$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/1F8378E6BCBD11EBAC9A4744C4F9AE02.roa File: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (raw, json) Hash identifier: J5LxjosxnnfdXaMAoaZ/PL1BfkizkN1e40crDyxzXgM= Subject key identifier: 87:06:1B:CF:CA:58:96:72:1E:2E:50:51:F8:4C:3A:6C:7B:05:B9:3E Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 12B7 Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/1F8378E6BCBD11EBAC9A4744C4F9AE02.roa Signing time: Wed 04 Dec 2024 17:25:11 +0000 ROA not before: Wed 04 Dec 2024 17:25:11 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 395092 IP address blocks: 2403:cfc0:1006::/48 maxlen: 48 2403:cfc0:100c::/48 maxlen: 48 2403:cfc0:1110::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4791 (0x12b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE Validity Not Before: Dec 4 17:25:11 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67509077-fd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:73:95:f9:28:5e:1a:8c:5d:4e:6c:4a:b0: 5b:41:65:aa:99:f2:a4:bb:7a:e0:d9:be:41:37:1c: 1c:c5:4f:1c:92:a3:e9:01:7f:5f:a1:92:10:e8:97: ba:31:dd:20:6b:98:45:ad:ab:cf:2c:59:24:b1:00: 65:70:1f:de:e1:02:fc:b2:bf:a4:fd:77:42:85:48: d2:d6:90:8e:4d:10:8c:4f:e3:47:81:a8:e8:a6:18: 2c:9e:e7:e4:46:09:c5:bb:fc:68:a4:36:f3:b2:39: 56:da:cb:46:32:c3:7d:2d:bf:90:c0:6f:81:43:6a: b5:a3:d1:c4:3b:6c:b8:39:6c:bf:a6:d4:7b:37:47: 3d:46:25:8c:61:26:1a:09:40:2a:18:c1:e5:a2:1c: 5b:50:a9:d1:9a:85:ee:75:0c:41:a3:d6:86:e1:53: e0:76:4d:f7:c1:23:d0:e2:9b:4b:ae:47:5b:df:36: be:d2:9d:92:62:07:19:e9:3b:44:bf:71:e8:19:fd: 7b:15:93:48:83:05:ac:c9:e3:6e:6a:3f:a8:3b:45: a1:d5:52:bd:a1:2a:8a:bf:e9:d9:81:62:11:b9:10: cb:9e:3d:c9:04:36:da:a0:3c:05:c6:47:bb:86:5a: a3:4b:15:7a:94:bf:75:10:73:e1:77:c0:a2:76:09: 4b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:06:1B:CF:CA:58:96:72:1E:2E:50:51:F8:4C:3A:6C:7B:05:B9:3E X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/1F8378E6BCBD11EBAC9A4744C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:cfc0:1006::/48 2403:cfc0:100c::/48 2403:cfc0:1110::/44 Signature Algorithm: sha256WithRSAEncryption 30:78:db:e4:1e:5d:25:23:be:2b:0f:2c:2d:0a:09:a0:5e:ec: da:f0:70:18:f9:72:b6:95:4f:67:2d:73:d6:60:e0:cb:0c:09: 9c:f1:42:4b:5f:78:37:5e:5e:3d:1e:d2:25:23:9b:df:d8:d6: c0:80:7f:d2:c4:85:43:de:32:1d:82:51:b0:f1:5f:85:b9:66: b7:21:35:77:6a:bf:31:09:b9:42:47:0f:45:74:41:c5:cf:62: 59:06:71:7d:6b:a4:99:15:67:e4:b9:00:5d:1d:a2:f2:e3:1d: 64:9a:e1:9f:1d:19:71:dc:ab:e9:52:34:6e:03:36:0b:74:cf: a5:97:26:53:4a:85:6d:e3:9c:8b:5a:e1:7b:78:7e:fc:dc:af: ac:4e:68:51:1a:a9:ef:df:2d:d8:85:66:17:fe:9f:ce:bd:30: a9:a5:f2:d2:d7:e7:47:b3:19:57:d3:68:4b:ca:7c:09:79:e5: ed:84:30:f7:f5:4e:cb:8c:5a:42:53:a6:23:49:f7:1b:6c:17: 78:c0:ae:48:7a:1a:45:e8:03:51:96:0d:1f:69:0e:13:3a:dd: 5a:2c:70:db:17:ec:b6:c0:cc:15:8d:f7:f4:e5:0c:e0:5b:c1: 7e:87:3d:a6:07:ca:0f:b9:b1:4e:bb:34:93:59:58:c5:48:5c: b3:10:bd:d7 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICErcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjQxMjA0MTcyNTExWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwOTA3Ny1mZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKdzlfkoXhqMXU5sSrBbQWWqmfKku3rg2b5BNxwcxU8ckqPpAX9foZIQ6Je6 Md0ga5hFravPLFkksQBlcB/e4QL8sr+k/XdChUjS1pCOTRCMT+NHgajophgsnufk RgnFu/xopDbzsjlW2stGMsN9Lb+QwG+BQ2q1o9HEO2y4OWy/ptR7N0c9RiWMYSYa CUAqGMHlohxbUKnRmoXudQxBo9aG4VPgdk33wSPQ4ptLrkdb3za+0p2SYgcZ6TtE v3HoGf17FZNIgwWsyeNuaj+oO0Wh1VK9oSqKv+nZgWIRuRDLnj3JBDbaoDwFxke7 hlqjSxV6lL91EHPhd8CidglLNQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIcGG8/K WJZyHi5QUfhMOmx7Bbk+MB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvMUY4Mzc4RTZC Q0JEMTFFQkFDOUE0NzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMCEEAgACMBsDBwAkA8/AEAYDBwAkA8/AEAwDBwQkA8/AERAwDQYJKoZIhvcN AQELBQADggEBADB42+QeXSUjvisPLC0KCaBe7NrwcBj5craVT2ctc9Zg4MsMCZzx QktfeDdeXj0e0iUjm9/Y1sCAf9LEhUPeMh2CUbDxX4W5ZrchNXdqvzEJuUJHD0V0 QcXPYlkGcX1rpJkVZ+S5AF0dovLjHWSa4Z8dGXHcq+lSNG4DNgt0z6WXJlNKhW3j nIta4Xt4fvzcr6xOaFEaqe/fLdiFZhf+n869MKml8tLX50ezGVfTaEvKfAl55e2E MPf1TsuMWkJTpiNJ9xtsF3jArkh6GkXoA1GWDR9pDhM63VoscNsX7LbAzBWN9/Tl DOBbwX6HPaYHyg+5sU67NJNZWMVIXLMQvdc= -----END CERTIFICATE-----Generated at Sat Apr 5 07:08:27 2025 by rpki-client