$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/8E6CF9C8E59911E98D355932C4F9AE02.roa File: 8E6CF9C8E59911E98D355932C4F9AE02.roa (raw, json) Hash identifier: duhPOulpnnqLJOw021zARLEkW5qMCDlozjaUuWOU1CE= Subject key identifier: D0:18:DC:BD:B0:08:4C:7A:4A:E0:66:35:61:68:59:09:B6:55:2F:E9 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 12B4 Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/8E6CF9C8E59911E98D355932C4F9AE02.roa Signing time: Wed 04 Dec 2024 17:25:08 +0000 ROA not before: Wed 04 Dec 2024 17:25:08 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139702 IP address blocks: 2403:cfc0:1015::/48 maxlen: 48 2403:cfc0:101c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4788 (0x12b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE Validity Not Before: Dec 4 17:25:08 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67509074-c121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7e:71:98:5a:7e:45:f5:e7:c1:f2:4a:dc:09: f5:f8:9e:74:70:f4:87:ab:e9:19:47:6d:3a:06:f0: b6:16:90:71:1f:9d:4f:27:90:58:37:1f:49:ca:d0: eb:4c:cf:22:65:77:25:95:36:08:7f:88:de:ae:be: 0a:62:bc:5c:29:74:e1:91:d7:f1:67:cd:02:bb:a7: b7:1d:22:17:17:8b:de:e1:5e:98:59:6e:29:8d:ca: 24:ee:f2:2b:1d:15:de:a6:c9:08:fa:0a:08:7d:5d: 6c:dc:77:91:c5:6d:fa:dc:05:79:49:72:ec:13:6a: 09:7d:cf:a1:c7:45:ed:b0:76:3b:dc:2c:c2:69:00: 09:3c:df:9b:bb:9b:c7:03:b9:cd:85:7f:0d:b7:27: e2:bf:48:0b:70:1d:57:8d:5e:f0:07:99:af:2e:00: b0:d1:e5:f3:0f:da:17:d7:f2:e9:4e:3e:b5:fb:f6: fb:aa:ac:16:41:4b:94:55:4d:75:41:85:e2:7b:c6: f4:09:f9:ba:70:c2:39:d2:bf:32:de:89:cc:c9:0b: 86:d8:52:88:b5:cd:ab:36:d1:5c:81:d4:1a:e7:2e: 3d:8b:ce:45:f5:99:ee:86:66:45:81:2a:3c:13:36: 44:a1:1c:88:46:1c:16:d8:2e:81:4a:bd:dd:31:31: 34:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:18:DC:BD:B0:08:4C:7A:4A:E0:66:35:61:68:59:09:B6:55:2F:E9 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/8E6CF9C8E59911E98D355932C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:cfc0:1015::/48 2403:cfc0:101c::/48 Signature Algorithm: sha256WithRSAEncryption 28:2b:e8:19:3f:7d:04:dc:c9:28:7b:c7:29:59:12:46:46:df: c6:7e:3f:c7:e0:c1:dc:ad:dc:2c:7a:80:c9:2d:6f:e2:4b:84: 4a:90:05:c0:40:c2:91:0e:47:a5:6c:67:46:c7:67:56:a4:0f: 7b:92:d6:ad:28:82:d1:ce:7b:69:29:ff:1e:7e:3b:45:a8:08: 88:33:d4:c2:d6:b8:1f:01:d8:76:9e:5a:50:09:73:b7:94:a8: 47:00:15:42:9a:dc:63:a0:3f:27:5d:df:14:ee:b2:da:c7:43: ab:d7:85:43:88:94:c5:64:df:9f:1b:28:56:32:19:cd:2e:f4: 45:eb:e1:29:7b:62:43:b1:64:57:f7:53:6a:d7:a5:e4:1a:59: ee:ee:5c:56:2f:34:1e:ed:67:5d:2e:6d:74:82:67:06:49:0c: 16:27:ed:7f:99:7c:37:84:9c:18:f9:94:70:40:9d:64:8d:29: 55:79:70:e3:3c:81:40:08:c8:fd:ec:f6:a7:cc:cc:65:23:0c: f8:00:6f:46:67:76:bc:96:06:2a:de:4b:07:15:68:db:6a:ce: c1:43:fc:b0:2f:37:6a:48:b7:ad:c9:9a:f9:54:10:5f:42:f1: 73:13:25:4f:40:28:1c:2b:b7:41:c0:a6:20:ad:32:89:2f:2b: 4c:ce:83:c5 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICErQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjQxMjA0MTcyNTA4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwOTA3NC1jMTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9X5xmFp+RfXnwfJK3An1+J50cPSHq+kZR206BvC2FpBxH51PJ5BYNx9JytDr TM8iZXcllTYIf4jerr4KYrxcKXThkdfxZ80Cu6e3HSIXF4ve4V6YWW4pjcok7vIr HRXepskI+goIfV1s3HeRxW363AV5SXLsE2oJfc+hx0XtsHY73CzCaQAJPN+bu5vH A7nNhX8Ntyfiv0gLcB1XjV7wB5mvLgCw0eXzD9oX1/LpTj61+/b7qqwWQUuUVU11 QYXie8b0Cfm6cMI50r8y3onMyQuG2FKItc2rNtFcgdQa5y49i85F9ZnuhmZFgSo8 EzZEoRyIRhwW2C6BSr3dMTE0hwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNAY3L2w CEx6SuBmNWFoWQm2VS/pMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvOEU2Q0Y5QzhF NTk5MTFFOThEMzU1OTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkA8/AEBUDBwAkA8/AEBwwDQYJKoZIhvcNAQELBQADggEB ACgr6Bk/fQTcySh7xylZEkZG38Z+P8fgwdyt3Cx6gMktb+JLhEqQBcBAwpEOR6Vs Z0bHZ1akD3uS1q0ogtHOe2kp/x5+O0WoCIgz1MLWuB8B2HaeWlAJc7eUqEcAFUKa 3GOgPydd3xTustrHQ6vXhUOIlMVk358bKFYyGc0u9EXr4Sl7YkOxZFf3U2rXpeQa We7uXFYvNB7tZ10ubXSCZwZJDBYn7X+ZfDeEnBj5lHBAnWSNKVV5cOM8gUAIyP3s 9qfMzGUjDPgAb0ZndryWBireSwcVaNtqzsFD/LAvN2pIt63JmvlUEF9C8XMTJU9A KBwrt0HApiCtMokvK0zOg8U= -----END CERTIFICATE-----Generated at Sat Apr 5 07:21:15 2025 by rpki-client