$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/4BFDDACCEB3311EE9D65C57DC4F9AE02.roa File: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (raw, json) Hash identifier: JbXYoZCeV73k0ydVhueXLAHh7xzomEgWbLFpEGgJxiE= Subject key identifier: BE:18:B0:6F:7C:0D:A3:DC:49:AA:9B:EF:40:47:BE:DA:81:EF:0F:27 Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Certificate serial: CA Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/4BFDDACCEB3311EE9D65C57DC4F9AE02.roa Signing time: Fri 07 Mar 2025 04:51:49 +0000 ROA not before: Fri 07 Mar 2025 04:51:49 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 152332 IP address blocks: 2401:76e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82, serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Validity Not Before: Mar 7 04:51:49 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ca7b64-715d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6f:f5:46:e8:5e:5c:9c:b9:5e:13:96:65:b2: 4c:08:5d:fa:d3:f3:06:e1:e0:0c:18:87:9a:a8:f1: 3d:d5:8a:05:a8:26:10:67:88:c1:86:d4:74:af:a0: fd:fe:03:e1:71:26:15:7b:7b:7b:ec:f6:25:cf:15: 26:4a:fd:ed:e3:0f:c6:d3:95:68:6e:7c:32:98:99: c2:dc:59:cc:8e:84:9c:0d:05:a7:c6:a7:56:1d:aa: e3:84:19:ff:ec:e1:51:7a:49:ee:e2:8b:04:94:87: 63:ee:dc:2b:29:1b:fd:c3:37:45:79:78:00:3c:9b: 6c:c3:db:29:f4:93:b0:f6:ce:04:ea:1b:b5:f9:a5: 71:47:70:4b:41:b0:f3:4a:16:4c:7b:fd:1e:11:7e: 55:27:5a:01:2c:8c:cc:87:58:e6:88:f6:09:58:bd: c7:5d:df:cd:70:17:7d:fe:f0:e2:97:d7:34:08:2c: c5:be:4f:71:3b:ac:bb:4b:dd:fc:0d:84:f2:1c:cd: 78:3f:ea:6b:9a:77:79:a5:07:1f:ed:83:4e:1f:3c: 80:03:68:fb:2e:e2:e1:f7:cc:38:b7:ae:40:ed:13: df:8c:37:c2:ac:6c:f3:85:4f:97:f9:4f:63:5b:c9: f6:4c:af:a0:70:c3:58:f5:c1:cc:c6:07:5c:6c:f0: 96:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:18:B0:6F:7C:0D:A3:DC:49:AA:9B:EF:40:47:BE:DA:81:EF:0F:27 X509v3 Authority Key Identifier: keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/4BFDDACCEB3311EE9D65C57DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:76e0::/32 Signature Algorithm: sha256WithRSAEncryption 6e:49:63:93:5f:3c:b5:32:7b:62:b1:4c:75:24:f5:b4:18:b8: b2:18:41:ba:20:5a:7f:5b:f1:01:97:76:c1:be:c1:4e:6c:43: 04:03:89:69:99:78:6e:c8:e4:f8:2d:60:03:c6:5e:f3:e6:e1: f0:19:2a:d9:9b:8b:5e:ec:6d:b3:46:80:5c:6f:65:1d:3e:3c: 02:b6:57:72:3d:be:66:eb:b1:cc:68:6e:21:71:69:fe:d0:a8: e4:7e:24:e5:59:b2:d5:5e:96:79:22:a1:a0:7c:28:82:6d:d3: 43:b9:3b:a8:e9:a1:38:c3:9a:cd:fc:db:58:ea:6d:f5:b6:62: 70:2a:e5:63:7c:0b:7b:62:5a:9d:8f:66:fc:23:c6:d0:a4:38: 76:33:54:d3:25:45:be:82:f8:b6:44:14:0f:60:7b:82:32:ee: 77:12:25:92:da:a2:84:2f:10:2b:a1:4f:1e:11:9c:e7:c3:30: 5e:c0:1b:ae:a5:38:1b:c3:69:ed:55:30:f7:93:6e:fd:d7:17: b7:63:b7:8b:72:9d:51:46:d2:c4:f4:20:81:f2:8a:c2:97:98: 84:38:53:44:42:04:6d:50:97:66:7b:9f:71:58:52:6b:22:49: 71:c0:cd:ca:fb:48:3b:1d:59:b5:23:47:83:67:66:9e:9a:79: d6:c5:27:93 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEFGQjhGRkUxRTg2ODYyOTZCOTk2QzYzQUE5MDJFQTlD MTI4RjQ4RkUwHhcNMjUwMzA3MDQ1MTQ5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhN2I2NC03MTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7G/1RuheXJy5XhOWZbJMCF360/MG4eAMGIeaqPE91YoFqCYQZ4jBhtR0r6D9 /gPhcSYVe3t77PYlzxUmSv3t4w/G05VobnwymJnC3FnMjoScDQWnxqdWHarjhBn/ 7OFReknu4osElIdj7twrKRv9wzdFeXgAPJtsw9sp9JOw9s4E6hu1+aVxR3BLQbDz ShZMe/0eEX5VJ1oBLIzMh1jmiPYJWL3HXd/NcBd9/vDil9c0CCzFvk9xO6y7S938 DYTyHM14P+prmnd5pQcf7YNOHzyAA2j7LuLh98w4t65A7RPfjDfCrGzzhU+X+U9j W8n2TK+gcMNY9cHMxgdcbPCWGwIDAQABo4ICljCCApIwHQYDVR0OBBYEFL4YsG98 DaPcSaqb70BHvtqB7w8nMB8GA1UdIwQYMBaAFK+4/+HoaGKWuZbGOqkC6pwSj0j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GQkREQUMyNENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lwYTVsc1k2cVFMcW5CS1BT UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3al80ZWhvWXBhNWxzWTZxUUxxbkJLUFNQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkJBODIvRkJEREFDMjRDRTVBMTFFRThDM0JEMDNBQzRGOUFFMDIvNEJGRERBQ0NF QjMzMTFFRTlENjVDNTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAXbgMA0GCSqGSIb3DQEBCwUAA4IBAQBuSWOTXzy1Mnti sUx1JPW0GLiyGEG6IFp/W/EBl3bBvsFObEMEA4lpmXhuyOT4LWADxl7z5uHwGSrZ m4te7G2zRoBcb2UdPjwCtldyPb5m67HMaG4hcWn+0KjkfiTlWbLVXpZ5IqGgfCiC bdNDuTuo6aE4w5rN/NtY6m31tmJwKuVjfAt7Ylqdj2b8I8bQpDh2M1TTJUW+gvi2 RBQPYHuCMu53EiWS2qKELxAroU8eEZznwzBewBuupTgbw2ntVTD3k2791xe3Y7eL cp1RRtLE9CCB8orCl5iEOFNEQgRtUJdme59xWFJrIklxwM3K+0g7HVm1I0eDZ2ae mnnWxSeT -----END CERTIFICATE-----Generated at Sat Apr 26 07:42:07 2025 by rpki-client