$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/748FD068C11011EFB6161F67C4F9AE02.roa File: 748FD068C11011EFB6161F67C4F9AE02.roa (raw, json) Hash identifier: 1JpkCoiTyutFLV6xbj39GXkCqodZPTBI6jWeSNGeps8= Subject key identifier: 0C:AB:E8:7D:30:3E:E9:A2:27:72:73:18:57:D1:28:7D:C1:CA:C1:87 Certificate issuer: /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6 Certificate serial: 02F3 Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/748FD068C11011EFB6161F67C4F9AE02.roa Signing time: Mon 23 Dec 2024 09:29:49 +0000 ROA not before: Mon 23 Dec 2024 09:29:49 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 149311 IP address blocks: 2001:df0:c240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B5B1 Validity Not Before: Dec 23 09:29:49 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67692d8d-8980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:17:74:1c:7f:14:b7:7a:c5:a0:0a:f6:9b: f1:a4:8d:c7:9a:95:7c:bc:84:54:97:df:82:fe:c2: 10:d8:30:0f:51:c0:24:30:85:e9:5e:b9:27:26:14: 06:28:53:b9:bb:53:ce:d1:61:71:e4:c2:97:25:8b: e2:2f:0e:c4:e2:de:a1:50:0f:ed:b7:5f:47:f8:fe: 20:43:68:ed:54:0f:f7:1a:3b:2a:6a:9f:e2:cc:5a: f7:b2:a2:84:09:1d:59:f9:a8:e5:4b:b9:24:9b:ea: fe:cf:ae:6a:72:be:11:86:34:80:db:30:3a:be:6d: f4:cd:bf:97:c6:46:61:32:cb:e9:83:2f:c3:79:1d: de:c1:13:c4:1b:c0:7b:ae:e0:a9:01:ef:1b:25:e7: 50:40:c6:af:bb:fd:cf:17:e8:e8:b3:09:f7:8c:7d: 70:3c:04:a2:13:eb:19:ea:42:5f:1c:d0:83:51:58: 23:67:15:b3:ab:1c:78:ba:dd:28:3a:6c:bb:24:36: 2f:2f:a6:81:10:0a:d9:9b:ce:03:8b:a6:10:b4:b6: 1d:e2:9e:5f:0f:73:9f:3b:6c:ed:fc:0a:96:eb:de: 0f:73:02:e7:7c:c4:ae:41:b5:65:25:c7:1d:e8:b6: db:b5:86:05:10:eb:43:c1:8a:7d:c5:1c:ed:d1:f4: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AB:E8:7D:30:3E:E9:A2:27:72:73:18:57:D1:28:7D:C1:CA:C1:87 X509v3 Authority Key Identifier: keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/748FD068C11011EFB6161F67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:c240::/48 Signature Algorithm: sha256WithRSAEncryption 30:6d:ff:83:d1:9f:72:be:4d:52:f9:9e:b5:ef:97:62:03:71: 92:fd:ae:48:bc:28:b5:8f:a4:5b:53:ec:48:9d:f0:d4:3b:13: 47:2c:d7:1c:9d:fe:f0:5d:25:62:9d:f6:bf:b3:38:4e:6e:e7: 9c:25:1d:d5:1e:69:a0:c0:a8:b8:f1:7a:f8:5d:d2:68:16:7e: 61:58:5d:dd:16:9b:fa:93:2d:65:8a:49:ad:e0:fb:db:aa:8a: 82:84:af:30:13:19:97:e5:ae:a7:05:e5:a8:e4:ae:70:e2:1c: 50:18:1b:1c:28:5e:12:23:bb:0e:14:7f:96:ca:e6:2c:2c:3a: df:36:59:4d:8b:87:4f:34:75:2d:a6:dc:9d:a8:89:71:14:7c: 0d:28:34:a7:a5:45:f3:69:82:74:5b:79:27:e4:62:f9:99:8d: 5a:0e:26:f4:07:2e:d2:55:c4:73:4e:23:f5:26:77:b7:37:6b: 47:2f:9c:34:98:ae:7f:ab:de:ab:b9:f3:57:cc:b3:94:67:ff: 12:be:40:7c:bb:d6:50:7e:52:c9:cc:01:53:1e:85:e6:ab:6c: 2b:8f:dd:ce:37:79:87:60:71:d3:e2:0b:5c:e9:c1:f3:ce:99: 61:1d:0f:7d:df:2e:b1:5e:99:a7:f8:37:14:26:97:79:ba:fe: 86:1a:fb:a1 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1QjExMTAvBgNVBAUTKERGREMzQURCMzNDQUE4NTkxRUZBRjI3NzZDM0IwQzU1 NkMwOEEyQjYwHhcNMjQxMjIzMDkyOTQ5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY5MmQ4ZC04OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDMXdBx/FLd6xaAK9pvxpI3HmpV8vIRUl9+C/sIQ2DAPUcAkMIXpXrknJhQG KFO5u1PO0WFx5MKXJYviLw7E4t6hUA/tt19H+P4gQ2jtVA/3Gjsqap/izFr3sqKE CR1Z+ajlS7kkm+r+z65qcr4RhjSA2zA6vm30zb+XxkZhMsvpgy/DeR3ewRPEG8B7 ruCpAe8bJedQQMavu/3PF+joswn3jH1wPASiE+sZ6kJfHNCDUVgjZxWzqxx4ut0o Omy7JDYvL6aBEArZm84Di6YQtLYd4p5fD3OfO2zt/AqW694PcwLnfMSuQbVlJccd 6LbbtYYFEOtDwYp9xRzt0fRBdQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAyr6H0w PumiJ3JzGFfRKH3BysGHMB8GA1UdIwQYMBaAFN/cOtszyqhZHvryd2w7DFVsCKK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjVCMS9FRDYyOUYwQ0Q3 RTgxMUVDOTJBOTRGNENDNEY5QUUwMi8zOXc2MnpQS3FGa2UtdkozYkRzTVZXd0lv clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM5dzYyelBLcUZrZS12SjNiRHNNVld3SW9yWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1QjEvRUQ2MjlGMENEN0U4MTFFQzkyQTk0RjRDQzRGOUFFMDIvNzQ4RkQwNjhD MTEwMTFFRkI2MTYxRjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3wwkAwDQYJKoZIhvcNAQELBQADggEBADBt/4PRn3K+ TVL5nrXvl2IDcZL9rki8KLWPpFtT7Eid8NQ7E0cs1xyd/vBdJWKd9r+zOE5u55wl HdUeaaDAqLjxevhd0mgWfmFYXd0Wm/qTLWWKSa3g+9uqioKErzATGZflrqcF5ajk rnDiHFAYGxwoXhIjuw4Uf5bK5iwsOt82WU2Lh080dS2m3J2oiXEUfA0oNKelRfNp gnRbeSfkYvmZjVoOJvQHLtJVxHNOI/Umd7c3a0cvnDSYrn+r3qu581fMs5Rn/xK+ QHy71lB+UsnMAVMehearbCuP3c43eYdgcdPiC1zpwfPOmWEdD33fLrFemaf4NxQm l3m6/oYa+6E= -----END CERTIFICATE-----Generated at Fri Apr 4 23:55:50 2025 by rpki-client