$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/876FDB56D90211EFB7CAB32BC4F9AE02.roa File: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (raw, json) Hash identifier: p/kEHMx8f7csUo5NBlHkAvj+aoMN4eX/IkrayOB/b3E= Subject key identifier: FB:44:DE:5D:37:0E:40:B3:AC:AB:E8:49:49:82:0E:9B:8C:67:AB:B2 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 1662 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/876FDB56D90211EFB7CAB32BC4F9AE02.roa Signing time: Wed 22 Jan 2025 20:52:12 +0000 ROA not before: Wed 22 Jan 2025 20:52:12 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 14789 IP address blocks: 2400:cb00:661::/48 maxlen: 48 2400:cb00:c950::/48 maxlen: 48 2400:cb00:c951::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5730 (0x1662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4 Validity Not Before: Jan 22 20:52:12 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67915a7c-9d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4e:8d:21:a6:98:93:0d:0e:08:4d:b5:c3:31: bb:75:af:43:b1:d9:3b:16:9f:1f:4a:17:b9:ef:fe: bb:59:48:1a:53:75:24:97:cc:76:ea:7c:3d:43:6c: 72:ee:eb:ed:7b:f9:12:07:74:31:49:33:1c:a8:74: 70:05:51:0e:45:62:f7:9f:bf:e7:1a:b5:32:41:99: a8:6a:40:4d:39:68:e1:98:b4:25:b2:f5:5e:e4:19: ae:55:ca:21:ff:d2:15:6c:dc:16:60:82:e2:b3:d4: 80:1b:ab:db:6a:53:8f:d5:37:02:d8:62:23:ea:41: f0:d2:15:97:51:f5:fe:4d:97:32:77:0f:73:6c:19: b4:ca:99:9a:54:1d:9c:0f:0e:66:e6:50:c4:17:ea: 19:c9:f8:da:22:92:5f:ac:d5:54:ef:e6:8e:d1:29: da:9e:0e:64:ce:c2:0f:c3:46:a7:65:21:30:21:d5: da:16:a7:49:47:22:a0:07:a4:6e:a1:d2:7e:c9:11: 2f:e6:1d:5a:f8:a0:fc:74:1f:e2:80:5f:b0:bd:7b: c6:af:30:66:08:38:c3:a8:b5:37:7f:54:ea:87:3f: 46:98:e2:b3:d8:d3:be:9e:7d:e9:cb:e8:3a:76:6e: cf:1d:5d:35:33:7e:8d:21:89:aa:8e:78:bc:fd:63: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:44:DE:5D:37:0E:40:B3:AC:AB:E8:49:49:82:0E:9B:8C:67:AB:B2 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/876FDB56D90211EFB7CAB32BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:cb00:661::/48 2400:cb00:c950::/47 Signature Algorithm: sha256WithRSAEncryption 2f:b1:1f:0a:54:bc:fc:1e:cd:93:27:68:71:ca:c6:f8:8e:f9: a8:b3:84:cd:1a:68:50:d8:d8:41:c9:66:24:c0:a0:0b:df:ce: 52:90:22:5c:18:6d:49:c8:01:0c:07:7d:17:e7:90:4f:7f:d3: 58:af:77:17:23:db:3b:84:6f:bb:f3:a2:9a:fd:43:2a:c4:02: 6b:ac:ba:27:ce:c5:3c:fc:02:7e:9c:33:df:2b:32:69:9a:82: 8c:8c:e4:4a:2d:f4:20:4e:18:38:bc:03:45:6d:78:e8:04:20: 17:b0:18:43:4f:f0:8e:05:00:e3:1d:2d:88:cb:12:82:72:03: 0a:fc:44:68:45:49:7b:5d:92:b8:6c:e1:0c:e4:af:ce:c1:b3: 3f:75:35:ac:5e:d3:60:e3:5b:f4:d3:b0:e0:f5:04:7e:96:17: 95:b9:83:f4:c8:2e:92:04:59:2f:8f:b7:89:53:1c:a8:b4:a1: 9a:d2:07:c5:6a:d1:72:33:c4:fd:32:e9:2d:c5:7a:ba:aa:c1: b2:d0:f8:9e:b0:ee:de:1a:34:e2:df:a6:94:ed:92:86:c5:a2: f8:90:4e:ff:13:1e:8f:06:8d:17:a3:50:ec:75:04:84:bd:50: ae:79:9c:2d:c9:fb:fb:5b:e9:93:69:22:88:62:54:34:8d:9c: a6:d3:6a:73 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICFmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwMTIyMjA1MjEyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkxNWE3Yy05ZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2E6NIaaYkw0OCE21wzG7da9Dsdk7Fp8fShe57/67WUgaU3Ukl8x26nw9Q2xy 7uvte/kSB3QxSTMcqHRwBVEORWL3n7/nGrUyQZmoakBNOWjhmLQlsvVe5BmuVcoh /9IVbNwWYILis9SAG6vbalOP1TcC2GIj6kHw0hWXUfX+TZcydw9zbBm0ypmaVB2c Dw5m5lDEF+oZyfjaIpJfrNVU7+aO0Snang5kzsIPw0anZSEwIdXaFqdJRyKgB6Ru odJ+yREv5h1a+KD8dB/igF+wvXvGrzBmCDjDqLU3f1Tqhz9GmOKz2NO+nn3py+g6 dm7PHV01M36NIYmqjni8/WNqtQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPtE3l03 DkCzrKvoSUmCDpuMZ6uyMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJEQTQvMUVDNzAyQkNGMUE3MTFFODkwRjA2NjUwQzRGOUFFMDIvODc2RkRCNTZE OTAyMTFFRkI3Q0FCMzJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkAMsABmEDBwEkAMsAyVAwDQYJKoZIhvcNAQELBQADggEB AC+xHwpUvPwezZMnaHHKxviO+aizhM0aaFDY2EHJZiTAoAvfzlKQIlwYbUnIAQwH fRfnkE9/01ivdxcj2zuEb7vzopr9QyrEAmusuifOxTz8An6cM98rMmmagoyM5Eot 9CBOGDi8A0VteOgEIBewGENP8I4FAOMdLYjLEoJyAwr8RGhFSXtdkrhs4Qzkr87B sz91Naxe02DjW/TTsOD1BH6WF5W5g/TILpIEWS+Pt4lTHKi0oZrSB8Vq0XIzxP0y 6S3FerqqwbLQ+J6w7t4aNOLfppTtkobFoviQTv8THo8GjRejUOx1BIS9UK55nC3J +/tb6ZNpIohiVDSNnKbTanM= -----END CERTIFICATE-----Generated at Sat Apr 5 01:55:00 2025 by rpki-client