$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa File: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (raw, json) Hash identifier: yu9kaJ9SbaIghj5mweHVls+umbPvibjZ8k0y4rtHgrI= Subject key identifier: 7B:E1:3B:42:95:D4:75:55:BB:C2:4D:24:3C:B3:7B:67:3F:11:9D:9A Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 07A2 Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa Signing time: Tue 10 Dec 2024 21:50:54 +0000 ROA not before: Tue 10 Dec 2024 21:50:54 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 38173 IP address blocks: 2406:9dc0:1000::/44 maxlen: 48 2406:9dc0:6660::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F Validity Not Before: Dec 10 21:50:54 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6758b7be-e97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:e7:bc:b9:b6:cd:7b:2d:43:8a:57:63:fa: 97:9b:f2:b8:9b:46:07:ab:cb:75:f1:6c:1b:1a:8f: 2a:9f:2d:38:71:78:cf:20:69:79:b1:58:03:0a:65: 08:bf:c7:8d:4a:7c:f3:3d:5b:5f:86:40:21:2e:54: f9:aa:88:1f:1b:9e:fc:6b:7a:59:78:5a:c1:62:71: 32:e5:9e:e4:44:0a:fb:58:e5:df:8c:88:1d:60:ce: 28:92:e2:60:ae:bb:f0:7e:56:ce:0a:a5:68:33:cf: 33:13:78:b6:ec:fb:2e:cc:63:6d:b2:6f:69:64:1b: f2:27:c1:a9:c8:ed:55:cc:e1:61:8d:b8:5b:39:a7: 51:6e:42:6e:7a:66:6d:c7:74:49:6a:96:39:1a:6d: 1a:c5:21:de:82:0f:f2:b8:fe:2d:58:cd:c7:44:d6: 3f:68:94:6a:3f:38:47:6e:5e:18:fa:f9:35:3d:9d: ea:49:ed:1a:1a:e4:da:2f:74:b5:33:13:bf:df:82: d3:63:06:de:64:4b:a2:71:6f:63:47:0d:b1:09:af: 56:7e:ca:72:42:98:c5:9d:b6:7f:0e:d9:a2:4b:b1: eb:34:66:41:4d:2f:31:8e:67:11:16:eb:b3:f0:8f: bd:39:ad:9f:d5:32:56:ee:13:aa:20:7d:03:af:ad: 0a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E1:3B:42:95:D4:75:55:BB:C2:4D:24:3C:B3:7B:67:3F:11:9D:9A X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:9dc0:1000::/44 2406:9dc0:6660::/44 Signature Algorithm: sha256WithRSAEncryption 25:c4:15:58:c1:d2:ea:09:55:59:4c:4a:54:25:c9:45:dd:69: 81:f7:5d:68:ac:07:8a:0f:1b:73:1b:27:37:2e:81:e2:2d:39: bc:43:b3:29:87:7f:7f:09:03:b2:68:5b:f8:2c:df:86:e1:3e: 38:86:0b:3c:40:d3:77:57:ad:b5:68:19:8a:4c:e2:97:3a:01: aa:71:90:c8:72:90:3e:54:ae:dc:c5:7f:36:0a:b2:60:7c:ad: 07:07:ec:31:14:26:1f:72:bf:df:69:67:72:d8:36:3b:b3:ad: af:46:1c:70:c4:bc:14:77:99:19:97:2f:36:7a:16:80:35:f9: 5d:c9:5c:e9:eb:e2:d5:28:0a:b1:6d:2f:b2:14:50:6b:78:4e: 8b:7e:87:ee:bb:d4:7e:dc:60:fb:9e:aa:6b:d8:a2:78:38:1b: cf:af:15:6b:fc:cc:63:23:fb:f0:21:80:43:c8:0d:ce:45:e1: 38:8e:95:e5:e4:ac:84:8b:d0:17:75:a1:65:b5:69:d7:84:e1: d8:1c:b3:47:3d:c5:8c:82:39:ad:8c:b7:58:71:bb:99:21:82: 43:e2:fa:b2:a6:70:9d:7e:5d:e4:a5:a6:ee:af:8c:f9:c1:2f: 05:70:e0:16:f0:e2:44:f9:f1:3e:88:ef:b6:c3:f3:2f:1a:44: 6c:88:95:5a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjQxMjEwMjE1MDU0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU4YjdiZS1lOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyXnvLm2zXstQ4pXY/qXm/K4m0YHq8t18WwbGo8qny04cXjPIGl5sVgDCmUI v8eNSnzzPVtfhkAhLlT5qogfG578a3pZeFrBYnEy5Z7kRAr7WOXfjIgdYM4okuJg rrvwflbOCqVoM88zE3i27PsuzGNtsm9pZBvyJ8GpyO1VzOFhjbhbOadRbkJuemZt x3RJapY5Gm0axSHegg/yuP4tWM3HRNY/aJRqPzhHbl4Y+vk1PZ3qSe0aGuTaL3S1 MxO/34LTYwbeZEuicW9jRw2xCa9WfspyQpjFnbZ/DtmiS7HrNGZBTS8xjmcRFuuz 8I+9Oa2f1TJW7hOqIH0Dr60KkQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHvhO0KV 1HVVu8JNJDyze2c/EZ2aMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYyNUYvMjJEOTFGNzIxMUNFMTFFQjhBRDA1QTJCQzRGOUFFMDIvODZDRDdDMkU3 MkIwMTFFQjlGQzRGRTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBp3AEAADBwQkBp3AZmAwDQYJKoZIhvcNAQELBQADggEB ACXEFVjB0uoJVVlMSlQlyUXdaYH3XWisB4oPG3MbJzcugeItObxDsymHf38JA7Jo W/gs34bhPjiGCzxA03dXrbVoGYpM4pc6AapxkMhykD5UrtzFfzYKsmB8rQcH7DEU Jh9yv99pZ3LYNjuzra9GHHDEvBR3mRmXLzZ6FoA1+V3JXOnr4tUoCrFtL7IUUGt4 Tot+h+671H7cYPueqmvYong4G8+vFWv8zGMj+/AhgEPIDc5F4TiOleXkrISL0Bd1 oWW1adeE4dgcs0c9xYyCOa2Mt1hxu5khgkPi+rKmcJ1+XeSlpu6vjPnBLwVw4Bbw 4kT58T6I77bD8y8aRGyIlVo= -----END CERTIFICATE-----Generated at Sat Apr 5 03:55:10 2025 by rpki-client