$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/3BF787825C4511ED9CD04525C4F9AE02.roa File: 3BF787825C4511ED9CD04525C4F9AE02.roa (raw, json) Hash identifier: LIENBvmMrRIxmnzlElXveDjHkViAX5FdLQn69HvX/+Q= Subject key identifier: 46:E2:C5:1F:AD:BA:19:2A:8D:F2:00:80:79:11:1A:DA:6D:BC:37:DC Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Certificate serial: 0475 Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/3BF787825C4511ED9CD04525C4F9AE02.roa Signing time: Sat 25 Jan 2025 00:13:33 +0000 ROA not before: Sat 25 Jan 2025 00:13:33 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 210769 IP address blocks: 2407:9240:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Validity Not Before: Jan 25 00:13:33 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67942cad-081f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:ab:e7:c8:8d:85:8c:ea:83:90:e4:44:25: db:c2:2f:a3:4d:56:2a:1c:f1:f4:37:ed:1a:21:fc: e4:91:58:ba:35:f6:57:8c:09:f0:0e:6b:f9:da:83: cd:7b:5d:80:88:ec:f3:d1:28:59:97:d6:bd:54:5d: e7:58:bf:c7:bc:87:15:78:4a:ae:d1:1f:7f:dd:2f: 17:43:6c:91:6d:79:03:70:f8:69:b5:8a:1f:c3:c2: 50:b9:01:08:bd:15:7d:d5:70:1d:8b:f6:22:29:b0: 89:6e:12:a3:b0:c9:21:2a:3f:45:eb:29:95:5b:e2: 10:b7:9c:61:85:33:c2:38:8a:15:8e:5a:80:1a:51: 61:c8:32:94:cf:03:04:8f:d2:b1:0c:a2:e4:7b:9d: 2f:db:fc:3e:f2:e2:d2:09:3b:4c:41:28:eb:b4:5c: 21:f5:53:81:fa:fd:3e:9b:d2:ce:40:90:e2:16:47: 1e:97:87:91:5b:a6:c5:e5:b9:82:ec:d1:94:7a:bd: 27:8e:3a:93:05:7d:34:24:48:50:41:d8:41:cf:db: 80:8e:b8:78:11:78:21:d2:f8:9f:5b:60:e4:4d:e1: 0c:2f:41:8a:d5:d0:47:d4:ff:7f:4f:59:37:de:a8: 2b:ca:d8:33:3c:2f:fb:3d:c7:af:0c:39:51:15:ef: 97:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E2:C5:1F:AD:BA:19:2A:8D:F2:00:80:79:11:1A:DA:6D:BC:37:DC X509v3 Authority Key Identifier: keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/3BF787825C4511ED9CD04525C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:9240:1002::/48 Signature Algorithm: sha256WithRSAEncryption 97:e0:e2:bc:b3:dd:ae:2b:44:18:a7:8f:29:0f:f5:9a:ff:83: 51:e1:c0:39:d7:06:98:45:3d:05:ea:ed:02:cd:f7:a9:77:a3: 54:30:90:cd:66:1a:38:31:fc:26:30:54:0a:8c:89:d0:a5:aa: bc:33:a7:5f:11:41:e3:b3:a4:92:6d:ae:f7:02:f3:dc:cf:e7: 83:06:30:bb:74:56:3e:19:4b:2d:ff:ae:fc:f3:a1:f5:3c:81: 4d:43:6d:ba:eb:e5:b1:3f:c4:43:e1:cc:e1:dd:a4:dd:d4:d7: 1f:01:a0:d5:94:40:44:bb:8f:0e:e0:dc:ce:50:3e:7b:ea:35: ad:33:69:69:a7:25:2c:c3:a5:d3:f9:30:a3:f0:85:07:a0:0b: a8:e3:25:17:7a:f6:78:e0:7a:86:d2:95:c3:18:5f:dc:e9:74: 7c:c3:f2:df:02:cf:38:56:fc:1c:3d:a5:e7:2c:cc:da:1c:b0: 7a:42:6d:e3:92:e5:a4:4c:f3:69:7a:7d:08:9a:76:f3:c8:93: 42:3c:90:02:70:fd:31:20:fc:5a:15:e6:cd:9f:4e:b5:60:33: ec:5f:38:ed:fd:4a:61:76:86:84:6f:de:37:91:15:e0:3c:1d: 27:c9:80:86:6d:47:1d:81:d4:1d:03:bb:47:b1:c9:7c:4b:a5: c8:34:ab:03 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5 MkQ0REZCNzcwHhcNMjUwMTI1MDAxMzMzWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk0MmNhZC0wODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeWr58iNhYzqg5DkRCXbwi+jTVYqHPH0N+0aIfzkkVi6NfZXjAnwDmv52oPN e12AiOzz0ShZl9a9VF3nWL/HvIcVeEqu0R9/3S8XQ2yRbXkDcPhptYofw8JQuQEI vRV91XAdi/YiKbCJbhKjsMkhKj9F6ymVW+IQt5xhhTPCOIoVjlqAGlFhyDKUzwME j9KxDKLke50v2/w+8uLSCTtMQSjrtFwh9VOB+v0+m9LOQJDiFkcel4eRW6bF5bmC 7NGUer0njjqTBX00JEhQQdhBz9uAjrh4EXgh0vifW2DkTeEML0GK1dBH1P9/T1k3 3qgrytgzPC/7PcevDDlRFe+XiwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEbixR+t uhkqjfIAgHkRGtptvDfcMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvM0JGNzg3ODI1 QzQ1MTFFRDlDRDA0NTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkB5JAEAIwDQYJKoZIhvcNAQELBQADggEBAJfg4ryz3a4r RBinjykP9Zr/g1HhwDnXBphFPQXq7QLN96l3o1QwkM1mGjgx/CYwVAqMidClqrwz p18RQeOzpJJtrvcC89zP54MGMLt0Vj4ZSy3/rvzzofU8gU1Dbbrr5bE/xEPhzOHd pN3U1x8BoNWUQES7jw7g3M5QPnvqNa0zaWmnJSzDpdP5MKPwhQegC6jjJRd69njg eobSlcMYX9zpdHzD8t8CzzhW/Bw9pecszNocsHpCbeOS5aRM82l6fQiadvPIk0I8 kAJw/TEg/FoV5s2fTrVgM+xfOO39SmF2hoRv3jeRFeA8HSfJgIZtRx2B1B0Du0ex yXxLpcg0qwM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:45 2025 by rpki-client