$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa File: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (raw, json) Hash identifier: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA= Subject key identifier: 18:1F:7A:ED:BD:FA:D8:16:7E:FE:2F:18:1A:0F:25:1D:2C:13:89:31 Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Certificate serial: 8A Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa Signing time: Tue 11 Mar 2025 05:53:31 +0000 ROA not before: Tue 11 Mar 2025 05:53:31 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135302 IP address blocks: 2402:1300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Validity Not Before: Mar 11 05:53:31 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67cfcfda-f0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e1:51:38:a8:7e:02:f9:4e:ad:cb:60:3f:3d: 0b:36:3c:a6:cc:4d:f9:a5:f7:18:c2:2a:3c:0e:e3: ff:c8:78:f6:3f:14:4f:0f:6b:04:a4:f9:22:52:48: e4:1d:68:bf:eb:f4:56:cd:e4:f6:4a:26:99:5b:e8: f3:7c:25:59:a2:0d:75:d9:17:42:55:87:f2:72:43: 7c:2a:ac:1f:93:07:4a:40:bc:8f:cd:7f:8d:5d:75: 88:20:a7:2f:89:16:71:1b:cb:77:ba:88:06:8e:52: 7f:d2:ea:8e:bc:69:3d:0a:16:59:37:6f:88:b5:a4: 8e:99:9b:24:66:6c:fc:e4:92:1d:ad:92:48:c9:9e: b0:01:e1:b5:f2:9e:3b:ea:3e:29:45:1a:a0:75:eb: 26:3b:89:46:82:5f:a7:c4:dc:5f:5c:38:a1:67:25: 45:ad:56:5d:f0:b0:f0:49:fb:09:44:20:e1:63:5f: 85:a2:8d:fb:bc:9d:0f:2e:26:f2:5d:28:60:4e:af: 69:3e:ab:22:03:0a:0d:73:9d:a7:e1:6e:bf:ea:4f: 60:88:12:71:d2:2d:fd:56:1b:11:ff:1e:a2:e1:bc: 32:87:de:92:eb:f3:7a:6f:7a:aa:3a:f2:5b:eb:0c: d3:b2:a2:7f:9c:36:9c:f1:05:68:d8:b3:dd:b4:20: a2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1F:7A:ED:BD:FA:D8:16:7E:FE:2F:18:1A:0F:25:1D:2C:13:89:31 X509v3 Authority Key Identifier: keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:1300::/32 Signature Algorithm: sha256WithRSAEncryption ac:c1:86:fe:c1:91:ca:81:b3:60:45:5f:d7:70:96:f3:7d:42: f1:ef:94:91:d8:3e:c1:86:eb:8c:96:33:65:af:0b:f4:3c:f0: 24:7a:6d:bb:e9:30:c1:e8:80:b0:b6:76:5d:39:d1:0e:e4:d0: 1e:e3:44:ec:8a:b4:ef:17:93:db:ed:ac:60:14:0f:0a:d9:cd: 60:e3:85:86:42:57:d6:ca:be:e0:a9:cb:69:7f:ad:a8:1f:56: a8:cb:ca:04:00:1f:51:94:7c:1f:30:e8:07:e5:63:21:8a:f6: 05:e3:33:c0:79:ee:1e:97:e5:ef:88:fe:1d:82:43:d1:b9:bc: d0:d8:87:92:4e:32:0d:6d:30:d4:63:56:2e:a5:74:66:b6:17: 9c:f5:55:69:c9:46:58:c7:61:95:ab:e3:9f:41:f1:35:57:84: 22:4c:03:8e:dd:dc:6d:37:a3:69:f0:a7:5c:6a:54:20:90:46: cf:54:ae:71:21:fa:b5:47:f1:85:ea:cf:ad:56:90:e6:23:9a: 61:60:6a:ab:90:f5:12:ba:6d:e6:f7:77:28:b0:3a:f3:f6:1c: a2:0c:6f:da:c3:db:bc:94:aa:84:a8:aa:94:38:b4:e5:cb:72: 29:ee:73:7e:64:52:08:6e:60:d2:9b:74:77:ef:53:ae:59:6c: cf:65:d8:d0 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlBOTAxMTAvBgNVBAUTKDUxODkyQkU1QjBCNEFCQzYwMjU0NDVGNDAzOUZDNzk1 RDhCQTU4RTIwHhcNMjUwMzExMDU1MzMxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmY2ZkYS1mMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreFROKh+AvlOrctgPz0LNjymzE35pfcYwio8DuP/yHj2PxRPD2sEpPkiUkjk HWi/6/RWzeT2SiaZW+jzfCVZog112RdCVYfyckN8KqwfkwdKQLyPzX+NXXWIIKcv iRZxG8t3uogGjlJ/0uqOvGk9ChZZN2+ItaSOmZskZmz85JIdrZJIyZ6wAeG18p47 6j4pRRqgdesmO4lGgl+nxNxfXDihZyVFrVZd8LDwSfsJRCDhY1+Foo37vJ0PLiby XShgTq9pPqsiAwoNc52n4W6/6k9giBJx0i39VhsR/x6i4bwyh96S6/N6b3qqOvJb 6wzTsqJ/nDac8QVo2LPdtCCiDwIDAQABo4ICljCCApIwHQYDVR0OBBYEFBgfeu29 +tgWfv4vGBoPJR0sE4kxMB8GA1UdIwQYMBaAFFGJK+WwtKvGAlRF9AOfx5XYulji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUE5MC8xRkU4NEVEMjMz NzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4WUNWRVgwQTVfSGxkaTZX T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VZa3I1YkMwcThZQ1ZFWDBBNV9IbGRpNldPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzlBOTAvMUZFODRFRDIzMzc2MTFFRjk5M0U0NjczQzRGOUFFMDIvQUU5NzdERjgz MzdFMTFFRkIzQ0NENzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAhMAMA0GCSqGSIb3DQEBCwUAA4IBAQCswYb+wZHKgbNg RV/XcJbzfULx75SR2D7BhuuMljNlrwv0PPAkem276TDB6ICwtnZdOdEO5NAe40Ts irTvF5Pb7axgFA8K2c1g44WGQlfWyr7gqctpf62oH1aoy8oEAB9RlHwfMOgH5WMh ivYF4zPAee4el+XviP4dgkPRubzQ2IeSTjINbTDUY1YupXRmthec9VVpyUZYx2GV q+OfQfE1V4QiTAOO3dxtN6Np8KdcalQgkEbPVK5xIfq1R/GF6s+tVpDmI5phYGqr kPUSum3m93cosDrz9hyiDG/aw9u8lKqEqKqUOLTly3Ip7nN+ZFIIbmDSm3R371Ou WWzPZdjQ -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:59 2025 by rpki-client