$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/1A5C7B24EDE411ED8259CE53C4F9AE02.roa File: 1A5C7B24EDE411ED8259CE53C4F9AE02.roa (raw, json) Hash identifier: lD0BDsW30xCXLHS6wcZEaYzkhA5Dm5fsOSckdceztUo= Subject key identifier: C9:A9:87:CE:08:B7:4E:92:6C:CF:4B:8D:A3:6F:51:EC:9D:A8:3A:22 Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 02E5 Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/1A5C7B24EDE411ED8259CE53C4F9AE02.roa Signing time: Thu 07 Nov 2024 01:14:43 +0000 ROA not before: Thu 07 Nov 2024 01:14:43 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 396982 IP address blocks: 2407:30c0:280::/48 maxlen: 48 2407:30c0:281::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 00:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304 Validity Not Before: Nov 7 01:14:43 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672c1483-d6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:6a:aa:5d:e4:52:c1:13:97:fc:67:78:48: cd:92:a8:66:a9:f0:70:76:03:80:7d:f6:21:51:72: e1:03:51:e6:95:48:d7:67:3c:11:0a:ef:3e:f4:a0: c9:a2:f6:d8:fc:27:79:17:93:37:de:d6:3a:ed:05: 6d:67:de:02:4b:5c:67:e6:91:6f:73:14:47:86:9b: 03:c4:96:25:a3:b7:4e:16:f2:34:ee:bc:68:50:ed: 02:8e:dc:15:7d:b5:d3:de:03:4f:65:42:29:ce:d9: d7:76:6b:58:ea:cb:e0:4f:65:dd:2c:26:fd:b0:1e: ca:88:00:09:84:43:13:69:53:01:f0:e1:c3:37:28: bd:df:fe:c7:cf:2a:06:99:2c:51:77:8e:f5:8f:a5: 0e:2f:06:be:04:ea:20:a9:35:05:00:46:98:aa:55: ce:d6:16:61:a4:af:39:66:36:87:fb:62:05:d9:98: 14:ee:49:4c:9a:59:5d:0e:c4:5a:93:a7:7a:0c:0f: 6e:39:5d:9a:d4:28:73:d8:b6:31:53:da:4e:2a:b7: 80:32:21:c7:2f:11:37:a6:78:9b:c5:96:19:8c:0e: d7:eb:1e:57:e9:21:06:10:9c:e5:18:c0:70:0d:2c: de:b7:67:71:f5:78:7d:fd:18:d6:94:70:4c:60:5d: f7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A9:87:CE:08:B7:4E:92:6C:CF:4B:8D:A3:6F:51:EC:9D:A8:3A:22 X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/1A5C7B24EDE411ED8259CE53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:30c0:280::/47 Signature Algorithm: sha256WithRSAEncryption a3:f0:bc:cc:26:69:9c:1d:87:ba:ea:3f:98:0b:5a:02:a6:8f: f8:bd:13:ca:90:40:93:aa:96:a8:b2:8e:30:48:84:18:d6:3a: 5b:73:40:d8:f5:1b:82:18:11:41:ff:26:74:3c:e4:5d:67:3d: 1b:02:c6:44:14:47:f7:0c:e0:1b:4b:e2:47:6e:75:28:5e:f9: be:33:b7:63:62:33:21:3a:02:74:fe:b6:b8:3f:4d:36:99:1b: e8:81:f3:f1:ab:11:00:2d:27:85:e0:9b:96:32:27:41:b7:5c: 9c:aa:eb:e3:e6:0a:42:4d:7d:cc:c0:dd:f4:74:00:71:1c:ec: bc:83:fc:34:d0:71:81:16:87:a3:02:ba:3b:ab:14:7e:92:96: 33:57:1c:ab:39:f2:d6:ec:24:78:08:24:f3:ee:91:e6:39:94: 75:83:24:27:93:19:7f:ca:7d:8d:7a:f0:da:52:f0:55:81:b1: c9:91:24:d2:e5:58:e8:67:2c:75:98:83:0c:30:2e:e0:4e:7f: ca:a9:c9:52:d1:1d:d3:ec:3f:6b:67:77:90:01:77:46:af:fe: da:8d:0c:05:ac:85:22:97:3e:85:55:62:11:7c:47:71:38:21: 7e:2c:c8:e4:53:ea:20:58:50:9d:60:34:49:e9:17:69:8b:f1: b3:cb:c6:61 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjQxMTA3MDExNDQzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJjMTQ4My1kNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+Vqql3kUsETl/xneEjNkqhmqfBwdgOAffYhUXLhA1HmlUjXZzwRCu8+9KDJ ovbY/Cd5F5M33tY67QVtZ94CS1xn5pFvcxRHhpsDxJYlo7dOFvI07rxoUO0CjtwV fbXT3gNPZUIpztnXdmtY6svgT2XdLCb9sB7KiAAJhEMTaVMB8OHDNyi93/7HzyoG mSxRd471j6UOLwa+BOogqTUFAEaYqlXO1hZhpK85ZjaH+2IF2ZgU7klMmlldDsRa k6d6DA9uOV2a1Chz2LYxU9pOKreAMiHHLxE3pnibxZYZjA7X6x5X6SEGEJzlGMBw DSzet2dx9Xh9/RjWlHBMYF33jQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMmph84I t06SbM9LjaNvUeydqDoiMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYzMDQvMTlFNERGMDZEQjA3MTFFQzk5MjJENzBGQzRGOUFFMDIvMUE1QzdCMjRF REU0MTFFRDgyNTlDRTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkBzDAAoAwDQYJKoZIhvcNAQELBQADggEBAKPwvMwmaZwd h7rqP5gLWgKmj/i9E8qQQJOqlqiyjjBIhBjWOltzQNj1G4IYEUH/JnQ85F1nPRsC xkQUR/cM4BtL4kdudShe+b4zt2NiMyE6AnT+trg/TTaZG+iB8/GrEQAtJ4Xgm5Yy J0G3XJyq6+PmCkJNfczA3fR0AHEc7LyD/DTQcYEWh6MCujurFH6SljNXHKs58tbs JHgIJPPukeY5lHWDJCeTGX/KfY168NpS8FWBscmRJNLlWOhnLHWYgwwwLuBOf8qp yVLRHdPsP2tnd5ABd0av/tqNDAWshSKXPoVVYhF8R3E4IX4syORT6iBYUJ1gNEnp F2mL8bPLxmE= -----END CERTIFICATE-----Generated at Thu Mar 13 21:56:30 2025 by rpki-client