$ rpki-client -vvf rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/F54B2D0C10E711F0BD805A39C4F9AE02.roa File: F54B2D0C10E711F0BD805A39C4F9AE02.roa (raw, json) Hash identifier: ws/V39l0mqQCsGBFN4xUqObKLhPbTwQXuB/ty3K9j6Q= Subject key identifier: A3:D9:5B:69:1B:B3:FA:C6:F2:C4:AF:5F:6F:58:E1:3B:83:C8:E7:05 Certificate issuer: /CN=A91559AC/serialNumber=9B22C6EB7DCC338036E39AE54A7D2A025903B113 Certificate serial: 02 Authority key identifier: 9B:22:C6:EB:7D:CC:33:80:36:E3:9A:E5:4A:7D:2A:02:59:03:B1:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myLG633MM4A245rlSn0qAlkDsRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/F54B2D0C10E711F0BD805A39C4F9AE02.roa Signing time: Fri 04 Apr 2025 00:01:29 +0000 ROA not before: Fri 04 Apr 2025 00:01:29 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139755 IP address blocks: 2001:df1:cb80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.crl rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myLG633MM4A245rlSn0qAlkDsRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 19:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91559AC, serialNumber=9B22C6EB7DCC338036E39AE54A7D2A025903B113 Validity Not Before: Apr 4 00:01:29 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67ef2158-b38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4c:97:ec:96:e3:20:c9:87:7d:d6:f9:b2:14: 8c:be:6b:3d:e5:a3:9a:cb:1d:fe:1d:c7:85:a4:04: 19:7d:3d:89:ff:23:cc:0e:06:55:3d:2e:19:2d:f1: fb:d1:aa:b4:71:72:00:79:61:8b:62:58:fb:fc:76: ab:05:14:04:3e:ed:f0:5a:cb:46:fa:8e:84:f1:43: 33:83:c8:2f:19:43:d8:a0:e7:66:02:23:3d:ff:4f: 6f:13:8f:ad:5d:5e:74:97:42:6c:09:47:99:45:b4: e4:34:97:e4:22:2a:21:67:5e:e4:1c:60:24:8f:e6: 16:7e:42:83:ce:75:3d:aa:42:9a:b5:5f:f1:74:d3: 47:93:3c:35:99:07:ec:0f:29:78:b8:c6:a8:58:d6: 5d:35:61:c0:73:62:7b:b8:c0:7e:9f:2a:a0:48:e8: 2a:40:3f:72:74:91:85:88:49:62:02:95:9f:5c:b2: aa:c8:a9:67:80:0b:33:19:f8:e2:93:24:7b:36:e9: e1:a8:7e:39:dc:87:9e:44:99:95:f7:89:b0:39:43: d1:a1:18:a1:fc:72:78:b3:a9:96:bc:e5:db:4f:dc: fd:62:de:c4:c6:bd:20:b6:e8:db:09:80:e4:e6:de: ba:55:f7:4d:ef:70:9e:5e:e0:fc:a1:ad:fe:ec:c0: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D9:5B:69:1B:B3:FA:C6:F2:C4:AF:5F:6F:58:E1:3B:83:C8:E7:05 X509v3 Authority Key Identifier: keyid:9B:22:C6:EB:7D:CC:33:80:36:E3:9A:E5:4A:7D:2A:02:59:03:B1:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myLG633MM4A245rlSn0qAlkDsRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/F54B2D0C10E711F0BD805A39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:cb80::/48 Signature Algorithm: sha256WithRSAEncryption 8c:7c:e8:b2:e1:6f:2a:70:20:5c:ba:f0:49:b4:b3:5e:9d:51: c6:8f:59:a8:2c:ac:8d:99:1a:78:f2:6e:00:e8:a8:32:fe:0e: c3:e1:9d:81:e1:ec:83:58:14:f6:a6:dd:76:b2:4a:d1:70:df: 3c:87:42:0d:4e:75:d8:d1:d3:43:99:4c:73:28:2a:63:a9:c4: e8:a0:6b:21:86:bf:78:fb:4b:ec:39:0b:06:00:eb:8d:c2:0b: 51:c1:93:a8:0b:7d:76:a7:4d:4b:a4:0c:e9:47:d2:6b:26:8e: 82:b1:b2:6b:a6:b4:e0:8c:e4:fa:74:3d:dd:f7:9c:b3:4d:07: a8:fd:6b:4e:61:aa:d4:b5:c5:3c:de:92:69:04:ea:20:8b:0a: 6c:74:2b:56:54:70:91:24:25:cb:a6:6b:08:2d:9a:4d:32:84: 4c:24:56:e6:e9:a9:0a:1d:2b:ae:b4:c9:c0:57:37:33:39:7c: a2:ba:dd:be:0d:16:bb:43:6a:4d:7e:14:b5:26:f2:20:b8:3e: 1a:b5:55:57:14:d3:bb:54:15:ee:d3:85:c1:13:06:d8:1c:ac: f5:a4:c5:0e:4b:7f:46:5c:96:72:2a:3d:7c:13:7b:c0:f2:f2: 79:17:c3:15:23:98:ad:f7:f1:5e:56:14:75:c6:a4:18:4e:dd: 8d:35:29:67 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTlBQzExMC8GA1UEBRMoOUIyMkM2RUI3RENDMzM4MDM2RTM5QUU1NEE3RDJBMDI1 OTAzQjExMzAeFw0yNTA0MDQwMDAxMjlaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZWYyMTU4LWIzOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTTJfsluMgyYd91vmyFIy+az3lo5rLHf4dx4WkBBl9PYn/I8wOBlU9Lhkt8fvR qrRxcgB5YYtiWPv8dqsFFAQ+7fBay0b6joTxQzODyC8ZQ9ig52YCIz3/T28Tj61d XnSXQmwJR5lFtOQ0l+QiKiFnXuQcYCSP5hZ+QoPOdT2qQpq1X/F000eTPDWZB+wP KXi4xqhY1l01YcBzYnu4wH6fKqBI6CpAP3J0kYWISWIClZ9csqrIqWeACzMZ+OKT JHs26eGofjnch55EmZX3ibA5Q9GhGKH8cnizqZa85dtP3P1i3sTGvSC26NsJgOTm 3rpV903vcJ5e4Pyhrf7swFIlAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUo9lbaRuz +sbyxK9fb1jhO4PI5wUwHwYDVR0jBBgwFoAUmyLG633MM4A245rlSn0qAlkDsRMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1OUFDL0MwNjEzNTE2NUY4 RDExRUFCNTAwQkQ2NEM0RjlBRTAyL215TEc2MzNNTTRBMjQ1cmxTbjBxQWxrRHNS TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXlMRzYzM01NNEEyNDVybFNuMHFBbGtEc1JNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTlBQy9DMDYxMzUxNjVGOEQxMUVBQjUwMEJENjRDNEY5QUUwMi9GNTRCMkQwQzEw RTcxMUYwQkQ4MDVBMzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfHLgDANBgkqhkiG9w0BAQsFAAOCAQEAjHzosuFvKnAg XLrwSbSzXp1Rxo9ZqCysjZkaePJuAOioMv4Ow+GdgeHsg1gU9qbddrJK0XDfPIdC DU512NHTQ5lMcygqY6nE6KBrIYa/ePtL7DkLBgDrjcILUcGTqAt9dqdNS6QM6UfS ayaOgrGya6a04Izk+nQ93fecs00HqP1rTmGq1LXFPN6SaQTqIIsKbHQrVlRwkSQl y6ZrCC2aTTKETCRW5umpCh0rrrTJwFc3Mzl8orrdvg0Wu0NqTX4UtSbyILg+GrVV VxTTu1QV7tOFwRMG2Bys9aTFDkt/RlyWcio9fBN7wPLyeRfDFSOYrffxXlYUdcak GE7djTUpZw== -----END CERTIFICATE-----Generated at Fri May 2 18:03:07 2025 by rpki-client