$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/BEF172F4BD1311EDAB02753EC4F9AE02.roa File: BEF172F4BD1311EDAB02753EC4F9AE02.roa (raw, json) Hash identifier: onTCqXS9qZGzhIeTCRHgBXLlG0kEyR1ncJjeY60B73A= Subject key identifier: 2A:3D:21:20:B7:AF:94:14:80:80:47:56:F3:34:6A:5A:05:11:6C:57 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 041B Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/BEF172F4BD1311EDAB02753EC4F9AE02.roa Signing time: Sat 15 Mar 2025 00:45:50 +0000 ROA not before: Sat 15 Mar 2025 00:45:50 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 11161 IP address blocks: 2400:8a20:130::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Mar 15 00:45:50 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67d4cdbd-849b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b9:a1:47:71:6f:d2:ce:9b:24:d0:f9:27:67: 77:fb:18:00:10:a6:fb:47:72:8d:c5:92:42:f0:0a: a2:80:5e:87:d5:9e:7a:05:e8:5c:0c:2b:0a:81:41: c1:a4:57:8b:06:ea:09:53:cb:1d:f2:b6:a0:57:41: 22:cd:ac:bb:d3:bf:6a:60:df:5a:98:bb:ab:b2:8f: 57:5a:53:61:96:01:d5:8c:cc:f4:5d:f3:92:39:22: dd:e0:b9:7c:15:c1:36:38:86:f3:b7:4d:6d:e4:67: 68:05:83:33:dd:a8:6d:38:d9:83:ce:fa:22:bf:69: 72:2a:ea:11:f8:a4:35:24:fd:ef:6f:3b:10:cb:e4: 9a:6c:89:2c:b7:85:df:bf:f7:17:8d:dd:7b:5a:cb: a3:0e:97:e4:40:7f:3b:2f:36:dd:fe:37:fd:b5:43: 5f:96:a8:16:a2:e4:d2:6c:4b:19:6f:c7:16:3d:4d: 94:5b:8d:36:e5:57:33:e4:81:83:74:dd:1c:ff:65: a5:26:64:4a:31:a5:e6:2b:84:bc:50:f3:d2:3e:6e: 18:c5:85:83:10:19:96:b6:d7:32:99:7e:50:0d:f0: 86:42:5f:8d:3c:ea:c1:0d:28:08:eb:a9:43:93:a3: 36:bf:44:97:f6:87:81:ef:2e:8a:29:f4:b5:e2:c2: df:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3D:21:20:B7:AF:94:14:80:80:47:56:F3:34:6A:5A:05:11:6C:57 X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/BEF172F4BD1311EDAB02753EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8a20:130::/48 Signature Algorithm: sha256WithRSAEncryption 63:5b:97:d8:0d:0e:b2:02:c5:84:9e:b2:f3:4f:e4:f1:9f:33: 7c:1d:d8:ae:cf:34:75:f1:53:15:95:a7:65:99:06:76:7a:6a: 06:6c:b1:5a:43:f1:28:55:df:ff:f3:92:1c:f1:42:cc:eb:65: 23:82:10:2c:10:57:d0:ff:6d:82:39:b3:45:ad:94:1e:13:af: 77:cb:f0:65:da:35:17:f6:94:32:ba:4e:6e:de:06:2f:40:45: cb:98:b9:8e:7f:25:d9:d1:f4:80:ef:3e:b4:97:fe:e6:3a:14: cb:3f:62:6e:5e:9c:01:ef:8a:4f:12:02:93:d5:95:5e:e1:44: 3d:e7:30:c5:bb:07:e5:25:cb:bb:cd:46:ca:2c:c5:c9:a5:6a: 27:28:14:0f:cf:f4:47:b0:d8:1e:11:79:69:fa:c9:2f:c4:c0: d8:0b:97:4e:cb:0b:b8:a7:30:8e:a3:82:50:55:7c:f1:a0:53: 49:2e:2c:8f:c2:0a:74:fd:cb:92:9e:d5:95:c1:9b:29:e0:01: 3d:4d:e1:22:78:09:81:11:2f:30:99:cf:e8:29:0c:c2:9d:2d: 5b:3a:bf:68:2a:75:a7:7b:42:97:70:37:04:c5:3e:bc:0f:f7: 79:7b:e9:24:2d:3f:f7:22:3f:51:48:90:73:da:f4:2a:b5:db: c3:99:2c:ae -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUwMzE1MDA0NTUwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q0Y2RiZC04NDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47mhR3Fv0s6bJND5J2d3+xgAEKb7R3KNxZJC8AqigF6H1Z56BehcDCsKgUHB pFeLBuoJU8sd8ragV0Eizay7079qYN9amLurso9XWlNhlgHVjMz0XfOSOSLd4Ll8 FcE2OIbzt01t5GdoBYMz3ahtONmDzvoiv2lyKuoR+KQ1JP3vbzsQy+SabIkst4Xf v/cXjd17WsujDpfkQH87Lzbd/jf9tUNflqgWouTSbEsZb8cWPU2UW4025Vcz5IGD dN0c/2WlJmRKMaXmK4S8UPPSPm4YxYWDEBmWttcymX5QDfCGQl+NPOrBDSgI66lD k6M2v0SX9oeB7y6KKfS14sLfbQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCo9ISC3 r5QUgIBHVvM0aloFEWxXMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTJEQjEvM0ZBNjkyMDA4M0MwMTFFQ0I1NEIzOTdGQzRGOUFFMDIvQkVGMTcyRjRC RDEzMTFFREFCMDI3NTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAIogATAwDQYJKoZIhvcNAQELBQADggEBAGNbl9gNDrIC xYSesvNP5PGfM3wd2K7PNHXxUxWVp2WZBnZ6agZssVpD8ShV3//zkhzxQszrZSOC ECwQV9D/bYI5s0WtlB4Tr3fL8GXaNRf2lDK6Tm7eBi9ARcuYuY5/JdnR9IDvPrSX /uY6FMs/Ym5enAHvik8SApPVlV7hRD3nMMW7B+Uly7vNRsosxcmlaicoFA/P9Eew 2B4ReWn6yS/EwNgLl07LC7inMI6jglBVfPGgU0kuLI/CCnT9y5Ke1ZXBmyngAT1N 4SJ4CYERLzCZz+gpDMKdLVs6v2gqdad7QpdwNwTFPrwP93l76SQtP/ciP1FIkHPa 9Cq128OZLK4= -----END CERTIFICATE-----Generated at Sat Apr 26 09:17:36 2025 by rpki-client