$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/2CE5BE065BDA11ECAA855355C4F9AE02.roa File: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (raw, json) Hash identifier: K/T3wX+b6EJFTbJdX5T/49+xTnSJoc5fKtBw2NmgoBw= Subject key identifier: 69:39:C7:2B:2F:91:B2:B7:32:D9:D4:F5:D7:11:1A:D7:A0:47:7D:2D Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 0430 Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/2CE5BE065BDA11ECAA855355C4F9AE02.roa Signing time: Wed 15 Jan 2025 00:03:28 +0000 ROA not before: Wed 15 Jan 2025 00:03:28 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 398355 IP address blocks: 2400:3e20::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11 Validity Not Before: Jan 15 00:03:28 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6786fb4f-1982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:26:54:18:0b:5d:44:61:c4:4a:04:07:c1:0a: 25:b1:a8:6f:04:f2:84:71:d1:ec:79:6a:f5:05:b7: 42:f1:b9:d5:54:bf:43:33:b7:3f:e5:53:01:cb:d4: 08:3d:07:2c:f4:70:7e:9c:75:f1:ee:94:36:98:d2: b9:c0:fb:b6:92:f0:d8:a8:ee:a9:67:5f:a9:4e:47: 3b:40:e8:2b:72:3a:d7:81:1c:fb:3b:a4:79:b5:8b: 4c:21:5b:59:83:e3:e3:4d:ff:53:a0:25:ca:7d:24: 5b:dc:bf:d5:b0:36:ce:f5:78:3a:20:3a:b3:7e:f0: a2:b7:04:8a:31:81:4a:4f:4e:12:eb:cf:3f:9b:fa: 62:6d:93:ba:68:c0:6d:37:d5:38:ed:45:ba:9c:99: 99:44:0b:2a:dd:04:18:99:a5:d3:11:57:08:7d:20: 79:a1:78:32:50:9e:0e:a9:ad:b6:6b:3f:aa:22:de: e7:12:f6:24:a7:cf:2d:e2:ea:4c:d5:41:83:45:3d: 50:19:79:19:a9:27:89:8b:82:0a:06:ac:f3:45:7a: 08:14:50:76:e8:d9:c9:b2:b5:9b:9b:2e:f7:47:80: e9:de:6b:af:c8:db:1d:54:ab:cb:df:51:b6:92:14: f6:d3:fb:11:73:c8:e4:1f:12:27:5b:90:39:5a:6f: 29:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:39:C7:2B:2F:91:B2:B7:32:D9:D4:F5:D7:11:1A:D7:A0:47:7D:2D X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/2CE5BE065BDA11ECAA855355C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:3e20::/36 Signature Algorithm: sha256WithRSAEncryption 55:78:80:9a:db:71:b5:55:55:3f:79:0a:6b:a6:cc:53:3d:bb: f9:95:a4:56:08:90:05:11:81:67:be:c8:5e:f6:17:7e:3e:13: fe:e2:ba:ee:ba:01:9c:aa:0a:b1:52:05:37:71:da:cb:82:69: 88:a0:42:b4:72:d7:1c:a0:12:57:4f:40:7c:84:17:02:13:f6: f8:2b:49:86:da:24:28:46:47:14:35:4d:96:cc:a5:76:c7:26: 3a:21:23:bf:71:fa:8b:c3:19:37:86:5a:25:13:92:97:e4:4f: 3d:8b:c6:22:ba:a7:62:c2:15:69:59:eb:cf:3a:f2:16:6e:bf: 1b:0c:c9:76:b8:fd:81:a2:be:26:9f:81:63:5a:25:6e:04:89: 1d:d1:8f:30:6c:f5:56:06:c6:53:d1:be:cd:e8:dd:34:e9:e4: 3f:f7:4f:02:7b:75:b1:82:43:cb:dd:eb:f9:54:9b:dc:f0:3e: 47:fa:52:0b:85:f2:b7:47:a8:d3:c1:cd:6c:da:dd:ea:4c:aa: 5c:dd:14:24:29:9d:12:d3:36:9b:d7:46:ea:f6:4f:a2:65:f8: b4:74:9f:cd:9a:0f:30:21:45:5d:88:6b:43:5d:cc:4e:80:d2: 62:15:1c:3e:33:9e:20:48:ec:47:cd:15:be:a6:72:0c:93:de: 48:b1:5c:2a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjUwMTE1MDAwMzI4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg2ZmI0Zi0xOTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9SZUGAtdRGHESgQHwQolsahvBPKEcdHseWr1BbdC8bnVVL9DM7c/5VMBy9QI PQcs9HB+nHXx7pQ2mNK5wPu2kvDYqO6pZ1+pTkc7QOgrcjrXgRz7O6R5tYtMIVtZ g+PjTf9ToCXKfSRb3L/VsDbO9Xg6IDqzfvCitwSKMYFKT04S688/m/pibZO6aMBt N9U47UW6nJmZRAsq3QQYmaXTEVcIfSB5oXgyUJ4Oqa22az+qIt7nEvYkp88t4upM 1UGDRT1QGXkZqSeJi4IKBqzzRXoIFFB26NnJsrWbmy73R4Dp3muvyNsdVKvL31G2 khT20/sRc8jkHxInW5A5Wm8pQQIDAQABo4IClzCCApMwHQYDVR0OBBYEFGk5xysv kbK3MtnU9dcRGtegR30tMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBFMTEvRDA2MEM5QjI1QkQ2MTFFQ0FEODMzNjUxQzRGOUFFMDIvMkNFNUJFMDY1 QkRBMTFFQ0FBODU1MzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgQkAD4gADANBgkqhkiG9w0BAQsFAAOCAQEAVXiAmttxtVVV P3kKa6bMUz27+ZWkVgiQBRGBZ77IXvYXfj4T/uK67roBnKoKsVIFN3Hay4JpiKBC tHLXHKASV09AfIQXAhP2+CtJhtokKEZHFDVNlsyldscmOiEjv3H6i8MZN4ZaJROS l+RPPYvGIrqnYsIVaVnrzzryFm6/GwzJdrj9gaK+Jp+BY1olbgSJHdGPMGz1VgbG U9G+zejdNOnkP/dPAnt1sYJDy93r+VSb3PA+R/pSC4Xyt0eo08HNbNrd6kyqXN0U JCmdEtM2m9dG6vZPomX4tHSfzZoPMCFFXYhrQ13MToDSYhUcPjOeIEjsR80VvqZy DJPeSLFcKg== -----END CERTIFICATE-----Generated at Sat Apr 5 07:17:09 2025 by rpki-client