$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/3524F8BCD75511EF80E68A39C4F9AE02.roa File: 3524F8BCD75511EF80E68A39C4F9AE02.roa (raw, json) Hash identifier: atNvogMajVgrPoutiUYnbQeZE/aQ+6Wia9GfoJ31M8o= Subject key identifier: FB:70:6B:5F:58:45:47:7B:18:8F:4A:1C:6C:51:76:13:D2:72:56:CD Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Certificate serial: 067C Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/3524F8BCD75511EF80E68A39C4F9AE02.roa Signing time: Mon 20 Jan 2025 17:37:24 +0000 ROA not before: Mon 20 Jan 2025 17:37:24 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 138195 IP address blocks: 2401:e9e0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB4D Validity Not Before: Jan 20 17:37:24 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=678e89d3-7269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:0f:96:18:71:e0:4b:01:f0:9f:8d:66:24: b3:c9:0f:3e:c0:3e:e3:c0:81:1a:11:08:41:5d:d7: 15:5b:82:d6:0f:1f:f4:58:1b:7c:83:32:a7:6c:78: a6:48:5c:3a:84:ba:c8:24:88:20:6e:74:70:ec:f5: 58:51:ad:48:47:b4:5b:da:44:0d:bc:bc:ac:7c:2d: b5:ac:66:fa:c3:56:47:14:f8:f0:57:86:43:d6:09: e5:9a:f8:4f:e0:5a:27:0c:a2:02:41:5a:a1:42:e7: 31:82:44:e7:3d:50:7b:c6:d9:ad:f8:fa:d0:28:e1: d9:14:6c:ce:2f:88:c4:dd:58:f8:4c:03:50:f7:f0: ee:e7:8f:12:17:8e:30:d0:e8:2c:af:15:bc:ca:b6: cf:7f:da:c7:54:55:63:09:20:9c:47:b6:86:20:09: 62:08:5a:fb:bb:6a:da:eb:a6:7d:af:9c:4d:f9:5c: 86:d3:90:fb:2a:f7:2b:02:75:81:07:0c:cf:45:5b: f0:a9:22:17:61:64:e3:4d:8b:67:7b:f2:b8:15:c6: 81:73:c8:25:59:2d:8f:03:37:17:4a:ad:20:5e:3c: 5b:51:a8:8e:a9:30:3b:27:f9:a6:38:d3:d0:94:5f: 39:6f:1f:64:8d:92:ab:bc:af:60:53:fa:1f:8b:9a: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:70:6B:5F:58:45:47:7B:18:8F:4A:1C:6C:51:76:13:D2:72:56:CD X509v3 Authority Key Identifier: keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/3524F8BCD75511EF80E68A39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:e9e0:2000::/36 Signature Algorithm: sha256WithRSAEncryption 19:a6:23:03:9e:10:ac:31:64:45:87:df:53:be:82:8a:96:84: 7e:7a:15:0e:61:3f:b6:a3:0e:ad:e9:19:cb:d5:d0:56:c8:b3: 6a:15:1d:9c:a4:d8:1b:a5:25:60:8f:78:b9:98:b1:34:d6:0b: ce:41:e5:a9:69:b8:8a:49:79:47:ad:e6:81:3b:da:ad:ca:54: 03:3d:e6:c0:de:12:69:c8:2c:e6:ea:12:52:1a:32:d5:37:b5: a5:7f:33:cd:7f:d5:21:40:83:52:b4:7d:5f:d5:f7:ff:88:2a: 00:eb:16:44:9d:4d:0e:24:d3:63:42:06:7f:c3:e4:01:b7:dc: d6:06:fe:f5:a0:c8:de:e2:a9:be:e7:e3:b9:3e:8a:d3:f5:7b: e3:36:5f:9b:5e:a1:50:f1:c8:08:45:8e:3f:1d:e7:44:ee:a3: 6c:3d:ca:e4:ec:14:4e:aa:71:68:1d:16:96:3d:66:b8:b8:3a: 10:33:ce:4f:3d:ad:c4:19:be:c7:8f:e4:b4:9d:60:bf:6f:0c: 3f:59:d1:2e:4e:af:fd:8b:b0:5c:dd:e7:8b:01:26:ea:00:3b: 37:f1:ee:f4:1c:d6:e0:fe:16:2d:eb:1f:e6:3f:d1:e2:05:75: 0b:1e:9f:26:fc:7c:1a:2f:6b:35:fa:c4:2a:61:b7:a1:1f:bf: 50:29:5d:15 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0 QzkxNTRGMjQwHhcNMjUwMTIwMTczNzI0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhlODlkMy03MjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLQPlhhx4EsB8J+NZiSzyQ8+wD7jwIEaEQhBXdcVW4LWDx/0WBt8gzKnbHim SFw6hLrIJIggbnRw7PVYUa1IR7Rb2kQNvLysfC21rGb6w1ZHFPjwV4ZD1gnlmvhP 4FonDKICQVqhQucxgkTnPVB7xtmt+PrQKOHZFGzOL4jE3Vj4TANQ9/Du548SF44w 0OgsrxW8yrbPf9rHVFVjCSCcR7aGIAliCFr7u2ra66Z9r5xN+VyG05D7KvcrAnWB BwzPRVvwqSIXYWTjTYtne/K4FcaBc8glWS2PAzcXSq0gXjxbUaiOqTA7J/mmONPQ lF85bx9kjZKrvK9gU/ofi5prxwIDAQABo4IClzCCApMwHQYDVR0OBBYEFPtwa19Y RUd7GI9KHGxRdhPSclbNMB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1 MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJCNEQvQ0E1NjNCRTg2NTIyMTFFQjgwRjZFOTRCQzRGOUFFMDIvMzUyNEY4QkNE NzU1MTFFRjgwRTY4QTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgQkAengIDANBgkqhkiG9w0BAQsFAAOCAQEAGaYjA54QrDFk RYffU76CipaEfnoVDmE/tqMOrekZy9XQVsizahUdnKTYG6UlYI94uZixNNYLzkHl qWm4ikl5R63mgTvarcpUAz3mwN4Sacgs5uoSUhoy1Te1pX8zzX/VIUCDUrR9X9X3 /4gqAOsWRJ1NDiTTY0IGf8PkAbfc1gb+9aDI3uKpvufjuT6K0/V74zZfm16hUPHI CEWOPx3nRO6jbD3K5OwUTqpxaB0Wlj1muLg6EDPOTz2txBm+x4/ktJ1gv28MP1nR Lk6v/YuwXN3niwEm6gA7N/Hu9BzW4P4WLesf5j/R4gV1Cx6fJvx8Gi9rNfrEKmG3 oR+/UCldFQ== -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:33 2025 by rpki-client