$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/03960D4AFF6411EFB94AD726C4F9AE02.roa File: 03960D4AFF6411EFB94AD726C4F9AE02.roa (raw, json) Hash identifier: Dd+h++CV6wNZJ7QO0n2rdW4OE3i2iMOeGWoydYTSCjs= Subject key identifier: 80:72:8F:4E:F9:1B:18:BA:46:FE:50:80:A9:D4:4E:9A:72:85:2B:87 Certificate issuer: /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790 Certificate serial: 1149 Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/03960D4AFF6411EFB94AD726C4F9AE02.roa Signing time: Wed 12 Mar 2025 17:04:10 +0000 ROA not before: Wed 12 Mar 2025 17:04:10 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133749 IP address blocks: 2404:5c0:8740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 17:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4425 (0x1149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F600 Validity Not Before: Mar 12 17:04:10 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67d1be89-c02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:e1:89:34:c2:50:ba:aa:d9:b5:a2:c5:a7: 48:59:ba:09:29:cd:4c:f9:77:ac:3a:85:b0:e9:59: 44:49:1e:20:9b:9c:16:18:bf:6f:c3:ff:5f:7a:3a: 4a:30:28:2e:88:45:5c:b9:f9:e5:e1:47:6b:6e:a0: dc:62:d4:aa:e8:32:34:e3:6a:c1:e4:65:56:57:7e: 03:3f:c7:7d:19:38:dc:ae:e0:5c:98:eb:95:ec:f4: 81:92:79:3f:72:7d:73:8b:c7:81:b3:e4:43:12:c9: eb:63:2c:7d:90:0f:a7:93:5c:11:9f:c8:7f:6b:65: 35:a0:08:32:69:5b:d0:59:77:f6:64:50:1c:8d:36: d9:37:19:01:de:b8:de:e6:a2:36:f1:b0:28:1d:71: a5:aa:03:30:e8:1f:80:40:fe:3b:6d:e1:85:94:30: 34:99:60:19:fb:aa:fe:92:24:3e:69:40:09:9e:bc: e6:af:f6:6a:8e:99:ae:75:84:bd:b2:17:b1:f0:cb: 5c:4c:d4:55:d4:ff:ca:c3:ae:b3:f7:0c:60:99:32: e9:d8:b3:9d:3b:10:14:93:82:e7:cf:d3:83:00:de: 31:b0:53:31:8c:48:d1:2c:7b:06:9e:cd:b3:4c:b7: 23:63:7d:1f:f3:33:41:cc:1c:f1:a7:e9:75:60:3a: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:72:8F:4E:F9:1B:18:BA:46:FE:50:80:A9:D4:4E:9A:72:85:2B:87 X509v3 Authority Key Identifier: keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/03960D4AFF6411EFB94AD726C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:5c0:8740::/48 Signature Algorithm: sha256WithRSAEncryption c9:e6:48:10:67:c3:7d:27:76:84:d5:26:82:b0:ec:9a:9a:b6: 80:8e:ca:22:18:f7:c0:37:53:7d:4e:d5:d8:73:1b:a5:fe:6b: 5b:a7:10:c0:0b:6a:92:9a:9d:3b:20:81:4f:67:11:c0:9d:28: d1:e9:be:09:fe:bd:ed:68:70:8a:82:5a:5c:fb:d9:d2:6c:27: a2:d7:13:21:f2:70:3f:a6:12:23:97:bc:88:9e:d4:6a:43:93: cf:c8:b4:57:1d:c5:6f:e4:1b:b9:69:8c:12:e4:2a:33:d2:ed: 32:2d:82:64:d8:66:52:83:b8:4d:ec:bc:e7:63:70:32:3d:ba: 63:1e:5b:99:3b:10:fe:d8:29:40:2b:b9:7c:55:17:a1:a5:c1: bf:46:32:ff:5f:54:7e:1a:7a:c6:fa:10:8d:93:67:e1:53:4e: f9:14:df:8b:97:9b:14:d3:9d:0c:1f:d3:2b:f8:a6:92:3a:f5: f1:ae:a5:12:03:27:76:29:ba:23:2f:08:44:75:10:76:5f:c9: 51:22:30:d5:1d:e2:34:eb:88:ee:12:0c:67:0a:ec:0e:ec:98: 7f:c7:46:ba:d5:b7:38:cb:5a:24:c3:e1:99:36:77:31:69:6b: 00:70:73:2a:47:af:69:f2:b4:69:b8:e9:5e:e0:09:23:38:22: 41:66:e8:a4 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICEUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2MDAxMTAvBgNVBAUTKDA4REI4MTVCNzMxMEQ4N0VFRkFGQ0Q1MkNGMjYxQ0Qx NTgyOUY3OTAwHhcNMjUwMzEyMTcwNDEwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QxYmU4OS1jMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVPhiTTCULqq2bWixadIWboJKc1M+XesOoWw6VlESR4gm5wWGL9vw/9fejpK MCguiEVcufnl4UdrbqDcYtSq6DI042rB5GVWV34DP8d9GTjcruBcmOuV7PSBknk/ cn1zi8eBs+RDEsnrYyx9kA+nk1wRn8h/a2U1oAgyaVvQWXf2ZFAcjTbZNxkB3rje 5qI28bAoHXGlqgMw6B+AQP47beGFlDA0mWAZ+6r+kiQ+aUAJnrzmr/ZqjpmudYS9 shex8MtcTNRV1P/Kw66z9wxgmTLp2LOdOxAUk4Lnz9ODAN4xsFMxjEjRLHsGns2z TLcjY30f8zNBzBzxp+l1YDrZ6QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIByj075 Gxi6Rv5QgKnUTppyhSuHMB8GA1UdIwQYMBaAFAjbgVtzENh+76/NUs8mHNFYKfeQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjYwMC85RjYxNUJCRTA1 OTUxMUU5OTkyMEQyNzFDNEY5QUUwMi9DTnVCVzNNUTJIN3ZyODFTenlZYzBWZ3A5 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOdUJXM01RMkg3dnI4MVN6eVljMFZncDk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Y2MDAvOUY2MTVCQkUwNTk1MTFFOTk5MjBEMjcxQzRGOUFFMDIvMDM5NjBENEFG RjY0MTFFRkI5NEFENzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBAXAh0AwDQYJKoZIhvcNAQELBQADggEBAMnmSBBnw30n doTVJoKw7JqatoCOyiIY98A3U31O1dhzG6X+a1unEMALapKanTsggU9nEcCdKNHp vgn+ve1ocIqCWlz72dJsJ6LXEyHycD+mEiOXvIie1GpDk8/ItFcdxW/kG7lpjBLk KjPS7TItgmTYZlKDuE3svOdjcDI9umMeW5k7EP7YKUAruXxVF6Glwb9GMv9fVH4a esb6EI2TZ+FTTvkU34uXmxTTnQwf0yv4ppI69fGupRIDJ3YpuiMvCER1EHZfyVEi MNUd4jTriO4SDGcK7A7smH/HRrrVtzjLWiTD4Zk2dzFpawBwcypHr2nytGm46V7g CSM4IkFm6KQ= -----END CERTIFICATE-----Generated at Sat Apr 12 08:59:30 2025 by rpki-client