$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/D38E10ACDEA311EE901DD072C4F9AE02.roa File: D38E10ACDEA311EE901DD072C4F9AE02.roa (raw, json) Hash identifier: NbpmBB1gIIGV5sc1Y6a1vNgV2IiOYxP9cMlh7LY3b+0= Subject key identifier: 3D:DF:3E:CE:99:05:5A:52:0E:53:CE:87:77:5D:99:68:D2:8A:87:1B Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 0FF0 Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/D38E10ACDEA311EE901DD072C4F9AE02.roa Signing time: Wed 12 Feb 2025 18:05:51 +0000 ROA not before: Wed 12 Feb 2025 18:05:51 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 66430 IP address blocks: 2401:84e0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4080 (0xff0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83 Validity Not Before: Feb 12 18:05:51 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ace2ff-1332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:d6:16:e0:e1:cc:dc:35:f8:a0:2d:45:9b: cf:dc:55:2e:98:61:3e:08:be:4c:1b:f2:86:cc:77: 05:7d:38:4a:15:ef:0d:ce:9c:c1:1d:a6:cc:49:e7: 12:fc:f6:e1:dd:f7:47:f9:4e:1b:94:61:14:07:9a: b9:8c:04:d2:76:11:59:42:ee:79:f4:54:5e:5c:56: 10:31:c6:f6:7e:76:8c:c9:9c:1c:9a:75:56:36:68: cd:19:d8:4b:c1:e0:30:7e:d9:53:8e:cd:f0:ca:c8: 99:7d:78:09:55:ab:81:ea:f5:b8:33:ae:7d:f6:16: 35:d5:29:41:63:87:70:ad:38:3d:a1:9e:40:5c:3a: ff:5b:03:0e:3b:c3:5e:6a:7f:9a:a6:8c:b0:f0:9d: 4e:7f:cf:f7:c5:cd:eb:45:bd:32:e7:cf:f4:c2:62: 0d:07:70:c9:8e:76:35:50:cb:c7:0a:d9:13:f5:4e: 80:a6:ac:57:a4:a8:69:c1:cd:b5:5e:9d:3d:45:cd: 36:e8:21:8e:a7:de:5d:a7:96:7d:8f:95:f8:a9:5c: 71:c1:e7:d4:29:10:22:d6:19:5d:e1:f7:d6:61:c4: 28:02:3e:fa:68:fc:0f:e7:a3:08:3a:d9:3c:5c:0a: ef:87:f8:b3:5d:4a:24:4e:fb:5e:2a:93:16:ed:fb: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DF:3E:CE:99:05:5A:52:0E:53:CE:87:77:5D:99:68:D2:8A:87:1B X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/D38E10ACDEA311EE901DD072C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:84e0:1::/48 Signature Algorithm: sha256WithRSAEncryption 72:67:f5:d7:df:5c:46:dd:89:62:90:6f:01:60:bb:d4:01:4f: 7e:3d:0d:bd:5a:3b:32:d3:6f:fe:e8:c9:22:c3:90:e3:d6:de: 35:0e:c2:7d:41:77:e4:83:8a:70:86:80:4c:92:4c:5a:64:70: 30:6a:e8:d1:ca:fb:88:ea:c6:3f:88:96:df:06:56:c3:f8:2b: fa:89:5c:d4:f4:f8:c8:12:c5:97:fc:3d:84:dc:95:d5:f9:1c: 40:5d:bd:ca:dc:d2:b7:d4:22:98:a5:51:1f:75:63:56:c8:84: e9:25:40:ad:8d:93:b5:5e:34:b6:70:62:03:c4:c2:cd:5d:db: aa:76:bd:95:7f:81:eb:93:14:7d:3c:10:81:6b:a4:06:c4:84: 12:87:a8:c5:94:bb:97:0e:46:6e:8c:fb:df:5f:3e:8b:aa:05: e7:43:7a:0f:5a:04:e3:b1:0b:a2:b0:dc:42:55:ab:ff:ee:3c: 3b:f6:dc:c7:6d:af:ca:84:db:56:ab:d9:5e:5b:ea:48:41:17: 33:14:2e:55:07:12:bf:bb:21:02:e3:3f:ac:2a:3e:85:be:dd: 9a:8d:65:3a:14:a6:77:4e:24:94:24:09:b7:82:16:eb:4f:7e: 19:27:f5:83:3e:a8:3c:17:71:70:75:5e:40:39:47:48:34:02: 88:58:b8:4a -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICD/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUwMjEyMTgwNTUxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FjZTJmZi0xMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxADWFuDhzNw1+KAtRZvP3FUumGE+CL5MG/KGzHcFfThKFe8NzpzBHabMSecS /Pbh3fdH+U4blGEUB5q5jATSdhFZQu559FReXFYQMcb2fnaMyZwcmnVWNmjNGdhL weAwftlTjs3wysiZfXgJVauB6vW4M6599hY11SlBY4dwrTg9oZ5AXDr/WwMOO8Ne an+apoyw8J1Of8/3xc3rRb0y58/0wmINB3DJjnY1UMvHCtkT9U6ApqxXpKhpwc21 Xp09Rc026CGOp95dp5Z9j5X4qVxxwefUKRAi1hld4ffWYcQoAj76aPwP56MIOtk8 XArvh/izXUokTvteKpMW7ftABwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFD3fPs6Z BVpSDlPOh3ddmWjSiocbMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNFODMvOTU2NDE5MUE0M0I4MTFFOUFCQTIyQTM0QzRGOUFFMDIvRDM4RTEwQUNE RUEzMTFFRTkwMUREMDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAYTgAAEwDQYJKoZIhvcNAQELBQADggEBAHJn9dffXEbd iWKQbwFgu9QBT349Db1aOzLTb/7oySLDkOPW3jUOwn1Bd+SDinCGgEySTFpkcDBq 6NHK+4jqxj+Ilt8GVsP4K/qJXNT0+MgSxZf8PYTcldX5HEBdvcrc0rfUIpilUR91 Y1bIhOklQK2Nk7VeNLZwYgPEws1d26p2vZV/geuTFH08EIFrpAbEhBKHqMWUu5cO Rm6M+99fPouqBedDeg9aBOOxC6Kw3EJVq//uPDv23Mdtr8qE21ar2V5b6khBFzMU LlUHEr+7IQLjP6wqPoW+3ZqNZToUpndOJJQkCbeCFutPfhkn9YM+qDwXcXB1XkA5 R0g0AohYuEo= -----END CERTIFICATE-----Generated at Sun Apr 6 01:49:25 2025 by rpki-client