$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/095AF45ECE8911EFBEC5D618C4F9AE02.roa File: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (raw, json) Hash identifier: iL/PBiyd9MkCdvYQaI6UeCRqtACDsGFoCR1Zc+51I4I= Subject key identifier: 61:67:76:BF:17:90:C4:B5:BB:76:67:34:99:AA:FE:13:E4:53:89:75 Certificate issuer: /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Certificate serial: 02 Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/095AF45ECE8911EFBEC5D618C4F9AE02.roa Signing time: Thu 09 Jan 2025 12:55:43 +0000 ROA not before: Thu 09 Jan 2025 12:55:43 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 153495 IP address blocks: 2401:e7e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Validity Not Before: Jan 9 12:55:43 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677fc74f-e5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:10:8c:de:72:bb:3e:86:14:99:2b:30:80: 5f:ca:3b:ba:2c:6a:92:a7:40:c9:a2:4c:af:ee:1f: 09:93:81:b2:5f:59:a6:28:c6:64:f9:ce:94:3f:0f: 80:76:03:03:cc:eb:99:1e:1d:16:56:8a:80:31:8e: 4a:99:21:11:45:3c:a1:23:62:9d:5f:a2:cc:12:d3: d9:ba:b3:ed:e3:47:31:bc:77:80:da:2f:cc:8a:d2: 15:1d:04:83:27:30:61:ef:66:c6:56:5b:73:5e:62: 2f:34:9b:19:c6:e5:3f:90:6b:73:bc:8c:b0:3f:42: 90:9a:f0:0c:54:14:fc:e0:02:5b:1a:50:7f:1a:58: cb:eb:96:07:16:9c:7f:1b:72:e6:8f:1b:61:94:40: 8e:5d:ed:d0:fa:ca:df:27:57:09:d9:66:82:45:4c: 1b:12:c1:fb:76:f8:6a:2c:df:46:c5:e8:10:99:b8: 2a:d8:a8:a7:3d:18:b0:11:d2:67:d3:8d:5d:68:51: f6:d8:c6:d3:f0:33:1f:fb:6a:d1:17:b9:6d:5b:2d: 29:4f:92:bf:97:a0:db:6f:d5:74:37:a6:3d:65:49: 03:4b:93:8f:1f:74:57:4f:a0:af:90:5d:1e:8c:8c: 6a:75:c0:b7:7b:b5:20:32:16:80:38:a1:9c:f8:70: 94:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:67:76:BF:17:90:C4:B5:BB:76:67:34:99:AA:FE:13:E4:53:89:75 X509v3 Authority Key Identifier: keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/095AF45ECE8911EFBEC5D618C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:e7e0::/32 Signature Algorithm: sha256WithRSAEncryption 72:a1:85:8b:cb:eb:5b:1b:6d:af:7d:e4:b5:6f:4c:8e:bb:4b: 79:13:bf:fe:5a:96:01:43:7f:5d:f9:75:f0:46:bb:e3:83:b1: 0c:4f:df:91:08:41:e1:0c:b3:54:be:1a:f1:f5:91:f4:79:3b: e7:2a:14:2c:df:96:9d:76:7b:e9:3b:ef:b7:29:34:5a:19:d6: ca:f4:c2:97:57:2f:af:ab:5d:d3:df:69:0d:d3:eb:82:a5:26: ce:21:44:28:57:ca:24:9b:29:73:de:23:4d:64:d1:d1:ee:37: 0d:b6:b9:06:8d:86:cb:25:84:46:01:34:b2:a7:4c:ad:06:63: d3:5c:ae:2f:ed:88:9a:26:3e:81:a3:cd:33:80:67:f7:66:e2: be:39:59:3d:52:43:50:a5:bc:65:95:37:02:10:ac:0e:63:50: b8:6c:b8:42:e0:ce:6f:06:f7:16:89:e9:1d:ce:a9:24:36:72: ac:89:b0:6e:76:af:84:51:3e:59:a0:51:b5:40:70:b3:4a:00: 7a:66:a5:8f:b6:a2:70:dd:31:4c:a2:93:8d:aa:83:62:50:92: ca:1e:48:2f:54:97:55:dd:d8:1c:5e:72:1f:a2:7e:83:ff:8f: da:c4:b8:86:bd:30:b5:13:54:ef:80:2b:0d:51:5f:6f:17:b6: be:1e:25:04 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkQ4RTExMC8GA1UEBRMoQ0E1NzNGMDkwMEJGNjQyQ0IxRTAzQTNCNkM0NUM2OTY5 RTc3MjNEODAeFw0yNTAxMDkxMjU1NDNaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2ZjNzRmLWU1YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFbxCM3nK7PoYUmSswgF/KO7osapKnQMmiTK/uHwmTgbJfWaYoxmT5zpQ/D4B2 AwPM65keHRZWioAxjkqZIRFFPKEjYp1foswS09m6s+3jRzG8d4DaL8yK0hUdBIMn MGHvZsZWW3NeYi80mxnG5T+Qa3O8jLA/QpCa8AxUFPzgAlsaUH8aWMvrlgcWnH8b cuaPG2GUQI5d7dD6yt8nVwnZZoJFTBsSwft2+Gos30bF6BCZuCrYqKc9GLAR0mfT jV1oUfbYxtPwMx/7atEXuW1bLSlPkr+XoNtv1XQ3pj1lSQNLk48fdFdPoK+QXR6M jGp1wLd7tSAyFoA4oZz4cJRxAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUYWd2vxeQ xLW7dmc0mar+E+RTiXUwHwYDVR0jBBgwFoAUylc/CQC/ZCyx4Do7bEXGlp53I9gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCRDhFLzQzRDkxOTdDQ0U4 ODExRUY4N0MwNzExN0M0RjlBRTAyL3lsY19DUUNfWkN5eDREbzdiRVhHbHA1M0k5 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWxjX0NRQ19aQ3l4NERvN2JFWEdscDUzSTlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkQ4RS80M0Q5MTk3Q0NFODgxMUVGODdDMDcxMTdDNEY5QUUwMi8wOTVBRjQ1RUNF ODkxMUVGQkVDNUQ2MThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQB5+AwDQYJKoZIhvcNAQELBQADggEBAHKhhYvL61sbba99 5LVvTI67S3kTv/5algFDf135dfBGu+ODsQxP35EIQeEMs1S+GvH1kfR5O+cqFCzf lp12e+k777cpNFoZ1sr0wpdXL6+rXdPfaQ3T64KlJs4hRChXyiSbKXPeI01k0dHu Nw22uQaNhsslhEYBNLKnTK0GY9Ncri/tiJomPoGjzTOAZ/dm4r45WT1SQ1ClvGWV NwIQrA5jULhsuELgzm8G9xaJ6R3OqSQ2cqyJsG52r4RRPlmgUbVAcLNKAHpmpY+2 onDdMUyik42qg2JQksoeSC9Ul1Xd2Bxech+ifoP/j9rEuIa9MLUTVO+AKw1RX28X tr4eJQQ= -----END CERTIFICATE-----Generated at Sat Apr 26 08:34:44 2025 by rpki-client