$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DCA7C1ECB0F811E595E0F761C4F9AE02.roa File: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (raw, json) Hash identifier: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU= Subject key identifier: FE:66:86:1A:1A:D6:98:8F:7E:A2:D9:3D:9E:80:B5:1E:61:EC:60:87 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 34E6 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DCA7C1ECB0F811E595E0F761C4F9AE02.roa Signing time: Thu 10 Apr 2025 14:50:13 +0000 ROA not before: Thu 10 Apr 2025 14:50:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6939 IP address blocks: 27.50.32.0/21 maxlen: 21 2400:7a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13542 (0x34e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Apr 10 14:50:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f7daa5-be97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:5a:01:ab:e9:2d:8c:b3:60:ab:b4:88:77: af:6d:19:9b:a2:82:ad:e4:a0:f2:f5:0c:27:23:6c: 61:73:cb:74:a0:9f:ce:35:ab:c9:59:89:f2:b3:b0: 97:de:7a:cc:f0:eb:2d:46:58:5a:6c:8a:fe:99:7f: 32:ac:85:f7:ab:9a:bf:18:fe:8d:7e:3d:ac:c5:8e: 35:7a:89:ea:54:67:ba:3f:f3:fe:6e:ba:be:ab:09: 7e:3c:12:0c:e2:98:4e:5f:8c:2b:bc:fb:fd:74:67: c6:7f:59:88:d9:42:96:d3:31:25:95:1e:b9:ff:7d: 70:1b:31:5a:33:04:a8:57:3d:34:86:00:74:58:3f: 4f:4d:fb:bb:25:60:56:6d:8e:2c:25:bc:b9:43:bf: 78:ce:ed:bc:e8:2c:18:2e:84:29:87:bc:eb:4e:ce: 35:bd:75:6e:2e:b4:72:d2:6e:e5:35:66:f2:d3:74: 5b:f8:21:6d:6d:a4:00:59:8f:44:03:64:27:ca:11: c5:aa:38:b3:61:a4:7c:bf:e9:11:22:72:d4:0b:f8: 9d:01:79:92:74:b7:2d:ae:dd:f2:0d:dc:4f:e7:9a: 78:4c:5d:c7:fa:c9:b0:00:44:72:56:2f:d6:18:19: 31:4e:3b:cc:28:5f:c8:50:ea:0b:56:94:c0:07:7a: be:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:66:86:1A:1A:D6:98:8F:7E:A2:D9:3D:9E:80:B5:1E:61:EC:60:87 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DCA7C1ECB0F811E595E0F761C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.50.32.0/21 IPv6: 2400:7a00::/32 Signature Algorithm: sha256WithRSAEncryption 00:e0:38:07:b0:97:8b:ab:0b:fe:89:b8:ec:31:e0:e9:4c:71: 4f:11:d4:39:88:12:00:74:ac:fb:96:c4:5c:47:b8:8e:75:ad: 8b:c5:75:4a:f5:71:8f:6d:90:ce:b3:49:65:ed:31:c6:91:69: c1:36:b4:6b:fc:10:6a:c6:7d:9d:8c:84:55:5a:7e:5f:65:c5: 07:a2:0e:a4:49:72:bd:ea:cd:cc:6d:fe:84:40:41:89:57:59: 26:18:d7:83:ac:ae:34:56:ef:c5:f1:ff:a8:29:92:3e:07:65: 46:ca:3a:a5:23:99:7d:ee:67:4c:00:ec:fc:f9:3d:4e:99:9d: ea:60:47:09:eb:9f:6d:24:e6:93:ee:c4:8d:7d:b3:ca:2a:15: 7d:1b:0f:9b:d4:bf:f1:17:23:25:67:04:01:5d:7f:00:13:d4: 8a:24:15:80:00:07:d6:2e:b0:91:be:da:b0:7f:9a:3f:c2:ed: 6f:c1:5d:d1:56:a0:62:19:e7:87:6c:f5:21:3f:7c:78:8c:ba: 56:8f:ab:29:c4:da:fa:f5:85:00:4a:ae:05:9f:8d:e1:f5:9c: 96:0c:ef:a3:85:be:5a:24:8d:78:46:9f:c5:b7:be:db:ac:8f: 0b:79:c2:b8:7b:65:d0:3c:f1:c2:0c:73:d0:da:9e:40:f6:d9: ea:a9:b5:ad -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICNOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUwNDEwMTQ1MDEzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y3ZGFhNS1iZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjxaAavpLYyzYKu0iHevbRmbooKt5KDy9QwnI2xhc8t0oJ/ONavJWYnys7CX 3nrM8OstRlhabIr+mX8yrIX3q5q/GP6Nfj2sxY41eonqVGe6P/P+brq+qwl+PBIM 4phOX4wrvPv9dGfGf1mI2UKW0zEllR65/31wGzFaMwSoVz00hgB0WD9PTfu7JWBW bY4sJby5Q794zu286CwYLoQph7zrTs41vXVuLrRy0m7lNWby03Rb+CFtbaQAWY9E A2QnyhHFqjizYaR8v+kRInLUC/idAXmSdLctrt3yDdxP55p4TF3H+smwAERyVi/W GBkxTjvMKF/IUOoLVpTAB3q+AQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFP5mhhoa 1piPfqLZPZ6AtR5h7GCHMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc0QzMvNkY4QjUyQTAxRDcwMTFFMkJDMTFEQUI0MDhCMDJDRDIvRENBN0MxRUNC MEY4MTFFNTk1RTBGNzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAMbMiAwDQQCAAIwBwMFACQAegAwDQYJKoZIhvcNAQELBQAD ggEBAADgOAewl4urC/6JuOwx4OlMcU8R1DmIEgB0rPuWxFxHuI51rYvFdUr1cY9t kM6zSWXtMcaRacE2tGv8EGrGfZ2MhFVafl9lxQeiDqRJcr3qzcxt/oRAQYlXWSYY 14OsrjRW78Xx/6gpkj4HZUbKOqUjmX3uZ0wA7Pz5PU6ZnepgRwnrn20k5pPuxI19 s8oqFX0bD5vUv/EXIyVnBAFdfwAT1IokFYAAB9YusJG+2rB/mj/C7W/BXdFWoGIZ 54ds9SE/fHiMulaPqynE2vr1hQBKrgWfjeH1nJYM76OFvlokjXhGn8W3vtusjwt5 wrh7ZdA88cIMc9DankD22eqpta0= -----END CERTIFICATE-----Generated at Sat Apr 26 09:46:04 2025 by rpki-client