$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/566800AE193C11F094773636C4F9AE02.roa File: 566800AE193C11F094773636C4F9AE02.roa (raw, json) Hash identifier: MoTDqIen8yVbDTTL7Vu855UIt3dnaCbMiK4gvMYWMk0= Subject key identifier: FB:2A:78:17:1D:25:7A:BD:A6:25:BA:65:32:E1:3B:6A:B7:AA:DA:F3 Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Certificate serial: 0C58 Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/566800AE193C11F094773636C4F9AE02.roa Signing time: Sat 19 Apr 2025 17:26:56 +0000 ROA not before: Sat 19 Apr 2025 17:26:56 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 141030 IP address blocks: 2400:3dc0:59::/48 maxlen: 48 2400:3dc0:6d::/48 maxlen: 48 2400:3dc0:81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Validity Not Before: Apr 19 17:26:56 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6803dce0-37fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:d5:54:96:f4:3b:0c:c5:21:a6:2f:c3:81: fc:94:1b:c8:c4:7e:fd:fa:34:cf:10:0f:4a:c2:26: c2:84:a1:8a:86:1a:23:24:32:21:3b:ab:cd:51:c8: 0a:69:a5:0a:ad:12:13:ae:ff:b2:1f:fc:84:19:01: c8:a3:00:ca:81:fa:df:48:2a:24:67:17:31:85:d4: 1e:35:13:9c:8f:68:0e:67:b9:38:f0:b9:a0:9b:97: a9:72:6c:c3:09:55:fe:5b:b7:c7:01:91:c8:ce:0f: 13:ad:b1:1f:4a:ee:d2:11:dc:e2:6d:39:e1:b8:f8: 6f:bd:8c:34:8e:ae:02:bf:53:a5:b7:03:fb:05:98: 72:e2:1b:e2:60:73:37:d6:aa:6c:d9:ce:8f:2f:5c: 56:37:d6:a5:36:34:2d:a6:20:a8:12:ea:c9:8d:40: 13:97:18:f7:c2:1c:97:9b:1b:9d:5d:d5:c3:64:8c: 3e:61:93:4d:72:77:e9:ca:bb:cf:02:96:4a:24:fe: ca:21:81:78:99:59:da:19:c3:35:53:b7:0e:51:8d: f6:85:9d:12:38:3f:bf:e6:31:5f:4a:36:27:14:7a: 6b:aa:b5:22:93:50:36:26:14:dd:46:6d:51:a2:77: 4f:b2:c5:72:5f:9f:aa:50:9f:f1:09:ee:b3:23:10: c3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2A:78:17:1D:25:7A:BD:A6:25:BA:65:32:E1:3B:6A:B7:AA:DA:F3 X509v3 Authority Key Identifier: keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/566800AE193C11F094773636C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:3dc0:59::/48 2400:3dc0:6d::/48 2400:3dc0:81::/48 Signature Algorithm: sha256WithRSAEncryption 0e:74:3b:f4:ba:98:6f:be:33:8a:ac:08:80:cc:14:90:35:d3: b2:9f:8c:ca:f0:d7:98:37:a5:b0:59:8e:50:94:4c:04:b8:7c: e3:01:14:72:7f:81:cf:2a:b6:15:44:e5:62:64:36:70:2f:08: a8:3f:ec:dc:d1:24:3b:11:db:f6:f1:60:1a:b3:aa:78:1d:7f: c4:4b:4f:ca:84:31:65:28:6d:7a:68:f2:5d:f3:a4:e9:97:47: 77:26:54:51:d1:31:41:aa:7f:61:b0:da:24:7f:69:35:14:a8: ee:aa:6c:64:05:15:3d:1b:c8:42:3b:18:d1:61:41:77:b3:11: 52:0e:0f:be:61:0c:04:e5:7f:86:f1:8e:fb:7e:df:cb:aa:98: fb:0b:9e:71:34:f7:63:d2:1d:86:5f:e6:21:6e:bf:4e:20:be: 33:63:14:73:c0:e8:ae:67:f4:d6:9a:67:87:51:ea:db:54:d4: 7f:02:0b:ef:be:c4:97:b5:6b:8e:cd:fb:3b:ba:d2:5e:87:c9: 7b:72:da:e1:b2:23:d6:0a:86:ad:40:d9:1f:7f:f7:0d:d0:b9: e6:68:52:f2:df:e8:e5:27:53:13:c8:f7:2d:cf:97:c8:46:78: d8:41:83:6b:b7:62:57:d3:0d:38:78:d6:22:26:57:57:d4:0c: d2:2a:03:67 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB RjYyREVGRkQwHhcNMjUwNDE5MTcyNjU2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAzZGNlMC0zN2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQPVVJb0OwzFIaYvw4H8lBvIxH79+jTPEA9KwibChKGKhhojJDIhO6vNUcgK aaUKrRITrv+yH/yEGQHIowDKgfrfSCokZxcxhdQeNROcj2gOZ7k48Lmgm5epcmzD CVX+W7fHAZHIzg8TrbEfSu7SEdzibTnhuPhvvYw0jq4Cv1OltwP7BZhy4hviYHM3 1qps2c6PL1xWN9alNjQtpiCoEurJjUATlxj3whyXmxudXdXDZIw+YZNNcnfpyrvP ApZKJP7KIYF4mVnaGcM1U7cOUY32hZ0SOD+/5jFfSjYnFHprqrUik1A2JhTdRm1R ondPssVyX5+qUJ/xCe6zIxDDpwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPsqeBcd JXq9piW6ZTLhO2q3qtrzMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2 QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQ3NUMvMkJDNUZENDAwNkMwMTFFQUJDNDNCNzA5QzRGOUFFMDIvNTY2ODAwQUUx OTNDMTFGMDk0NzczNjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMCEEAgACMBsDBwAkAD3AAFkDBwAkAD3AAG0DBwAkAD3AAIEwDQYJKoZIhvcN AQELBQADggEBAA50O/S6mG++M4qsCIDMFJA107KfjMrw15g3pbBZjlCUTAS4fOMB FHJ/gc8qthVE5WJkNnAvCKg/7NzRJDsR2/bxYBqzqngdf8RLT8qEMWUobXpo8l3z pOmXR3cmVFHRMUGqf2Gw2iR/aTUUqO6qbGQFFT0byEI7GNFhQXezEVIOD75hDATl f4bxjvt+38uqmPsLnnE092PSHYZf5iFuv04gvjNjFHPA6K5n9NaaZ4dR6ttU1H8C C+++xJe1a47N+zu60l6HyXty2uGyI9YKhq1A2R9/9w3QueZoUvLf6OUnUxPI9y3P l8hGeNhBg2u3YlfTDTh41iImV1fUDNIqA2c= -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:49 2025 by rpki-client