$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/13E97B38F84511ECAB467675C4F9AE02.roa File: 13E97B38F84511ECAB467675C4F9AE02.roa (raw, json) Hash identifier: BuodXTi20VWm3wasrjwSwE/7hVKxN+RDwTVuZlqAqLI= Subject key identifier: 68:21:2F:9F:29:4E:C9:0B:44:78:0F:47:C3:4E:C6:2C:DD:08:9D:73 Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Certificate serial: 047F Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/13E97B38F84511ECAB467675C4F9AE02.roa Signing time: Sat 25 Jan 2025 00:13:41 +0000 ROA not before: Sat 25 Jan 2025 00:13:41 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 7603 IP address blocks: 2407:9240:3500::/40 maxlen: 40 2407:9240:3500::/44 maxlen: 44 2407:9240:3500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1151 (0x47f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Validity Not Before: Jan 25 00:13:41 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67942cb5-fc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9e:a2:27:1a:2d:6a:04:6c:ba:b1:f8:84:c2: f3:1b:70:7e:5e:4f:06:56:fc:64:c0:a8:b4:cb:3d: 8b:02:d2:73:2e:0e:8a:c0:fd:ff:5c:11:70:d4:c3: 0f:d4:fc:1f:be:b2:cf:d4:db:14:72:5e:b1:7f:b8: 98:68:c8:ba:0d:f5:28:45:f8:00:83:d2:76:aa:52: d7:aa:25:72:73:59:37:91:48:65:8b:3f:a9:36:cf: ae:af:23:46:80:64:fa:c1:aa:5c:9d:fb:a7:0b:19: a5:f5:ce:d3:a2:ab:f5:75:06:aa:31:54:29:30:3f: b6:b5:3b:c2:fd:10:49:53:ce:58:25:b6:9d:4b:86: 82:a6:19:5b:1a:a4:8e:4f:fb:5d:95:6e:4e:af:f5: 1f:12:1d:08:93:48:d1:9e:08:3c:8a:2f:6f:a2:42: de:ef:c3:15:ae:29:78:f0:b0:13:f8:cf:31:ae:8f: 28:35:8b:29:77:7c:28:6f:a4:33:56:1a:8f:77:f1: ed:96:8e:15:59:48:0d:85:5f:bc:93:54:1d:71:98: fe:ba:9e:11:0c:0c:0c:2b:9a:a9:bc:8b:c0:a7:84: 8f:a1:58:4c:19:b9:7c:fd:54:e2:3e:c5:14:05:e1: 91:7e:c7:f9:d2:83:5c:de:df:9c:bd:a0:83:39:bd: c6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:21:2F:9F:29:4E:C9:0B:44:78:0F:47:C3:4E:C6:2C:DD:08:9D:73 X509v3 Authority Key Identifier: keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/13E97B38F84511ECAB467675C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:9240:3500::/40 Signature Algorithm: sha256WithRSAEncryption 4f:c9:62:35:b6:f1:6a:3a:06:3c:33:14:55:2e:51:5d:1d:af: e5:99:91:34:90:0b:d3:0e:c2:7e:3c:bc:e2:a7:c2:5a:b5:b4: a2:76:86:5c:5d:24:fa:ec:9b:d7:3d:0f:60:e8:a7:a5:73:80: 86:bc:2b:67:10:6e:28:b4:da:e5:d9:d3:5c:f3:bf:ee:2a:9e: 66:69:cc:e3:c5:66:9f:ec:3b:6c:5d:d9:d1:2c:97:4f:f1:84: d7:9b:bf:7a:ce:4e:bb:a0:bb:90:3d:9b:da:9b:f8:a3:aa:c4: aa:da:f4:a0:d3:c3:15:05:c9:6b:ec:66:3d:b9:cf:60:12:af: f1:f4:9a:6f:68:d8:9b:31:b4:58:b4:c9:90:4e:2b:51:59:4c: 58:63:67:c7:14:f0:c1:9c:2b:54:1d:af:3e:47:9a:cc:36:c0: 35:47:9f:cf:f5:15:fd:3a:7f:30:53:d1:43:23:f6:f4:01:57: f9:55:a6:58:d9:13:89:07:bd:da:f1:26:21:10:b0:86:01:ed: 42:18:71:f2:bd:bb:45:03:af:8f:86:2a:f8:67:ba:17:11:78: 41:56:ae:ef:d2:a8:ea:d1:e3:83:ff:77:c2:f4:20:78:fa:81: c3:98:bb:5d:f4:fd:4a:a7:d3:58:38:ed:37:c2:00:b5:c6:be: 93:1e:aa:d5 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5 MkQ0REZCNzcwHhcNMjUwMTI1MDAxMzQxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk0MmNiNS1mYzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJ6iJxotagRsurH4hMLzG3B+Xk8GVvxkwKi0yz2LAtJzLg6KwP3/XBFw1MMP 1PwfvrLP1NsUcl6xf7iYaMi6DfUoRfgAg9J2qlLXqiVyc1k3kUhliz+pNs+uryNG gGT6wapcnfunCxml9c7Toqv1dQaqMVQpMD+2tTvC/RBJU85YJbadS4aCphlbGqSO T/tdlW5Or/UfEh0Ik0jRngg8ii9vokLe78MVril48LAT+M8xro8oNYspd3wob6Qz VhqPd/Htlo4VWUgNhV+8k1QdcZj+up4RDAwMK5qpvIvAp4SPoVhMGbl8/VTiPsUU BeGRfsf50oNc3t+cvaCDOb3GOQIDAQABo4IClzCCApMwHQYDVR0OBBYEFGghL58p TskLRHgPR8NOxizdCJ1zMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvMTNFOTdCMzhG ODQ1MTFFQ0FCNDY3Njc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkB5JANTANBgkqhkiG9w0BAQsFAAOCAQEAT8liNbbxajoG PDMUVS5RXR2v5ZmRNJAL0w7Cfjy84qfCWrW0onaGXF0k+uyb1z0PYOinpXOAhrwr ZxBuKLTa5dnTXPO/7iqeZmnM48Vmn+w7bF3Z0SyXT/GE15u/es5Ou6C7kD2b2pv4 o6rEqtr0oNPDFQXJa+xmPbnPYBKv8fSab2jYmzG0WLTJkE4rUVlMWGNnxxTwwZwr VB2vPkeazDbANUefz/UV/Tp/MFPRQyP29AFX+VWmWNkTiQe92vEmIRCwhgHtQhhx 8r27RQOvj4Yq+Ge6FxF4QVau79Ko6tHjg/93wvQgePqBw5i7XfT9SqfTWDjtN8IA tca+kx6q1Q== -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:30 2025 by rpki-client