$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa File: AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa (raw, json) Hash identifier: YC1hPH8mghnTJjDQYho998bjw91B3zrCEFjA4fVmKFk= Subject key identifier: F7:90:C3:E4:83:DD:C4:01:50:06:08:17:3B:C2:22:48:BD:DB:5D:8F Certificate issuer: /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12 Certificate serial: 0124 Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa Signing time: Mon 07 Apr 2025 04:41:42 +0000 ROA not before: Mon 07 Apr 2025 04:41:42 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 152300 IP address blocks: 2401:72a0::/32 maxlen: 40 2402:ca40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4, serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12 Validity Not Before: Apr 7 04:41:42 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67f35786-bfb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:39:70:68:0b:12:b6:bc:1b:8a:00:e1:2c: 19:1d:72:00:c6:de:72:90:6a:1a:5f:fe:93:d3:1e: 59:91:ae:82:48:13:5f:5d:8b:ed:a9:22:e8:a3:36: 26:9b:34:c0:0f:e2:c8:bb:fa:92:d7:5e:f7:0d:fe: b0:c1:31:b1:70:37:d9:73:f4:90:8d:af:96:01:89: 29:eb:49:5e:75:6c:38:53:ae:ba:33:6e:db:31:06: e9:d0:a8:b9:bf:65:b8:b2:6c:8b:57:36:60:ab:fa: f9:d3:69:d7:06:94:ad:6b:3c:8f:dc:c7:fd:81:91: 8e:c6:bb:6d:45:c3:ab:46:ce:93:3a:bf:03:9c:33: cf:93:c1:1d:75:8c:5f:37:ea:04:95:e3:3e:04:43: 4c:39:fc:e5:a5:10:b6:88:dd:28:04:1b:74:b8:04: ed:80:5a:a0:c4:dd:f7:28:6e:76:9e:75:c9:24:ee: d6:38:49:b4:5e:b7:67:83:88:f9:39:74:5b:bd:96: 23:1f:62:d2:f7:0a:d1:1d:1a:7b:45:06:89:d8:91: d3:ac:6e:e5:8a:1f:5d:98:d6:80:d4:7c:14:f5:3c: f4:aa:21:1e:f2:d4:50:b5:1c:d8:c2:10:ce:64:bd: 3d:59:f4:2e:3d:85:2f:82:18:d9:31:22:cc:8f:1b: 7d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:90:C3:E4:83:DD:C4:01:50:06:08:17:3B:C2:22:48:BD:DB:5D:8F X509v3 Authority Key Identifier: keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:72a0::/32 2402:ca40::/32 Signature Algorithm: sha256WithRSAEncryption 19:d0:02:11:0a:73:c2:b2:94:af:81:96:0d:b1:94:2f:a1:56: d2:cb:5e:47:53:ee:8e:d1:25:6f:46:b8:c4:d3:76:e5:8f:20: 9b:81:58:2e:67:c2:50:c0:1e:35:91:49:d4:45:f5:89:d4:22: 2b:d5:b4:d6:5b:98:b5:b4:1b:5d:39:fd:cb:f7:96:ea:8e:08: fb:92:96:66:ce:00:fd:11:9b:13:1a:d7:c5:8a:47:9f:af:af: 99:f4:db:14:9f:68:d6:ec:39:25:f2:a7:12:20:7a:44:9f:b9: d5:7f:87:fb:50:37:f6:51:09:20:9d:3c:52:59:b1:c7:9f:eb: b2:57:66:10:85:63:66:ed:1e:c4:fc:1d:94:de:81:ff:ca:19: c8:7a:dd:2e:35:d4:11:c8:b7:e3:ea:18:24:21:d3:28:34:4c: d6:be:6f:5b:0e:4b:31:65:59:32:cb:3f:ce:57:ec:a5:0d:f1: 00:41:96:0f:aa:0e:3c:5c:e2:44:77:d4:f2:94:0a:cf:0d:33: db:e8:42:58:81:74:b0:5f:bc:88:77:47:ad:38:59:db:68:bc: 2a:9b:b9:f6:e8:bf:90:09:4d:64:2b:54:01:28:65:7b:97:54: f1:02:5d:d4:ca:78:6e:44:6a:4a:35:4e:ab:b1:34:c3:0a:48: fe:0c:43:a8 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKDFERDFDQkJDNURGNUJERkFCQkIzQURBRjEyQjAwMjU2 QjdGMThEMTIwHhcNMjUwNDA3MDQ0MTQyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YzNTc4Ni1iZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsk5cGgLEra8G4oA4SwZHXIAxt5ykGoaX/6T0x5Zka6CSBNfXYvtqSLoozYm mzTAD+LIu/qS1173Df6wwTGxcDfZc/SQja+WAYkp60ledWw4U666M27bMQbp0Ki5 v2W4smyLVzZgq/r502nXBpStazyP3Mf9gZGOxrttRcOrRs6TOr8DnDPPk8EddYxf N+oEleM+BENMOfzlpRC2iN0oBBt0uATtgFqgxN33KG52nnXJJO7WOEm0Xrdng4j5 OXRbvZYjH2LS9wrRHRp7RQaJ2JHTrG7lih9dmNaA1HwU9Tz0qiEe8tRQtRzYwhDO ZL09WfQuPYUvghjZMSLMjxt9HwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFPeQw+SD 3cQBUAYIFzvCIki9212PMB8GA1UdIwQYMBaAFB3Ry7xd9b36u7OtrxKwAla38Y0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC82MTQxNUY1OEE5 RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZmcTdzNjJ2RXJBQ1ZyZnhq UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkSEx2RjMxdmZxN3M2MnZFckFDVnJmeGpSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFEQzQvNjE0MTVGNThBOUY3MTFFRThFQjQ4RDIyQzRGOUFFMDIvQUZDOUY1MzI0 QTBGMTFFRjlFNTFCRDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgACMA4DBQAkAXKgAwUAJALKQDANBgkqhkiG9w0BAQsFAAOCAQEAGdAC EQpzwrKUr4GWDbGUL6FW0steR1PujtElb0a4xNN25Y8gm4FYLmfCUMAeNZFJ1EX1 idQiK9W01luYtbQbXTn9y/eW6o4I+5KWZs4A/RGbExrXxYpHn6+vmfTbFJ9o1uw5 JfKnEiB6RJ+51X+H+1A39lEJIJ08Ulmxx5/rsldmEIVjZu0exPwdlN6B/8oZyHrd LjXUEci34+oYJCHTKDRM1r5vWw5LMWVZMss/zlfspQ3xAEGWD6oOPFziRHfU8pQK zw0z2+hCWIF0sF+8iHdHrThZ22i8Kpu59ui/kAlNZCtUAShle5dU8QJd1Mp4bkRq SjVOq7E0wwpI/gxDqA== -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:12 2025 by rpki-client