$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/1F1C0F0C64F711EC8F36652AC4F9AE02.roa File: 1F1C0F0C64F711EC8F36652AC4F9AE02.roa (raw, json) Hash identifier: osNPWRTEC30CVSzDSV8u5vPgQOKg93irw3f7/1nyvR4= Subject key identifier: 2F:7D:05:B3:19:F3:37:F2:6D:F2:0B:E2:9E:04:D8:75:8E:FE:1C:A6 Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Certificate serial: 0471 Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/1F1C0F0C64F711EC8F36652AC4F9AE02.roa Signing time: Sat 25 Jan 2025 00:13:30 +0000 ROA not before: Sat 25 Jan 2025 00:13:30 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 141173 IP address blocks: 2407:9240:2400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618BC Validity Not Before: Jan 25 00:13:30 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67942caa-a7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ab:b1:61:d8:6f:f8:49:9d:18:1b:62:39:aa: f5:1f:9c:be:b4:79:2b:0d:42:bd:e2:f5:89:32:97: 62:9b:0f:0c:c4:98:81:51:68:b5:8a:60:29:75:af: f4:28:6f:67:69:63:52:19:a0:e8:27:ba:37:9e:a3: 7b:47:5e:3f:ff:30:d9:48:82:03:88:17:05:6a:59: 60:a1:38:7e:b8:7b:49:ec:4b:84:31:09:cc:09:27: 43:13:9e:39:f8:9b:d6:a1:20:2a:1d:35:fc:70:33: 74:cf:5f:bf:68:18:63:fb:36:7e:3f:d8:3f:c6:34: 5e:97:18:3a:e6:d9:8f:d4:c8:21:ce:81:d0:7a:26: 13:2d:71:08:ae:44:4b:0b:09:8e:69:6a:99:81:56: fd:39:14:7f:e1:bc:8b:26:f2:5a:96:3f:a6:10:5b: 5d:b0:be:b1:c5:8a:04:ae:73:67:92:d7:65:29:fd: b9:29:0d:b8:87:9c:bd:c7:12:0a:fb:c8:c1:02:31: 98:bf:af:ca:e6:78:c5:00:1b:95:27:54:ec:a5:c5: c7:96:08:d5:4f:03:8f:9a:d7:76:3d:07:26:01:17: 4f:8c:7d:6e:47:c7:c1:84:b2:7d:72:a0:14:07:ee: f9:59:37:17:7f:24:54:59:e3:02:60:73:3d:69:de: 2a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7D:05:B3:19:F3:37:F2:6D:F2:0B:E2:9E:04:D8:75:8E:FE:1C:A6 X509v3 Authority Key Identifier: keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/1F1C0F0C64F711EC8F36652AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:9240:2400::/40 Signature Algorithm: sha256WithRSAEncryption 52:3b:ba:5c:3d:f6:2d:a2:b4:81:c4:25:62:1e:68:5f:aa:c8: 54:92:aa:89:20:9b:04:13:0b:a5:ad:03:f4:fd:af:a0:66:b8: ee:14:0f:c2:65:34:f7:a1:49:5a:2f:08:af:36:bd:14:96:ed: ec:d5:1f:b3:7d:c6:6c:12:93:84:5b:14:81:10:04:a1:c4:a8: e8:e3:1d:a2:7f:53:57:f1:5d:b9:e6:d8:a1:78:54:af:3c:73: 77:64:35:77:9d:72:05:46:29:6b:f6:1e:bb:69:78:f5:d4:d2: 1b:8d:3d:86:6b:99:aa:d7:78:ef:a5:3d:24:e1:6d:ab:dd:29: 28:46:c0:69:c6:33:4b:fd:12:2a:da:b4:88:bd:73:83:ef:86: 96:65:92:58:42:5f:97:83:bd:da:ea:36:a4:ca:dd:41:c4:21: 5b:92:10:52:59:64:ec:e5:cf:89:a7:19:ad:e1:d4:49:f0:84: ff:e3:16:5c:40:fc:ad:97:7b:7a:e0:db:37:28:9d:6a:b3:21: cc:a6:ba:b7:5a:03:a1:01:1c:5d:6c:9f:4e:09:2a:9f:aa:9b: b8:c3:1e:2a:e7:4a:0c:96:44:b7:0a:22:2f:cd:fd:5d:79:0c: 31:6f:58:99:ec:67:c4:24:d0:88:4d:2c:f5:1f:f5:6c:63:9e: 1f:69:b8:93 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5 MkQ0REZCNzcwHhcNMjUwMTI1MDAxMzMwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk0MmNhYS1hN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56uxYdhv+EmdGBtiOar1H5y+tHkrDUK94vWJMpdimw8MxJiBUWi1imApda/0 KG9naWNSGaDoJ7o3nqN7R14//zDZSIIDiBcFallgoTh+uHtJ7EuEMQnMCSdDE545 +JvWoSAqHTX8cDN0z1+/aBhj+zZ+P9g/xjRelxg65tmP1MghzoHQeiYTLXEIrkRL CwmOaWqZgVb9ORR/4byLJvJalj+mEFtdsL6xxYoErnNnktdlKf25KQ24h5y9xxIK +8jBAjGYv6/K5njFABuVJ1TspcXHlgjVTwOPmtd2PQcmARdPjH1uR8fBhLJ9cqAU B+75WTcXfyRUWeMCYHM9ad4q4QIDAQABo4IClzCCApMwHQYDVR0OBBYEFC99BbMZ 8zfybfIL4p4E2HWO/hymMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvMUYxQzBGMEM2 NEY3MTFFQzhGMzY2NTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkB5JAJDANBgkqhkiG9w0BAQsFAAOCAQEAUju6XD32LaK0 gcQlYh5oX6rIVJKqiSCbBBMLpa0D9P2voGa47hQPwmU096FJWi8Irza9FJbt7NUf s33GbBKThFsUgRAEocSo6OMdon9TV/FduebYoXhUrzxzd2Q1d51yBUYpa/Yeu2l4 9dTSG409hmuZqtd476U9JOFtq90pKEbAacYzS/0SKtq0iL1zg++GlmWSWEJfl4O9 2uo2pMrdQcQhW5IQUllk7OXPiacZreHUSfCE/+MWXED8rZd7euDbNyidarMhzKa6 t1oDoQEcXWyfTgkqn6qbuMMeKudKDJZEtwoiL839XXkMMW9YmexnxCTQiE0s9R/1 bGOeH2m4kw== -----END CERTIFICATE-----Generated at Sat Apr 5 01:50:47 2025 by rpki-client