$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/065A717E9B6E11EFBCAB692BC4F9AE02.roa File: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (raw, json) Hash identifier: gY1J7cieU4Bsylm5Vte+4cLJIhwXOeU9STopBRqUalg= Subject key identifier: 5A:EA:1B:97:06:D8:EC:D4:DA:84:28:62:CA:C5:85:74:C5:7B:F4:AF Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0B98 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/065A717E9B6E11EFBCAB692BC4F9AE02.roa Signing time: Tue 05 Nov 2024 12:03:53 +0000 ROA not before: Tue 05 Nov 2024 12:03:53 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 24121 IP address blocks: 2407:b001:1000::/40 maxlen: 40 2407:b001:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F Validity Not Before: Nov 5 12:03:53 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=672a09a8-a574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:8d:09:7f:86:83:54:c0:15:5c:1a:16:99: 18:07:b2:89:f7:ae:3c:33:51:97:67:3a:d3:fe:76: be:94:87:52:fa:8c:a7:e9:f4:43:b0:d5:3f:bc:5e: 57:bf:78:01:11:5e:df:6a:a1:b9:fa:c4:24:72:40: 71:ed:d1:bd:e3:9d:b1:41:db:b0:c6:3f:a7:67:e7: 18:17:07:d2:88:70:bd:c5:d2:c0:53:32:8a:83:84: c2:f6:47:37:6a:13:50:76:82:e3:e8:22:e9:5a:28: 0d:06:c9:bb:11:dc:fa:77:ff:60:c2:1f:97:0b:d0: 86:9c:97:5b:16:ab:58:85:63:07:3b:85:dd:e8:49: d9:42:6f:46:49:0a:70:7f:2f:ee:06:a2:56:4d:fc: eb:f2:4e:2b:39:64:d9:1d:7d:88:78:f5:44:e1:f8: 76:63:12:1b:38:85:1e:b2:68:11:dd:a2:e1:ca:bf: cb:be:94:40:d9:ba:59:32:94:24:dc:77:e4:8a:bd: cd:b4:58:92:83:ea:52:c2:50:45:33:88:ec:7c:44: 3d:c9:5a:ea:01:15:43:79:82:7d:ab:5a:5c:6c:45: fd:09:a2:84:9a:7c:c1:17:52:1b:98:08:7d:32:83: da:6a:f1:ef:b1:41:56:1d:0f:82:93:4d:76:73:aa: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EA:1B:97:06:D8:EC:D4:DA:84:28:62:CA:C5:85:74:C5:7B:F4:AF X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/065A717E9B6E11EFBCAB692BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:b001:1000::/40 2407:b001:3000::/40 Signature Algorithm: sha256WithRSAEncryption 5a:5c:ae:a8:ae:02:b1:a6:60:26:5f:63:52:c0:fc:23:ba:bd: 0e:a6:15:9e:d5:ca:17:2c:1a:45:68:70:76:45:86:ab:0e:13: 76:46:2d:06:16:c3:55:e5:ee:19:71:90:64:a2:c4:96:d9:71: e2:57:49:53:0c:0f:be:6a:2b:52:31:5b:4e:2a:6f:c2:8d:c3: ef:e4:90:ed:0a:03:81:ad:c1:58:8c:35:70:6f:1f:fd:11:89: 37:e8:2d:80:86:7d:2b:23:91:c2:d5:ca:4b:c8:d9:9a:d0:de: e3:00:42:d7:b6:3f:6b:d4:94:a3:68:d9:61:b4:c9:f1:1d:9d: 75:c2:1a:73:0c:d4:77:ce:f5:15:07:dd:00:ea:78:35:e8:03: bf:f1:a1:0b:0c:dc:bc:23:9b:3b:4b:6b:06:72:b9:0c:13:2c: c0:f9:e6:f2:89:83:6c:b1:f2:a5:f5:46:ac:a8:a7:1c:ee:dd: 49:ad:44:35:fa:84:81:25:12:ad:c2:80:fc:a4:1d:59:64:c8: 34:a6:d7:a4:3d:8a:1f:2c:d8:65:9f:fb:ae:e4:cf:1d:c7:67: ff:3d:7b:d3:bc:af:a6:b1:26:e8:87:c2:5a:af:85:f2:c4:cb: 61:6d:19:4e:ad:32:67:c0:a3:44:bf:21:a3:8b:b3:a7:07:11: 1d:d6:bc:7e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjQxMTA1MTIwMzUzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJhMDlhOC1hNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLmNCX+Gg1TAFVwaFpkYB7KJ9648M1GXZzrT/na+lIdS+oyn6fRDsNU/vF5X v3gBEV7faqG5+sQkckBx7dG9452xQduwxj+nZ+cYFwfSiHC9xdLAUzKKg4TC9kc3 ahNQdoLj6CLpWigNBsm7Edz6d/9gwh+XC9CGnJdbFqtYhWMHO4Xd6EnZQm9GSQpw fy/uBqJWTfzr8k4rOWTZHX2IePVE4fh2YxIbOIUesmgR3aLhyr/LvpRA2bpZMpQk 3Hfkir3NtFiSg+pSwlBFM4jsfEQ9yVrqARVDeYJ9q1pcbEX9CaKEmnzBF1IbmAh9 MoPaavHvsUFWHQ+Ck012c6qO1wIDAQABo4ICnzCCApswHQYDVR0OBBYEFFrqG5cG 2OzU2oQoYsrFhXTFe/SvMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvMDY1QTcxN0U5 QjZFMTFFRkJDQUI2OTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQcBAf8E GjAYMBYEAgACMBADBgAkB7ABEAMGACQHsAEwMA0GCSqGSIb3DQEBCwUAA4IBAQBa XK6orgKxpmAmX2NSwPwjur0OphWe1coXLBpFaHB2RYarDhN2Ri0GFsNV5e4ZcZBk osSW2XHiV0lTDA++aitSMVtOKm/CjcPv5JDtCgOBrcFYjDVwbx/9EYk36C2Ahn0r I5HC1cpLyNma0N7jAELXtj9r1JSjaNlhtMnxHZ11whpzDNR3zvUVB90A6ng16AO/ 8aELDNy8I5s7S2sGcrkMEyzA+ebyiYNssfKl9UasqKcc7t1JrUQ1+oSBJRKtwoD8 pB1ZZMg0ptekPYofLNhln/uu5M8dx2f/PXvTvK+msSboh8Jar4XyxMthbRlOrTJn wKNEvyGji7OnBxEd1rx+ -----END CERTIFICATE-----Generated at Sun Feb 16 20:45:37 2025 by rpki-client