$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/C3667DBAE6A711EFA8D1A077C4F9AE02.roa File: C3667DBAE6A711EFA8D1A077C4F9AE02.roa (raw, json) Hash identifier: 5CkSO9tc+/UFRkRtU6tdYYVHHpR7HqK76CBHyDuJbdw= Subject key identifier: B0:2D:76:54:8A:34:26:C6:3A:6B:0F:10:F9:40:79:70:CA:46:EF:87 Certificate issuer: /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Certificate serial: 0C76 Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/C3667DBAE6A711EFA8D1A077C4F9AE02.roa Signing time: Sun 09 Feb 2025 05:36:08 +0000 ROA not before: Sun 09 Feb 2025 05:36:08 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 139074 IP address blocks: 2404:ddc0:6000::/36 maxlen: 36 2404:ddc0:aa00::/40 maxlen: 40 2404:ddc0:af00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 18:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3190 (0xc76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160EEF Validity Not Before: Feb 9 05:36:08 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67a83ec8-02db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:1b:c2:4f:b7:1f:fd:a2:bc:9b:ec:c6:71: a5:d9:86:ca:3c:64:bd:cb:eb:f8:28:bc:74:f0:e4: 5c:db:b7:b2:55:05:9c:3d:17:88:68:c0:f3:23:74: 19:e6:3d:f2:31:90:81:96:2f:9b:53:c0:c9:86:f7: 3e:b8:95:48:63:61:2c:54:ed:4c:de:ce:a4:d3:a6: be:2b:57:b3:f2:92:88:f3:a0:46:9e:55:a3:f8:82: d8:a5:f8:f8:92:db:0a:71:8a:ce:2c:7a:a8:eb:af: 9e:58:05:9c:9e:7a:39:b5:07:19:c6:d2:85:63:cb: 13:6b:bb:0d:7b:75:30:b8:c9:fc:47:b0:68:30:a8: 4b:a1:c2:9a:cc:5b:99:db:f1:04:8f:7c:2f:29:ad: 00:72:dc:73:6a:ca:d9:bd:1b:af:88:26:7b:a6:c7: f7:43:f3:ac:79:c1:f7:94:f2:b0:79:bc:9c:dc:22: 9b:4a:79:64:ce:64:d6:f2:b2:e6:96:d0:c6:8f:0b: 89:b3:82:b4:49:f0:ee:8d:01:31:8e:57:d7:f4:50: 9f:18:b8:6c:9a:0a:0e:9d:07:5a:c0:50:57:0e:c8: c6:65:b4:32:3d:8a:98:65:f8:91:8b:b9:bb:96:34: e0:7f:f4:97:a2:d6:35:55:fe:84:c9:92:0a:54:a3: 07:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2D:76:54:8A:34:26:C6:3A:6B:0F:10:F9:40:79:70:CA:46:EF:87 X509v3 Authority Key Identifier: keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/C3667DBAE6A711EFA8D1A077C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:ddc0:6000::/36 2404:ddc0:aa00::/40 2404:ddc0:af00::/40 Signature Algorithm: sha256WithRSAEncryption 35:6d:22:a7:5b:c9:a1:c9:b5:ab:0d:2c:c7:c6:ec:72:44:4b: ab:c0:4a:ac:43:b7:78:2e:03:a8:3d:93:71:5b:36:99:d5:1b: a3:2b:66:4c:c0:ce:0d:32:42:04:bd:d0:67:00:2a:02:bf:4f: 88:59:6a:3f:7a:da:76:a6:de:52:99:54:be:2e:ac:39:71:b8: 34:78:c0:59:f0:9b:09:9c:d8:4e:f8:bf:ad:89:6d:10:dc:f1: c4:5a:83:1f:26:ab:3c:9d:59:6c:b4:5a:5d:04:38:b0:34:54: 72:58:02:3b:97:99:1a:66:3e:dd:c7:00:be:c2:e2:b0:c4:a3: fa:09:a5:df:6b:86:62:cd:a3:95:89:c2:61:f7:22:e2:ef:3b: 33:7e:ec:60:12:bd:52:2b:b6:31:d2:18:08:b1:b5:93:b1:a4: 03:ca:aa:70:5e:37:95:dc:03:92:42:e4:18:37:e8:d4:89:0e: 50:47:e7:b6:00:cc:38:5c:2a:a2:5a:33:3d:9d:85:06:74:87: a1:b6:01:ee:f6:07:c3:3b:ec:a7:0a:34:a2:e2:e2:33:03:ab: 41:f7:8c:96:56:fc:92:f7:dc:db:f3:ed:ea:eb:40:29:80:e7: e2:d5:76:08:4c:a1:b9:39:4e:4b:2c:b4:c8:71:b1:3c:83:ba: 5d:9e:43:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICDHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBFRUYxMTAvBgNVBAUTKDk1OEE0RUQ5RDdENjRGQUM4N0JEMTZFQzhBMzY1NzFF MUEyRjUwOEEwHhcNMjUwMjA5MDUzNjA4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E4M2VjOC0wMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5Abwk+3H/2ivJvsxnGl2YbKPGS9y+v4KLx08ORc27eyVQWcPReIaMDzI3QZ 5j3yMZCBli+bU8DJhvc+uJVIY2EsVO1M3s6k06a+K1ez8pKI86BGnlWj+ILYpfj4 ktsKcYrOLHqo66+eWAWcnno5tQcZxtKFY8sTa7sNe3UwuMn8R7BoMKhLocKazFuZ 2/EEj3wvKa0ActxzasrZvRuviCZ7psf3Q/OsecH3lPKwebyc3CKbSnlkzmTW8rLm ltDGjwuJs4K0SfDujQExjlfX9FCfGLhsmgoOnQdawFBXDsjGZbQyPYqYZfiRi7m7 ljTgf/SXotY1Vf6EyZIKVKMHPQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFLAtdlSK NCbGOmsPEPlAeXDKRu+HMB8GA1UdIwQYMBaAFJWKTtnX1k+sh70W7Io2Vx4aL1CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEVFRi82QzRDRDY5MEY4 ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2eUh2UmJzaWpaWEhob3ZV SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZcE8yZGZXVDZ5SHZSYnNpalpYSGhvdlVJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjBFRUYvNkM0Q0Q2OTBGODg4MTFFOThGQTAwQTdDQzRGOUFFMDIvQzM2NjdEQkFF NkE3MTFFRkE4RDFBMDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgACMBgDBgQkBN3AYAMGACQE3cCqAwYAJATdwK8wDQYJKoZIhvcNAQEL BQADggEBADVtIqdbyaHJtasNLMfG7HJES6vASqxDt3guA6g9k3FbNpnVG6MrZkzA zg0yQgS90GcAKgK/T4hZaj962nam3lKZVL4urDlxuDR4wFnwmwmc2E74v62JbRDc 8cRagx8mqzydWWy0Wl0EOLA0VHJYAjuXmRpmPt3HAL7C4rDEo/oJpd9rhmLNo5WJ wmH3IuLvOzN+7GASvVIrtjHSGAixtZOxpAPKqnBeN5XcA5JC5Bg36NSJDlBH57YA zDhcKqJaMz2dhQZ0h6G2Ae72B8M77KcKNKLi4jMDq0H3jJZW/JL33Nvz7errQCmA 5+LVdghMobk5TksstMhxsTyDul2eQ/8= -----END CERTIFICATE-----Generated at Thu Mar 13 06:50:07 2025 by rpki-client