$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa File: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (raw, json) Hash identifier: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw= Subject key identifier: 61:92:14:F3:52:96:F4:47:08:39:21:7B:FD:17:20:B1:90:AC:82:C9 Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 149F Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa Signing time: Fri 28 Mar 2025 17:26:15 +0000 ROA not before: Fri 28 Mar 2025 17:26:15 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9411 IP address blocks: 2406:3100::/32 maxlen: 32 2406:3100::/36 maxlen: 36 2406:3100:1000::/36 maxlen: 36 2406:3100:2000::/36 maxlen: 36 2406:3100:3000::/36 maxlen: 36 2406:3100:4000::/36 maxlen: 36 2406:3100:5000::/36 maxlen: 36 2406:3100:6000::/36 maxlen: 36 2406:3100:7000::/36 maxlen: 36 2406:3100:8000::/36 maxlen: 36 2406:3100:9000::/36 maxlen: 36 2406:3100:a000::/36 maxlen: 36 2406:3100:b000::/36 maxlen: 36 2406:3100:c000::/36 maxlen: 36 2406:3100:d000::/36 maxlen: 36 2406:3100:e000::/36 maxlen: 36 2406:3100:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5279 (0x149f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: Mar 28 17:26:15 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e6dbb7-9b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:95:80:51:0b:bf:ff:da:15:63:19:0f:65: ac:94:03:f0:94:8e:d0:4a:7f:8f:f6:76:4d:8b:40: a8:3b:56:e4:86:9f:a0:e3:99:c9:62:56:0a:57:47: da:f5:3a:03:c3:29:db:50:81:e9:4c:2b:69:f0:8d: 86:d3:24:10:d9:bf:fa:f4:3d:18:bc:68:1a:27:f0: d6:41:54:5b:a6:33:c3:fb:c8:f4:d2:4a:ac:ca:0b: 08:3b:53:51:9b:64:e7:63:75:a3:c7:cd:82:f0:78: 24:49:9e:aa:48:15:14:21:84:b7:1b:33:f9:44:30: e8:59:8f:b9:d4:db:fc:3a:b3:ea:22:20:69:d8:f0: 99:77:db:e3:18:e8:72:d3:fc:34:dc:1d:a3:6b:53: e7:36:4c:c7:0d:d4:7d:a5:00:13:30:10:c6:88:e6: 12:86:94:40:e4:7d:f5:78:3e:e7:aa:ec:c7:24:1e: 7d:c2:5a:6a:db:81:ba:79:34:71:9c:9a:a8:d5:99: 36:e1:88:0e:24:ee:fa:08:ae:f9:01:6b:0a:1e:d8: d3:2a:d0:78:f3:9a:bb:39:d3:42:99:20:c8:9f:05: 4d:78:2e:ca:1e:fc:f2:32:8c:c4:f9:c4:6f:04:5a: ea:40:32:16:8f:ca:dc:fc:11:07:0d:dd:e6:78:98: 7b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:92:14:F3:52:96:F4:47:08:39:21:7B:FD:17:20:B1:90:AC:82:C9 X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:3100::/32 Signature Algorithm: sha256WithRSAEncryption be:53:59:a0:68:e4:7d:d1:33:9b:e5:f0:65:d9:82:bf:05:9c: bd:47:59:90:ba:25:f0:70:c4:fa:41:c0:d7:b7:76:46:af:d1: b0:06:14:11:4b:d0:17:a5:c8:05:1d:ff:72:3e:9f:33:75:37: 08:c5:7b:c7:10:90:4d:ee:39:5a:8f:50:76:53:ae:2f:0c:be: d2:8b:8e:8c:1c:2b:d9:76:e3:4c:af:7a:19:b9:5b:c0:eb:a8: ec:cf:5c:df:65:e9:4b:39:8e:7d:4b:e4:72:7a:3a:57:f7:e0: 10:da:5d:f7:33:2d:b4:c4:2f:2d:0f:5a:e3:48:84:50:3b:61: 43:a5:13:2a:e0:e8:ee:31:d9:f8:6b:13:cd:73:db:9d:d2:a4: d6:99:2c:09:ce:f5:8c:b6:a0:6d:bf:e9:03:fb:65:25:e0:11: b4:71:f0:7a:d7:27:71:43:97:be:6a:98:83:d2:8a:f0:a9:f4: e8:4d:58:da:8c:38:f8:ec:83:cf:e6:ba:c1:e0:d5:e0:ee:72: 2b:c5:14:71:6d:a8:b6:8c:d1:fa:7c:d0:99:0c:d1:cb:34:e1: cf:06:55:fb:88:72:a0:ca:72:7a:0b:06:f3:4f:1e:99:aa:36: a2:72:b9:1a:ab:74:85:29:7c:d9:ec:85:ad:15:ea:86:cb:14: ce:a9:f1:9b -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICFJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjUwMzI4MTcyNjE1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U2ZGJiNy05YjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0yVgFELv//aFWMZD2WslAPwlI7QSn+P9nZNi0CoO1bkhp+g45nJYlYKV0fa 9ToDwynbUIHpTCtp8I2G0yQQ2b/69D0YvGgaJ/DWQVRbpjPD+8j00kqsygsIO1NR m2TnY3Wjx82C8HgkSZ6qSBUUIYS3GzP5RDDoWY+51Nv8OrPqIiBp2PCZd9vjGOhy 0/w03B2ja1PnNkzHDdR9pQATMBDGiOYShpRA5H31eD7nquzHJB59wlpq24G6eTRx nJqo1Zk24YgOJO76CK75AWsKHtjTKtB485q7OdNCmSDInwVNeC7KHvzyMozE+cRv BFrqQDIWj8rc/BEHDd3meJh7mQIDAQABo4ICljCCApIwHQYDVR0OBBYEFGGSFPNS lvRHCDkhe/0XILGQrILJMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkZBNDkvNzAyRDgxMjQ1Q0MxMTFFODlBMzZCODM3QzRGOUFFMDIvMDQ0OEMwNEU1 Q0MyMTFFOEFDMDdFNjNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBjEAMA0GCSqGSIb3DQEBCwUAA4IBAQC+U1mgaOR90TOb 5fBl2YK/BZy9R1mQuiXwcMT6QcDXt3ZGr9GwBhQRS9AXpcgFHf9yPp8zdTcIxXvH EJBN7jlaj1B2U64vDL7Si46MHCvZduNMr3oZuVvA66jsz1zfZelLOY59S+RyejpX 9+AQ2l33My20xC8tD1rjSIRQO2FDpRMq4OjuMdn4axPNc9ud0qTWmSwJzvWMtqBt v+kD+2Ul4BG0cfB61ydxQ5e+apiD0orwqfToTVjajDj47IPP5rrB4NXg7nIrxRRx bai2jNH6fNCZDNHLNOHPBlX7iHKgynJ6CwbzTx6Zqjaicrkaq3SFKXzZ7IWtFeqG yxTOqfGb -----END CERTIFICATE-----Generated at Sat Apr 26 08:01:07 2025 by rpki-client