$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/13B46272139511F0BAC02735C4F9AE02.roa File: 13B46272139511F0BAC02735C4F9AE02.roa (raw, json) Hash identifier: lunzyAvH2WnGuuqjQcMC7tzE6PiUkG2ZqHNZmlQ3Mow= Subject key identifier: C5:45:57:0A:1A:D1:35:4E:0E:C9:3A:CC:DA:46:98:BE:F6:B5:8F:36 Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Certificate serial: 3B Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/13B46272139511F0BAC02735C4F9AE02.roa Signing time: Mon 07 Apr 2025 09:45:45 +0000 ROA not before: Mon 07 Apr 2025 09:45:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209650 IP address blocks: 2401:f860:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 07:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Validity Not Before: Apr 7 09:45:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f39ec9-4cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:b6:f4:dc:f5:32:1c:42:8d:ba:f2:8a:8e: 3d:cc:46:99:5e:4e:89:7e:8a:1b:04:88:21:53:40: 3d:eb:90:20:2d:be:de:70:f3:66:de:f4:73:3a:61: e2:45:e0:3f:8a:1f:d1:dc:33:2e:dc:56:fa:1c:cc: 09:cf:53:62:db:e5:29:9b:2a:16:e3:9b:05:d1:f9: 64:9e:4d:f8:74:5b:5d:23:68:97:b6:a6:5a:54:e7: 5d:ee:23:64:58:98:da:6d:a7:dd:84:0d:9d:d8:eb: 60:03:7d:cf:c4:41:ce:d8:9f:1b:03:f3:6e:0a:c3: 88:27:0c:48:e5:69:8f:32:ba:97:77:0b:d0:e0:8c: ca:68:12:7e:9c:ea:af:8c:0a:39:39:71:42:6b:1c: b4:22:67:44:6a:e1:78:5b:78:78:60:1d:fe:c9:8c: bf:1b:37:87:e7:cb:11:b8:7a:00:e7:a3:43:71:c9: a1:18:5e:3d:ff:9b:96:16:42:38:64:24:8d:f5:26: e2:36:82:38:d0:4e:fb:b1:cc:5e:18:93:bf:8a:cc: e0:79:2f:74:16:6b:30:87:70:77:11:7b:7a:d0:78: 0b:93:dd:e7:4c:9c:f5:f2:4a:d3:2d:48:08:68:fc: 2c:8c:f5:43:f5:82:6f:9e:48:47:75:f9:49:69:13: f4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:45:57:0A:1A:D1:35:4E:0E:C9:3A:CC:DA:46:98:BE:F6:B5:8F:36 X509v3 Authority Key Identifier: keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/13B46272139511F0BAC02735C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:f860:200::/48 Signature Algorithm: sha256WithRSAEncryption d5:c2:b8:72:40:7a:44:2f:58:0f:6d:bd:cf:89:ad:22:c9:7e: 9c:61:c9:a0:79:a1:6b:a8:ea:0a:d6:74:62:1f:84:65:d4:d8: 3e:10:1c:dd:bd:cf:56:4e:a7:55:2d:d1:48:64:54:5e:d8:dd: 0d:07:56:a9:b5:2a:22:b8:3e:64:f8:1a:41:5d:2f:22:76:b8: 58:1d:d4:7d:e9:e1:c7:30:40:60:f0:5f:3f:bc:89:71:da:7d: 30:79:c8:88:a5:4b:74:50:d7:c4:61:48:2c:ed:8f:37:e0:b0: 93:22:b6:da:30:bb:6a:a5:1d:cd:ab:88:a3:7b:20:66:a6:b6: 6c:bf:29:d9:5b:0b:56:f2:18:4f:f5:2b:83:e4:8a:29:33:b8: 8c:0c:61:48:b0:ab:e6:c9:de:1e:7e:a7:03:1a:32:16:56:9f: b2:ba:27:c0:9f:d6:48:dd:03:95:63:52:4b:99:71:d6:8b:1a: e4:c3:61:cf:a5:d5:3f:f7:59:f3:3e:10:ef:93:82:af:57:0f: 2e:e4:38:f0:7d:cf:13:78:df:6e:6b:55:59:97:99:2d:e6:33: f3:f2:aa:12:be:a7:15:b5:96:46:04:58:e2:6f:3c:a8:4e:e9: aa:df:82:eb:65:3c:4d:66:80:da:dc:ab:38:64:2e:88:e2:14: 4a:02:4a:c6 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkM5ODExMC8GA1UEBRMoRkY4Q0NCRTYxODc1NUExRjUxOTlCRDBDODI3NjBFOEVE QjhGODVCQTAeFw0yNTA0MDcwOTQ1NDVaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZjM5ZWM5LTRjZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU07b03PUyHEKNuvKKjj3MRpleTol+ihsEiCFTQD3rkCAtvt5w82be9HM6YeJF 4D+KH9HcMy7cVvoczAnPU2Lb5SmbKhbjmwXR+WSeTfh0W10jaJe2plpU513uI2RY mNptp92EDZ3Y62ADfc/EQc7YnxsD824Kw4gnDEjlaY8yupd3C9DgjMpoEn6c6q+M Cjk5cUJrHLQiZ0Rq4XhbeHhgHf7JjL8bN4fnyxG4egDno0NxyaEYXj3/m5YWQjhk JI31JuI2gjjQTvuxzF4Yk7+KzOB5L3QWazCHcHcRe3rQeAuT3edMnPXyStMtSAho /CyM9UP1gm+eSEd1+UlpE/S7AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUxUVXChrR NU4OyTrM2kaYvva1jzYwHwYDVR0jBBgwFoAU/4zL5hh1Wh9Rmb0MgnYOjtuPhbow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzk4L0FCQUZGNUVBMDYx MjExRjA4RTlBRTUyOUM0RjlBRTAyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhi by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzR6TDVoaDFXaDlSbWIwTWduWU9qdHVQaGJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkM5OC9BQkFGRjVFQTA2MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi8xM0I0NjI3MjEz OTUxMUYwQkFDMDI3MzVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQB+GACADANBgkqhkiG9w0BAQsFAAOCAQEA1cK4ckB6RC9Y D229z4mtIsl+nGHJoHmha6jqCtZ0Yh+EZdTYPhAc3b3PVk6nVS3RSGRUXtjdDQdW qbUqIrg+ZPgaQV0vIna4WB3UfenhxzBAYPBfP7yJcdp9MHnIiKVLdFDXxGFILO2P N+CwkyK22jC7aqUdzauIo3sgZqa2bL8p2VsLVvIYT/Urg+SKKTO4jAxhSLCr5sne Hn6nAxoyFlafsronwJ/WSN0DlWNSS5lx1osa5MNhz6XVP/dZ8z4Q75OCr1cPLuQ4 8H3PE3jfbmtVWZeZLeYz8/KqEr6nFbWWRgRY4m88qE7pqt+C62U8TWaA2tyrOGQu iOIUSgJKxg== -----END CERTIFICATE-----Generated at Sun Apr 13 00:07:11 2025 by rpki-client