$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/F73EFF46839211EEA1EC8A0EC4F9AE02.roa File: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (raw, json) Hash identifier: 2l3pLCgtvIHc/+HLPDdULsr+5gl+RLvHUNSD8p67gig= Subject key identifier: C2:B5:03:2D:C2:10:D5:19:B2:28:E3:83:80:3D:E3:D3:38:62:23:2A Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0E5A Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/F73EFF46839211EEA1EC8A0EC4F9AE02.roa Signing time: Wed 18 Dec 2024 18:16:13 +0000 ROA not before: Wed 18 Dec 2024 18:16:13 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 7470 IP address blocks: 2400:c540:110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3674 (0xe5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E Validity Not Before: Dec 18 18:16:13 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6763116d-69c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:ba:62:11:31:0d:19:4c:a4:36:63:f2:49: 84:c3:5b:fa:da:77:8b:6e:7d:f5:ba:50:8a:e5:65: 1d:00:5f:f9:81:3e:5c:1a:f5:c3:a7:23:08:6a:51: d3:34:62:c6:a4:dd:90:87:f0:b8:e3:00:cf:68:a3: 75:6b:fe:2f:14:ca:4e:1e:7d:34:a9:43:d3:15:c1: 5f:3c:fb:c5:cf:57:04:92:12:b1:fd:e7:84:ee:3b: c3:3b:b2:cd:01:54:3d:5a:69:26:dc:7d:18:43:72: 05:33:02:76:f2:49:11:23:81:03:48:67:6a:a7:9c: 08:e5:c3:a1:29:ff:74:64:66:50:44:12:5d:78:4b: 3d:59:45:57:74:59:eb:4a:09:f5:3e:b7:db:0c:bd: 80:31:ef:74:5a:82:11:65:06:dc:54:39:bb:11:12: 6d:65:fb:5f:55:f4:33:bc:f3:19:5f:02:6e:20:99: 61:36:7a:b0:b5:74:99:80:a9:0b:d9:af:32:29:51: a7:98:86:5c:ce:a7:3f:7b:5f:2d:7b:d6:52:c6:25: 89:61:5f:c9:3b:6c:7a:be:f3:59:66:a2:6e:d0:bb: 4c:cc:33:49:06:e8:15:8f:7c:80:1a:fe:40:8b:29: 4c:2a:00:cd:8f:22:35:46:03:aa:46:8a:d3:e5:53: 12:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B5:03:2D:C2:10:D5:19:B2:28:E3:83:80:3D:E3:D3:38:62:23:2A X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/F73EFF46839211EEA1EC8A0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:c540:110::/48 Signature Algorithm: sha256WithRSAEncryption 8e:c6:5e:b4:68:5a:70:31:7d:86:3b:21:db:39:f0:c2:48:d8: 9c:1a:99:82:a3:f9:c3:48:36:1f:1e:aa:fa:62:cd:53:12:28: 85:d7:c9:ed:9f:4b:2d:03:9b:33:9f:18:c9:75:59:91:0b:84: 99:ad:51:a0:bc:48:74:ae:e6:1e:31:1a:79:40:18:30:3e:f9: a0:57:4f:e3:0d:02:60:1a:b8:cf:56:7c:00:44:12:d9:47:f4: 9b:db:b7:59:62:76:b6:06:ba:28:21:48:e2:27:00:b0:05:70: 6d:e3:cb:68:0e:18:4f:89:36:d5:49:72:12:e2:c9:5e:c3:70: 84:13:38:ce:e6:15:41:ec:54:6a:c5:6d:19:e6:90:11:46:f5: 9f:b1:33:99:b3:3b:c8:58:cd:ea:29:2b:41:f4:37:48:94:db: c2:22:b3:c4:9e:86:37:72:bd:de:dc:67:2d:70:fe:c3:91:52: c0:aa:1c:47:9d:56:f5:e5:ac:0e:bb:92:12:5c:b9:43:1c:2c: 66:cd:b2:f9:58:6f:5a:86:c6:b1:90:a6:da:6d:13:7a:33:8e: b2:27:b5:44:35:07:06:ec:ab:4d:80:64:92:31:bf:89:0a:f9: 19:ff:62:5a:7a:f4:45:24:aa:ba:35:0c:9a:5c:21:90:7f:c5: 86:54:a5:e8 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjQxMjE4MTgxNjEzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYzMTE2ZC02OWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyde6YhExDRlMpDZj8kmEw1v62neLbn31ulCK5WUdAF/5gT5cGvXDpyMIalHT NGLGpN2Qh/C44wDPaKN1a/4vFMpOHn00qUPTFcFfPPvFz1cEkhKx/eeE7jvDO7LN AVQ9Wmkm3H0YQ3IFMwJ28kkRI4EDSGdqp5wI5cOhKf90ZGZQRBJdeEs9WUVXdFnr Sgn1PrfbDL2AMe90WoIRZQbcVDm7ERJtZftfVfQzvPMZXwJuIJlhNnqwtXSZgKkL 2a8yKVGnmIZczqc/e18te9ZSxiWJYV/JO2x6vvNZZqJu0LtMzDNJBugVj3yAGv5A iylMKgDNjyI1RgOqRorT5VMS2QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMK1Ay3C ENUZsijjg4A949M4YiMqMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVCNEUvQTI4NDNDMDg5NzE3MTFFOTg1RkNBQjE0QzRGOUFFMDIvRjczRUZGNDY4 MzkyMTFFRUExRUM4QTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAMVAARAwDQYJKoZIhvcNAQELBQADggEBAI7GXrRoWnAx fYY7Ids58MJI2JwamYKj+cNINh8eqvpizVMSKIXXye2fSy0DmzOfGMl1WZELhJmt UaC8SHSu5h4xGnlAGDA++aBXT+MNAmAauM9WfABEEtlH9Jvbt1lidrYGuighSOIn ALAFcG3jy2gOGE+JNtVJchLiyV7DcIQTOM7mFUHsVGrFbRnmkBFG9Z+xM5mzO8hY zeopK0H0N0iU28Iis8Sehjdyvd7cZy1w/sORUsCqHEedVvXlrA67khJcuUMcLGbN svlYb1qGxrGQptptE3ozjrIntUQ1Bwbsq02AZJIxv4kK+Rn/Ylp69EUkqro1DJpc IZB/xYZUpeg= -----END CERTIFICATE-----Generated at Sun Apr 6 19:33:44 2025 by rpki-client