$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9964ACAACBFC11EFB0D4E371C4F9AE02.roa File: 9964ACAACBFC11EFB0D4E371C4F9AE02.roa (raw, json) Hash identifier: z0mliktzawmrIMzyEnfbP5dKxIfgy2E5y70TZob+P68= Subject key identifier: E4:38:FA:B0:47:2F:1F:38:AA:09:3D:01:4F:FC:55:02:4A:8A:5B:BA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A190 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9964ACAACBFC11EFB0D4E371C4F9AE02.roa Signing time: Mon 06 Jan 2025 07:05:24 +0000 ROA not before: Mon 06 Jan 2025 07:05:24 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152509 IP address blocks: 2401:b320::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41360 (0xa190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Jan 6 07:05:24 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=677b80b4-bba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:9e:3b:61:bd:50:d9:41:9b:b5:77:3f:6d: 47:16:41:0f:e8:12:50:f4:49:a2:57:1a:72:1f:fd: 7a:c4:80:8b:f1:da:e0:62:7a:7b:db:49:cf:ab:ce: 63:0c:29:82:32:d3:a6:81:73:20:45:a5:c2:42:db: 7f:75:d7:2f:b9:99:f3:58:81:51:9f:8e:82:4e:b5: ef:b9:8c:a5:ec:2f:c0:46:8f:32:d3:0b:02:2a:87: 35:6f:a7:59:84:ec:f1:d3:8c:b3:6a:86:ff:fa:bd: 88:e3:a6:6e:ba:de:28:fc:e2:39:55:70:b6:d2:c3: 48:b5:63:49:f8:5b:70:91:03:3c:26:46:95:d1:55: 49:71:56:3c:ab:45:cd:ae:aa:ef:a9:c2:da:6e:70: 40:48:0a:22:31:e8:77:12:36:da:21:74:b5:ed:62: 82:a5:31:01:7b:24:da:98:0e:42:02:6b:1e:7e:23: a3:8c:76:7c:b4:76:94:57:3a:9f:7c:3c:88:a9:79: b5:f0:af:96:88:8d:2c:c2:99:90:32:8a:58:d7:4e: 66:76:91:d4:9b:4d:0f:51:28:b1:dd:00:6d:69:4b: 8c:36:20:bc:92:3d:8d:6e:ac:59:28:15:ca:bb:0e: 70:7a:de:63:be:67:3b:fe:c8:3a:13:19:51:d6:b9: ec:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:38:FA:B0:47:2F:1F:38:AA:09:3D:01:4F:FC:55:02:4A:8A:5B:BA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9964ACAACBFC11EFB0D4E371C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b320::/32 Signature Algorithm: sha256WithRSAEncryption 7b:7e:77:ea:5a:b5:6b:92:72:77:d5:a4:b0:46:c6:43:fe:ea: fd:d9:e0:b0:f9:e0:e5:98:53:22:b7:d0:63:24:ad:5c:b1:b0: 49:29:b0:b1:cc:f4:c3:f9:17:bb:3f:bc:82:ac:ec:bd:e7:56: d4:6d:c4:b6:4d:ea:85:fb:41:cd:85:c9:d3:c9:d3:7f:ac:6c: 63:25:b3:44:f9:81:7f:6b:99:ee:e8:20:af:84:d2:bb:4c:9f: 21:ed:af:e3:e0:e6:ac:89:aa:ac:66:e2:39:60:01:c3:75:1b: 32:2b:2f:ae:9a:af:69:8b:09:a1:14:7b:8d:4f:52:f7:01:6e: 1b:94:85:b1:ca:09:d5:dd:84:40:6b:8c:df:5a:6a:51:6b:c8: 73:4f:83:15:05:7c:8c:c1:62:52:48:14:5a:4f:f0:81:74:24: 7f:06:9c:1a:13:3c:6d:bd:37:6a:9e:34:1d:d4:40:59:87:bf: 42:e7:da:8e:66:12:cc:3c:bf:e3:7f:ec:d5:71:dd:74:c6:16: c6:05:98:80:4e:bb:70:7b:38:e8:3e:57:31:48:85:5f:21:ea: 26:b6:69:44:a6:2f:87:0a:b8:df:51:a4:2a:54:0c:2b:6c:27: e2:15:6f:3c:5a:39:6d:72:fc:9c:9d:54:5f:76:23:87:8c:0c: e2:23:d8:a1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDAKGQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDEwNjA3MDUyNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjc3YjgwYjQtYmJhNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5KnjthvVDZQZu1dz9tRxZBD+gSUPRJolcach/9esSAi/Ha4GJ6e9tJz6vO YwwpgjLTpoFzIEWlwkLbf3XXL7mZ81iBUZ+Ogk6177mMpewvwEaPMtMLAiqHNW+n WYTs8dOMs2qG//q9iOOmbrreKPziOVVwttLDSLVjSfhbcJEDPCZGldFVSXFWPKtF za6q76nC2m5wQEgKIjHodxI22iF0te1igqUxAXsk2pgOQgJrHn4jo4x2fLR2lFc6 n3w8iKl5tfCvloiNLMKZkDKKWNdOZnaR1JtND1Eosd0AbWlLjDYgvJI9jW6sWSgV yrsOcHreY75nO/7IOhMZUda57CMCAwEAAaOCApYwggKSMB0GA1UdDgQWBBTkOPqw Ry8fOKoJPQFP/FUCSopbujAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk5NjRBQ0FB Q0JGQzExRUZCMEQ0RTM3MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJAGzIDANBgkqhkiG9w0BAQsFAAOCAQEAe3536lq1a5Jy d9WksEbGQ/7q/dngsPng5ZhTIrfQYyStXLGwSSmwscz0w/kXuz+8gqzsvedW1G3E tk3qhftBzYXJ08nTf6xsYyWzRPmBf2uZ7uggr4TSu0yfIe2v4+DmrImqrGbiOWAB w3UbMisvrpqvaYsJoRR7jU9S9wFuG5SFscoJ1d2EQGuM31pqUWvIc0+DFQV8jMFi UkgUWk/wgXQkfwacGhM8bb03ap40HdRAWYe/QufajmYSzDy/43/s1XHddMYWxgWY gE67cHs46D5XMUiFXyHqJrZpRKYvhwq431GkKlQMK2wn4hVvPFo5bXL8nJ1UX3Yj h4wM4iPYoQ== -----END CERTIFICATE-----Generated at Sat Apr 5 07:08:08 2025 by rpki-client