$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/34B5EFFC856211EF93AE1A3EC4F9AE02.roa File: 34B5EFFC856211EF93AE1A3EC4F9AE02.roa (raw, json) Hash identifier: XJhKV32DN2acwf+DFGigzG4Or3m+1EYrl8k69pZkP/8= Subject key identifier: 25:17:09:A8:A4:2C:92:C8:D7:AF:98:D0:5D:93:E7:A4:AA:1A:47:6C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9B4E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/34B5EFFC856211EF93AE1A3EC4F9AE02.roa Signing time: Tue 08 Oct 2024 10:43:51 +0000 ROA not before: Tue 08 Oct 2024 10:43:51 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 153225 IP address blocks: 2401:c960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39758 (0x9b4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Oct 8 10:43:51 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67050ce7-0136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:35:53:c1:67:0c:4c:4b:02:bc:34:e9:9c: d0:77:87:46:c7:77:8f:18:bb:33:06:58:05:1a:85: cb:ef:0e:0c:78:8a:a8:4a:89:43:a4:05:57:64:c8: 0b:a2:3b:ee:03:20:7b:8d:1a:34:66:e2:e8:2b:bf: ec:49:44:ba:08:81:d4:a5:17:f3:2d:31:1a:4a:37: 1d:43:6d:22:43:ce:3b:ab:ef:93:2f:fa:4b:f0:e6: 5f:67:ea:9b:99:b8:32:57:18:76:55:90:30:c0:bb: 0c:32:a2:84:90:ba:8b:7e:34:c2:52:4c:02:dc:7f: ec:c5:2d:1e:c0:7f:a6:a3:17:a2:b2:d3:50:f6:5e: ab:ae:b4:8e:ba:c2:15:44:6d:51:1c:20:bf:37:24: f0:06:01:a7:13:b5:5f:4f:de:1f:a0:b8:ac:6b:3a: c8:db:44:a8:b4:21:e3:c2:77:6d:bb:ad:06:63:b0: 9b:94:f4:98:6c:4f:00:c7:5a:23:58:95:be:a7:52: b3:46:57:19:de:40:3d:72:d7:a9:28:05:d2:5b:14: ca:49:87:63:20:52:f3:1a:78:ac:82:ce:9e:3f:d4: ca:54:fb:bf:e3:5f:c0:d3:0d:0b:f4:cf:0a:3d:78: 6a:b2:e7:f6:cb:8f:34:2b:3f:e3:fd:6b:fb:b3:f6: e7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:17:09:A8:A4:2C:92:C8:D7:AF:98:D0:5D:93:E7:A4:AA:1A:47:6C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/34B5EFFC856211EF93AE1A3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:c960::/32 Signature Algorithm: sha256WithRSAEncryption 65:df:08:eb:8a:6a:58:4a:41:29:9c:20:f8:36:95:c8:64:70: f9:71:9f:32:94:61:0a:bc:ac:40:2a:c9:95:62:81:e7:c1:f7: 2c:0d:92:6d:e6:43:a5:fd:17:a2:60:3a:d3:8f:6f:10:e6:be: d4:7a:c6:7b:ff:e4:93:d1:89:4e:43:72:60:73:60:73:f0:53: 5b:7a:c9:9e:0f:94:44:6b:1d:21:5e:4d:a1:c8:14:dd:cf:f2: a1:96:52:f4:2c:35:03:1e:c5:92:85:bf:67:fe:5a:d8:a0:2c: 28:47:32:a7:67:a4:40:10:04:dd:b7:3d:86:71:e4:93:7a:bc: dc:c7:e1:01:ac:39:b7:fc:7a:dc:1d:92:c3:2c:e7:e9:3e:4d: 39:33:7c:ff:90:5e:e6:25:a1:57:92:e9:09:3e:b4:cd:8b:a6: 52:cd:ec:1a:ae:f4:a5:0d:ac:d3:1c:a9:ed:92:53:c3:76:0e: 2e:17:96:c9:a1:4a:20:5c:f5:99:d5:e8:eb:31:77:31:f5:00: 1a:f3:90:79:27:b7:76:b2:4c:8d:6f:31:49:17:df:2c:90:13: 10:b5:39:11:00:b2:e4:93:f1:b3:10:37:a0:bd:5e:50:eb:bf: 06:9d:64:28:16:30:0d:78:61:87:74:f9:54:16:64:4e:f5:68: d8:f9:fd:2c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDAJtOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MTAwODEwNDM1MVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjcwNTBjZTctMDEzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQoNVPBZwxMSwK8NOmc0HeHRsd3jxi7MwZYBRqFy+8ODHiKqEqJQ6QFV2TI C6I77gMge40aNGbi6Cu/7ElEugiB1KUX8y0xGko3HUNtIkPOO6vvky/6S/DmX2fq m5m4MlcYdlWQMMC7DDKihJC6i340wlJMAtx/7MUtHsB/pqMXorLTUPZeq660jrrC FURtURwgvzck8AYBpxO1X0/eH6C4rGs6yNtEqLQh48J3bbutBmOwm5T0mGxPAMda I1iVvqdSs0ZXGd5APXLXqSgF0lsUykmHYyBS8xp4rILOnj/UylT7v+NfwNMNC/TP Cj14arLn9suPNCs/4/1r+7P256kCAwEAAaOCApYwggKSMB0GA1UdDgQWBBQlFwmo pCySyNevmNBdk+ekqhpHbDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM0QjVFRkZD ODU2MjExRUY5M0FFMUEzRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJAHJYDANBgkqhkiG9w0BAQsFAAOCAQEAZd8I64pqWEpB KZwg+DaVyGRw+XGfMpRhCrysQCrJlWKB58H3LA2SbeZDpf0XomA6049vEOa+1HrG e//kk9GJTkNyYHNgc/BTW3rJng+URGsdIV5NocgU3c/yoZZS9Cw1Ax7FkoW/Z/5a 2KAsKEcyp2ekQBAE3bc9hnHkk3q83MfhAaw5t/x63B2Swyzn6T5NOTN8/5Be5iWh V5LpCT60zYumUs3sGq70pQ2s0xyp7ZJTw3YOLheWyaFKIFz1mdXo6zF3MfUAGvOQ eSe3drJMjW8xSRffLJATELU5EQCy5JPxsxA3oL1eUOu/Bp1kKBYwDXhhh3T5VBZk TvVo2Pn9LA== -----END CERTIFICATE-----Generated at Sun Feb 16 20:31:01 2025 by rpki-client