$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/98EDBD8C91AF11EC8D647F26C4F9AE02.roa File: 98EDBD8C91AF11EC8D647F26C4F9AE02.roa (raw, json) Hash identifier: BblTx5HQY0ZaNn1tIob/PBXboJI6NchPbIZ11ypyKcI= Subject key identifier: 58:34:EF:C6:E5:84:30:B2:54:B9:29:04:AC:8A:66:79:77:63:63:D9 Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Certificate serial: 047A Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/98EDBD8C91AF11EC8D647F26C4F9AE02.roa Signing time: Sat 25 Jan 2025 00:13:37 +0000 ROA not before: Sat 25 Jan 2025 00:13:37 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 38254 IP address blocks: 2407:9240:2600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618BC Validity Not Before: Jan 25 00:13:37 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67942cb1-f18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:5d:d1:46:93:18:3b:ce:20:0e:7f:09:b1: 7f:60:a7:f7:4c:df:2c:7d:7a:7a:b4:a4:67:b0:52: 74:84:68:df:2a:6d:ed:18:e6:68:7d:6d:71:0f:02: c8:ef:e4:20:0c:ff:c7:c4:2a:2a:0c:4a:ac:42:0d: db:ba:ea:b4:f4:44:b1:61:a9:fa:5d:a5:76:22:fb: d2:7f:fd:f9:37:36:2a:3c:dd:a3:71:88:fa:f9:6a: ec:76:61:bc:c9:26:cd:a0:9e:cc:c1:a1:d6:0f:88: 54:06:8e:2e:19:5c:13:f9:6f:f2:79:d9:2a:f1:ae: a7:08:f8:5f:45:72:59:6e:52:4e:0a:05:08:de:ef: 10:8d:88:07:2d:7d:c5:f3:2b:f4:4b:c4:24:c5:b2: 8a:a3:9f:07:7c:75:e0:2e:60:a2:75:22:a9:1a:41: 9c:e7:1a:e5:2c:a7:bd:06:c7:8e:a2:a8:64:ee:4b: f6:65:9e:af:4d:37:d0:f3:3e:fc:d6:37:99:e4:98: 58:10:1f:95:2f:6d:61:07:93:69:dc:eb:ee:b4:dd: 04:6f:1e:58:a4:d1:e1:ba:32:ac:a3:02:b5:f9:3f: 09:35:db:a2:40:83:69:f0:c9:a5:d9:65:33:f6:39: b0:f1:aa:63:24:26:f3:54:8e:f8:18:2d:92:43:b3: e9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:34:EF:C6:E5:84:30:B2:54:B9:29:04:AC:8A:66:79:77:63:63:D9 X509v3 Authority Key Identifier: keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/98EDBD8C91AF11EC8D647F26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:9240:2600::/40 Signature Algorithm: sha256WithRSAEncryption 4c:2e:c6:b5:13:73:b2:67:cb:22:f1:b4:a7:d0:1c:b6:04:5e: d3:e2:4e:94:39:ef:53:37:05:73:f2:48:6e:1b:3d:d2:48:ef: 71:c0:04:fb:df:81:c9:ba:90:ee:bf:b7:f8:86:90:d1:ab:78: a3:0c:3e:32:93:73:3b:3a:08:24:37:ce:66:d8:32:dd:1f:4c: 23:5b:ee:bd:8a:aa:72:33:bc:5f:11:02:5d:91:c6:6b:9d:85: 3c:f3:63:8c:77:c8:9b:f6:6c:f3:8e:68:38:0e:92:b6:cb:72: 94:6b:19:56:f5:ba:a8:c5:fb:b1:87:f3:0f:15:a8:bc:cc:bd: c3:c5:7a:fd:53:56:33:ba:21:6c:ff:d5:3f:54:b9:10:29:40: e6:ae:0e:4a:4e:03:dc:e1:c6:f9:e2:ae:ae:ae:39:4e:19:43: ff:5f:65:23:1d:c4:a7:ca:0d:51:d2:25:8b:f5:c6:55:3d:78: 33:2c:c1:fd:00:f3:60:b1:a8:76:ce:4d:39:a8:23:35:01:3c: 8a:c5:28:8b:ba:93:18:fe:26:c0:b7:83:9d:39:df:ce:3c:38: 78:7a:a2:93:8c:81:96:1d:84:e5:e6:97:6e:0d:f9:7c:0f:99: 7e:65:df:ac:fd:33:35:da:36:70:1a:69:54:47:bd:66:a8:dd: 13:9c:b5:0f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5 MkQ0REZCNzcwHhcNMjUwMTI1MDAxMzM3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk0MmNiMS1mMThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5Nd0UaTGDvOIA5/CbF/YKf3TN8sfXp6tKRnsFJ0hGjfKm3tGOZofW1xDwLI 7+QgDP/HxCoqDEqsQg3buuq09ESxYan6XaV2IvvSf/35NzYqPN2jcYj6+WrsdmG8 ySbNoJ7MwaHWD4hUBo4uGVwT+W/yedkq8a6nCPhfRXJZblJOCgUI3u8QjYgHLX3F 8yv0S8QkxbKKo58HfHXgLmCidSKpGkGc5xrlLKe9BseOoqhk7kv2ZZ6vTTfQ8z78 1jeZ5JhYEB+VL21hB5Np3OvutN0Ebx5YpNHhujKsowK1+T8JNduiQINp8Mml2WUz 9jmw8apjJCbzVI74GC2SQ7PphQIDAQABo4IClzCCApMwHQYDVR0OBBYEFFg078bl hDCyVLkpBKyKZnl3Y2PZMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvOThFREJEOEM5 MUFGMTFFQzhENjQ3RjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkB5JAJjANBgkqhkiG9w0BAQsFAAOCAQEATC7GtRNzsmfL IvG0p9ActgRe0+JOlDnvUzcFc/JIbhs90kjvccAE+9+BybqQ7r+3+IaQ0at4oww+ MpNzOzoIJDfOZtgy3R9MI1vuvYqqcjO8XxECXZHGa52FPPNjjHfIm/Zs845oOA6S tstylGsZVvW6qMX7sYfzDxWovMy9w8V6/VNWM7ohbP/VP1S5EClA5q4OSk4D3OHG +eKurq45ThlD/19lIx3Ep8oNUdIli/XGVT14MyzB/QDzYLGods5NOagjNQE8isUo i7qTGP4mwLeDnTnfzjw4eHqik4yBlh2E5eaXbg35fA+ZfmXfrP0zNdo2cBppVEe9 ZqjdE5y1Dw== -----END CERTIFICATE-----Generated at Sat Apr 5 01:52:40 2025 by rpki-client