$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/9E8803A0EB0D11EF99575976C4F9AE02.roa File: 9E8803A0EB0D11EF99575976C4F9AE02.roa (raw, json) Hash identifier: yaPteE4hejSxLkmWmY4xK2B059SLePJYwcPEvAeEGQM= Subject key identifier: 66:A8:15:32:E8:90:C1:81:09:97:5F:49:29:55:1B:16:E4:CE:02:03 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: 6D Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/9E8803A0EB0D11EF99575976C4F9AE02.roa Signing time: Fri 14 Feb 2025 19:55:20 +0000 ROA not before: Fri 14 Feb 2025 19:55:20 +0000 ROA not after: Sat 01 May 2038 00:00:00 +0000 asID: 399970 IP address blocks: 2401:4600:0:9::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: Feb 14 19:55:20 2025 GMT Not After : May 1 00:00:00 2038 GMT Subject: CN=67af9fa8-dc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:bc:6c:a4:f9:ab:f4:9d:d5:d5:84:04:45: 2a:af:d1:5b:8c:d9:8f:d5:6f:44:2a:df:b8:59:25: b4:d2:2b:5b:9a:b5:92:8e:0e:5c:d1:02:a2:d3:fc: fd:cf:e3:fd:dc:d2:f9:0f:a4:e7:b4:6a:b9:0a:fc: 0b:64:91:3f:31:55:ea:d2:b0:33:1d:36:79:8e:b6: 09:c6:a8:0a:94:f1:9c:8e:2e:9a:47:46:00:9a:05: 25:eb:cf:a1:72:b6:cf:7f:1f:cc:60:c9:cb:9e:ad: 81:6a:2d:07:6e:93:8b:c9:d6:63:83:7e:2a:f8:26: 56:95:97:72:75:4f:dd:eb:ef:9b:fc:9f:6c:17:0d: 05:75:17:32:ac:2d:ef:8c:24:c0:cf:f1:e8:91:77: d8:a9:fd:a3:5b:1f:13:3f:a6:fb:64:c5:5a:85:a3: 82:73:2f:58:d1:7b:dc:10:34:13:95:ff:64:3f:26: a5:c1:32:d8:e2:4f:c4:b9:5e:0d:cc:63:fb:d3:5a: 19:66:82:68:c6:56:ac:1b:56:0d:10:d7:e4:b7:0c: 73:57:9e:43:94:11:fb:d5:34:97:ae:80:c7:e2:f2: 17:93:46:5c:81:83:f6:e8:be:73:9b:37:fc:dc:78: f5:30:d4:5a:ff:f3:20:13:80:08:9d:f5:2c:1e:72: 9d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A8:15:32:E8:90:C1:81:09:97:5F:49:29:55:1B:16:E4:CE:02:03 X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/9E8803A0EB0D11EF99575976C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:4600:0:9::/64 Signature Algorithm: sha256WithRSAEncryption b7:62:91:ad:bf:a2:f9:1f:d2:1b:1a:50:fa:b8:57:40:7d:c7: df:28:90:a5:f6:84:82:63:d8:b9:af:8c:88:b2:0c:90:d0:72: 33:ef:8c:a7:8e:e5:fe:6c:67:b0:69:af:48:11:90:c4:7c:fc: ca:d3:68:bb:cd:32:a9:a2:57:9c:e9:d8:5d:97:c9:1d:69:b2: 54:3e:33:8b:56:1f:3b:a2:e4:3a:bb:95:64:47:89:4f:a8:d7: 18:af:bd:6f:80:67:3d:d9:48:05:ff:95:f6:a5:e5:56:a8:45: 26:a5:45:8e:70:1e:24:59:f2:a8:74:91:61:36:4c:64:c3:39: 84:9e:06:7f:95:b7:68:3c:71:5a:3a:24:82:23:fe:ca:d7:cb: e8:56:cf:ca:47:5a:80:3e:1f:6c:bd:75:be:14:fb:2a:48:8e: 8e:f2:d8:50:0c:53:f1:15:cc:bc:68:bd:04:48:d2:f5:21:ca: 45:c6:bb:ae:f7:59:bc:8b:5a:e1:b7:22:d2:fe:73:4f:9b:f3: 2a:7c:74:ae:33:cf:20:be:eb:35:8c:9c:ab:86:60:05:b3:70: 84:d8:14:1f:62:81:cc:6f:22:d2:a3:f3:30:96:10:17:fa:f0: c7:7c:17:1e:fc:62:85:b1:ed:8b:46:86:03:86:df:d6:f7:ec: 8d:05:49:61 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzI4NzExMC8GA1UEBRMoRDhCMUUyMzg5QkE1OTFGRDc5QjlBNTA0QUY1QTQ0REFF MEE2RTgyODAeFw0yNTAyMTQxOTU1MjBaFw0zODA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YWY5ZmE4LWRjNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxcLxspPmr9J3V1YQERSqv0VuM2Y/Vb0Qq37hZJbTSK1uatZKODlzRAqLT/P3P 4/3c0vkPpOe0arkK/AtkkT8xVerSsDMdNnmOtgnGqAqU8ZyOLppHRgCaBSXrz6Fy ts9/H8xgycuerYFqLQduk4vJ1mODfir4JlaVl3J1T93r75v8n2wXDQV1FzKsLe+M JMDP8eiRd9ip/aNbHxM/pvtkxVqFo4JzL1jRe9wQNBOV/2Q/JqXBMtjiT8S5Xg3M Y/vTWhlmgmjGVqwbVg0Q1+S3DHNXnkOUEfvVNJeugMfi8heTRlyBg/bovnObN/zc ePUw1Fr/8yATgAid9Swecp0jAgMBAAGjggKaMIICljAdBgNVHQ4EFgQUZqgVMuiQ wYEJl19JKVUbFuTOAgMwHwYDVR0jBBgwFoAU2LHiOJulkf15uaUEr1pE2uCm6Cgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjg3LzMwN0NGRjFFQjM3 NzExRUZCOTE4NEQ3QUM0RjlBRTAyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZD Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkxIaU9KdWxrZjE1dWFVRXIxcEUydUNtNkNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi85RTg4MDNBMEVC MEQxMUVGOTk1NzU5NzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQV MBMwEQQCAAIwCwMJACQBRgAAAAAJMA0GCSqGSIb3DQEBCwUAA4IBAQC3YpGtv6L5 H9IbGlD6uFdAfcffKJCl9oSCY9i5r4yIsgyQ0HIz74ynjuX+bGewaa9IEZDEfPzK 02i7zTKpolec6dhdl8kdabJUPjOLVh87ouQ6u5VkR4lPqNcYr71vgGc92UgF/5X2 peVWqEUmpUWOcB4kWfKodJFhNkxkwzmEngZ/lbdoPHFaOiSCI/7K18voVs/KR1qA Ph9svXW+FPsqSI6O8thQDFPxFcy8aL0ESNL1IcpFxruu91m8i1rhtyLS/nNPm/Mq fHSuM88gvus1jJyrhmAFs3CE2BQfYoHMbyLSo/MwlhAX+vDHfBce/GKFse2LRoYD ht/W9+yNBUlh -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:46 2025 by rpki-client