$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/879CFF8EE09E11EFAB364253C4F9AE02.roa File: 879CFF8EE09E11EFAB364253C4F9AE02.roa (raw, json) Hash identifier: kCo0wcr5hL64P6FXIbDjXCO02F9fPfzca6P+P/sgaPo= Subject key identifier: 81:F8:48:79:2C:CB:13:63:15:C6:3A:F7:12:3E:14:8E:8E:31:F5:CA Certificate issuer: /CN=A911DB66/serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613 Certificate serial: 02 Authority key identifier: F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/879CFF8EE09E11EFAB364253C4F9AE02.roa Signing time: Sat 01 Feb 2025 13:14:55 +0000 ROA not before: Sat 01 Feb 2025 13:14:55 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 149179 IP address blocks: 2001:df4:ed40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 06:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66 Validity Not Before: Feb 1 13:14:55 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=679e1e4f-5b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:92:d3:93:4d:51:8d:88:0b:e1:9e:55:cb: 09:19:3a:88:e9:42:c3:9b:98:f1:73:8a:2c:84:95: 2c:ee:fe:e5:26:cd:98:3d:c4:fa:a0:61:53:e4:5b: 3d:2e:8b:37:28:b1:da:e3:cf:8e:e0:f6:ce:50:be: 79:00:3a:b6:8b:91:57:b3:25:a1:fd:24:4f:db:8b: 5b:6b:8f:46:36:22:6b:31:9f:a4:73:1c:32:72:cc: 05:ba:b6:92:cc:7c:fd:c9:bd:90:51:d6:0e:2c:59: ff:57:ee:89:bf:2f:59:3c:0b:7e:3c:86:ca:54:92: 76:e6:9b:cc:c7:bc:69:9f:c4:de:f3:c7:43:5a:25: 04:18:9f:82:d1:5d:50:0a:99:86:1a:2c:a9:f5:bd: c9:43:7e:b6:76:1b:98:20:ab:7f:bf:1f:cf:7a:ea: 6e:f4:b2:4f:99:3c:6b:25:88:90:ba:d2:c2:13:0d: 6b:73:92:c2:70:93:70:74:ad:86:88:96:0b:bb:74: 80:7c:05:92:e8:5f:fc:dd:7d:0e:cc:13:f8:33:ef: 0e:01:8c:00:49:69:2a:67:63:68:58:62:13:2e:c9: d4:7c:c8:e3:68:85:3c:1e:86:c5:83:c7:09:8c:25: bb:f0:ea:4b:93:e9:a1:27:28:7f:6c:8f:37:b8:65: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F8:48:79:2C:CB:13:63:15:C6:3A:F7:12:3E:14:8E:8E:31:F5:CA X509v3 Authority Key Identifier: keyid:F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/879CFF8EE09E11EFAB364253C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:ed40::/48 Signature Algorithm: sha256WithRSAEncryption 68:ed:47:72:84:1d:15:aa:a8:95:77:cf:1c:71:ec:2f:29:c4: 3d:ef:06:cf:11:b1:54:78:93:58:64:99:c0:8c:fe:ae:f6:f3: 8b:e2:a8:18:90:a7:f8:6e:51:40:3f:96:37:36:4b:f9:ad:45: e7:b2:f3:ff:3c:ae:fb:56:35:2f:3a:b8:1b:47:92:2b:32:41: 13:61:f1:68:4e:14:ef:7e:c9:82:c5:d2:72:c3:4f:c4:16:48: c7:fc:94:89:6d:a7:fb:d5:a9:b2:1a:71:40:22:99:86:61:63: f1:bb:8f:b7:60:2c:79:37:48:d7:e1:13:4b:88:95:1f:03:e7: 23:25:ae:56:17:cd:33:82:78:62:a9:27:1f:d5:e3:e5:c9:c6: ca:cc:ba:47:2d:8e:7f:b5:06:25:31:31:bd:a3:d7:02:fa:2b: 4e:bc:37:d5:4b:13:64:1b:af:88:93:5d:b5:5a:6b:b2:c8:3c: 76:ab:18:9f:32:aa:5d:fe:20:25:cf:eb:dd:d5:d0:db:cf:0b: 5d:55:62:b6:85:9f:dd:53:53:df:46:5e:a6:e6:59:2f:2e:71: af:42:d1:57:b1:99:a4:16:b8:13:4a:f8:6c:e9:31:d4:8f:58: e9:99:ee:9b:11:0f:ee:af:5c:4a:34:31:bc:3b:48:bd:2e:63: b6:c6:46:06 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REI2NjExMC8GA1UEBRMoRjI5RjE1MzU3NDc1Qjg3NDZGQUQ3ODkzNkEwRkNEODUy NkUyRDYxMzAeFw0yNTAyMDExMzE0NTVaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OWUxZTRmLTViN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChYpLTk01RjYgL4Z5VywkZOojpQsObmPFziiyElSzu/uUmzZg9xPqgYVPkWz0u izcosdrjz47g9s5QvnkAOraLkVezJaH9JE/bi1trj0Y2Imsxn6RzHDJyzAW6tpLM fP3JvZBR1g4sWf9X7om/L1k8C348hspUknbmm8zHvGmfxN7zx0NaJQQYn4LRXVAK mYYaLKn1vclDfrZ2G5ggq3+/H8966m70sk+ZPGsliJC60sITDWtzksJwk3B0rYaI lgu7dIB8BZLoX/zdfQ7ME/gz7w4BjABJaSpnY2hYYhMuydR8yONohTwehsWDxwmM Jbvw6kuT6aEnKH9sjze4Zdu7AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUgfhIeSzL E2MVxjr3Ej4Ujo4x9cowHwYDVR0jBBgwFoAU8p8VNXR1uHRvrXiTag/NhSbi1hMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEQjY2LzgwNjU5N0FDRTA5 QTExRUZCNjNBODEzMEM0RjlBRTAyLzhwOFZOWFIxdUhSdnJYaVRhZ19OaFNiaTFo TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHA4Vk5YUjF1SFJ2clhpVGFnX05oU2JpMWhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REI2Ni84MDY1OTdBQ0UwOUExMUVGQjYzQTgxMzBDNEY5QUUwMi84NzlDRkY4RUUw OUUxMUVGQUIzNjQyNTNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfTtQDANBgkqhkiG9w0BAQsFAAOCAQEAaO1HcoQdFaqo lXfPHHHsLynEPe8GzxGxVHiTWGSZwIz+rvbzi+KoGJCn+G5RQD+WNzZL+a1F57Lz /zyu+1Y1Lzq4G0eSKzJBE2HxaE4U737JgsXScsNPxBZIx/yUiW2n+9WpshpxQCKZ hmFj8buPt2AseTdI1+ETS4iVHwPnIyWuVhfNM4J4YqknH9Xj5cnGysy6Ry2Of7UG JTExvaPXAvorTrw31UsTZBuviJNdtVprssg8dqsYnzKqXf4gJc/r3dXQ288LXVVi toWf3VNT30ZepuZZLy5xr0LRV7GZpBa4E0r4bOkx1I9Y6ZnumxEP7q9cSjQxvDtI vS5jtsZGBg== -----END CERTIFICATE-----Generated at Tue Apr 8 14:03:49 2025 by rpki-client