$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/D26FE5F62BC511EEA4569A67C4F9AE02.roa File: D26FE5F62BC511EEA4569A67C4F9AE02.roa (raw, json) Hash identifier: HwIXxMyVB5TDC6OnRXgKUZIRg3PpPlLxsrzUfJFlIrY= Subject key identifier: C6:D5:DE:08:CA:8C:E7:89:2C:0E:C5:1C:4C:71:25:F7:6F:66:60:4F Certificate issuer: /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Certificate serial: 04AF Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/D26FE5F62BC511EEA4569A67C4F9AE02.roa Signing time: Fri 22 Nov 2024 23:43:45 +0000 ROA not before: Fri 22 Nov 2024 23:43:45 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 151338 IP address blocks: 2407:d840:20::/48 maxlen: 48 2407:d840:21::/48 maxlen: 48 2407:d840:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 23:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2EC Validity Not Before: Nov 22 23:43:45 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67411730-b856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:07:5a:c5:e3:62:27:27:4d:53:c7:5f:90: 9f:e5:03:e9:f3:c5:60:19:fb:fe:72:df:fb:a6:d5: 9a:b3:ea:b5:d3:55:10:74:93:6a:46:78:fb:8a:ae: 21:06:f8:b4:97:a2:18:6e:02:c7:aa:65:b7:05:b8: b7:07:fe:12:67:20:7f:44:15:6c:1a:ed:01:99:aa: 6d:e3:e6:5c:33:fd:81:c2:af:01:27:1e:94:01:77: 5c:da:df:58:39:ce:1a:22:4e:b4:7f:aa:ef:22:a7: e4:07:63:66:1c:7b:0b:a7:87:5b:4c:52:aa:c7:d5: 1a:82:72:88:5a:5e:15:40:f7:a7:43:3a:1f:4d:1a: d5:a9:ec:48:e2:6c:fb:4d:ff:0b:63:0b:7f:d7:9a: 10:8a:b3:6c:f7:fc:42:b0:1d:3f:1f:a6:69:49:79: 4b:dd:0f:d1:ac:b5:a1:92:1f:7b:2c:0a:a6:db:d9: 0d:98:83:bb:df:a4:f8:42:51:aa:15:08:85:cd:fc: b8:26:64:b5:fd:5c:8b:97:57:a5:54:6d:f4:12:0a: a5:d6:9c:1f:6f:92:9f:7a:ff:18:74:af:8d:e4:2e: 27:49:b7:90:58:73:64:27:20:24:be:2d:62:9b:38: a5:22:d8:93:a5:b6:02:5a:2f:f3:8d:9b:2b:96:a2: 7a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D5:DE:08:CA:8C:E7:89:2C:0E:C5:1C:4C:71:25:F7:6F:66:60:4F X509v3 Authority Key Identifier: keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/D26FE5F62BC511EEA4569A67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:d840:20::/47 2407:d840:200::/40 Signature Algorithm: sha256WithRSAEncryption a2:d4:6f:3f:ba:f2:13:80:07:89:d0:5d:84:80:6b:01:02:93: fc:c5:8b:96:8d:5d:43:eb:0e:4e:26:01:c9:6a:45:ba:84:aa: 45:63:e0:fa:55:cd:56:50:d0:d5:13:d0:3a:84:67:63:a3:bf: 94:a5:b9:65:27:88:37:95:29:be:97:3b:fd:ba:48:ee:ac:42: 82:9c:05:eb:55:95:a9:b0:fe:70:b7:ab:0d:bc:32:8c:d6:d4: 87:77:43:9e:43:51:41:87:91:75:0b:c6:bb:48:23:01:11:b7: 8f:28:61:bd:d2:83:ac:df:20:60:60:6b:30:cf:1a:68:d0:1a: 7c:fe:a0:56:e9:53:4b:ad:f0:c1:9b:31:c7:31:2a:b7:be:1e: f5:99:63:f6:5d:a4:6d:02:ed:fd:a6:0f:ad:4c:fe:95:64:cc: 15:6c:2c:a9:07:f2:60:0b:0b:7f:f3:73:71:85:ba:87:ad:3b: 23:47:a8:d8:0e:79:52:26:e5:a9:5e:dc:2b:56:24:3f:2b:47: 93:5e:8e:b7:92:af:fa:6e:54:a7:7e:57:21:5d:ad:54:06:d6: c7:d1:33:30:e8:7c:af:b7:f0:68:32:5e:58:77:de:bd:a0:53: 22:a0:98:d6:4c:9d:e5:6a:3f:1c:c2:71:ce:5d:aa:2a:e5:35: c8:1c:95:a9 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRUMxMTAvBgNVBAUTKDQ2OTIyQzU2NTQ0MDA0MEJEOTlBRkQ0RTMyOUVEOURF QjZGOTI1NzMwHhcNMjQxMTIyMjM0MzQ1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQxMTczMC1iODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9cHWsXjYicnTVPHX5Cf5QPp88VgGfv+ct/7ptWas+q101UQdJNqRnj7iq4h Bvi0l6IYbgLHqmW3Bbi3B/4SZyB/RBVsGu0Bmapt4+ZcM/2Bwq8BJx6UAXdc2t9Y Oc4aIk60f6rvIqfkB2NmHHsLp4dbTFKqx9UagnKIWl4VQPenQzofTRrVqexI4mz7 Tf8LYwt/15oQirNs9/xCsB0/H6ZpSXlL3Q/RrLWhkh97LAqm29kNmIO736T4QlGq FQiFzfy4JmS1/VyLl1elVG30Egql1pwfb5Kfev8YdK+N5C4nSbeQWHNkJyAkvi1i mzilItiTpbYCWi/zjZsrlqJ68QIDAQABo4ICoDCCApwwHQYDVR0OBBYEFMbV3gjK jOeJLA7FHExxJfdvZmBPMB8GA1UdIwQYMBaAFEaSLFZUQAQL2Zr9TjKe2d62+SVz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJFQy84NDI3NTk1NjJC MDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJBdlptdjFPTXA3WjNyYjVK WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JwSXNWbFJBQkF2Wm12MU9NcDdaM3JiNUpYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUIyRUMvODQyNzU5NTYyQjA5MTFFQzg1MUI5ODBFQzRGOUFFMDIvRDI2RkU1RjYy QkM1MTFFRUE0NTY5QTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKgYIKwYBBQUHAQcBAf8E GzAZMBcEAgACMBEDBwEkB9hAACADBgAkB9hAAjANBgkqhkiG9w0BAQsFAAOCAQEA otRvP7ryE4AHidBdhIBrAQKT/MWLlo1dQ+sOTiYByWpFuoSqRWPg+lXNVlDQ1RPQ OoRnY6O/lKW5ZSeIN5Upvpc7/bpI7qxCgpwF61WVqbD+cLerDbwyjNbUh3dDnkNR QYeRdQvGu0gjARG3jyhhvdKDrN8gYGBrMM8aaNAafP6gVulTS63wwZsxxzEqt74e 9Zlj9l2kbQLt/aYPrUz+lWTMFWwsqQfyYAsLf/NzcYW6h607I0eo2A55UiblqV7c K1YkPytHk16Ot5Kv+m5Up35XIV2tVAbWx9EzMOh8r7fwaDJeWHfevaBTIqCY1kyd 5Wo/HMJxzl2qKuU1yByVqQ== -----END CERTIFICATE-----Generated at Fri Apr 11 18:10:21 2025 by rpki-client