$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/86B7624062FE11EEB277647CC4F9AE02.roa File: 86B7624062FE11EEB277647CC4F9AE02.roa (raw, json) Hash identifier: +KT0Egyqjjf85ES0SDoa2VeTo6qX07zVXJ1wUoWuy48= Subject key identifier: A4:00:F0:8B:BD:BB:87:9A:B6:6C:DA:1A:87:86:1C:44:14:C6:57:FA Certificate issuer: /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790 Certificate serial: 113C Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/86B7624062FE11EEB277647CC4F9AE02.roa Signing time: Thu 20 Feb 2025 17:55:37 +0000 ROA not before: Thu 20 Feb 2025 17:55:37 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135106 IP address blocks: 2404:5c0:2800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4412 (0x113c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F600, serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790 Validity Not Before: Feb 20 17:55:37 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67b76c98-baf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:cc:ac:7d:2f:f0:3a:6f:8c:34:4a:80:e1: 35:b7:7a:c6:77:f7:89:7e:47:b9:e1:64:72:dd:e0: 21:46:e7:61:c3:1a:8d:ae:ba:fb:96:a8:f5:a8:6a: b3:1e:39:7c:1f:41:02:4a:26:ff:85:d3:e1:c3:16: b8:0b:62:4e:54:e5:dc:ba:70:c1:32:4a:ab:71:dd: c5:87:13:f2:8d:fa:af:7e:41:eb:62:57:10:1e:6f: aa:f7:83:c5:3d:fd:1b:0b:f8:a2:8b:d0:95:46:e1: 44:8d:16:60:66:44:98:45:49:c2:71:3d:9b:f0:78: 15:26:50:6d:b0:97:53:f3:63:77:de:02:4d:57:31: d9:a9:c8:12:a6:69:44:f0:13:8f:58:67:71:d2:e7: 2b:90:dc:4f:70:31:25:af:c1:f4:a5:fc:bb:c6:5b: e9:82:64:8a:74:4a:4d:c0:c6:70:08:3d:7d:0d:0d: a3:87:df:47:33:0d:b1:f8:b6:3b:b0:67:9f:1c:ea: c4:49:71:73:f6:8e:a1:62:9b:a7:86:84:a7:18:29: 57:c9:a8:51:e8:82:9b:81:2b:1d:53:91:7b:cb:a9: fe:ac:65:5a:31:72:1d:91:0a:f2:78:49:2b:bb:f7: 02:02:ec:35:b2:49:89:73:37:fd:26:d3:70:db:ad: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:00:F0:8B:BD:BB:87:9A:B6:6C:DA:1A:87:86:1C:44:14:C6:57:FA X509v3 Authority Key Identifier: keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/86B7624062FE11EEB277647CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:5c0:2800::/48 Signature Algorithm: sha256WithRSAEncryption 06:21:52:fd:ff:d6:bb:16:6a:f5:4b:e7:7e:98:89:a9:d9:01: 17:46:d4:5e:fc:55:86:3c:60:28:92:67:33:f2:31:2a:8c:9d: 74:6b:70:f5:a9:02:0f:2b:88:89:f2:dc:9d:61:ea:2f:c0:a9: 94:52:46:76:d5:d3:c8:05:c7:f6:97:65:ee:f8:77:cc:ed:f5: 71:ba:37:47:58:5f:db:ef:d2:90:4c:b7:67:2b:4f:aa:a6:6e: cb:56:c1:15:f9:9d:62:31:2b:f4:1e:d3:fa:8f:f9:8b:22:b1: 6e:0b:f5:3a:10:95:f8:76:fa:01:b4:dd:25:b1:8f:6d:fe:18: eb:79:d2:82:a4:b3:6e:06:3c:66:29:a3:33:6e:c5:50:ee:6b: 70:6c:b6:5d:92:d6:e1:af:7e:60:07:ad:b9:78:0e:89:0b:b9: 0c:a8:f7:bc:e7:a8:f2:aa:d8:67:dc:2f:50:35:22:79:af:2b: 80:59:6c:5e:11:b1:15:21:27:02:0e:05:63:5c:ea:18:ca:ce: c4:97:f9:6d:4e:ad:35:23:e3:57:11:1a:27:3b:6c:e7:a9:a4: 63:bf:8d:a3:0b:e2:b8:aa:53:69:eb:78:f9:83:78:4a:63:03: f4:f2:f0:a4:9f:2f:4f:3e:0d:2f:9d:d4:01:b1:da:2d:f8:b2: 8d:73:99:6a -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICETwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2MDAxMTAvBgNVBAUTKDA4REI4MTVCNzMxMEQ4N0VFRkFGQ0Q1MkNGMjYxQ0Qx NTgyOUY3OTAwHhcNMjUwMjIwMTc1NTM3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I3NmM5OC1iYWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCXMrH0v8DpvjDRKgOE1t3rGd/eJfke54WRy3eAhRudhwxqNrrr7lqj1qGqz Hjl8H0ECSib/hdPhwxa4C2JOVOXcunDBMkqrcd3FhxPyjfqvfkHrYlcQHm+q94PF Pf0bC/iii9CVRuFEjRZgZkSYRUnCcT2b8HgVJlBtsJdT82N33gJNVzHZqcgSpmlE 8BOPWGdx0ucrkNxPcDElr8H0pfy7xlvpgmSKdEpNwMZwCD19DQ2jh99HMw2x+LY7 sGefHOrESXFz9o6hYpunhoSnGClXyahR6IKbgSsdU5F7y6n+rGVaMXIdkQryeEkr u/cCAuw1skmJczf9JtNw262EuwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKQA8Iu9 u4eatmzaGoeGHEQUxlf6MB8GA1UdIwQYMBaAFAjbgVtzENh+76/NUs8mHNFYKfeQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjYwMC85RjYxNUJCRTA1 OTUxMUU5OTkyMEQyNzFDNEY5QUUwMi9DTnVCVzNNUTJIN3ZyODFTenlZYzBWZ3A5 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOdUJXM01RMkg3dnI4MVN6eVljMFZncDk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Y2MDAvOUY2MTVCQkUwNTk1MTFFOTk5MjBEMjcxQzRGOUFFMDIvODZCNzYyNDA2 MkZFMTFFRUIyNzc2NDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBAXAKAAwDQYJKoZIhvcNAQELBQADggEBAAYhUv3/1rsW avVL536YianZARdG1F78VYY8YCiSZzPyMSqMnXRrcPWpAg8riIny3J1h6i/AqZRS RnbV08gFx/aXZe74d8zt9XG6N0dYX9vv0pBMt2crT6qmbstWwRX5nWIxK/Qe0/qP +YsisW4L9ToQlfh2+gG03SWxj23+GOt50oKks24GPGYpozNuxVDua3Bstl2S1uGv fmAHrbl4DokLuQyo97znqPKq2GfcL1A1InmvK4BZbF4RsRUhJwIOBWNc6hjKzsSX +W1OrTUj41cRGic7bOeppGO/jaML4riqU2nrePmDeEpjA/Ty8KSfL08+DS+d1AGx 2i34so1zmWo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:27 2025 by rpki-client