$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/A1F2E73A19D511EF85D48428C4F9AE02.roa File: A1F2E73A19D511EF85D48428C4F9AE02.roa (raw, json) Hash identifier: ZX1QzTNwDgtR4R7k4FRyRV5Z8jQyiy5Ky4ynHhk2quU= Subject key identifier: 61:80:5A:0B:B6:F5:0D:08:38:2C:B3:8E:50:EE:64:3F:A7:0A:44:53 Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Certificate serial: 0682 Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/A1F2E73A19D511EF85D48428C4F9AE02.roa Signing time: Sun 02 Mar 2025 23:21:13 +0000 ROA not before: Sun 02 Mar 2025 23:21:13 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 141726 IP address blocks: 2407:1d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F48 Validity Not Before: Mar 2 23:21:13 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c4e7e9-8dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:4f:ed:36:95:c5:ab:3f:dd:eb:aa:80:54: 71:4f:53:e6:2a:33:b5:84:cd:2c:be:df:f2:1f:dc: e5:88:d8:a9:a2:ed:e9:c6:e4:f9:38:c5:55:f0:ec: 56:b1:3f:44:c9:50:39:06:d0:2d:f6:a1:6e:5c:5e: 41:89:8d:f9:9b:4f:5e:96:df:f7:09:17:1d:1d:b4: e2:71:ee:97:89:c9:90:69:69:9a:a5:93:6b:52:5a: 92:b6:66:bd:94:ca:47:a9:ad:c3:18:d3:46:07:19: 22:dd:f9:23:07:c2:28:b3:ad:b0:30:e3:18:99:3f: e5:fa:a2:69:f2:10:e9:e7:d5:db:ad:0f:a8:21:8d: 23:27:19:e6:1b:db:65:68:a0:a9:03:d9:1c:63:9f: ab:75:d6:dc:4c:63:57:e3:31:9c:d5:86:ec:f5:a7: 58:76:39:f0:6a:40:4b:10:a8:b2:da:e3:c7:ea:7c: d8:ca:6d:28:7c:3d:74:ad:f0:05:07:6c:03:89:84: 99:3c:9b:1c:f1:ed:98:a5:4e:fa:f7:28:54:bc:85: 47:16:79:4d:db:11:26:ae:36:a1:62:fa:62:db:09: 27:30:07:1e:fe:ac:88:dd:e1:9e:41:05:c6:72:f1: 2e:8e:02:b7:e7:c7:79:7c:cb:22:95:6b:bc:7a:2b: 6b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:80:5A:0B:B6:F5:0D:08:38:2C:B3:8E:50:EE:64:3F:A7:0A:44:53 X509v3 Authority Key Identifier: keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/A1F2E73A19D511EF85D48428C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:1d40::/48 Signature Algorithm: sha256WithRSAEncryption 18:78:ea:8f:bb:23:37:f9:0b:f3:b7:4f:be:aa:9c:9a:ea:b4: 3e:2d:fe:35:99:c9:cc:c0:29:88:61:77:36:1c:c3:65:e8:27: 28:0e:6a:99:0c:ba:57:50:cd:74:48:f4:df:a3:dc:9e:94:0f: af:00:5f:e2:07:bc:c2:23:27:bb:1b:9e:bf:4f:86:7d:02:d7: c1:33:02:71:79:82:2e:ad:c5:4c:86:c3:35:ce:bf:20:f9:9c: 52:85:4a:0f:1f:8a:f6:16:0c:39:83:35:84:d1:dd:a0:2a:81: 64:62:83:d1:a3:2e:63:32:c5:db:3a:d8:82:3e:e1:3b:0c:65: 6f:15:05:a0:09:6f:ae:e7:dd:ed:05:5a:f2:ef:c6:ac:72:99: 3a:96:29:b3:b2:7c:c1:93:c7:ed:73:74:63:1e:8d:79:1e:fd: 30:fb:6c:88:01:d1:a0:d8:ae:fd:89:31:a0:df:9d:15:66:44: 5d:db:5a:6d:f0:c8:7a:28:3e:22:7b:34:6b:e2:28:f9:1a:04: 99:76:50:e6:3b:8a:f6:30:de:ba:95:11:63:54:f7:47:f8:5b: b9:3d:45:cb:98:b9:10:2f:97:56:45:51:51:19:ca:15:38:6d: 80:d2:e3:d5:50:af:a7:07:e5:ce:d8:b0:84:4c:98:00:5d:06: 9f:fd:72:03 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG NTRBODVCNzkwHhcNMjUwMzAyMjMyMTEzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M0ZTdlOS04ZGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jZP7TaVxas/3euqgFRxT1PmKjO1hM0svt/yH9zliNipou3pxuT5OMVV8OxW sT9EyVA5BtAt9qFuXF5BiY35m09elt/3CRcdHbTice6XicmQaWmapZNrUlqStma9 lMpHqa3DGNNGBxki3fkjB8Ios62wMOMYmT/l+qJp8hDp59XbrQ+oIY0jJxnmG9tl aKCpA9kcY5+rddbcTGNX4zGc1Ybs9adYdjnwakBLEKiy2uPH6nzYym0ofD10rfAF B2wDiYSZPJsc8e2YpU769yhUvIVHFnlN2xEmrjahYvpi2wknMAce/qyI3eGeQQXG cvEujgK358d5fMsilWu8eitr3QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGGAWgu2 9Q0IOCyzjlDuZD+nCkRTMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGNDgvRDlFRjk5QzA2RDYzMTFFQjlERjgxOTQ5QzRGOUFFMDIvQTFGMkU3M0Ex OUQ1MTFFRjg1RDQ4NDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBx1AAAAwDQYJKoZIhvcNAQELBQADggEBABh46o+7Izf5 C/O3T76qnJrqtD4t/jWZyczAKYhhdzYcw2XoJygOapkMuldQzXRI9N+j3J6UD68A X+IHvMIjJ7sbnr9Phn0C18EzAnF5gi6txUyGwzXOvyD5nFKFSg8fivYWDDmDNYTR 3aAqgWRig9GjLmMyxds62II+4TsMZW8VBaAJb67n3e0FWvLvxqxymTqWKbOyfMGT x+1zdGMejXke/TD7bIgB0aDYrv2JMaDfnRVmRF3bWm3wyHooPiJ7NGviKPkaBJl2 UOY7ivYw3rqVEWNU90f4W7k9RcuYuRAvl1ZFUVEZyhU4bYDS49VQr6cH5c7YsIRM mABdBp/9cgM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:37:02 2025 by rpki-client