$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/20C2C8980D4111EEB385BA83C4F9AE02.roa File: 20C2C8980D4111EEB385BA83C4F9AE02.roa (raw, json) Hash identifier: 9YEdcRP/xwcEXvASqrHWB8HPt3we6VKlBGcd9dDANWk= Subject key identifier: C4:3A:83:AF:08:DB:64:87:76:A3:A9:8D:40:02:3F:4D:6A:94:2D:62 Certificate issuer: /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Certificate serial: 04AD Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/20C2C8980D4111EEB385BA83C4F9AE02.roa Signing time: Fri 22 Nov 2024 23:43:43 +0000 ROA not before: Fri 22 Nov 2024 23:43:43 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 149502 IP address blocks: 2407:d840:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1197 (0x4ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2EC Validity Not Before: Nov 22 23:43:43 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6741172f-ccab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:63:d6:7a:b4:ad:96:5f:f0:58:b6:c0:59: 62:ff:04:de:cb:dc:a5:76:1a:96:3b:2b:e5:90:32: 4c:dc:02:1a:06:a5:68:12:d1:d7:4e:10:49:55:29: 3a:c9:18:54:03:ab:c3:77:7a:2b:91:45:13:21:b7: fb:89:33:45:cc:f3:9b:5e:70:e3:80:bb:1c:9d:5a: 6a:62:19:b3:a6:2e:83:cb:b7:fb:b7:59:93:38:b9: 75:1d:4d:f6:88:d4:ef:3b:26:77:ff:a6:40:01:05: 5f:66:86:2f:16:1a:3a:c9:8e:4a:45:ec:db:0d:8e: bd:59:03:83:42:4d:15:ac:ea:73:c4:44:51:fa:c9: fa:90:a1:80:5b:f8:3e:e5:0b:03:f3:2e:88:28:fa: 54:09:03:d1:5a:f0:0c:d9:89:34:f2:26:f9:85:d2: 9a:8f:52:a1:e8:82:b6:0a:6c:2b:75:fc:31:b1:c6: cc:56:06:2e:a2:1d:4e:44:89:21:c6:b1:f5:ee:83: bb:13:e6:f9:4f:44:f9:4e:11:d9:f5:69:b8:b5:b0: 0d:4d:9d:a7:75:a6:4a:7e:b7:8e:4d:7f:91:aa:53: 12:9d:8a:60:32:4a:66:07:df:de:af:f5:81:86:a0: 3f:03:6e:c2:6a:f0:be:af:0a:00:7f:e8:bb:39:0e: 09:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3A:83:AF:08:DB:64:87:76:A3:A9:8D:40:02:3F:4D:6A:94:2D:62 X509v3 Authority Key Identifier: keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/20C2C8980D4111EEB385BA83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:d840:1::/48 Signature Algorithm: sha256WithRSAEncryption a0:45:b4:29:3a:36:4c:41:eb:b5:99:bc:62:a0:79:47:45:f9: 13:b2:3c:29:79:4e:56:6d:72:d2:cb:fe:cf:8d:40:5f:80:e9: 45:aa:15:76:7f:69:74:5d:70:d1:6d:fb:ae:8a:91:59:d6:5b: 3e:82:2a:4b:0f:31:10:7b:63:42:1b:93:84:fa:38:73:03:84: 38:ae:db:f7:30:2d:23:49:29:d0:20:25:3c:db:b6:66:a2:56: 88:6b:72:cd:81:81:3b:3c:50:22:b3:0a:f5:25:38:5f:5c:e3: 9b:58:09:f7:f4:5b:cc:85:15:33:b0:79:23:08:1d:0e:7a:33: f1:b7:d9:d8:c7:6d:38:3a:15:70:ea:e3:33:26:95:cb:da:b0: 17:04:f9:d2:78:32:35:ea:95:bc:78:01:51:32:d1:ab:84:ee: 76:0e:16:c1:94:be:df:17:40:50:2e:1f:26:0c:95:19:df:bb: ab:80:f2:9b:80:4c:ab:e7:54:1d:0f:23:b7:28:a5:64:51:6a: b6:83:7f:b4:28:85:d5:7c:5a:91:08:2c:bb:f1:21:d7:44:dd: c1:f1:55:77:56:50:0b:0f:31:ad:7d:be:54:d7:79:a6:e7:b5: 35:b0:b6:24:b7:c4:1b:64:21:cd:50:81:de:d9:b5:ca:5f:c2: cc:89:e9:86 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRUMxMTAvBgNVBAUTKDQ2OTIyQzU2NTQ0MDA0MEJEOTlBRkQ0RTMyOUVEOURF QjZGOTI1NzMwHhcNMjQxMTIyMjM0MzQzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQxMTcyZi1jY2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw65j1nq0rZZf8Fi2wFli/wTey9yldhqWOyvlkDJM3AIaBqVoEtHXThBJVSk6 yRhUA6vDd3orkUUTIbf7iTNFzPObXnDjgLscnVpqYhmzpi6Dy7f7t1mTOLl1HU32 iNTvOyZ3/6ZAAQVfZoYvFho6yY5KRezbDY69WQODQk0VrOpzxERR+sn6kKGAW/g+ 5QsD8y6IKPpUCQPRWvAM2Yk08ib5hdKaj1Kh6IK2CmwrdfwxscbMVgYuoh1ORIkh xrH17oO7E+b5T0T5ThHZ9Wm4tbANTZ2ndaZKfreOTX+RqlMSnYpgMkpmB9/er/WB hqA/A27CavC+rwoAf+i7OQ4JswIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMQ6g68I 22SHdqOpjUACP01qlC1iMB8GA1UdIwQYMBaAFEaSLFZUQAQL2Zr9TjKe2d62+SVz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJFQy84NDI3NTk1NjJC MDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJBdlptdjFPTXA3WjNyYjVK WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JwSXNWbFJBQkF2Wm12MU9NcDdaM3JiNUpYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUIyRUMvODQyNzU5NTYyQjA5MTFFQzg1MUI5ODBFQzRGOUFFMDIvMjBDMkM4OTgw RDQxMTFFRUIzODVCQTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkB9hAAAEwDQYJKoZIhvcNAQELBQADggEBAKBFtCk6NkxB 67WZvGKgeUdF+ROyPCl5TlZtctLL/s+NQF+A6UWqFXZ/aXRdcNFt+66KkVnWWz6C KksPMRB7Y0Ibk4T6OHMDhDiu2/cwLSNJKdAgJTzbtmaiVohrcs2BgTs8UCKzCvUl OF9c45tYCff0W8yFFTOweSMIHQ56M/G32djHbTg6FXDq4zMmlcvasBcE+dJ4MjXq lbx4AVEy0auE7nYOFsGUvt8XQFAuHyYMlRnfu6uA8puATKvnVB0PI7copWRRaraD f7QohdV8WpEILLvxIddE3cHxVXdWUAsPMa19vlTXeabntTWwtiS3xBtkIc1Qgd7Z tcpfwsyJ6YY= -----END CERTIFICATE-----Generated at Sun Apr 6 00:31:06 2025 by rpki-client