$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/F51067B4C65D11EF84CD2E17C4F9AE02.roa File: F51067B4C65D11EF84CD2E17C4F9AE02.roa (raw, json) Hash identifier: jvqTe31x/hXb7xXYlkCK4m1tiC8DGQsXAio95m/E2uI= Subject key identifier: AE:52:32:AB:5F:A4:27:98:35:8A:65:3C:F2:AA:7B:8D:F3:A4:D3:24 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: 2F Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/F51067B4C65D11EF84CD2E17C4F9AE02.roa Signing time: Mon 30 Dec 2024 03:27:12 +0000 ROA not before: Mon 30 Dec 2024 03:27:12 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153183 IP address blocks: 2401:b660::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Dec 30 03:27:12 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6772130f-6f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:9f:47:da:a1:6b:54:95:78:c2:63:75:ca: 7d:fc:dc:7c:bf:a4:9e:ee:4f:32:4d:30:14:fa:17: 65:f7:7c:55:7e:73:f3:de:ad:8e:0b:68:4a:bf:03: 68:90:ce:fa:23:05:a3:e6:57:78:99:74:a8:21:da: 76:0a:19:fb:aa:98:5e:76:86:c1:10:95:6b:86:dd: aa:eb:97:9f:05:8c:5a:26:39:21:c8:90:c4:76:89: c8:71:91:c7:18:96:71:8a:b2:8a:d3:56:63:f5:86: 47:3b:11:cb:64:dc:8b:de:23:17:14:42:97:68:ca: 9f:2f:d5:ef:00:b1:e3:cf:1b:02:b2:c0:32:a2:20: 46:49:a3:35:bf:b4:b3:68:8b:2e:71:6a:90:27:7c: 89:2d:73:08:23:00:20:2a:69:4a:d2:78:e7:bd:2b: ac:fd:79:d0:0f:e3:8f:02:2a:81:97:bc:6d:11:27: 8c:46:23:c1:bc:5c:0f:67:c0:24:68:38:93:e6:3d: 7c:86:c8:83:bf:f9:a9:9c:32:86:ac:2b:0e:c5:d9: 27:ee:5f:38:ef:69:a5:53:3d:79:9b:ab:0d:a0:67: 2b:d0:8c:12:05:52:22:20:06:ea:18:ae:f3:ac:e1: d7:6b:d1:37:b2:c5:f4:81:3b:c7:ab:35:5d:b8:e7: ca:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:52:32:AB:5F:A4:27:98:35:8A:65:3C:F2:AA:7B:8D:F3:A4:D3:24 X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/F51067B4C65D11EF84CD2E17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b660::/32 Signature Algorithm: sha256WithRSAEncryption bb:be:37:4c:b9:38:6a:4f:b8:1e:fa:0c:06:87:74:af:0f:cd: 9a:25:3f:77:1e:d3:dc:87:c8:ea:bf:c8:42:05:9d:b3:65:20: ef:98:a2:c7:df:91:bf:c8:f7:06:63:a7:bd:ec:3a:87:ad:d8: 90:6c:c5:82:7b:9d:ec:20:b2:78:35:a1:d5:ef:c3:c6:84:e9: 5b:d7:5d:23:15:55:fe:53:3d:c3:06:36:62:25:20:7b:14:e3: 20:20:47:88:6f:d7:86:0f:10:b0:1e:46:dd:ab:2c:5f:d2:d6: 18:ff:8a:97:4c:28:61:a1:c7:8f:e1:dd:11:5c:29:7c:dd:b7: 19:84:32:31:1c:d2:30:bd:1b:4d:00:74:3c:04:bd:d8:ea:21: dd:e2:d2:c3:42:9c:59:44:63:8f:22:a7:9e:c5:6c:d3:0b:af: b3:6a:a1:01:f6:4b:27:e7:8a:59:15:98:90:fb:bc:5a:3c:96: 3b:bc:f9:57:d3:a8:52:24:fe:01:b2:06:11:0e:24:7f:4f:4a: 33:b2:35:6d:31:5e:94:5d:17:23:cd:76:ed:f2:1d:7d:7d:b5: 6a:20:b9:5a:bd:ef:6c:7e:09:d2:e6:81:4f:fd:1d:a2:a9:8b: d5:68:f1:15:04:ab:40:6c:28:54:e1:e1:e3:08:44:59:ab:9f: 18:74:9a:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzZERjExMC8GA1UEBRMoNjRGMjFDREU2NDhCMzlCNTI4MkI4Q0IxMjc5MjhFMjMz MjQ4ODI5NDAeFw0yNDEyMzAwMzI3MTJaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NzIxMzBmLTZmNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzyp9H2qFrVJV4wmN1yn383Hy/pJ7uTzJNMBT6F2X3fFV+c/PerY4LaEq/A2iQ zvojBaPmV3iZdKgh2nYKGfuqmF52hsEQlWuG3arrl58FjFomOSHIkMR2ichxkccY lnGKsorTVmP1hkc7Ectk3IveIxcUQpdoyp8v1e8AsePPGwKywDKiIEZJozW/tLNo iy5xapAnfIktcwgjACAqaUrSeOe9K6z9edAP448CKoGXvG0RJ4xGI8G8XA9nwCRo OJPmPXyGyIO/+amcMoasKw7F2SfuXzjvaaVTPXmbqw2gZyvQjBIFUiIgBuoYrvOs 4ddr0TeyxfSBO8erNV2458ptAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUrlIyq1+k J5g1imU88qp7jfOk0yQwHwYDVR0jBBgwFoAUZPIc3mSLObUoK4yxJ5KOIzJIgpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzNkRGLzIzMTg0MDhDODEz RjExRUY5Q0NFMUExQUM0RjlBRTAyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlBJYzNtU0xPYlVvSzR5eEo1S09JekpJZ3BRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzZERi8yMzE4NDA4QzgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9GNTEwNjdCNEM2 NUQxMUVGODRDRDJFMTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQBtmAwDQYJKoZIhvcNAQELBQADggEBALu+N0y5OGpPuB76 DAaHdK8PzZolP3ce09yHyOq/yEIFnbNlIO+Yosffkb/I9wZjp73sOoet2JBsxYJ7 newgsng1odXvw8aE6VvXXSMVVf5TPcMGNmIlIHsU4yAgR4hv14YPELAeRt2rLF/S 1hj/ipdMKGGhx4/h3RFcKXzdtxmEMjEc0jC9G00AdDwEvdjqId3i0sNCnFlEY48i p57FbNMLr7NqoQH2SyfnilkVmJD7vFo8lju8+VfTqFIk/gGyBhEOJH9PSjOyNW0x XpRdFyPNdu3yHX19tWoguVq972x+CdLmgU/9HaKpi9Vo8RUEq0BsKFTh4eMIRFmr nxh0mp4= -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:53 2025 by rpki-client