oXrqxgghQ1LsryXXg+NPj+5zYZIQaPiyVXwjO3/HwdWZS1QX 5W7f44GzXaZKIRTF4n/4JLn3hVEP6SPXhJLyj1MyzyiOADX0gXc//sU3YbbSAfRg rQ6vXjaAVK2D1TdTugq65KUgkV8qh+RqHNi3hV9dprk8MMaOea2GV5mZZBo6YBAp I4hmt2lX1QioGOXjCBKx7M1BZwt2BqIcrNpWxLx0mqWuM76dGPsM0Fx01fWaHoz6 TEeJ3Uy0zyJVWMhLM5/Gl6yFOwIDAQABo4IClzCCApMwHQYDVR0OBBYEFF+lMOgO AGv0LgEGHehpkd3kXh7OMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTAyMEIvMzBERTQzMEFGMThFMTFFQUI0QUIxRTQ3QzRGOUFFMDIvNkNENzhGRThC NjlCMTFFRkFFQ0Q2NjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgQkBSkAADANBgkqhkiG9w0BAQsFAAOCAQEAhXe4Jnt13f4s 9LykuMrTP/ofOr1xNsOJvVy1XTJGh73BaXbJh53XsvelRn9VA0ax3yTi0BA5rdxA oz51HeVK0EbD38FaPN5eTBTyFCOj85D68qNDFfAkppNrn/8t8zI7lrj82G/Jf3jm 0oGHvDrtXXbMNcnQ6SkLZYo1f3GXZ3C+mmzSvVhEpvB//kb6WmKrv6DTlc1Spe1x RII3/NazuJXh/WXOspbj9w+OesHTPAEJ9hD1gzO9/n/1hWedkr4lZrNdVQC7siVj crbpAO7Yp9bDu7Jfeg4oF8WsmcCNbjk7MRYSpMC7s3R7SHlGfo/Fokyy7m3GRo4a G5lqugUceQ== -----END CERTIFICATE-----Generated at Sat Apr 5 15:02:39 2025 by rpki-client