$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A6A4A20E89B911EC8FDB572DC4F9AE02.roa File: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (raw, json) Hash identifier: jk5NfHi6Ak10G3qvwwRLBuA+9+MuEQTJVNCIOpp4ijc= Subject key identifier: A7:55:D4:F4:6F:00:D9:84:92:AC:A3:B9:CE:D5:6D:5B:0F:7C:D3:8B Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 12B6 Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A6A4A20E89B911EC8FDB572DC4F9AE02.roa Signing time: Wed 04 Dec 2024 17:25:10 +0000 ROA not before: Wed 04 Dec 2024 17:25:10 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 149020 IP address blocks: 2403:cfc0:1110::/44 maxlen: 48 2403:cfc0:1120::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4790 (0x12b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE Validity Not Before: Dec 4 17:25:10 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67509076-9aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fc:25:1a:66:a0:0e:78:f7:ae:99:dc:1d:4f: d5:53:41:23:14:c1:75:0a:41:ac:bb:73:fe:94:31: 7f:40:c2:17:c9:da:48:9f:0c:ad:f8:e0:19:d7:a2: 55:34:4e:74:b5:1d:e0:83:c1:b3:4d:6f:4a:ba:b0: 9d:f5:03:3a:28:e9:9f:06:56:58:a4:33:9b:2b:3e: 6f:66:c9:a8:d8:c5:9a:5c:f3:92:26:bd:e0:0d:09: 39:1d:55:9b:25:dd:93:c2:74:b2:b7:30:3a:61:06: df:aa:ba:b5:d0:95:39:23:99:b5:07:90:a6:89:e5: 59:83:10:66:76:6b:33:20:0a:c0:17:4c:b1:be:04: bd:d0:d4:c6:12:da:6b:a1:71:33:02:6e:a9:d6:40: 04:02:4b:3d:f3:12:9b:5c:06:17:da:24:28:f8:37: 43:50:d1:02:5f:63:13:75:fe:e0:e1:a5:49:17:a1: 4f:01:ce:ed:85:b4:33:74:68:ff:55:7a:92:45:2a: 18:b6:62:6e:c4:96:72:21:f9:68:30:b8:25:09:0b: a9:69:5f:aa:8b:7d:ef:3b:b9:d8:78:95:40:43:47: 6a:26:de:a2:c3:33:05:5d:60:e1:cb:d5:c3:80:e1: ff:75:ba:57:0a:8e:75:c1:16:95:d7:d2:18:d1:7d: a8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:55:D4:F4:6F:00:D9:84:92:AC:A3:B9:CE:D5:6D:5B:0F:7C:D3:8B X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A6A4A20E89B911EC8FDB572DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:cfc0:1110::-2403:cfc0:112f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3c:b7:7a:ee:1c:f0:02:97:6b:88:1f:da:79:13:bc:71:ae:ad: ab:63:9c:9f:0c:9e:19:1e:52:a2:8a:26:c5:9c:01:b1:d1:70: e1:fa:ec:01:6e:90:e1:c5:80:af:56:5d:4b:7a:57:2e:17:25: 7d:59:1c:53:28:27:ff:79:1f:3b:51:22:26:94:77:e3:e0:4c: 34:72:3d:f0:4b:e8:43:23:37:45:fe:b1:66:a6:4c:4d:33:43: 55:3a:32:32:09:48:ad:70:e8:00:c2:5e:65:04:24:a6:e6:ae: f3:fc:0c:2e:0b:f7:9a:5d:c5:5a:74:f2:73:0f:35:8b:7c:41: 0d:cc:aa:06:cf:8a:f6:58:f3:2b:51:e7:06:ea:57:e1:01:3a: 2c:88:3a:20:2b:e0:02:ff:d3:48:95:fd:85:23:70:4c:4b:03: 4e:09:ba:4e:b6:29:55:0e:77:af:33:b1:42:13:bb:a3:17:2c: 65:17:0f:dd:1b:5d:c7:ce:f1:13:9b:2a:67:ef:4d:de:63:94: b6:8f:d8:dc:88:a8:22:bc:ab:2c:e9:3b:7d:6e:11:dd:a1:2f: 63:60:df:d6:d4:42:f7:87:b8:61:83:03:b4:16:d5:b9:25:6b: 59:bd:8a:0f:a7:39:2c:fb:d1:5c:97:fc:8b:2a:aa:1b:1f:1c: 81:2f:6b:59 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICErYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjQxMjA0MTcyNTEwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwOTA3Ni05YWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vwlGmagDnj3rpncHU/VU0EjFMF1CkGsu3P+lDF/QMIXydpInwyt+OAZ16JV NE50tR3gg8GzTW9KurCd9QM6KOmfBlZYpDObKz5vZsmo2MWaXPOSJr3gDQk5HVWb Jd2TwnSytzA6YQbfqrq10JU5I5m1B5CmieVZgxBmdmszIArAF0yxvgS90NTGEtpr oXEzAm6p1kAEAks98xKbXAYX2iQo+DdDUNECX2MTdf7g4aVJF6FPAc7thbQzdGj/ VXqSRSoYtmJuxJZyIfloMLglCQupaV+qi33vO7nYeJVAQ0dqJt6iwzMFXWDhy9XD gOH/dbpXCo51wRaV19IY0X2omwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFKdV1PRv ANmEkqyjuc7VbVsPfNOLMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvQTZBNEEyMEU4 OUI5MTFFQzhGREI1NzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgACMBQwEgMHBCQDz8AREAMHBCQDz8ARIDANBgkqhkiG9w0BAQsFAAOC AQEAPLd67hzwApdriB/aeRO8ca6tq2OcnwyeGR5SooomxZwBsdFw4frsAW6Q4cWA r1ZdS3pXLhclfVkcUygn/3kfO1EiJpR34+BMNHI98EvoQyM3Rf6xZqZMTTNDVToy MglIrXDoAMJeZQQkpuau8/wMLgv3ml3FWnTycw81i3xBDcyqBs+K9ljzK1HnBupX 4QE6LIg6ICvgAv/TSJX9hSNwTEsDTgm6TrYpVQ53rzOxQhO7oxcsZRcP3Rtdx87x E5sqZ+9N3mOUto/Y3IioIryrLOk7fW4R3aEvY2Df1tRC94e4YYMDtBbVuSVrWb2K D6c5LPvRXJf8iyqqGx8cgS9rWQ== -----END CERTIFICATE-----Generated at Sat Apr 5 07:10:15 2025 by rpki-client