$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/34956990D75511EF80E68A39C4F9AE02.roa File: 34956990D75511EF80E68A39C4F9AE02.roa (raw, json) Hash identifier: h81pLQ3f9taD4ZqBYBRt4RndKbd9f7ld0NnWuyDorBE= Subject key identifier: 18:F2:A1:4D:30:87:F8:9B:6A:1D:93:55:C3:3E:39:59:E1:C7:DC:C3 Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Certificate serial: 067B Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/34956990D75511EF80E68A39C4F9AE02.roa Signing time: Mon 20 Jan 2025 17:37:23 +0000 ROA not before: Mon 20 Jan 2025 17:37:23 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 134835 IP address blocks: 2401:e9e0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Feb 2025 23:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1659 (0x67b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB4D Validity Not Before: Jan 20 17:37:23 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=678e89d2-c78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fe:19:d5:32:19:1d:31:1e:62:55:59:f5:51: b1:0c:ab:c4:45:e2:8e:95:32:64:29:0e:5e:3a:6e: 8c:ad:e6:03:ba:e9:0a:04:6f:21:48:17:18:9a:32: 79:fb:be:35:f7:c0:86:a9:27:9e:70:f5:a0:59:e4: 44:57:2d:d5:1c:6b:07:ca:cd:1e:f0:12:b4:fe:dd: 9c:14:5e:b5:2d:d2:e1:c4:03:07:69:f3:93:0e:1e: 5d:2d:3e:d3:f2:9c:af:f0:07:2b:0e:1c:02:ce:b5: 53:f1:b6:5e:7e:42:df:3a:08:d0:1c:22:60:68:5f: 96:f1:09:40:02:ae:de:71:3a:e8:97:6a:04:e6:3c: 0b:d9:82:ab:c2:db:25:e4:72:00:f6:1d:2e:26:67: ed:44:07:8d:04:01:4f:56:85:ca:a1:a2:ef:ff:57: 04:8e:24:c5:cf:bb:60:63:3a:1f:cf:15:80:c9:a4: da:84:76:56:bc:46:a5:01:35:ea:6c:b9:df:a8:8f: b7:44:b6:32:89:1c:15:4e:0a:13:44:ca:a2:cd:ae: fb:38:2e:e7:21:66:91:69:42:2e:cc:05:07:e1:8b: 49:ed:90:f5:8a:38:5b:90:ff:20:bb:a0:c8:e6:f8: 8a:a7:dd:68:50:8a:08:f8:a8:4c:72:5e:28:01:cc: 7c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F2:A1:4D:30:87:F8:9B:6A:1D:93:55:C3:3E:39:59:E1:C7:DC:C3 X509v3 Authority Key Identifier: keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/34956990D75511EF80E68A39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:e9e0:4000::/36 Signature Algorithm: sha256WithRSAEncryption cb:cc:e4:3f:42:d5:e3:ea:65:db:8a:fe:9a:c8:ca:97:d1:d5: 09:63:25:94:a9:9e:09:3c:5c:ba:2b:81:0a:e5:ab:be:a1:09: 65:07:d8:fb:9c:79:3b:61:b2:98:1b:f7:ae:6a:66:28:50:1b: 85:07:d0:d4:38:e7:df:4b:22:57:2a:83:fe:5d:09:9a:e7:6a: b8:17:12:72:95:f0:65:e8:d5:d2:0c:2f:5c:a4:98:b5:ff:f7: df:51:e6:4a:95:0e:b9:02:2c:29:38:30:2c:29:f3:fc:fb:96: ae:a0:fc:82:d8:53:f9:27:0c:b6:9d:3f:dc:20:d7:f2:00:6f: 0d:7f:a6:13:ba:61:5f:c6:da:3d:5f:47:75:29:e1:4d:d2:ea: 1d:82:8b:6b:76:2b:b9:87:30:53:64:8a:15:e3:6b:18:98:c4: db:9e:e6:26:83:68:97:d0:b5:2c:8d:9e:4a:f3:49:ba:44:68: 30:af:c5:80:bc:4b:f2:b3:ce:00:8d:93:73:8f:d3:90:93:35: 16:ba:b0:fd:87:ee:37:5b:4d:7f:00:fd:92:c0:c2:63:9d:03: 2f:d9:99:80:d0:27:c8:57:91:18:cf:99:0b:bb:f2:f5:05:d5: 86:5b:a3:96:7e:52:a5:be:ea:4d:9b:47:96:fb:f1:cb:3c:4c: 9c:73:ec:37 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0 QzkxNTRGMjQwHhcNMjUwMTIwMTczNzIzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhlODlkMi1jNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf4Z1TIZHTEeYlVZ9VGxDKvEReKOlTJkKQ5eOm6MreYDuukKBG8hSBcYmjJ5 +74198CGqSeecPWgWeREVy3VHGsHys0e8BK0/t2cFF61LdLhxAMHafOTDh5dLT7T 8pyv8AcrDhwCzrVT8bZefkLfOgjQHCJgaF+W8QlAAq7ecTrol2oE5jwL2YKrwtsl 5HIA9h0uJmftRAeNBAFPVoXKoaLv/1cEjiTFz7tgYzofzxWAyaTahHZWvEalATXq bLnfqI+3RLYyiRwVTgoTRMqiza77OC7nIWaRaUIuzAUH4YtJ7ZD1ijhbkP8gu6DI 5viKp91oUIoI+KhMcl4oAcx8lQIDAQABo4IClzCCApMwHQYDVR0OBBYEFBjyoU0w h/ibah2TVcM+OVnhx9zDMB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1 MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJCNEQvQ0E1NjNCRTg2NTIyMTFFQjgwRjZFOTRCQzRGOUFFMDIvMzQ5NTY5OTBE NzU1MTFFRjgwRTY4QTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgQkAengQDANBgkqhkiG9w0BAQsFAAOCAQEAy8zkP0LV4+pl 24r+msjKl9HVCWMllKmeCTxcuiuBCuWrvqEJZQfY+5x5O2GymBv3rmpmKFAbhQfQ 1Djn30siVyqD/l0JmudquBcScpXwZejV0gwvXKSYtf/331HmSpUOuQIsKTgwLCnz /PuWrqD8gthT+ScMtp0/3CDX8gBvDX+mE7phX8baPV9HdSnhTdLqHYKLa3YruYcw U2SKFeNrGJjE257mJoNol9C1LI2eSvNJukRoMK/FgLxL8rPOAI2Tc4/TkJM1Frqw /YfuN1tNfwD9ksDCY50DL9mZgNAnyFeRGM+ZC7vy9QXVhlujln5Spb7qTZtHlvvx yzxMnHPsNw== -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:13 2025 by rpki-client