$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68087952EABF11EF9D79F20DC4F9AE02.roa File: 68087952EABF11EF9D79F20DC4F9AE02.roa (raw, json) Hash identifier: xVd7fWK54umiSg2Tv56yJUUAARUNPHOdrdvszcLqMqw= Subject key identifier: 02:A0:28:D5:AF:20:58:FE:BA:E8:C6:3A:FC:50:6E:5A:E5:E2:0B:E2 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0E24 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68087952EABF11EF9D79F20DC4F9AE02.roa Signing time: Fri 14 Feb 2025 10:35:28 +0000 ROA not before: Fri 14 Feb 2025 10:35:28 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 401009 IP address blocks: 2406:840:e180::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3620 (0xe24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C Validity Not Before: Feb 14 10:35:28 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67af1c6f-fffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:17:88:eb:cd:fd:47:d0:06:b0:11:4c:49:db: f8:53:83:bc:14:dd:81:36:b8:3d:17:06:59:0a:dc: bc:26:56:40:fb:9a:71:f9:cb:c2:70:5a:14:32:32: 6f:e8:b7:dd:54:bc:97:de:5f:92:2b:01:4b:34:b5: 22:53:cf:d4:4a:c7:e2:02:af:e2:a3:e0:af:47:83: 08:03:a9:11:13:0e:06:fd:50:20:c9:d9:04:60:ef: 0a:00:b9:50:ca:d0:80:ad:cf:f7:18:8a:a2:b9:e8: b4:4f:85:0e:7f:d5:75:68:f6:fa:16:42:43:91:5c: 5a:c3:d9:0c:b2:b7:8e:c2:56:2a:8d:3a:ec:f7:54: 48:86:25:b1:84:af:dc:64:24:72:5c:e8:c2:03:a0: 54:57:cd:4c:49:24:61:12:e1:a2:e5:2c:39:52:52: 69:3e:ce:ed:ce:1a:fe:f7:74:df:34:06:7d:ed:44: ac:86:4e:7e:e2:63:97:b7:35:f1:48:af:1c:9c:33: e9:3e:7e:cc:2e:f3:bf:1e:94:6d:20:73:14:27:ae: 81:b8:62:8d:04:03:b5:6b:3b:ca:59:51:45:89:07: 4c:78:ed:25:c5:f3:de:25:04:39:0e:01:9c:53:f2: a8:b4:22:08:b2:1b:fd:e3:b6:8e:e8:9b:3f:ea:c9: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A0:28:D5:AF:20:58:FE:BA:E8:C6:3A:FC:50:6E:5A:E5:E2:0B:E2 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68087952EABF11EF9D79F20DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e180::/44 Signature Algorithm: sha256WithRSAEncryption 10:07:42:50:d5:09:74:18:77:92:51:4a:52:24:f4:a8:97:83: b9:d3:14:82:cf:18:e8:d7:d9:62:df:b9:70:1b:55:64:60:87: 7c:5d:37:1d:43:08:df:d4:29:28:03:be:80:96:40:a4:f9:5e: 57:0a:b3:ab:7b:b3:49:c7:94:7c:44:8e:ea:7b:9c:c5:66:17: c6:8d:cc:0e:a3:c2:d3:71:7a:31:c1:d8:ea:5c:4d:4d:f7:6d: 3d:ed:93:a4:bc:57:b6:3e:09:6d:a2:b6:e4:ed:7d:55:c5:01: d0:04:28:35:f4:7b:1e:fb:22:dd:37:2c:43:dc:19:35:a7:60: ee:3c:e3:2f:6a:a5:f0:b5:14:f0:a7:57:0d:7e:b2:4d:3b:62: 2c:bd:b5:18:4b:e2:d2:2b:08:f0:cb:77:7b:f7:ca:cc:a7:f9: 4f:7e:6e:c4:ee:56:24:01:f4:71:fa:d8:3c:a9:36:89:a8:77: 0e:10:7d:c2:95:f8:34:71:6a:49:67:ed:f4:cc:1d:a7:cc:a1: 69:a5:53:4a:24:22:50:e4:d7:d2:17:1b:40:c6:8b:23:eb:19: a0:66:58:84:d6:54:22:f6:a8:ad:72:c7:24:ce:63:71:ab:97: 8d:68:7a:95:fd:66:66:0f:a5:57:af:a0:ab:e6:32:f6:86:ef: d9:55:92:a7 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwMjE0MTAzNTI4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FmMWM2Zi1mZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xeI6839R9AGsBFMSdv4U4O8FN2BNrg9FwZZCty8JlZA+5px+cvCcFoUMjJv 6LfdVLyX3l+SKwFLNLUiU8/USsfiAq/io+CvR4MIA6kREw4G/VAgydkEYO8KALlQ ytCArc/3GIqiuei0T4UOf9V1aPb6FkJDkVxaw9kMsreOwlYqjTrs91RIhiWxhK/c ZCRyXOjCA6BUV81MSSRhEuGi5Sw5UlJpPs7tzhr+93TfNAZ97USshk5+4mOXtzXx SK8cnDPpPn7MLvO/HpRtIHMUJ66BuGKNBAO1azvKWVFFiQdMeO0lxfPeJQQ5DgGc U/KotCIIshv947aO6Js/6smGkwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAKgKNWv IFj+uujGOvxQblrl4gviMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNjgwODc5NTJF QUJGMTFFRjlENzlGMjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA4YAwDQYJKoZIhvcNAQELBQADggEBABAHQlDVCXQY d5JRSlIk9KiXg7nTFILPGOjX2WLfuXAbVWRgh3xdNx1DCN/UKSgDvoCWQKT5XlcK s6t7s0nHlHxEjup7nMVmF8aNzA6jwtNxejHB2OpcTU33bT3tk6S8V7Y+CW2ituTt fVXFAdAEKDX0ex77It03LEPcGTWnYO484y9qpfC1FPCnVw1+sk07Yiy9tRhL4tIr CPDLd3v3ysyn+U9+bsTuViQB9HH62DypNomodw4QfcKV+DRxakln7fTMHafMoWml U0okIlDk19IXG0DGiyPrGaBmWITWVCL2qK1yxyTOY3Grl41oepX9ZmYPpVevoKvm MvaG79lVkqc= -----END CERTIFICATE-----Generated at Sat Apr 5 02:18:01 2025 by rpki-client