$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa File: A8949F64D86E11E982BA0712C4F9AE02.roa (raw, json) Hash identifier: o0TBqHxczgW2iXEBGTx5nw86Q8zs7jfB/2ZiH2tcXBM= Subject key identifier: C5:1D:7A:A1:57:28:19:15:BD:7C:6D:47:D0:A0:A9:64:3E:EE:25:65 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 12B3 Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa Signing time: Wed 04 Dec 2024 17:25:07 +0000 ROA not before: Wed 04 Dec 2024 17:25:07 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139653 IP address blocks: 2403:cfc0:1014::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4787 (0x12b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE Validity Not Before: Dec 4 17:25:07 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67509073-4c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:7a:18:e9:1e:b9:c1:b9:26:38:6e:66:b5: 5f:e1:ea:e6:56:d3:ac:63:21:a1:24:c6:81:2b:31: 2d:3c:d4:a9:58:04:b3:6a:0b:c3:02:48:27:f8:4d: 1d:ca:68:01:0f:d8:c7:9a:4a:46:61:04:c8:d9:ae: c8:ee:b2:6e:24:4e:48:46:ac:32:0a:e9:2f:ce:2e: e4:df:94:bb:da:b6:72:1e:bd:30:c6:94:38:2d:96: a1:4c:e3:61:d7:1e:87:d1:f1:8f:58:63:24:1a:10: ed:b3:d7:47:62:c7:ab:f1:89:f3:b7:a0:27:6f:3a: b7:c4:90:d7:30:d8:f7:08:f7:75:e7:62:ac:7b:58: 32:b7:96:f0:4a:e5:35:f6:71:9f:f3:9c:25:6c:68: 9d:c3:1b:7f:97:7f:ee:46:9b:94:76:5e:4e:e6:d6: 96:a7:66:84:c5:0d:de:c4:62:1f:71:a1:5c:63:a8: 8d:90:9e:d4:9c:78:80:63:f7:bf:be:0f:2f:f3:6d: a8:ce:df:e7:64:18:37:e2:1e:8f:5c:f4:f2:fd:0a: 0c:21:1d:0e:70:31:f6:b1:56:b3:84:a8:ca:76:95: ba:d9:5a:5d:4f:aa:9f:d2:07:f0:57:4b:e4:2e:21: 14:5c:1b:20:b3:d5:e7:5f:fc:0e:01:5b:e6:10:33: d3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1D:7A:A1:57:28:19:15:BD:7C:6D:47:D0:A0:A9:64:3E:EE:25:65 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:cfc0:1014::/48 Signature Algorithm: sha256WithRSAEncryption 55:a8:da:9c:64:e9:7a:2a:c6:8b:a6:eb:28:fc:5b:83:be:9c: cf:1e:7e:5a:b6:23:5c:b6:cb:2b:fc:d6:6d:a6:b4:3f:3b:af: ab:61:bc:94:5d:e8:67:d0:34:81:7a:77:50:ec:64:65:f6:27: 7f:6e:4f:ab:e6:3b:dc:f6:03:86:b4:7d:28:8c:e6:1b:04:0a: 67:08:d1:40:17:a1:72:10:bb:06:2c:16:d9:1a:b4:aa:79:64: e1:4e:aa:96:f5:3b:f2:77:69:4c:e0:42:95:40:17:60:81:09: 38:26:23:09:15:10:48:17:25:4c:31:12:61:24:84:9c:27:f0: a8:c8:ba:41:ea:f5:f4:6b:d7:c4:53:d8:13:15:9c:b3:62:80: e8:57:b3:30:b5:90:f0:62:cc:0a:46:5f:e3:fa:26:7b:10:f2: 56:ed:c7:2a:8f:fd:29:87:85:d7:59:11:05:b6:fb:2d:f4:86: 6b:f6:10:cb:4f:37:f2:04:01:62:33:ca:ff:ef:ea:bd:c7:0f: f9:36:98:19:fd:60:e4:7b:ca:f9:c3:36:14:4a:58:fb:6f:cd: 51:9e:ec:5b:ca:f2:e9:ac:e8:a6:ce:22:6f:e8:b5:f9:86:52: 30:7e:8a:03:6d:5b:ca:bc:1b:fc:36:26:2e:50:ce:75:03:d0: 96:3f:7d:15 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICErMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjQxMjA0MTcyNTA3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwOTA3My00YzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7F6GOkeucG5JjhuZrVf4ermVtOsYyGhJMaBKzEtPNSpWASzagvDAkgn+E0d ymgBD9jHmkpGYQTI2a7I7rJuJE5IRqwyCukvzi7k35S72rZyHr0wxpQ4LZahTONh 1x6H0fGPWGMkGhDts9dHYser8Ynzt6Anbzq3xJDXMNj3CPd152Kse1gyt5bwSuU1 9nGf85wlbGidwxt/l3/uRpuUdl5O5taWp2aExQ3exGIfcaFcY6iNkJ7UnHiAY/e/ vg8v822ozt/nZBg34h6PXPTy/QoMIR0OcDH2sVazhKjKdpW62VpdT6qf0gfwV0vk LiEUXBsgs9XnX/wOAVvmEDPTqQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMUdeqFX KBkVvXxtR9CgqWQ+7iVlMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvQTg5NDlGNjRE ODZFMTFFOTgyQkEwNzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkA8/AEBQwDQYJKoZIhvcNAQELBQADggEBAFWo2pxk6Xoq xoum6yj8W4O+nM8eflq2I1y2yyv81m2mtD87r6thvJRd6GfQNIF6d1DsZGX2J39u T6vmO9z2A4a0fSiM5hsECmcI0UAXoXIQuwYsFtkatKp5ZOFOqpb1O/J3aUzgQpVA F2CBCTgmIwkVEEgXJUwxEmEkhJwn8KjIukHq9fRr18RT2BMVnLNigOhXszC1kPBi zApGX+P6JnsQ8lbtxyqP/SmHhddZEQW2+y30hmv2EMtPN/IEAWIzyv/v6r3HD/k2 mBn9YOR7yvnDNhRKWPtvzVGe7FvK8ums6KbOIm/otfmGUjB+igNtW8q8G/w2Ji5Q znUD0JY/fRU= -----END CERTIFICATE-----Generated at Sat Apr 5 07:16:47 2025 by rpki-client