$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa File: 68979DAE337B11EA9A024941C4F9AE02.roa (raw, json) Hash identifier: yknf5baNHpdbQw+5+DV1Hf8P1RfW3RXTHE9Kk1UXKho= Subject key identifier: BB:B9:7F:AA:F6:12:5C:43:40:A5:63:41:84:34:66:53:47:A4:72:23 Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Certificate serial: 0C0C Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa Signing time: Tue 17 Dec 2024 00:35:56 +0000 ROA not before: Tue 17 Dec 2024 00:35:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 24305 IP address blocks: 2405:b640::/32 maxlen: 32 2405:b640::/48 maxlen: 48 2405:b640:1::/48 maxlen: 48 2405:b640:2::/48 maxlen: 48 2405:b640:3::/48 maxlen: 48 2405:b640:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3084 (0xc0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Validity Not Before: Dec 17 00:35:56 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6760c76c-a63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:ec:4b:b6:99:ff:c2:6d:c9:1a:48:d5:70: 3c:e0:33:ff:47:b7:d6:52:f2:d5:6c:ae:55:7c:6a: 5d:2a:e7:f4:56:a8:b1:4e:05:d5:27:4b:2d:1a:7d: 6a:90:0f:ee:c8:24:42:af:7b:4d:09:d3:86:c6:f9: 00:15:5d:f0:26:a8:28:32:c7:55:3b:31:f6:d6:f6: 03:40:bf:a5:fe:2a:c0:80:52:bf:b9:f4:1a:ab:db: 6b:d1:32:ea:7b:bd:2f:e3:8b:d2:64:78:76:e0:0d: 9c:d8:9d:75:cc:46:7e:46:73:17:dc:aa:8f:96:a5: c4:aa:a4:07:06:71:ce:30:b2:78:97:1e:7d:f9:80: 8b:33:ab:d7:f2:69:ba:d3:3c:74:27:30:1b:ef:dd: 12:77:8f:0c:48:f6:50:51:eb:80:f8:07:f1:24:1c: 67:99:15:9a:15:73:18:72:ca:e9:84:e5:75:2d:dc: e1:0f:c6:c2:78:a6:77:34:17:4c:76:ec:01:eb:ed: 32:d0:5b:c0:bd:e7:67:09:78:16:ec:3b:96:e2:1b: d9:44:9a:48:2b:c7:3d:ad:c8:0a:73:10:bb:78:b3: 69:7e:c1:f6:8f:5c:96:c3:d0:11:3e:09:1a:c4:ef: 19:e6:97:df:5c:00:58:c5:c1:25:22:84:74:ba:eb: 99:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B9:7F:AA:F6:12:5C:43:40:A5:63:41:84:34:66:53:47:A4:72:23 X509v3 Authority Key Identifier: keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:b640::/32 Signature Algorithm: sha256WithRSAEncryption 7e:70:6e:cb:f2:4e:16:f3:f7:c8:4b:62:16:4b:f9:06:96:45: e0:0b:97:bc:2f:b5:d3:38:ec:2e:23:0e:07:16:b7:4e:c9:7e: 67:18:1a:66:ad:70:6e:74:44:1f:de:66:58:fb:bf:2c:af:41: 19:c6:52:f1:1e:ad:ae:7d:9d:d6:73:e2:22:86:bd:ff:50:e7: 83:92:61:32:6f:6c:33:28:77:bf:6d:56:fe:ec:81:42:00:6d: 0b:3e:77:a7:0a:93:89:c5:0c:b3:d0:88:71:3a:d0:8b:a3:71: 6a:be:3a:1e:ad:81:7e:d1:ee:52:69:8a:95:b8:10:2d:dc:4f: 15:34:65:e5:11:b6:00:1d:50:99:0e:2f:32:95:af:4e:29:4b: 63:89:26:b8:ba:e5:b2:ce:89:0b:2c:02:62:d3:15:56:2b:09: 1e:e2:d3:a2:a3:9d:a3:11:a8:04:b2:27:db:73:f1:d2:23:3f: 7c:e9:24:f7:b9:1c:98:07:1e:5e:51:44:46:12:2d:ea:e2:f0: 12:2a:66:df:1f:c7:41:cc:38:b8:83:8a:61:55:0b:65:5d:10: 69:87:8e:be:cb:41:54:ed:ac:6b:9b:bf:a8:58:ff:a0:b8:98: d9:92:2b:ad:8e:4b:3a:20:ef:9c:07:7e:0a:c2:51:b7:b5:23: 2d:c8:0a:d2 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRTExMTAvBgNVBAUTKEYzNTI2OEY5NzZFOEFFNzFGRUZBNjZDQTQ1MTYzNjFD NThBRTFEOTEwHhcNMjQxMjE3MDAzNTU2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYwYzc2Yy1hNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsHsS7aZ/8JtyRpI1XA84DP/R7fWUvLVbK5VfGpdKuf0VqixTgXVJ0stGn1q kA/uyCRCr3tNCdOGxvkAFV3wJqgoMsdVOzH21vYDQL+l/irAgFK/ufQaq9tr0TLq e70v44vSZHh24A2c2J11zEZ+RnMX3KqPlqXEqqQHBnHOMLJ4lx59+YCLM6vX8mm6 0zx0JzAb790Sd48MSPZQUeuA+AfxJBxnmRWaFXMYcsrphOV1LdzhD8bCeKZ3NBdM duwB6+0y0FvAvednCXgW7DuW4hvZRJpIK8c9rcgKcxC7eLNpfsH2j1yWw9ARPgka xO8Z5pffXABYxcElIoR0uuuZTwIDAQABo4ICljCCApIwHQYDVR0OBBYEFLu5f6r2 ElxDQKVjQYQ0ZlNHpHIjMB8GA1UdIwQYMBaAFPNSaPl26K5x/vpmykUWNhxYrh2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNFMS85RkQ1OERBNjA1 QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3JuSC0tbWJLUlJZMkhGaXVI WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxSm8tWGJvcm5ILS1tYktSUlkySEZpdUhaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkEzRTEvOUZENThEQTYwNUIwMTFFQTkyMzU0QjVBQzRGOUFFMDIvNjg5NzlEQUUz MzdCMTFFQTlBMDI0OTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBbZAMA0GCSqGSIb3DQEBCwUAA4IBAQB+cG7L8k4W8/fI S2IWS/kGlkXgC5e8L7XTOOwuIw4HFrdOyX5nGBpmrXBudEQf3mZY+78sr0EZxlLx Hq2ufZ3Wc+Iihr3/UOeDkmEyb2wzKHe/bVb+7IFCAG0LPnenCpOJxQyz0IhxOtCL o3FqvjoerYF+0e5SaYqVuBAt3E8VNGXlEbYAHVCZDi8yla9OKUtjiSa4uuWyzokL LAJi0xVWKwke4tOio52jEagEsifbc/HSIz986ST3uRyYBx5eUURGEi3q4vASKmbf H8dBzDi4g4phVQtlXRBph46+y0FU7axrm7+oWP+guJjZkiutjks6IO+cB34KwlG3 tSMtyArS -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:26 2025 by rpki-client