$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/9EE31802996B11E9B3FEED46C4F9AE02.roa File: 9EE31802996B11E9B3FEED46C4F9AE02.roa (raw, json) Hash identifier: GdNQEvmzlHfA6Ec8mmP8z6x+jIWG7iAnHlvJMuf8oD8= Subject key identifier: A7:BC:B5:DE:4E:7C:58:3C:39:7E:A4:FD:22:93:F7:E5:E0:28:57:31 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 12B2 Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/9EE31802996B11E9B3FEED46C4F9AE02.roa Signing time: Wed 04 Dec 2024 17:25:06 +0000 ROA not before: Wed 04 Dec 2024 17:25:06 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139264 IP address blocks: 2403:cfc0:100b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4786 (0x12b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE Validity Not Before: Dec 4 17:25:06 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67509072-9fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:7b:5a:1d:84:81:34:a0:35:e3:ed:73:67: ca:95:e2:7c:72:d3:85:da:16:dd:8c:84:ef:b2:d9: 9d:2c:0a:38:d5:72:1a:14:60:1d:69:32:8a:f8:54: 29:ba:aa:7c:0d:7e:a8:dd:6d:cd:65:06:96:de:7b: d0:0e:a8:f7:e3:3f:ce:17:43:08:1b:d7:33:3c:57: b8:7d:5f:a6:e5:1f:2a:78:e5:78:0e:3d:91:b0:e0: a7:7e:52:33:fa:51:39:81:89:d4:1c:ab:ea:17:1a: bf:bd:f1:ae:5f:d5:93:8b:ca:8c:8f:be:48:31:51: d9:e1:e9:f0:f6:ff:4a:41:fa:d1:c5:ff:b9:4d:5b: 78:d3:6f:f8:36:dd:fa:71:53:bd:0f:bd:b5:bf:b0: 99:5b:41:5a:22:f3:74:47:04:bb:90:e1:9e:ba:be: 0f:4a:39:c7:5f:2b:f7:9f:f4:c1:72:7e:ff:87:52: 34:63:73:68:03:43:a5:1f:b1:51:19:a7:14:3e:2f: ab:7b:f8:16:9d:47:14:b1:b6:ce:d6:dd:53:31:9d: 13:e6:7b:01:e7:2c:71:6b:fd:2c:11:d5:9a:a0:48: 73:15:68:41:d6:4f:7e:3d:9c:76:d7:b3:9b:b8:a1: 7a:ec:51:96:4b:fc:e4:ce:e2:b5:96:59:94:23:c2: 93:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BC:B5:DE:4E:7C:58:3C:39:7E:A4:FD:22:93:F7:E5:E0:28:57:31 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/9EE31802996B11E9B3FEED46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:cfc0:100b::/48 Signature Algorithm: sha256WithRSAEncryption 14:24:d8:7e:dc:5b:9b:22:5c:c3:b3:d5:62:25:28:bf:4f:b4: f9:e3:f7:87:c5:33:c6:da:1f:32:f6:a5:9c:f2:3d:a9:59:d4: 75:14:91:a8:2f:de:73:d2:83:3f:45:99:41:95:fa:47:d2:7d: b6:d9:c7:62:69:5c:cc:96:b1:63:f9:f8:b7:bd:e2:fa:f2:c3: 09:93:f6:71:11:35:c1:2e:d5:d7:71:46:19:ff:63:cf:28:44: 84:c6:b5:3a:3e:86:e0:9b:55:69:28:c9:95:79:fc:64:33:bb: f0:12:1e:3f:83:1d:7e:53:87:63:cf:af:07:3f:b8:79:38:0a: 7e:56:b3:ff:ac:52:51:dd:5a:37:0b:33:a5:db:48:72:b3:df: aa:58:82:1b:b8:fa:06:6b:77:8d:82:02:4a:cb:63:2c:e4:49: 57:2a:00:49:48:23:35:c5:e1:64:00:b3:6e:32:a4:47:9a:ad: 0a:a6:ad:10:93:b5:78:8a:82:8a:ff:2a:9d:a5:99:9b:e1:00: 40:e3:9d:3b:ad:d8:63:f7:f9:26:4e:ae:3a:37:88:84:04:e2: 8d:e1:d4:0f:69:f2:ed:2d:3f:71:f7:8a:92:69:a2:27:ba:9d: 3c:21:95:ae:15:07:16:1d:c1:a1:f2:c1:62:5e:6d:82:1d:53: a1:8b:85:69 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICErIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjQxMjA0MTcyNTA2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwOTA3Mi05ZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAya17Wh2EgTSgNePtc2fKleJ8ctOF2hbdjITvstmdLAo41XIaFGAdaTKK+FQp uqp8DX6o3W3NZQaW3nvQDqj34z/OF0MIG9czPFe4fV+m5R8qeOV4Dj2RsOCnflIz +lE5gYnUHKvqFxq/vfGuX9WTi8qMj75IMVHZ4enw9v9KQfrRxf+5TVt402/4Nt36 cVO9D721v7CZW0FaIvN0RwS7kOGeur4PSjnHXyv3n/TBcn7/h1I0Y3NoA0OlH7FR GacUPi+re/gWnUcUsbbO1t1TMZ0T5nsB5yxxa/0sEdWaoEhzFWhB1k9+PZx217Ob uKF67FGWS/zkzuK1llmUI8KTcwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKe8td5O fFg8OX6k/SKT9+XgKFcxMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvOUVFMzE4MDI5 OTZCMTFFOUIzRkVFRDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkA8/AEAswDQYJKoZIhvcNAQELBQADggEBABQk2H7cW5si XMOz1WIlKL9PtPnj94fFM8baHzL2pZzyPalZ1HUUkagv3nPSgz9FmUGV+kfSfbbZ x2JpXMyWsWP5+Le94vrywwmT9nERNcEu1ddxRhn/Y88oRITGtTo+huCbVWkoyZV5 /GQzu/ASHj+DHX5Th2PPrwc/uHk4Cn5Ws/+sUlHdWjcLM6XbSHKz36pYghu4+gZr d42CAkrLYyzkSVcqAElIIzXF4WQAs24ypEearQqmrRCTtXiKgor/Kp2lmZvhAEDj nTut2GP3+SZOrjo3iIQE4o3h1A9p8u0tP3H3ipJpoie6nTwhla4VBxYdwaHywWJe bYIdU6GLhWk= -----END CERTIFICATE-----Generated at Sat Apr 5 07:21:19 2025 by rpki-client