$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/412EF926CCDA11EF8B885817C4F9AE02.roa File: 412EF926CCDA11EF8B885817C4F9AE02.roa (raw, json) Hash identifier: meKzc/7MT0eCfn7xiT3iEuCT3qQ0DxGi1I47pq5nuu8= Subject key identifier: DC:E5:E3:43:25:E1:6D:44:91:E7:37:9C:49:93:AD:80:33:4B:DA:DB Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0E0A Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/412EF926CCDA11EF8B885817C4F9AE02.roa Signing time: Tue 07 Jan 2025 09:32:04 +0000 ROA not before: Tue 07 Jan 2025 09:32:04 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 199932 IP address blocks: 2406:840:fe50::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3594 (0xe0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C Validity Not Before: Jan 7 09:32:04 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=677cf494-b389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5e:b6:28:3d:91:34:b1:57:a4:8a:d9:62:e1: 1d:07:68:97:a9:7a:8a:8f:b4:1d:22:2e:15:b8:33: 62:f8:07:f2:4f:71:8b:29:95:c6:3f:dd:c3:56:6f: 22:8e:68:1d:25:d2:a3:39:22:79:3b:49:37:f8:02: 5d:77:2f:04:ae:07:b1:c5:65:2c:c9:23:d1:dc:7c: 49:94:33:77:da:fa:4f:4c:52:30:f1:78:f7:d7:81: ae:4e:e1:25:b6:60:55:c7:72:ef:54:a6:8a:8c:e2: 96:4f:a9:64:1b:e9:2b:06:de:f5:01:81:9b:bd:ed: 69:a0:a9:0e:92:74:7c:bd:3b:2f:4b:97:37:34:1a: 80:f0:f3:06:df:54:97:82:a0:90:49:d4:75:db:d4: 4f:02:e2:66:3c:f3:e3:78:8c:33:60:82:9f:e2:cd: 42:a1:62:28:a1:d2:e6:39:d6:24:2b:97:ce:4b:34: 8d:d7:83:0d:a1:bb:45:54:27:d5:0a:85:8c:fd:d2: 11:bd:bb:fd:a2:8a:b5:75:95:f5:7d:cd:b1:36:be: 7d:08:fa:19:26:73:22:db:fa:d7:4f:26:e8:f5:e6: f5:c3:df:ad:e5:02:06:20:d5:35:73:0d:6b:fb:90: 13:3e:23:3c:97:1e:d9:0b:d7:a1:da:4e:ba:b3:97: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E5:E3:43:25:E1:6D:44:91:E7:37:9C:49:93:AD:80:33:4B:DA:DB X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/412EF926CCDA11EF8B885817C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fe50::/47 Signature Algorithm: sha256WithRSAEncryption 82:49:18:57:ce:34:21:5e:c3:61:cb:0d:d2:29:0b:33:48:fc: b5:11:45:2b:0e:58:fe:a4:0e:e6:ce:69:45:54:08:d8:87:f6: d2:7d:8a:24:fa:92:78:65:c3:88:24:8a:a5:ea:4d:70:ad:34: d7:98:b6:d0:67:00:cd:cc:f1:25:8d:e4:d8:0d:2d:5b:ef:44: 74:79:2a:6a:25:0f:98:90:ed:69:22:e3:3a:c1:1b:c5:ee:61: 67:b9:df:c1:c4:e0:42:4f:28:2b:b2:2d:f6:9c:01:1f:9d:3d: a0:9e:3c:c0:22:89:d9:87:7a:b2:b0:5e:56:a9:b7:7e:66:a9: 34:e8:12:e1:ff:17:48:b0:4a:9c:9a:8f:c8:44:1e:39:8b:83: a5:96:a4:0d:a2:5d:c3:90:2e:9a:90:eb:6a:e1:75:8b:f5:f3: 24:c6:71:01:ab:27:97:e9:a2:be:92:52:2e:0e:1f:5b:85:ad: 50:ce:de:1e:aa:1b:e6:13:b1:d6:fa:5d:96:36:97:46:03:26: f3:b3:1c:45:48:b9:42:a6:7e:48:37:ed:30:0e:ce:e7:76:6a: 02:99:53:9b:23:0f:96:7c:7c:35:b3:cb:ae:63:94:9a:41:75: ef:7b:32:e5:76:f0:95:60:0d:83:bc:a7:c9:70:62:55:b9:2c: 0d:ee:4c:ef -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwMTA3MDkzMjA0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdjZjQ5NC1iMzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2F62KD2RNLFXpIrZYuEdB2iXqXqKj7QdIi4VuDNi+AfyT3GLKZXGP93DVm8i jmgdJdKjOSJ5O0k3+AJddy8ErgexxWUsySPR3HxJlDN32vpPTFIw8Xj314GuTuEl tmBVx3LvVKaKjOKWT6lkG+krBt71AYGbve1poKkOknR8vTsvS5c3NBqA8PMG31SX gqCQSdR129RPAuJmPPPjeIwzYIKf4s1CoWIoodLmOdYkK5fOSzSN14MNobtFVCfV CoWM/dIRvbv9ooq1dZX1fc2xNr59CPoZJnMi2/rXTybo9eb1w9+t5QIGINU1cw1r +5ATPiM8lx7ZC9eh2k66s5cMywIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNzl40Ml 4W1Ekec3nEmTrYAzS9rbMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNDEyRUY5MjZD Q0RBMTFFRjhCODg1ODE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkBghA/lAwDQYJKoZIhvcNAQELBQADggEBAIJJGFfONCFe w2HLDdIpCzNI/LURRSsOWP6kDubOaUVUCNiH9tJ9iiT6knhlw4gkiqXqTXCtNNeY ttBnAM3M8SWN5NgNLVvvRHR5KmolD5iQ7Wki4zrBG8XuYWe538HE4EJPKCuyLfac AR+dPaCePMAiidmHerKwXlapt35mqTToEuH/F0iwSpyaj8hEHjmLg6WWpA2iXcOQ LpqQ62rhdYv18yTGcQGrJ5fpor6SUi4OH1uFrVDO3h6qG+YTsdb6XZY2l0YDJvOz HEVIuUKmfkg37TAOzud2agKZU5sjD5Z8fDWzy65jlJpBde97MuV28JVgDYO8p8lw YlW5LA3uTO8= -----END CERTIFICATE-----Generated at Sat Apr 5 02:23:03 2025 by rpki-client