$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa File: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (raw, json) Hash identifier: dRNilESPTQz/Q5N/cLbpDlE/USFMgoC4F5PCG8xDhno= Subject key identifier: DC:FC:58:2C:86:2E:57:F7:85:33:C7:63:FE:F3:A2:3F:4E:17:37:E9 Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Certificate serial: D4 Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa Signing time: Thu 27 Mar 2025 05:11:36 +0000 ROA not before: Thu 27 Mar 2025 05:11:36 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 139623 IP address blocks: 2401:7f20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Validity Not Before: Mar 27 05:11:36 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e4de07-9a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d8:42:e3:ec:cd:35:33:42:ce:1e:dc:a9:4e: 48:06:b7:74:30:7c:d4:53:c3:59:de:e2:3a:18:31: cf:1b:fd:2b:bf:22:29:1b:a5:57:58:41:00:66:dc: bf:89:82:0d:fa:c4:7c:c5:bc:93:6c:df:8a:08:9f: 47:33:a1:de:1d:2f:6d:41:ec:de:f1:03:5b:ed:cb: 85:c8:8f:78:9f:47:bb:da:c6:62:04:10:4f:d0:4e: c6:63:39:b4:3f:fe:08:74:54:22:c1:d4:9e:c3:23: f5:d5:28:5b:c6:bf:92:5e:29:94:83:97:3b:58:22: 55:11:d7:38:0d:50:ac:df:17:7a:0b:e2:e1:07:72: bd:3f:41:a3:43:11:85:48:73:e7:a3:6b:7e:71:3b: e3:bf:2f:00:0e:84:29:2e:19:de:8e:a2:94:7f:cd: da:dd:f0:92:81:41:84:c2:57:51:cc:08:95:8d:bb: dc:17:22:f7:05:91:1f:32:91:ef:ab:69:de:a0:77: a3:4b:88:f4:68:a3:cc:30:3d:0e:60:2c:78:46:84: 29:d4:34:cf:ec:22:fc:0c:2c:bb:ec:86:e5:5b:37: a2:c9:a3:d2:34:19:b7:62:69:8b:3c:ab:25:38:8d: a9:e5:57:61:a3:72:e2:3e:1f:65:b2:42:a9:cb:20: 91:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FC:58:2C:86:2E:57:F7:85:33:C7:63:FE:F3:A2:3F:4E:17:37:E9 X509v3 Authority Key Identifier: keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:7f20::/32 Signature Algorithm: sha256WithRSAEncryption 2c:f3:6b:64:86:95:dd:e0:d5:8d:93:c7:b3:bd:6e:ce:ca:38: 3c:c1:e0:fd:b8:32:c7:71:d5:c9:4d:01:31:79:0c:9d:b0:c4: f0:85:c1:af:cc:af:b1:90:32:d4:4c:99:e7:6b:90:dd:ec:fc: 17:b4:ba:b9:b2:e2:46:99:f9:a9:b2:a7:3c:8b:f8:5b:9e:42: c6:00:35:88:cb:9c:a7:b9:e5:fd:8e:ec:b9:1d:47:8a:6f:6b: 07:2c:b1:11:2a:7e:7d:d4:e4:39:0c:dd:9d:df:dd:08:06:e9: 98:fa:1f:f0:5f:8a:86:76:c3:18:c4:9d:ae:d2:8f:91:04:e8: d2:15:ae:4d:94:e7:4e:29:d9:f0:9a:69:71:98:7c:be:ea:cc: cc:f4:b4:f5:da:35:12:88:9d:21:52:de:20:b7:7f:7e:c9:66: 03:cb:6e:3e:ab:dc:6e:f5:58:5f:9f:9b:6f:c6:01:83:87:ea: 56:62:ad:48:84:9c:00:1b:84:5b:4e:50:d2:93:40:54:03:03: 16:d3:47:57:db:b6:fd:d7:e2:ba:60:63:d4:df:29:8f:91:be: b2:7f:44:4f:ae:67:82:7f:86:1d:cf:f5:3a:5f:a3:8e:85:0e: d1:5e:16:ba:98:a7:36:67:e5:67:ff:04:31:92:b9:aa:8d:99: 39:56:ce:9d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0OTAxMTAvBgNVBAUTKDEzNzM1M0QwRThDMTQ1QTU4MENCMDBCQzMyMjIwODlD NDA0OEFFNTEwHhcNMjUwMzI3MDUxMTM2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0ZGUwNy05YTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dhC4+zNNTNCzh7cqU5IBrd0MHzUU8NZ3uI6GDHPG/0rvyIpG6VXWEEAZty/ iYIN+sR8xbyTbN+KCJ9HM6HeHS9tQeze8QNb7cuFyI94n0e72sZiBBBP0E7GYzm0 P/4IdFQiwdSewyP11Shbxr+SXimUg5c7WCJVEdc4DVCs3xd6C+LhB3K9P0GjQxGF SHPno2t+cTvjvy8ADoQpLhnejqKUf83a3fCSgUGEwldRzAiVjbvcFyL3BZEfMpHv q2neoHejS4j0aKPMMD0OYCx4RoQp1DTP7CL8DCy77IblWzeiyaPSNBm3YmmLPKsl OI2p5Vdho3LiPh9lskKpyyCRkwIDAQABo4ICljCCApIwHQYDVR0OBBYEFNz8WCyG Llf3hTPHY/7zoj9OFzfpMB8GA1UdIwQYMBaAFBNzU9DowUWlgMsAvDIiCJxASK5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC85OTE5OEYxMkQw NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJhV0F5d0M4TWlJSW5FQkly bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM0OTAvOTkxOThGMTJEMDU0MTFFRUFGNzk5RjE2QzRGOUFFMDIvMEZFMTNDOTJF QkI0MTFFRTlEODYwOTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAX8gMA0GCSqGSIb3DQEBCwUAA4IBAQAs82tkhpXd4NWN k8ezvW7Oyjg8weD9uDLHcdXJTQExeQydsMTwhcGvzK+xkDLUTJnna5Dd7PwXtLq5 suJGmfmpsqc8i/hbnkLGADWIy5ynueX9juy5HUeKb2sHLLERKn591OQ5DN2d390I BumY+h/wX4qGdsMYxJ2u0o+RBOjSFa5NlOdOKdnwmmlxmHy+6szM9LT12jUSiJ0h Ut4gt39+yWYDy24+q9xu9Vhfn5tvxgGDh+pWYq1IhJwAG4RbTlDSk0BUAwMW00dX 27b91+K6YGPU3ymPkb6yf0RPrmeCf4Ydz/U6X6OOhQ7RXha6mKc2Z+Vn/wQxkrmq jZk5Vs6d -----END CERTIFICATE-----Generated at Sat Apr 26 09:21:40 2025 by rpki-client