$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/2025BD6C6C3311EF99E0EF34C4F9AE02.roa File: 2025BD6C6C3311EF99E0EF34C4F9AE02.roa (raw, json) Hash identifier: v8gSdO2Oyevi0udRA9oSIzZPAk2F5XphTGY0llKdCYI= Subject key identifier: 72:46:35:2B:18:D9:7D:44:2C:36:6C:B3:6B:EA:EA:60:B1:DD:04:08 Certificate issuer: /CN=A91E9B89/serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422 Certificate serial: 03 Authority key identifier: 29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/2025BD6C6C3311EF99E0EF34C4F9AE02.roa Signing time: Fri 06 Sep 2024 09:33:51 +0000 ROA not before: Fri 06 Sep 2024 09:33:51 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153320 IP address blocks: 2401:c120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89/serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422 Validity Not Before: Sep 6 09:33:51 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66dacc7f-992a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:7a:4b:31:1c:e0:a9:a3:37:d1:65:d1:6d: d7:80:e5:93:80:78:d5:0f:9d:f6:fe:77:66:3f:d0: d8:8a:bb:0a:2b:2e:4e:0f:27:76:5a:92:03:14:b9: 66:25:1e:51:08:29:0c:68:2a:cd:66:e0:0d:4e:1e: 52:4d:6d:52:fb:f6:f0:b5:8c:96:29:c5:1e:54:cd: 9a:b3:9f:58:b3:f8:dc:d7:8d:a6:9f:70:b6:b9:f6: 0b:61:c5:15:6c:f2:ff:e9:fd:ed:20:73:2d:5f:d4: 98:8d:2d:ec:8b:d1:c6:7b:f8:99:b0:06:da:01:e1: 15:c4:42:4a:42:35:30:b7:b6:f8:df:fc:94:81:20: 0c:bc:b1:e2:3e:04:11:95:50:dd:6f:ef:c2:2f:a7: e7:1a:d2:4f:60:96:d1:69:16:e3:9b:8b:e2:33:bc: 18:fa:35:74:9a:fb:0b:31:1a:3b:db:81:3a:e1:c8: 3e:13:da:30:de:1e:22:a6:df:96:e5:c9:cc:e1:1c: 71:39:75:ef:a9:7b:90:94:84:d0:ed:88:6f:90:58: e9:71:58:88:11:db:e5:ff:80:f1:18:79:40:04:55: f9:8a:dc:45:55:c2:31:00:a5:e5:4d:43:1c:ff:f3: 78:ac:3c:c2:43:53:04:4c:95:5b:3c:bc:8d:8a:01: 4a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:46:35:2B:18:D9:7D:44:2C:36:6C:B3:6B:EA:EA:60:B1:DD:04:08 X509v3 Authority Key Identifier: keyid:29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/2025BD6C6C3311EF99E0EF34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:c120::/32 Signature Algorithm: sha256WithRSAEncryption 6d:4a:83:bc:14:4a:f8:2a:5a:b8:8c:b6:4b:3c:4b:d6:78:4e: 61:cd:e3:32:35:b9:10:9f:4a:db:ab:e8:1a:ce:2d:f2:da:40: b3:f2:f0:ef:07:d7:e6:b2:ec:10:fa:79:0b:66:96:70:0c:0b: b2:93:d0:9c:09:69:29:6e:ef:10:c2:ab:5c:fb:31:5c:ce:13: 83:fe:ed:d7:1a:2d:84:4c:a3:73:09:82:94:89:33:d1:bc:98: 70:e0:73:84:dc:d3:b1:f6:98:69:01:67:00:b7:c3:fa:1e:71: a1:a2:84:8a:1d:3c:42:6e:03:31:5e:a8:8f:42:be:cf:39:62: e6:05:56:ec:a1:eb:06:88:16:39:d6:78:f4:80:08:b0:f4:05: 40:6a:5f:8a:46:dd:91:f5:e4:ac:ae:e2:d1:cc:75:bb:de:a5: a8:4c:07:49:19:37:72:aa:86:b6:31:62:a9:90:c2:c3:ed:89: b6:8b:c4:8e:32:27:f4:43:8f:57:88:c3:8b:e8:79:8b:e9:26: 84:da:2a:5b:57:d0:3a:26:af:06:44:ca:9b:6f:52:68:a9:ff: 61:50:38:34:f4:0f:39:cb:5c:77:ce:4b:6f:05:9e:c3:f6:8d: 76:b4:43:da:a0:f8:ff:12:f4:23:f9:2b:8f:37:c4:a1:c0:b2: 31:aa:41:b2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUI4OTExMC8GA1UEBRMoMjkwMzdCQkY5MkYyQjBGNEMzMzBBMUNERDRBNzYyNTZD RDdBNTQyMjAeFw0yNDA5MDYwOTMzNTFaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZGFjYzdmLTk5MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkZXpLMRzgqaM30WXRbdeA5ZOAeNUPnfb+d2Y/0NiKuworLk4PJ3ZakgMUuWYl HlEIKQxoKs1m4A1OHlJNbVL79vC1jJYpxR5UzZqzn1iz+NzXjaafcLa59gthxRVs 8v/p/e0gcy1f1JiNLeyL0cZ7+JmwBtoB4RXEQkpCNTC3tvjf/JSBIAy8seI+BBGV UN1v78Ivp+ca0k9gltFpFuObi+IzvBj6NXSa+wsxGjvbgTrhyD4T2jDeHiKm35bl yczhHHE5de+pe5CUhNDtiG+QWOlxWIgR2+X/gPEYeUAEVfmK3EVVwjEApeVNQxz/ 83isPMJDUwRMlVs8vI2KAUp7AgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUckY1KxjZ fUQsNmyza+rqYLHdBAgwHwYDVR0jBBgwFoAUKQN7v5LysPTDMKHN1KdiVs16VCIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Qjg5LzQzNjdDMjBFNkMx ODExRUZBQjZCNjkwQ0M0RjlBRTAyL0tRTjd2NUx5c1BURE1LSE4xS2RpVnMxNlZD SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1FON3Y1THlzUFRETUtITjFLZGlWczE2VkNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUI4OS80MzY3QzIwRTZDMTgxMUVGQUI2QjY5MENDNEY5QUUwMi8yMDI1QkQ2QzZD MzMxMUVGOTlFMEVGMzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQBwSAwDQYJKoZIhvcNAQELBQADggEBAG1Kg7wUSvgqWriM tks8S9Z4TmHN4zI1uRCfStur6BrOLfLaQLPy8O8H1+ay7BD6eQtmlnAMC7KT0JwJ aSlu7xDCq1z7MVzOE4P+7dcaLYRMo3MJgpSJM9G8mHDgc4Tc07H2mGkBZwC3w/oe caGihIodPEJuAzFeqI9Cvs85YuYFVuyh6waIFjnWePSACLD0BUBqX4pG3ZH15Kyu 4tHMdbvepahMB0kZN3KqhrYxYqmQwsPtibaLxI4yJ/RDj1eIw4voeYvpJoTaKltX 0DomrwZEyptvUmip/2FQODT0DznLXHfOS28FnsP2jXa0Q9qg+P8S9CP5K483xKHA sjGqQbI= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:04 2024 by rpki-client on console-ams.rpki-client.org