$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/20B02A7A2C6D11EF9E3D5230C4F9AE02.roa File: 20B02A7A2C6D11EF9E3D5230C4F9AE02.roa (raw, json) Hash identifier: Rih/Wk+3SaEqReLV35PtgcGk6bxkA/LfVhv9nN+xmq4= Subject key identifier: E2:12:3A:B9:A1:31:CC:C0:2E:45:D4:64:E3:46:53:20:72:91:47:0E Certificate issuer: /CN=A913AE23/serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C Certificate serial: 91 Authority key identifier: E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/20B02A7A2C6D11EF9E3D5230C4F9AE02.roa Signing time: Tue 25 Feb 2025 01:25:06 +0000 ROA not before: Tue 25 Feb 2025 01:25:06 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 138933 IP address blocks: 2401:a820::/32 maxlen: 32 2401:a820:22::/48 maxlen: 48 2401:a820:100::/48 maxlen: 48 2401:a820:200::/48 maxlen: 48 2401:a820:300::/48 maxlen: 48 2401:a820:400::/48 maxlen: 48 2401:a820:500::/48 maxlen: 48 2401:a820:600::/48 maxlen: 48 2401:a820:700::/48 maxlen: 48 2401:a820:800::/48 maxlen: 48 2401:a820:900::/48 maxlen: 48 2401:a820:fce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE23 Validity Not Before: Feb 25 01:25:06 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67bd1bf2-cfad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:2e:96:ba:94:fe:ed:45:7e:ba:ad:db:fa: d7:17:8b:fb:4a:15:36:fa:0b:0d:5e:ae:2e:f4:33: 97:4f:4d:f4:eb:1c:d8:9b:52:22:9c:23:79:bf:1b: cb:79:50:43:81:b7:0e:39:cc:b9:98:4b:49:e1:fa: cd:4a:bc:6d:2b:d4:7a:44:50:e9:5d:97:66:72:15: a7:8e:91:6c:84:5b:fb:22:cf:74:cb:b1:2b:b8:bb: df:aa:7c:11:82:89:f0:13:9b:06:85:d2:b8:4f:7a: c5:ef:bb:09:af:58:1f:b4:2d:29:41:06:f8:12:d4: 2b:54:87:26:03:7e:10:7f:bb:f3:6c:c9:d3:a4:99: 61:1a:87:86:c7:e3:8e:0b:11:5f:cd:50:19:ac:81: 2d:32:83:c8:cd:e9:74:29:ea:fb:02:44:1c:86:c4: bb:4c:0e:fd:65:6d:e4:c4:a1:75:0b:3a:eb:46:fa: 97:a0:31:0a:f2:2d:ef:74:37:20:87:d8:d2:88:6e: 35:23:5d:c1:51:23:43:e5:b1:d2:45:c1:e3:c0:c5: 67:f7:0b:bc:52:89:ce:5e:75:f8:6a:90:44:a7:8f: d5:7d:8f:83:6b:30:65:b7:4f:d2:8c:6f:6b:ee:0d: 14:6b:a5:29:e9:b8:8f:28:fc:b2:b2:52:df:53:31: 7f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:12:3A:B9:A1:31:CC:C0:2E:45:D4:64:E3:46:53:20:72:91:47:0E X509v3 Authority Key Identifier: keyid:E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/20B02A7A2C6D11EF9E3D5230C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:a820::/32 Signature Algorithm: sha256WithRSAEncryption cf:1f:11:bb:2a:46:3c:3e:7f:43:0b:b2:aa:df:7e:dc:ee:c2: d5:74:5c:2f:a0:76:f1:33:63:15:bb:97:bf:32:bd:12:e1:07: f0:da:ab:5b:d1:7e:35:6b:e0:61:11:c9:05:9d:c1:e9:24:e7: 07:fe:4a:2f:44:ef:f6:b8:e0:21:7e:a2:7c:bb:b2:e8:e8:89: 3c:48:73:98:c5:00:03:88:31:72:ee:ba:f7:cb:21:86:cd:79: 52:27:ad:53:19:22:e5:b2:33:a8:56:04:b7:e6:bd:42:d9:84: 7b:d4:5c:69:23:fa:2a:aa:d6:e1:a4:ab:3b:1f:66:ce:e9:75: d6:a0:c6:be:c5:f5:29:d2:07:56:03:52:8a:15:1f:2f:f1:8c: 94:f1:72:63:c8:91:ef:82:51:2d:72:45:f8:57:a8:19:2b:81: 0c:a5:1e:5c:b1:e4:d3:4e:26:41:81:04:40:36:fc:ac:98:b5: 92:bc:b2:e2:6d:52:fb:b8:34:a3:a9:0a:b8:f4:ac:fa:89:b2: 77:76:be:34:56:45:d9:f3:21:7a:a2:48:55:0e:a0:8b:d3:92: a0:f4:b8:25:c3:6b:38:6b:f1:a0:0d:af:db:a2:68:23:62:10: 56:ef:58:ea:38:9c:bb:62:57:03:04:3d:80:62:20:01:84:17: 97:7b:a4:54 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMjMxMTAvBgNVBAUTKEU4ODc2QjUxQUIyQjE3NzQ0MENENEM0Q0QyRTRGMEE1 OThFMDM4MUMwHhcNMjUwMjI1MDEyNTA2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JkMWJmMi1jZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuu0ulrqU/u1Ffrqt2/rXF4v7ShU2+gsNXq4u9DOXT0306xzYm1IinCN5vxvL eVBDgbcOOcy5mEtJ4frNSrxtK9R6RFDpXZdmchWnjpFshFv7Is90y7EruLvfqnwR gonwE5sGhdK4T3rF77sJr1gftC0pQQb4EtQrVIcmA34Qf7vzbMnTpJlhGoeGx+OO CxFfzVAZrIEtMoPIzel0Ker7AkQchsS7TA79ZW3kxKF1CzrrRvqXoDEK8i3vdDcg h9jSiG41I13BUSND5bHSRcHjwMVn9wu8UonOXnX4apBEp4/VfY+DazBlt0/SjG9r 7g0Ua6Up6biPKPyyslLfUzF/xwIDAQABo4ICljCCApIwHQYDVR0OBBYEFOISOrmh MczALkXUZONGUyBykUcOMB8GA1UdIwQYMBaAFOiHa1GrKxd0QM1MTNLk8KWY4Dgc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUyMy8zQTcyQUJGQTJD NkMxMUVGQTM0Njk0MkRDNEY5QUUwMi82SWRyVWFzckYzUkF6VXhNMHVUd3BaamdP QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZJZHJVYXNyRjNSQXpVeE0wdVR3cFpqZ09Cdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFMjMvM0E3MkFCRkEyQzZDMTFFRkEzNDY5NDJEQzRGOUFFMDIvMjBCMDJBN0Ey QzZEMTFFRjlFM0Q1MjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAaggMA0GCSqGSIb3DQEBCwUAA4IBAQDPHxG7KkY8Pn9D C7Kq337c7sLVdFwvoHbxM2MVu5e/Mr0S4Qfw2qtb0X41a+BhEckFncHpJOcH/kov RO/2uOAhfqJ8u7Lo6Ik8SHOYxQADiDFy7rr3yyGGzXlSJ61TGSLlsjOoVgS35r1C 2YR71FxpI/oqqtbhpKs7H2bO6XXWoMa+xfUp0gdWA1KKFR8v8YyU8XJjyJHvglEt ckX4V6gZK4EMpR5cseTTTiZBgQRANvysmLWSvLLibVL7uDSjqQq49Kz6ibJ3dr40 VkXZ8yF6okhVDqCL05Kg9Lglw2s4a/GgDa/bomgjYhBW71jqOJy7YlcDBD2AYiAB hBeXe6RU -----END CERTIFICATE-----Generated at Sat Apr 5 06:15:23 2025 by rpki-client