$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/67C2BFEC61EC11EDB740B02AC4F9AE02.roa File: 67C2BFEC61EC11EDB740B02AC4F9AE02.roa (raw, json) Hash identifier: +szwE1FqYlbLsPgP09GKHckFA87HXpfsxHfu0nFoUaM= Subject key identifier: 3A:2B:0D:CB:B5:B3:A6:29:DC:D7:B9:E8:5E:7B:CD:50:16:25:C2:D5 Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Certificate serial: 047D Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/67C2BFEC61EC11EDB740B02AC4F9AE02.roa Signing time: Sat 25 Jan 2025 00:13:40 +0000 ROA not before: Sat 25 Jan 2025 00:13:40 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 57401 IP address blocks: 2407:9240:3700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1149 (0x47d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Validity Not Before: Jan 25 00:13:40 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67942cb3-a951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:32:af:37:4c:8a:5d:51:08:78:3d:09:83:8f: e6:32:ec:d6:99:ed:d6:89:2b:eb:1f:2b:87:7a:91: 1a:4d:f0:30:57:b4:ee:44:ce:23:f8:e6:ff:a2:2d: 94:37:93:aa:ed:b9:3b:81:d6:53:64:d2:c0:34:9c: 17:85:13:60:2a:eb:16:47:51:7a:44:50:51:97:dc: 34:7b:82:f7:ea:3c:a5:30:16:c0:d7:f2:6c:03:3d: 14:71:31:3b:cf:d3:85:40:a3:fd:ad:cf:13:6a:69: 92:c8:53:1a:bb:76:73:d6:75:ae:09:74:23:02:ee: bf:a8:53:bc:99:b0:c2:a6:b7:62:86:9f:fd:4b:0f: 50:01:7b:a9:82:bd:2e:51:af:7d:c1:86:50:a3:49: d3:f4:ed:a1:21:97:ce:65:fd:8b:de:9c:8e:3e:41: 32:ec:9d:e9:99:56:75:11:15:c9:22:4b:53:1b:18: f0:1f:01:25:f1:f5:f3:c7:7c:e0:f6:ae:69:ed:a6: 37:69:26:26:2b:36:d9:b6:90:df:d3:2d:b7:1e:eb: 61:dc:2b:34:12:26:d1:96:a0:91:56:0c:d5:ef:11: 18:9c:9c:81:32:da:72:66:24:bb:1b:2c:60:3d:f1: 15:d6:72:a2:32:ed:ad:48:46:ac:60:67:63:ee:f8: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2B:0D:CB:B5:B3:A6:29:DC:D7:B9:E8:5E:7B:CD:50:16:25:C2:D5 X509v3 Authority Key Identifier: keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/67C2BFEC61EC11EDB740B02AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:9240:3700::/40 Signature Algorithm: sha256WithRSAEncryption 25:da:c2:84:20:da:00:32:fb:a9:13:d6:c0:7a:84:4f:be:e8: f7:73:17:b0:ff:59:f1:c9:81:15:fe:46:19:9f:88:d3:b7:c8: 07:0d:25:16:a6:06:10:cf:a2:d1:e6:64:38:a0:77:28:a4:bd: 9d:c0:22:38:ac:65:1a:0a:cf:5c:e2:a9:73:7a:dc:0d:6d:12: cb:8a:81:6d:bd:2e:c4:d1:e0:64:75:9d:f9:b0:87:dc:69:bd: 83:4c:78:9b:03:dc:4e:86:e4:f5:8a:95:fa:1f:6e:dd:4e:d5: 33:06:9b:6d:14:3a:c3:cf:42:a0:2c:7d:4a:fc:0c:b9:f5:db: 46:13:a9:b7:78:5a:bb:be:73:6d:a5:4c:51:88:72:8c:e7:2d: b2:90:e8:56:13:cf:21:72:39:4a:fb:f4:30:7e:8c:5b:d1:4d: 92:91:4b:f6:36:71:4a:24:8e:4f:66:2e:ad:f4:2f:36:15:4b: 3a:52:98:f9:5f:06:e3:d8:00:51:fb:8e:25:4c:ea:22:2d:b8: 5b:8b:1a:96:0c:7d:fe:b8:85:0a:7c:19:09:f6:0a:2c:62:e6: 86:f9:4d:85:65:7d:ce:7f:ee:be:8b:4a:dc:41:8d:35:5c:98: 6c:59:2b:d9:b0:71:02:c6:60:34:7e:42:9c:dd:9e:f4:7e:92: d3:60:aa:58 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5 MkQ0REZCNzcwHhcNMjUwMTI1MDAxMzQwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk0MmNiMy1hOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9zKvN0yKXVEIeD0Jg4/mMuzWme3WiSvrHyuHepEaTfAwV7TuRM4j+Ob/oi2U N5Oq7bk7gdZTZNLANJwXhRNgKusWR1F6RFBRl9w0e4L36jylMBbA1/JsAz0UcTE7 z9OFQKP9rc8TammSyFMau3Zz1nWuCXQjAu6/qFO8mbDCprdihp/9Sw9QAXupgr0u Ua99wYZQo0nT9O2hIZfOZf2L3pyOPkEy7J3pmVZ1ERXJIktTGxjwHwEl8fXzx3zg 9q5p7aY3aSYmKzbZtpDf0y23Huth3Cs0EibRlqCRVgzV7xEYnJyBMtpyZiS7Gyxg PfEV1nKiMu2tSEasYGdj7vgD0QIDAQABo4IClzCCApMwHQYDVR0OBBYEFDorDcu1 s6Yp3Ne56F57zVAWJcLVMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvNjdDMkJGRUM2 MUVDMTFFREI3NDBCMDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkB5JANzANBgkqhkiG9w0BAQsFAAOCAQEAJdrChCDaADL7 qRPWwHqET77o93MXsP9Z8cmBFf5GGZ+I07fIBw0lFqYGEM+i0eZkOKB3KKS9ncAi OKxlGgrPXOKpc3rcDW0Sy4qBbb0uxNHgZHWd+bCH3Gm9g0x4mwPcTobk9YqV+h9u 3U7VMwabbRQ6w89CoCx9SvwMufXbRhOpt3hau75zbaVMUYhyjOctspDoVhPPIXI5 Svv0MH6MW9FNkpFL9jZxSiSOT2YurfQvNhVLOlKY+V8G49gAUfuOJUzqIi24W4sa lgx9/riFCnwZCfYKLGLmhvlNhWV9zn/uvotK3EGNNVyYbFkr2bBxAsZgNH5CnN2e 9H6S02CqWA== -----END CERTIFICATE-----Generated at Sat Apr 26 13:46:52 2025 by rpki-client