$ rpki-client -vvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa File: 2C60C8AAE01111EEA6583A7DC4F9AE02.roa (raw, json) Hash identifier: kz68xtzJ9y0s90fbiNDjg+Qqa/ttWC3I+nb0qBsOygg= Subject key identifier: 1C:D3:C4:EB:BE:DC:C6:80:16:F3:4B:BC:5A:3A:7F:BB:E0:0C:0B:C5 Certificate issuer: /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184 Certificate serial: 0771 Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa Signing time: Thu 30 Jan 2025 21:41:15 +0000 ROA not before: Thu 30 Jan 2025 21:41:15 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 23926 IP address blocks: 2406:8600:f040::/48 maxlen: 48 2406:8600:f840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1905 (0x771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918127C Validity Not Before: Jan 30 21:41:15 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679bf1fb-6e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:38:cf:a5:28:0d:84:5b:bc:b4:a8:c2:e6: d2:00:43:57:99:f8:65:85:e7:7e:f5:67:a6:96:4d: 6e:15:72:1f:08:14:83:b5:c2:20:66:5b:2b:5c:43: fe:65:39:dc:2f:07:46:71:4d:ad:dc:07:5b:7c:81: e4:3e:00:fe:02:ec:06:a4:f8:9b:14:16:34:26:4c: d1:bf:86:bb:15:92:5f:1b:75:17:f0:e3:55:be:dc: a0:3d:67:0f:37:98:6a:71:1b:72:62:52:4e:5c:ac: 61:8b:c3:97:e2:f6:ca:57:8a:8c:f0:6e:fc:62:2f: 5c:ab:e8:c2:e8:2f:40:4f:46:2a:63:ff:78:d1:3d: 6f:0c:11:05:1a:9c:e0:5f:4e:24:31:b3:e7:9c:8b: 1b:b2:00:f9:fb:b0:ff:09:79:a9:e1:2f:7f:d2:ef: 4c:eb:1a:7a:d2:0f:c3:75:b6:44:4d:3f:37:35:bb: e8:58:eb:47:58:12:a2:18:f8:88:58:69:a6:60:89: 15:22:5d:a9:42:8c:a6:82:89:aa:bc:cd:45:e7:d5: 20:93:28:af:46:b0:d3:a9:3f:06:55:ca:16:9e:68: ac:18:69:88:be:e3:8c:91:1f:ea:3a:98:10:da:6a: c3:e9:b8:da:6d:7d:1f:94:22:01:21:f7:5f:88:81: 75:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D3:C4:EB:BE:DC:C6:80:16:F3:4B:BC:5A:3A:7F:BB:E0:0C:0B:C5 X509v3 Authority Key Identifier: keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:8600:f040::/48 2406:8600:f840::/48 Signature Algorithm: sha256WithRSAEncryption 65:11:4c:76:e8:a0:f1:e3:6a:a9:17:25:a1:51:8f:8f:d0:2f: ed:f9:23:96:c0:3c:45:70:5a:66:16:75:02:f5:64:0f:f9:bc: ec:fd:ed:41:f1:c9:73:c8:24:cb:1b:c1:08:d2:cb:de:0c:72: b6:45:bc:d4:c1:f7:3d:9a:b6:cc:2f:5b:8a:58:01:d5:ce:d9: 5e:59:20:26:32:79:a5:26:5d:04:87:14:35:93:13:5d:97:71: e5:cd:d6:de:12:76:7d:ea:91:27:b5:f2:01:b9:fa:2b:43:22: 5d:61:c2:6f:49:96:1b:2d:e8:d4:38:c9:b9:9f:6a:05:ab:12: 2e:c2:75:8b:9d:59:fb:03:a1:00:c3:66:57:1a:01:c4:cc:9b: f9:24:ee:ec:e3:96:f8:4c:2d:51:58:ea:9d:b4:96:50:44:0e: c0:55:75:42:e7:20:e1:35:ab:5f:4d:41:e8:f4:ba:50:21:77: a1:ec:1d:2a:27:59:3f:bd:b3:c4:62:9c:77:c1:50:e3:31:d9: 20:f7:e6:36:6c:ea:f8:01:7a:cd:f4:a5:5c:cf:70:19:20:d7: 90:61:98:4b:09:da:b0:1f:b2:14:46:8b:1f:f9:96:e0:60:4d: 94:5a:74:4f:9b:9e:4d:dc:34:b7:a4:b7:4c:6b:28:8e:70:ce: 64:2e:e9:5b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICB3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEyN0MxMTAvBgNVBAUTKDhGOTQyMjUyQjdENDA0RTMzREI5QjFFMzU0RTA5MTAz QUFDNTAxODQwHhcNMjUwMTMwMjE0MTE1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzliZjFmYi02ZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBc4z6UoDYRbvLSowubSAENXmfhlhed+9Wemlk1uFXIfCBSDtcIgZlsrXEP+ ZTncLwdGcU2t3AdbfIHkPgD+AuwGpPibFBY0JkzRv4a7FZJfG3UX8ONVvtygPWcP N5hqcRtyYlJOXKxhi8OX4vbKV4qM8G78Yi9cq+jC6C9AT0YqY/940T1vDBEFGpzg X04kMbPnnIsbsgD5+7D/CXmp4S9/0u9M6xp60g/DdbZETT83NbvoWOtHWBKiGPiI WGmmYIkVIl2pQoymgomqvM1F59UgkyivRrDTqT8GVcoWnmisGGmIvuOMkR/qOpgQ 2mrD6bjabX0flCIBIfdfiIF1GQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBzTxOu+ 3MaAFvNLvFo6f7vgDAvFMB8GA1UdIwQYMBaAFI+UIlK31ATjPbmx41TgkQOqxQGE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTI3Qy9FNjk3MTEyQTA2 QUQxMUVCOTgyMTA1N0ZDNEY5QUUwMi9qNVFpVXJmVUJPTTl1YkhqVk9DUkE2ckZB WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1UWlVcmZVQk9NOXViSGpWT0NSQTZyRkFZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODEyN0MvRTY5NzExMkEwNkFEMTFFQjk4MjEwNTdGQzRGOUFFMDIvMkM2MEM4QUFF MDExMTFFRUE2NTgzQTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkBoYA8EADBwAkBoYA+EAwDQYJKoZIhvcNAQELBQADggEB AGURTHbooPHjaqkXJaFRj4/QL+35I5bAPEVwWmYWdQL1ZA/5vOz97UHxyXPIJMsb wQjSy94McrZFvNTB9z2atswvW4pYAdXO2V5ZICYyeaUmXQSHFDWTE12XceXN1t4S dn3qkSe18gG5+itDIl1hwm9Jlhst6NQ4ybmfagWrEi7CdYudWfsDoQDDZlcaAcTM m/kk7uzjlvhMLVFY6p20llBEDsBVdULnIOE1q19NQej0ulAhd6HsHSonWT+9s8Ri nHfBUOMx2SD35jZs6vgBes30pVzPcBkg15BhmEsJ2rAfshRGix/5luBgTZRadE+b nk3cNLekt0xrKI5wzmQu6Vs= -----END CERTIFICATE-----Generated at Sun Apr 6 22:03:35 2025 by rpki-client