$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/305F24342A0811EE9D810010C4F9AE02.roa File: 305F24342A0811EE9D810010C4F9AE02.roa (raw, json) Hash identifier: Z2pbtlXOSAO+jQlJKET8nsnjJlOh2Bme2k6kxjJMw0Q= Subject key identifier: 91:E8:33:3F:BC:EC:30:FD:73:7E:16:B9:EB:E9:79:87:96:BE:CB:28 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0B33 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/305F24342A0811EE9D810010C4F9AE02.roa Signing time: Wed 02 Apr 2025 19:50:34 +0000 ROA not before: Wed 02 Apr 2025 19:50:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55320 IP address blocks: 2404:a140:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF Validity Not Before: Apr 2 19:50:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67ed950a-bc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:89:c4:c6:fb:3d:82:fa:27:50:9a:f3:15: b0:1f:de:50:6a:a3:f9:b5:81:ab:3b:ce:91:e1:af: ac:21:21:3d:59:b7:ef:e8:71:47:ef:aa:5d:65:d5: 6f:ed:ea:66:a5:37:d7:74:d1:d0:86:4f:32:6f:2f: 76:cc:3a:44:de:8c:44:cd:9b:06:04:95:dc:f8:81: 17:36:5a:7f:2d:af:85:b3:8d:05:0c:11:c9:5c:31: d9:fc:35:ee:5f:26:c7:c1:6d:1e:22:9f:c7:fe:6c: 93:b1:56:bc:a6:55:6e:61:54:56:a9:1b:e3:79:0c: 61:9e:8e:a8:d5:2f:9b:53:13:e3:67:93:c2:ad:5a: dc:43:f2:d6:7f:fe:fa:1a:6e:0d:05:d9:50:67:08: 79:b6:6f:9e:21:8f:24:8e:d3:6f:20:6d:2a:be:35: 80:27:80:16:78:cc:56:a0:ec:6b:1b:0c:6a:24:40: 75:d2:2d:de:a7:9f:26:4d:86:1d:2b:ef:13:73:46: 81:1d:d2:75:e7:dd:ae:b2:8e:19:b6:1a:31:52:dc: db:b4:b6:56:fe:ca:b6:5a:f6:81:e7:6e:b9:6d:b6: a4:8b:8a:73:6f:f4:f1:67:2e:83:b7:89:7c:e8:40: ac:25:00:4b:95:cf:2d:a4:e1:a4:55:19:5d:e5:5d: a0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E8:33:3F:BC:EC:30:FD:73:7E:16:B9:EB:E9:79:87:96:BE:CB:28 X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/305F24342A0811EE9D810010C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:a140:22::/48 Signature Algorithm: sha256WithRSAEncryption 10:0e:76:09:49:b2:c2:fb:0f:7b:f9:26:7e:ef:82:f4:6a:6a: cb:b4:b3:36:3a:29:6d:27:0a:2f:b1:ce:39:e1:43:9b:f9:54: 46:d5:e7:ba:18:ac:8b:61:cf:2e:2e:f5:9f:ff:06:21:10:3f: a7:8f:a6:62:d2:08:0d:07:1d:62:24:80:aa:4a:32:9b:7b:79: a5:02:23:0a:1f:b5:0c:7e:36:36:b9:e2:3d:ce:d8:84:94:f5: da:a4:ec:b9:51:e3:d9:b9:c3:4b:93:61:08:d6:32:f6:fc:80: 5f:c6:ac:e6:47:78:87:bd:88:c4:e2:15:22:f1:29:bb:f1:b3: 0a:79:b1:ac:1a:8f:35:c3:2d:a9:2d:a7:18:a2:e1:87:65:21: 54:a8:6d:98:2a:7d:df:cf:a3:3f:e5:e8:21:58:62:82:4c:12: a3:4f:10:ef:2a:dc:36:b3:89:65:9a:d5:68:e4:0a:e6:61:02: 1a:c3:93:c4:a7:ed:cc:cf:73:8d:57:8e:8b:ac:8a:82:6d:1a: 25:06:11:17:39:1d:c9:25:2c:b3:d1:fa:80:33:28:fe:0a:d2: 6c:5d:fa:9c:23:68:97:39:44:a7:94:86:ae:d3:a9:6b:54:dc: bd:2d:15:7c:94:78:62:07:e5:84:a3:52:e6:d8:86:8c:77:62: d6:41:6c:e1 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjUwNDAyMTk1MDM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkOTUwYS1iYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwriJxMb7PYL6J1Ca8xWwH95QaqP5tYGrO86R4a+sISE9Wbfv6HFH76pdZdVv 7epmpTfXdNHQhk8yby92zDpE3oxEzZsGBJXc+IEXNlp/La+Fs40FDBHJXDHZ/DXu XybHwW0eIp/H/myTsVa8plVuYVRWqRvjeQxhno6o1S+bUxPjZ5PCrVrcQ/LWf/76 Gm4NBdlQZwh5tm+eIY8kjtNvIG0qvjWAJ4AWeMxWoOxrGwxqJEB10i3ep58mTYYd K+8Tc0aBHdJ1592uso4ZthoxUtzbtLZW/sq2WvaB5265bbaki4pzb/TxZy6Dt4l8 6ECsJQBLlc8tpOGkVRld5V2gawIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJHoMz+8 7DD9c34WuevpeYeWvssoMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM4QUYvRDFGNjRFNzI1RUVGMTFFQUE1NEU2QzZDQzRGOUFFMDIvMzA1RjI0MzQy QTA4MTFFRTlEODEwMDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBKFAACIwDQYJKoZIhvcNAQELBQADggEBABAOdglJssL7 D3v5Jn7vgvRqasu0szY6KW0nCi+xzjnhQ5v5VEbV57oYrIthzy4u9Z//BiEQP6eP pmLSCA0HHWIkgKpKMpt7eaUCIwoftQx+Nja54j3O2ISU9dqk7LlR49m5w0uTYQjW Mvb8gF/GrOZHeIe9iMTiFSLxKbvxswp5sawajzXDLaktpxii4YdlIVSobZgqfd/P oz/l6CFYYoJMEqNPEO8q3DaziWWa1WjkCuZhAhrDk8Sn7czPc41XjousioJtGiUG ERc5HcklLLPR+oAzKP4K0mxd+pwjaJc5RKeUhq7TqWtU3L0tFXyUeGIH5YSjUubY hox3YtZBbOE= -----END CERTIFICATE-----Generated at Sat Apr 5 07:12:22 2025 by rpki-client