$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/12FD08CAC88411ECAAB5BD09C4F9AE02.roa File: 12FD08CAC88411ECAAB5BD09C4F9AE02.roa (raw, json) Hash identifier: Rk9fezvR7MLf0U22xpSZ4jUyV+Jwv2bIeNDcvnRfGXA= Subject key identifier: 08:82:83:0A:9B:8F:4F:5C:56:93:8E:13:D1:71:B3:4E:D0:F4:6D:EC Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Certificate serial: 0839 Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/12FD08CAC88411ECAAB5BD09C4F9AE02.roa Signing time: Tue 24 Dec 2024 20:39:30 +0000 ROA not before: Tue 24 Dec 2024 20:39:30 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 400384 IP address blocks: 2403:f5c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91998BE Validity Not Before: Dec 24 20:39:30 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676b1c02-37ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:ae:a4:52:af:7d:8c:11:b5:4e:32:4e:4e: 69:ae:8b:74:d4:51:57:59:69:18:8d:c4:56:7b:53: c6:0f:6c:71:d4:88:f2:b5:f7:a3:e2:c9:a8:b7:d3: 57:e3:a7:18:b4:7a:a3:5c:9a:56:8c:19:8a:66:4d: f0:2f:34:a3:e0:ab:69:f0:37:5e:c1:23:d9:d3:f3: 08:49:e2:22:e7:3b:93:fd:07:2c:43:82:7b:2b:c9: e8:db:9b:3a:81:f3:66:d6:84:68:89:b3:48:2a:d9: fa:5d:1b:48:4b:d7:df:89:fd:f1:bb:a7:c3:e2:b3: 0e:52:cc:14:5a:99:f0:5f:08:8b:a1:67:d9:29:d7: 9b:0a:4f:b7:43:22:1a:d1:64:6d:7f:02:9a:79:f3: 88:72:f4:89:af:51:4a:7b:b8:d9:17:0b:de:c1:1a: e5:42:8a:69:41:ba:86:d4:1b:04:68:c1:48:da:25: f3:1d:d7:11:8c:95:99:db:49:f3:9d:be:75:3d:c5: 48:b9:49:92:96:45:c1:46:ab:53:24:f9:4c:24:49: 54:00:c5:d5:57:8a:8b:38:fc:df:07:76:0e:4c:b8: 5d:af:c2:8c:01:d4:3c:4f:97:48:46:91:14:3e:f8: 44:ab:0d:e4:c4:87:5f:3b:88:d4:b4:51:d4:d7:54: 3e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:82:83:0A:9B:8F:4F:5C:56:93:8E:13:D1:71:B3:4E:D0:F4:6D:EC X509v3 Authority Key Identifier: keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/12FD08CAC88411ECAAB5BD09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:f5c0::/32 Signature Algorithm: sha256WithRSAEncryption 5d:64:84:d5:32:7d:e5:7a:ec:59:f2:32:f9:8c:21:2d:34:7f: a9:bf:ff:1a:41:7e:47:ff:1a:d2:cf:8f:5c:85:43:bb:8a:b6: c0:de:02:1a:a8:ef:24:29:7f:89:c3:5a:da:78:81:74:cc:d2: 96:82:e4:64:a0:44:54:79:de:94:c1:57:32:1c:28:2c:16:48: a3:3d:85:da:81:83:14:70:0c:f2:40:e6:7a:1a:cc:dd:27:62: a7:6a:71:fe:dc:c7:3d:30:1c:29:90:de:8e:c8:68:53:49:bb: 04:99:07:a2:d2:03:d7:ef:05:11:b3:ed:7a:7b:d3:98:53:28: 77:b2:b3:97:40:14:5e:bd:65:c0:9e:76:46:c8:e2:75:5d:27: 5b:94:75:3c:fb:2b:6c:58:bd:68:f9:d4:b5:a2:0c:03:ed:a2: 89:61:2e:0a:af:f4:35:7e:01:2c:91:d9:be:7c:c8:4c:7b:aa: 80:b7:0b:5d:02:85:82:d3:bb:57:a3:ca:b7:44:2d:b7:96:2c: e6:cd:e8:b3:f1:98:7c:6a:c3:ef:db:28:e1:be:38:6b:03:7a: d1:7e:0d:d1:5b:c5:05:4d:71:1f:5e:21:d0:bc:2a:72:e9:90: 77:74:57:e2:f7:c6:7e:01:e0:bc:6f:c6:d2:e6:0b:f4:83:0d: 97:e4:14:8e -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw NTYwMTc0QTIwHhcNMjQxMjI0MjAzOTMwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZiMWMwMi0zN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqY+upFKvfYwRtU4yTk5prot01FFXWWkYjcRWe1PGD2xx1Ijytfej4smot9NX 46cYtHqjXJpWjBmKZk3wLzSj4Ktp8DdewSPZ0/MISeIi5zuT/QcsQ4J7K8no25s6 gfNm1oRoibNIKtn6XRtIS9ffif3xu6fD4rMOUswUWpnwXwiLoWfZKdebCk+3QyIa 0WRtfwKaefOIcvSJr1FKe7jZFwvewRrlQoppQbqG1BsEaMFI2iXzHdcRjJWZ20nz nb51PcVIuUmSlkXBRqtTJPlMJElUAMXVV4qLOPzfB3YOTLhdr8KMAdQ8T5dIRpEU PvhEqw3kxIdfO4jUtFHU11Q+cwIDAQABo4ICljCCApIwHQYDVR0OBBYEFAiCgwqb j09cVpOOE9Fxs07Q9G3sMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk4QkUvMTUwRTU3QzZDRjQ5MTFFQTlDQzkzNTNFQzRGOUFFMDIvMTJGRDA4Q0FD ODg0MTFFQ0FBQjVCRDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkA/XAMA0GCSqGSIb3DQEBCwUAA4IBAQBdZITVMn3leuxZ 8jL5jCEtNH+pv/8aQX5H/xrSz49chUO7irbA3gIaqO8kKX+Jw1raeIF0zNKWguRk oERUed6UwVcyHCgsFkijPYXagYMUcAzyQOZ6GszdJ2KnanH+3Mc9MBwpkN6OyGhT SbsEmQei0gPX7wURs+16e9OYUyh3srOXQBRevWXAnnZGyOJ1XSdblHU8+ytsWL1o +dS1ogwD7aKJYS4Kr/Q1fgEskdm+fMhMe6qAtwtdAoWC07tXo8q3RC23lizmzeiz 8Zh8asPv2yjhvjhrA3rRfg3RW8UFTXEfXiHQvCpy6ZB3dFfi98Z+AeC8b8bS5gv0 gw2X5BSO -----END CERTIFICATE-----Generated at Sun Feb 16 20:38:38 2025 by rpki-client