$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa File: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (raw, json) Hash identifier: ShmWGPi16fistc8ldhgNj0wn72/E+SCOVnORBpUTPkI= Subject key identifier: 7D:40:DB:11:D3:D8:94:81:02:AF:9D:6A:CF:61:F0:1E:25:30:12:3D Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Certificate serial: 10E6 Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa Signing time: Fri 28 Feb 2025 18:26:59 +0000 ROA not before: Fri 28 Feb 2025 18:26:59 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 138560 IP address blocks: 2404:43c0::/32 maxlen: 32 2404:43c0::/48 maxlen: 48 2404:43c0:1::/48 maxlen: 48 2404:43c0:2::/48 maxlen: 48 2404:43c0:3::/48 maxlen: 48 2404:43c0:4::/48 maxlen: 48 2404:43c0:5::/48 maxlen: 48 2404:43c0:6::/48 maxlen: 48 2404:43c0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4326 (0x10e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129797 Validity Not Before: Feb 28 18:26:59 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c1fff3-1326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:ae:f8:8c:74:26:ee:d9:39:21:e1:05:c5: 33:4d:aa:21:49:3c:8f:16:ef:23:ee:32:2a:9b:97: d8:1c:55:4a:b9:f7:44:1a:c9:49:ba:09:e4:8b:bc: 5c:7f:24:9c:11:5f:bb:25:ab:fd:fe:4d:b9:f5:ba: 97:1d:a8:1f:ff:ea:92:75:9d:fc:0a:81:2c:66:8e: 20:dd:21:6b:8e:5b:ee:45:a7:af:a6:4b:e9:a2:6b: a7:b3:03:ba:c4:02:9e:07:c8:89:61:c1:7e:fb:62: 89:99:24:61:da:7d:28:18:ec:17:16:1c:d4:71:4e: 99:89:2d:63:eb:23:68:4f:e6:83:bd:6c:f6:b7:69: 91:54:d5:e0:5f:98:02:cd:bb:46:06:70:16:99:c3: 8b:01:ab:82:19:37:db:eb:03:a9:b7:04:01:1c:17: c3:ef:ba:0e:8a:32:ef:eb:c4:85:05:0f:5a:e8:ef: e8:de:77:e6:89:e6:01:39:55:5d:ba:0e:7d:cc:ca: be:26:9f:11:74:57:40:dd:35:9d:12:e6:a4:78:b0: 66:1c:3d:f9:2d:97:58:e3:d7:ed:c9:46:e1:d3:d9: 42:97:a7:28:a8:97:b0:a9:0d:c0:75:a8:06:49:43: b5:a2:7b:16:83:fd:0f:bb:a8:4b:85:ff:83:f2:7e: eb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:40:DB:11:D3:D8:94:81:02:AF:9D:6A:CF:61:F0:1E:25:30:12:3D X509v3 Authority Key Identifier: keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:43c0::/32 Signature Algorithm: sha256WithRSAEncryption 55:e5:9c:16:57:51:2f:9b:4a:ab:10:09:c1:72:68:89:b2:39: 48:cb:6b:2a:d3:24:5c:68:41:40:39:25:fb:9b:8d:68:85:f4: 97:e4:1f:52:53:4d:07:77:62:2b:0a:90:c9:95:fb:7a:e1:77: e3:47:23:15:f7:89:34:24:72:0b:ac:54:b8:a8:bd:4e:9a:47: 42:dd:0e:18:b4:ab:82:1e:dd:22:68:50:47:03:63:f4:53:42: 2f:66:ee:13:b1:22:43:a4:b4:76:1f:64:40:59:84:f1:27:cf: 43:bc:9a:1b:8d:bd:44:ba:12:31:46:81:d0:0c:c0:d2:e3:28: 10:ec:9c:20:de:c2:b8:d6:1c:d3:69:3d:fe:d1:39:4a:97:52: ad:99:c5:e5:f9:7b:ae:46:d8:19:86:ab:de:92:e1:74:70:35: ee:ba:46:ef:54:ca:fc:b5:9a:5a:c7:44:fb:1b:53:7e:91:91: ac:e1:c0:b4:91:c6:16:ce:df:49:89:6f:e7:06:d8:58:3a:77: 44:6a:ef:75:60:2e:00:e6:d3:e7:78:79:79:31:98:7d:4e:62: ad:11:9e:67:7c:7f:c0:9d:94:fa:77:74:c3:89:86:83:a2:05: 81:43:76:00:bc:ed:15:3a:64:54:f0:f0:93:9e:56:b3:a9:cd: b4:0c:8d:3f -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICEOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OTcxMTAvBgNVBAUTKDcwQkQxQTVEOTUxMkJGNkRFMEJBNjkyNTNEQkJGMDEx MDNFNTNBNDMwHhcNMjUwMjI4MTgyNjU5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MxZmZmMy0xMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+6u+Ix0Ju7ZOSHhBcUzTaohSTyPFu8j7jIqm5fYHFVKufdEGslJugnki7xc fyScEV+7Jav9/k259bqXHagf/+qSdZ38CoEsZo4g3SFrjlvuRaevpkvpomunswO6 xAKeB8iJYcF++2KJmSRh2n0oGOwXFhzUcU6ZiS1j6yNoT+aDvWz2t2mRVNXgX5gC zbtGBnAWmcOLAauCGTfb6wOptwQBHBfD77oOijLv68SFBQ9a6O/o3nfmieYBOVVd ug59zMq+Jp8RdFdA3TWdEuakeLBmHD35LZdY49ftyUbh09lCl6coqJewqQ3AdagG SUO1onsWg/0Pu6hLhf+D8n7rrQIDAQABo4ICljCCApIwHQYDVR0OBBYEFH1A2xHT 2JSBAq+das9h8B4lMBI9MB8GA1UdIwQYMBaAFHC9Gl2VEr9t4LppJT278BED5TpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc5Ny8wOUYyRDk5NDFB MjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3YyM2d1bWtsUGJ2d0VRUGxP a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGFYWlVTdjIzZ3Vta2xQYnZ3RVFQbE9rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk3OTcvMDlGMkQ5OTQxQTIyMTFFOUJDMDZEMzBBQzRGOUFFMDIvNkI1QTgwQjgw QjgyMTFFQUFENUI2QjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBEPAMA0GCSqGSIb3DQEBCwUAA4IBAQBV5ZwWV1Evm0qr EAnBcmiJsjlIy2sq0yRcaEFAOSX7m41ohfSX5B9SU00Hd2IrCpDJlft64XfjRyMV 94k0JHILrFS4qL1OmkdC3Q4YtKuCHt0iaFBHA2P0U0IvZu4TsSJDpLR2H2RAWYTx J89DvJobjb1EuhIxRoHQDMDS4ygQ7Jwg3sK41hzTaT3+0TlKl1KtmcXl+XuuRtgZ hqvekuF0cDXuukbvVMr8tZpax0T7G1N+kZGs4cC0kcYWzt9JiW/nBthYOndEau91 YC4A5tPneHl5MZh9TmKtEZ5nfH/AnZT6d3TDiYaDogWBQ3YAvO0VOmRU8PCTnlaz qc20DI0/ -----END CERTIFICATE-----Generated at Sat Apr 5 02:07:55 2025 by rpki-client