$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/3CA46D445C4511ED9CD04525C4F9AE02.roa File: 3CA46D445C4511ED9CD04525C4F9AE02.roa (raw, json) Hash identifier: 7aee9pO5qmX/myo10tCeAvwIzNEzqsvOcdVOpE1hXkM= Subject key identifier: 91:99:18:C0:00:99:DB:6B:13:94:D6:B3:A9:87:40:0D:E7:D9:A9:AA Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Certificate serial: 0480 Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/3CA46D445C4511ED9CD04525C4F9AE02.roa Signing time: Sat 25 Jan 2025 00:13:42 +0000 ROA not before: Sat 25 Jan 2025 00:13:42 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 9267 IP address blocks: 2407:9240:3600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618BC Validity Not Before: Jan 25 00:13:42 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67942cb6-ef2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:21:15:dd:6e:3a:f0:ee:62:7e:53:fe:fb: 13:da:ed:b1:bb:dd:74:98:00:13:03:12:d1:43:87: 0c:8d:fe:c1:37:53:df:68:71:a9:18:f1:58:d0:a9: b3:d8:65:4e:a0:1a:a4:d2:40:b0:3f:3c:3f:1a:ee: b3:16:50:dd:b1:f5:44:cf:71:a1:63:d3:9e:f5:0d: c1:76:38:c2:6b:8c:19:c8:a7:2a:8a:92:18:9c:75: ec:dd:64:54:4d:70:55:f2:a3:fb:72:35:bf:b6:61: 9b:a3:4c:d7:ae:ca:ac:26:bc:ae:51:0e:b5:98:81: 88:8f:66:56:b3:a1:c9:75:b0:50:25:dd:78:59:20: ad:c4:2f:f5:23:5e:bb:08:01:22:59:95:53:f3:59: 56:92:eb:67:a8:21:1b:6f:7b:84:b5:4e:81:39:fe: 26:77:db:a0:a0:dc:08:19:a0:be:f6:93:7f:92:d7: c4:74:7c:d2:a8:a2:94:d9:3f:40:5e:d9:95:53:8f: 19:88:47:e7:39:e5:3a:56:57:c1:ea:23:41:b6:26: 8d:3f:36:80:4d:72:b5:c6:94:5b:7b:61:49:55:a5: 82:dc:88:b4:45:d8:0c:68:f0:f1:0b:52:0b:0e:29: c6:b1:64:59:e8:74:b4:ae:de:c3:97:d9:cf:fa:3b: e7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:99:18:C0:00:99:DB:6B:13:94:D6:B3:A9:87:40:0D:E7:D9:A9:AA X509v3 Authority Key Identifier: keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/3CA46D445C4511ED9CD04525C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:9240:3600::/40 Signature Algorithm: sha256WithRSAEncryption 62:80:24:4c:c8:17:87:90:24:7d:f6:35:78:37:74:1f:73:c0: 8a:e3:05:b6:37:5d:90:4d:dd:65:b7:20:84:a6:09:64:e8:a1: 18:dd:a5:c0:0c:87:57:29:9d:49:f9:9c:ef:7e:43:f5:6e:98: 27:88:b4:cd:38:07:43:b5:30:4b:a1:e9:7d:87:90:92:e8:b2: b1:31:d2:97:f0:c6:85:87:f1:2a:62:b3:13:72:c7:39:48:3e: 3e:f5:ce:47:6b:49:bd:19:54:f2:26:18:0b:4e:ad:dc:d7:13: 54:a6:4b:f5:56:08:96:19:7f:fc:37:ad:ff:d7:6e:65:7a:3a: 56:db:0a:ae:a3:28:1c:8b:61:89:bf:bc:3e:68:38:10:e5:09: ac:d9:75:b5:86:f7:08:8a:87:10:ad:16:fd:9c:c2:f1:95:1a: f2:85:36:9b:4d:83:38:a7:72:e3:05:e6:8e:0c:d0:37:04:ef: cc:91:81:e0:30:19:00:f7:df:cd:d2:e0:ab:30:42:cb:96:4e: 07:45:ee:b3:a7:91:bd:04:0e:97:d6:79:b0:61:f3:b8:ad:af: 6a:c7:04:74:fe:dc:2e:79:a2:f2:0b:fb:be:41:df:c8:8e:1f: ee:84:13:77:1a:4f:07:84:26:63:de:2f:e9:07:d1:76:54:fc: df:fd:15:16 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5 MkQ0REZCNzcwHhcNMjUwMTI1MDAxMzQyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk0MmNiNi1lZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAEhFd1uOvDuYn5T/vsT2u2xu910mAATAxLRQ4cMjf7BN1PfaHGpGPFY0Kmz 2GVOoBqk0kCwPzw/Gu6zFlDdsfVEz3GhY9Oe9Q3BdjjCa4wZyKcqipIYnHXs3WRU TXBV8qP7cjW/tmGbo0zXrsqsJryuUQ61mIGIj2ZWs6HJdbBQJd14WSCtxC/1I167 CAEiWZVT81lWkutnqCEbb3uEtU6BOf4md9ugoNwIGaC+9pN/ktfEdHzSqKKU2T9A XtmVU48ZiEfnOeU6VlfB6iNBtiaNPzaATXK1xpRbe2FJVaWC3Ii0RdgMaPDxC1IL DinGsWRZ6HS0rt7Dl9nP+jvnYwIDAQABo4IClzCCApMwHQYDVR0OBBYEFJGZGMAA mdtrE5TWs6mHQA3n2amqMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvM0NBNDZENDQ1 QzQ1MTFFRDlDRDA0NTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkB5JANjANBgkqhkiG9w0BAQsFAAOCAQEAYoAkTMgXh5Ak ffY1eDd0H3PAiuMFtjddkE3dZbcghKYJZOihGN2lwAyHVymdSfmc735D9W6YJ4i0 zTgHQ7UwS6HpfYeQkuiysTHSl/DGhYfxKmKzE3LHOUg+PvXOR2tJvRlU8iYYC06t 3NcTVKZL9VYIlhl//Det/9duZXo6VtsKrqMoHIthib+8Pmg4EOUJrNl1tYb3CIqH EK0W/ZzC8ZUa8oU2m02DOKdy4wXmjgzQNwTvzJGB4DAZAPffzdLgqzBCy5ZOB0Xu s6eRvQQOl9Z5sGHzuK2vascEdP7cLnmi8gv7vkHfyI4f7oQTdxpPB4QmY94v6QfR dlT83/0VFg== -----END CERTIFICATE-----Generated at Sat Apr 5 02:00:51 2025 by rpki-client