$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/9FC6F664BE2A11EFA17DA82CC4F9AE02.roa File: 9FC6F664BE2A11EFA17DA82CC4F9AE02.roa (raw, json) Hash identifier: AaORu8sCMwbv8JHtt5/RekZXiyN9Tg46Q6eaQZHNsHU= Subject key identifier: C2:37:6D:2A:BC:A2:32:45:AF:E5:6E:AE:69:9D:05:46:54:C2:A6:0E Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 106F Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/9FC6F664BE2A11EFA17DA82CC4F9AE02.roa Signing time: Fri 28 Feb 2025 18:27:17 +0000 ROA not before: Fri 28 Feb 2025 18:27:17 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 141723 IP address blocks: 2404:3d40:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4207 (0x106f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B Validity Not Before: Feb 28 18:27:17 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67c20004-e8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:20:93:19:dc:08:a1:35:50:6a:a6:00:4a:b0: aa:3d:52:a4:f6:18:97:9e:94:0a:9c:2b:62:de:4a: 8c:37:9e:f4:63:77:ae:b7:9a:f3:cb:7c:0e:f2:d8: fa:c0:e7:54:d6:f3:72:78:73:35:ab:5a:f5:00:76: ac:8c:27:1b:e2:3f:9f:08:97:2b:8f:e0:b7:08:4c: 89:56:f7:e5:a6:d4:5f:da:05:6b:42:8b:a7:ca:92: 58:2a:fb:5b:83:b4:b0:4b:1c:ec:eb:a8:2c:67:c1: 30:01:58:a7:63:4c:85:34:41:ad:61:af:93:97:5f: 1b:b8:5c:89:49:9e:09:54:ee:86:0f:53:2a:cd:ce: 9e:7d:bd:a2:38:79:4c:6e:67:f8:25:99:b4:e4:18: 08:3d:b3:f6:90:b1:c3:dc:33:78:a7:3c:6a:9d:3d: e1:c7:c6:36:31:bf:06:40:7b:63:8f:a3:0e:31:7c: d0:24:30:e3:69:a9:26:d5:a9:34:3f:d8:c5:09:84: f7:1e:d3:2b:08:43:f4:f0:4a:54:a6:b7:fc:27:58: 9c:b7:d4:78:ef:f2:b2:80:f4:aa:7a:17:f7:11:43: a0:5a:4d:df:21:ce:67:12:71:67:ca:11:06:af:be: c5:59:b9:db:25:b6:f4:13:cc:b3:65:fb:cf:94:63: 3c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:37:6D:2A:BC:A2:32:45:AF:E5:6E:AE:69:9D:05:46:54:C2:A6:0E X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/9FC6F664BE2A11EFA17DA82CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:3d40:100::/48 Signature Algorithm: sha256WithRSAEncryption 57:5c:8b:42:1f:46:46:42:0b:7c:30:70:4d:00:89:7f:b3:76: 08:34:53:5b:d7:bc:57:ef:55:31:f8:75:ad:de:10:94:e0:f9: 0c:ec:72:47:f8:95:05:17:47:86:c5:24:5c:57:28:c9:e4:ac: 7c:1f:be:e4:cd:fa:eb:a9:21:2b:2d:c1:fd:e1:1d:ac:a1:ab: f5:b6:0a:6d:79:1d:99:8b:bd:d7:6d:df:a3:c8:e6:3b:8c:95: c2:c1:82:4d:17:43:d5:66:4e:ec:5f:bf:95:a6:a7:fa:fc:ab: 1b:bd:79:eb:1a:2a:7a:ea:31:0f:23:42:a3:20:53:e8:c7:9e: ab:ca:0a:da:d7:ec:be:8d:3a:15:6d:3a:bc:fc:ec:06:30:e5: 3d:ba:cd:9a:db:8f:c0:2a:33:db:25:81:69:85:a6:43:7f:a1: f4:a4:06:eb:0c:c9:11:31:20:bd:e4:81:06:e7:83:75:a8:9f: 38:44:9d:22:38:5f:c0:a2:f2:3d:ae:c3:e4:a8:a8:4e:26:93: 45:5d:80:c1:b5:75:bf:1a:cc:22:32:31:69:01:3b:23:9f:95: 10:69:94:71:23:00:9d:8f:64:71:04:d0:af:53:4a:a1:ec:ac: ca:70:0b:90:dd:07:bb:ab:ba:ba:61:93:87:dc:33:8c:08:ba: 08:d8:47:76 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICEG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjUwMjI4MTgyNzE3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyMDAwNC1lOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyCTGdwIoTVQaqYASrCqPVKk9hiXnpQKnCti3kqMN570Y3eut5rzy3wO8tj6 wOdU1vNyeHM1q1r1AHasjCcb4j+fCJcrj+C3CEyJVvflptRf2gVrQounypJYKvtb g7SwSxzs66gsZ8EwAVinY0yFNEGtYa+Tl18buFyJSZ4JVO6GD1Mqzc6efb2iOHlM bmf4JZm05BgIPbP2kLHD3DN4pzxqnT3hx8Y2Mb8GQHtjj6MOMXzQJDDjaakm1ak0 P9jFCYT3HtMrCEP08EpUprf8J1ict9R47/KygPSqehf3EUOgWk3fIc5nEnFnyhEG r77FWbnbJbb0E8yzZfvPlGM8oQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMI3bSq8 ojJFr+VurmmdBUZUwqYOMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFGMEIvQjU5NDE5RDIzMkVEMTFFOTlDOTU0QzI0QzRGOUFFMDIvOUZDNkY2NjRC RTJBMTFFRkExN0RBODJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBD1AAQAwDQYJKoZIhvcNAQELBQADggEBAFdci0IfRkZC C3wwcE0AiX+zdgg0U1vXvFfvVTH4da3eEJTg+Qzsckf4lQUXR4bFJFxXKMnkrHwf vuTN+uupISstwf3hHayhq/W2Cm15HZmLvddt36PI5juMlcLBgk0XQ9VmTuxfv5Wm p/r8qxu9eesaKnrqMQ8jQqMgU+jHnqvKCtrX7L6NOhVtOrz87AYw5T26zZrbj8Aq M9slgWmFpkN/ofSkBusMyRExIL3kgQbng3WonzhEnSI4X8Ci8j2uw+SoqE4mk0Vd gMG1db8azCIyMWkBOyOflRBplHEjAJ2PZHEE0K9TSqHsrMpwC5DdB7ururphk4fc M4wIugjYR3Y= -----END CERTIFICATE-----Generated at Sun Apr 6 06:47:52 2025 by rpki-client