$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3C0F4E20EABF11EF8452610BC4F9AE02.roa File: 3C0F4E20EABF11EF8452610BC4F9AE02.roa (raw, json) Hash identifier: y5ot4Na6Q3D3xvJLgDVcZp4HYH8sywvrGCGyKgmWTEg= Subject key identifier: F7:AF:71:5C:C4:C5:2C:B9:70:E1:56:FC:CF:20:A0:90:A9:F2:73:4D Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0E21 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3C0F4E20EABF11EF8452610BC4F9AE02.roa Signing time: Fri 14 Feb 2025 10:34:14 +0000 ROA not before: Fri 14 Feb 2025 10:34:14 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 138211 IP address blocks: 2406:840:f880::/44 maxlen: 48 2406:840:fea0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3617 (0xe21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Feb 14 10:34:14 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67af1c26-c0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:dd:56:12:fd:37:fd:d7:6f:a5:b1:0c:e6:5b: 31:53:42:de:81:18:8d:f7:a3:21:49:a4:ca:27:86: 6d:76:76:15:98:d0:48:dd:d1:58:8c:86:f5:33:6d: 9a:62:b3:9e:d1:e1:6e:7c:38:64:37:0e:7e:8d:df: ed:74:24:f1:6f:28:75:6d:18:02:73:19:dd:7b:16: 0d:f6:84:cf:7e:14:98:bb:ec:af:82:2c:0a:7f:b4: 7f:a6:83:54:64:42:b0:92:c7:34:33:07:ca:9e:18: e9:fa:c7:30:69:6d:26:cf:5f:af:6e:42:44:0d:55: a5:a3:9f:90:08:89:4f:a4:a6:20:80:e5:c6:45:bd: 5b:37:4e:ef:6f:15:9f:6b:1c:29:fe:7c:3b:f7:ea: 42:34:0f:fd:06:82:b1:e4:6c:cf:49:2e:4e:fe:b9: 66:31:2c:6e:7e:b0:f2:33:51:1e:fa:5e:40:05:7f: fa:5a:91:30:f6:7a:9a:51:34:9c:f6:ae:2f:d9:e1: 7b:a1:18:23:5a:57:9a:8c:69:c6:4a:5a:27:48:e2: 94:80:c8:16:03:51:4f:ba:3b:a2:6b:cf:3e:9d:bc: b5:b9:27:ad:bf:ba:ca:b8:5f:d3:e3:f5:e4:4e:fe: 44:2f:b0:dc:42:f4:00:7b:34:83:48:4a:26:de:9d: 1c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AF:71:5C:C4:C5:2C:B9:70:E1:56:FC:CF:20:A0:90:A9:F2:73:4D X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3C0F4E20EABF11EF8452610BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:f880::/44 2406:840:fea0::/48 Signature Algorithm: sha256WithRSAEncryption 0c:d5:d3:0e:6b:ef:56:15:36:76:4d:bb:c3:c5:4a:a2:aa:dc: a6:bd:b7:ab:12:d0:a6:fb:7f:41:70:96:46:f6:4d:71:c8:d6: 76:18:7f:6c:f1:34:5a:bb:9b:38:aa:2e:70:5f:38:b5:87:e2: 31:8c:27:1a:5a:27:4a:0c:69:55:74:00:fc:93:49:e4:0c:aa: c6:c3:3b:af:30:49:ae:75:4b:61:5f:25:4f:5c:65:ed:72:f8: fa:46:87:da:1b:aa:b0:7c:03:bb:77:23:17:50:42:e0:ef:61: ec:ad:fb:bb:4e:f8:f9:ef:51:b2:8b:f2:01:10:f2:06:85:c0: ba:06:be:3e:40:0c:e6:e6:18:73:bd:4a:ff:2e:bb:62:24:14: 6b:43:1d:e2:d3:0a:7e:35:8c:74:4c:a6:b4:40:c2:d9:bf:4a: 3e:69:36:b5:15:18:89:e3:06:71:55:60:cb:36:d3:3b:a2:19: 51:82:a6:c7:7f:96:27:37:be:23:dd:2d:0a:78:7b:0e:8e:13: 3d:20:e7:e1:f9:6b:4e:e8:53:2c:5a:37:90:04:98:c2:a4:ce: 9d:f0:f0:18:45:c7:53:93:a4:8a:97:ee:81:7f:49:ac:bf:3f: be:d3:50:7b:c7:cc:99:db:16:45:b3:0b:a2:4b:f9:dd:b2:6a: 9f:73:fe:5c -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwMjE0MTAzNDE0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FmMWMyNi1jMGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8d1WEv03/ddvpbEM5lsxU0LegRiN96MhSaTKJ4ZtdnYVmNBI3dFYjIb1M22a YrOe0eFufDhkNw5+jd/tdCTxbyh1bRgCcxndexYN9oTPfhSYu+yvgiwKf7R/poNU ZEKwksc0MwfKnhjp+scwaW0mz1+vbkJEDVWlo5+QCIlPpKYggOXGRb1bN07vbxWf axwp/nw79+pCNA/9BoKx5GzPSS5O/rlmMSxufrDyM1Ee+l5ABX/6WpEw9nqaUTSc 9q4v2eF7oRgjWleajGnGSlonSOKUgMgWA1FPujuia88+nby1uSetv7rKuF/T4/Xk Tv5EL7DcQvQAezSDSEom3p0cbwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPevcVzE xSy5cOFW/M8goJCp8nNNMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvM0MwRjRFMjBF QUJGMTFFRjg0NTI2MTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA+IADBwAkBghA/qAwDQYJKoZIhvcNAQELBQADggEB AAzV0w5r71YVNnZNu8PFSqKq3Ka9t6sS0Kb7f0Fwlkb2TXHI1nYYf2zxNFq7mziq LnBfOLWH4jGMJxpaJ0oMaVV0APyTSeQMqsbDO68wSa51S2FfJU9cZe1y+PpGh9ob qrB8A7t3IxdQQuDvYeyt+7tO+PnvUbKL8gEQ8gaFwLoGvj5ADObmGHO9Sv8uu2Ik FGtDHeLTCn41jHRMprRAwtm/Sj5pNrUVGInjBnFVYMs20zuiGVGCpsd/lic3viPd LQp4ew6OEz0g5+H5a07oUyxaN5AEmMKkzp3w8BhFx1OTpIqX7oF/Say/P77TUHvH zJnbFkWzC6JL+d2yap9z/lw= -----END CERTIFICATE-----Generated at Sat Apr 26 08:13:23 2025 by rpki-client