$ rpki-client -vvf rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/32829066FDE711EF9BAD1760C4F9AE02.roa File: 32829066FDE711EF9BAD1760C4F9AE02.roa (raw, json) Hash identifier: qv93PFTd2ubVdURDKV9+GA3Hy1IBTVmmQZk/aQXksUQ= Subject key identifier: 3F:B2:42:8C:A5:24:BE:E4:12:73:89:FC:8D:92:0F:08:02:AA:6F:15 Certificate issuer: /CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66 Certificate serial: 0621 Authority key identifier: 48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/32829066FDE711EF9BAD1760C4F9AE02.roa Signing time: Mon 10 Mar 2025 19:38:10 +0000 ROA not before: Mon 10 Mar 2025 19:38:10 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136739 IP address blocks: 2407:47c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.crl rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C449 Validity Not Before: Mar 10 19:38:10 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67cf3fa2-2916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:be:dd:bf:c4:f4:76:49:43:f2:82:c7:6e: 25:24:65:2f:cc:2d:e7:3a:be:eb:8b:b3:13:60:6d: 54:42:af:aa:0f:78:48:07:63:bf:7a:31:fc:13:26: 84:1f:20:87:27:e8:9c:6e:0a:80:70:1c:4b:8b:fe: 54:7c:29:45:f4:83:ce:b1:e2:61:b0:46:11:1d:e6: 50:11:f5:b5:7f:2a:88:d7:a7:27:5a:af:b5:7d:51: 88:6d:a8:1c:78:32:96:f9:34:aa:79:3f:ee:b3:28: 49:82:d6:be:e0:3a:b8:23:66:b5:1f:a1:34:b8:19: 8c:cc:51:6c:42:9d:8b:44:f3:e7:f5:1c:63:50:76: 1b:54:5e:af:f7:4b:d5:2a:f0:6c:d6:18:57:d1:d1: 5e:7a:83:5e:32:0c:bc:4e:bb:3a:19:7e:96:f3:96: d5:40:88:6a:3f:10:61:aa:8e:89:ee:ae:2b:2f:48: 07:30:5a:a8:01:b0:ea:e1:fc:62:3d:6d:87:e5:42: 4f:ce:8d:39:28:99:49:96:78:9d:0c:72:f7:42:97: 5a:07:85:e9:55:81:19:ba:bc:00:18:c9:84:2a:06: 07:b6:59:28:3c:15:b1:90:6e:b0:33:c2:a9:47:98: 55:e3:db:15:dc:bc:7c:bf:39:a8:88:95:11:6e:b7: 2c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B2:42:8C:A5:24:BE:E4:12:73:89:FC:8D:92:0F:08:02:AA:6F:15 X509v3 Authority Key Identifier: keyid:48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/32829066FDE711EF9BAD1760C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:47c0::/32 Signature Algorithm: sha256WithRSAEncryption 66:54:cd:08:1d:c9:73:e6:9a:17:53:d4:e6:12:24:36:55:52: f3:b2:34:a9:bc:41:ba:ac:e2:b5:ca:1f:bf:86:34:93:a7:0b: bd:8a:54:b7:c6:5c:42:41:4b:cd:f6:8e:9f:89:fe:e6:5b:a9: cb:7c:ca:2a:ad:b2:27:8f:21:c0:98:af:87:e7:19:df:1b:9a: a1:65:e0:ae:4f:f0:41:a0:29:8e:6a:22:dd:cb:2b:46:c5:46: 2e:60:81:0f:48:87:4f:f9:af:c8:73:f8:01:15:68:46:06:2e: c9:3b:b2:35:25:12:9d:99:cc:fc:a9:42:d4:11:01:85:e5:f4: 78:05:d5:1b:1e:3a:ab:e5:67:1f:31:40:33:a2:64:57:a4:e7: 91:b7:9f:17:26:ed:fd:cb:82:bc:8d:fe:e2:94:e5:ce:5b:72: 2a:66:ac:ea:f8:ba:f5:e9:c8:61:93:4a:fa:1e:56:fd:5a:0b: 3c:89:43:50:e8:50:29:46:d6:53:3f:04:3d:8d:e6:c6:dc:83: 06:25:6e:53:24:bf:0b:96:78:50:8e:42:46:b3:69:58:1f:71: 4f:df:a7:1f:ac:74:a5:b0:29:a3:88:2a:80:13:92:79:1a:40: c5:28:64:5c:cb:34:fe:3f:df:a3:cb:0a:8b:aa:d5:a2:7e:d6: 2e:a0:e4:e0 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM0NDkxMTAvBgNVBAUTKDQ4NEVCRjMzNzUwQjIxQ0FGMDI4RDBDRTIxOUI5NDYx RDFGQkFBNjYwHhcNMjUwMzEwMTkzODEwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmM2ZhMi0yOTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkG+3b/E9HZJQ/KCx24lJGUvzC3nOr7ri7MTYG1UQq+qD3hIB2O/ejH8EyaE HyCHJ+icbgqAcBxLi/5UfClF9IPOseJhsEYRHeZQEfW1fyqI16cnWq+1fVGIbagc eDKW+TSqeT/usyhJgta+4Dq4I2a1H6E0uBmMzFFsQp2LRPPn9RxjUHYbVF6v90vV KvBs1hhX0dFeeoNeMgy8Trs6GX6W85bVQIhqPxBhqo6J7q4rL0gHMFqoAbDq4fxi PW2H5UJPzo05KJlJlnidDHL3QpdaB4XpVYEZurwAGMmEKgYHtlkoPBWxkG6wM8Kp R5hV49sV3Lx8vzmoiJURbrcs+QIDAQABo4ICljCCApIwHQYDVR0OBBYEFD+yQoyl JL7kEnOJ/I2SDwgCqm8VMB8GA1UdIwQYMBaAFEhOvzN1CyHK8CjQziGblGHR+6pm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ0OS81OEVBNDhFQTlE RDYxMUVCOTJDRjM3MTRDNEY5QUUwMi9TRTZfTTNVTEljcndLTkRPSVp1VVlkSDdx bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NFNl9NM1VMSWNyd0tORE9JWnVVWWRIN3FtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUM0NDkvNThFQTQ4RUE5REQ2MTFFQjkyQ0YzNzE0QzRGOUFFMDIvMzI4MjkwNjZG REU3MTFFRjlCQUQxNzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkB0fAMA0GCSqGSIb3DQEBCwUAA4IBAQBmVM0IHclz5poX U9TmEiQ2VVLzsjSpvEG6rOK1yh+/hjSTpwu9ilS3xlxCQUvN9o6fif7mW6nLfMoq rbInjyHAmK+H5xnfG5qhZeCuT/BBoCmOaiLdyytGxUYuYIEPSIdP+a/Ic/gBFWhG Bi7JO7I1JRKdmcz8qULUEQGF5fR4BdUbHjqr5WcfMUAzomRXpOeRt58XJu39y4K8 jf7ilOXOW3IqZqzq+Lr16chhk0r6Hlb9Wgs8iUNQ6FApRtZTPwQ9jebG3IMGJW5T JL8LlnhQjkJGs2lYH3FP36cfrHSlsCmjiCqAE5J5GkDFKGRcyzT+P9+jywqLqtWi ftYuoOTg -----END CERTIFICATE-----Generated at Sat Apr 5 23:09:26 2025 by rpki-client