$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa File: 467B9370E1B311EE9D77BF36C4F9AE02.roa (raw, json) Hash identifier: QqVMlI0c0eMujNYZA/CTuASVldBwi4qXuRz+B+meHWk= Subject key identifier: 30:D1:E1:13:C1:48:1D:2E:8C:4D:8F:D1:3B:FB:23:9C:B7:F3:69:93 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 0109 Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa Signing time: Mon 17 Mar 2025 08:47:32 +0000 ROA not before: Mon 17 Mar 2025 08:47:32 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 137897 IP address blocks: 2403:27c0:c02::/48 maxlen: 48 2403:27c0:c03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F Validity Not Before: Mar 17 08:47:32 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67d7e1a3-8b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:19:f3:b9:97:59:df:90:c8:d8:f7:34:54:09: b6:f0:56:79:05:29:eb:cc:35:d1:d9:9b:37:0c:ae: a1:13:a2:ab:80:b9:d4:5d:eb:8e:bb:d6:13:70:41: 49:17:ff:05:3b:57:50:0b:cb:10:2e:04:52:50:19: df:99:d0:12:2e:32:91:2e:84:1b:d5:f9:b9:76:bd: e2:b6:c9:60:48:54:4e:65:0d:da:ad:96:af:05:e1: 27:ca:6a:de:55:77:14:ac:4d:85:2b:07:49:0e:c4: 4d:c6:f3:5c:3d:1b:81:94:5d:ad:e4:6d:ba:b2:c3: de:74:7c:97:0c:25:e3:58:7e:ec:c2:aa:d7:ca:a4: cc:15:04:7a:7d:f2:b3:af:ab:40:4c:bd:5f:7b:8a: 54:6a:67:63:60:35:62:ec:ee:64:c4:18:1b:01:09: 9e:bd:61:bf:60:1d:b9:4f:7d:16:a5:78:a9:59:82: 8c:c8:ce:6f:ea:a7:5e:01:8a:2a:3e:ba:f0:a8:a2: 55:d4:9c:07:08:a4:1f:6f:43:37:3d:6a:1b:9a:11: 23:1b:bf:ec:55:ea:3d:06:1e:ab:dd:48:ac:99:30: a2:91:3d:41:01:9a:9c:1b:4b:2f:10:56:be:c4:94: d5:59:54:14:99:51:a9:c3:77:da:d9:9b:6d:7f:25: 7f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D1:E1:13:C1:48:1D:2E:8C:4D:8F:D1:3B:FB:23:9C:B7:F3:69:93 X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:27c0:c02::/47 Signature Algorithm: sha256WithRSAEncryption ac:a9:9a:a4:c0:ec:18:28:10:a2:54:a9:d7:0f:30:d3:72:54: 0a:b0:c7:b6:5f:63:5e:4b:05:a4:c7:12:cb:1a:8c:47:d8:0f: 6e:28:3a:b4:b0:1a:4c:cd:bc:66:5f:dd:3e:e6:2b:cf:07:a2: e6:df:67:ba:d3:9d:c2:7e:ec:ba:9f:e3:af:bb:88:b0:3d:54: 91:c1:ee:a5:cb:b0:8d:74:62:1a:cd:00:7a:fa:f1:31:eb:22: f6:3d:5d:a7:30:33:b1:ba:51:88:35:22:c6:5b:98:81:80:ce: 22:31:9f:97:a0:71:64:72:82:2a:51:95:39:62:6e:cc:8b:1e: 12:73:da:8f:51:82:f6:68:28:8e:27:3b:58:27:a7:11:da:c0: a3:f5:9d:8f:e4:cc:05:97:be:b9:e0:eb:fe:61:ea:4c:e0:83: ac:a4:09:d7:6c:39:50:3b:87:3f:e8:49:ca:26:5f:95:32:98: cb:b6:e6:4a:55:97:ac:f8:87:8e:69:10:f1:4b:33:f2:d3:e5: c1:0a:9a:ff:00:3a:96:e1:c5:c8:11:35:29:70:05:27:5a:43: 52:53:67:80:20:72:00:4f:aa:07:c4:c6:6d:b8:c0:4b:d5:5d: 98:b8:3c:71:2c:87:d3:ea:c8:81:f7:98:d7:53:5f:45:7b:c2: 18:c9:66:22 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwMzE3MDg0NzMyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q3ZTFhMy04YjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9hnzuZdZ35DI2Pc0VAm28FZ5BSnrzDXR2Zs3DK6hE6KrgLnUXeuOu9YTcEFJ F/8FO1dQC8sQLgRSUBnfmdASLjKRLoQb1fm5dr3itslgSFROZQ3arZavBeEnymre VXcUrE2FKwdJDsRNxvNcPRuBlF2t5G26ssPedHyXDCXjWH7swqrXyqTMFQR6ffKz r6tATL1fe4pUamdjYDVi7O5kxBgbAQmevWG/YB25T30WpXipWYKMyM5v6qdeAYoq PrrwqKJV1JwHCKQfb0M3PWobmhEjG7/sVeo9Bh6r3UismTCikT1BAZqcG0svEFa+ xJTVWVQUmVGpw3fa2ZttfyV/twIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDDR4RPB SB0ujE2P0Tv7I5y382mTMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2NkYvOEZDQzlEMjhDNkY5MTFFRTk3RTZGQjFEQzRGOUFFMDIvNDY3QjkzNzBF MUIzMTFFRTlENzdCRjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkAyfADAIwDQYJKoZIhvcNAQELBQADggEBAKypmqTA7Bgo EKJUqdcPMNNyVAqwx7ZfY15LBaTHEssajEfYD24oOrSwGkzNvGZf3T7mK88Houbf Z7rTncJ+7Lqf46+7iLA9VJHB7qXLsI10YhrNAHr68THrIvY9XacwM7G6UYg1IsZb mIGAziIxn5egcWRygipRlTlibsyLHhJz2o9RgvZoKI4nO1gnpxHawKP1nY/kzAWX vrng6/5h6kzgg6ykCddsOVA7hz/oScomX5UymMu25kpVl6z4h45pEPFLM/LT5cEK mv8AOpbhxcgRNSlwBSdaQ1JTZ4AgcgBPqgfExm24wEvVXZi4PHEsh9PqyIH3mNdT X0V7whjJZiI= -----END CERTIFICATE-----Generated at Mon Apr 7 05:17:25 2025 by rpki-client