$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/02BCE50286AF11EF9EFFD52FC4F9AE02.roa File: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (raw, json) Hash identifier: 51G/atnUP8WE3vN2KzPoIXBsyS6vS2RXr0QbqdKbjAA= Subject key identifier: 56:A0:AC:6D:B2:92:0E:37:13:0B:0F:A7:C2:D8:33:19:D6:23:01:34 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: C9 Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/02BCE50286AF11EF9EFFD52FC4F9AE02.roa Signing time: Thu 05 Jun 2025 05:15:11 +0000 ROA not before: Thu 05 Jun 2025 05:15:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140065 IP address blocks: 2001:df3:dec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Validity Not Before: Jun 5 05:15:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684127df-ccc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:67:8d:24:20:fb:a6:94:8f:0c:3d:db:12: 63:eb:5c:fc:38:92:e3:89:ee:2d:10:85:22:89:49: 88:43:f1:1d:26:c0:ee:ae:ad:bd:95:cb:28:5e:c2: ca:b0:42:64:32:5f:95:1c:ca:91:49:af:cd:48:71: 0a:c2:df:2b:1c:a3:6b:d8:e5:b1:c5:df:d5:ab:f3: da:e2:32:ef:db:7b:9c:63:15:62:c0:b7:a6:00:44: 0c:19:da:14:64:76:64:c8:31:05:64:4b:2a:0b:fa: f9:81:d2:3a:e7:1d:2a:5d:e2:dc:3c:49:a2:3a:f7: 5f:97:bc:3e:22:51:7f:e5:52:ad:f6:9e:67:de:87: 2b:fd:c8:69:63:fb:91:fc:5b:81:31:f6:08:3a:e7: d2:a4:bc:57:ee:cb:f0:2e:4d:31:5e:5b:64:b0:38: ad:12:c4:7c:d3:07:4e:7b:fe:f2:92:54:cd:b7:f4: d6:ff:8d:d7:e9:e1:70:ed:1a:d0:dc:b7:12:95:ff: 81:e8:52:ba:30:d7:7c:50:98:81:67:6a:fb:02:00: d7:d2:84:4f:f5:05:f5:fc:01:55:43:92:4c:43:48: 5c:20:62:a1:58:97:80:5d:c2:3b:76:ba:15:29:b1: 89:84:07:af:9e:0e:11:dd:fc:28:74:9a:de:36:f3: b5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A0:AC:6D:B2:92:0E:37:13:0B:0F:A7:C2:D8:33:19:D6:23:01:34 X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/02BCE50286AF11EF9EFFD52FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:dec0::/48 Signature Algorithm: sha256WithRSAEncryption be:2d:45:91:2f:13:ef:13:a0:2b:47:f5:92:ab:0e:61:5a:22: 3e:0e:d7:5d:b2:1c:80:6a:ef:bb:fc:08:5e:c0:0e:22:36:d6: 38:cb:62:28:7d:f8:2b:17:6e:fc:2e:65:2c:87:9c:14:90:a8: e7:6e:c7:f7:01:4a:8a:d6:a9:5c:37:25:c8:12:70:d9:e6:03: d1:a1:1d:dd:63:30:1f:ab:7c:52:7e:ea:60:ed:a3:c7:b1:13: 12:0c:a2:47:50:3a:9b:13:1a:23:5c:e6:a0:e1:50:f6:69:ac: e7:ca:fa:88:77:a8:0b:96:ac:f7:d2:7a:64:29:1f:d5:c3:db: bb:4f:d8:68:8b:fe:93:b8:8d:de:4c:37:8e:de:2f:80:d8:26: 1a:4f:a5:6a:90:fe:88:b5:a1:9e:3b:f4:98:2b:37:d7:ff:9f: f8:44:d4:4f:70:66:0b:06:33:7e:be:f9:bd:d3:38:e7:76:e1: 43:96:b9:8e:72:c0:9c:f6:32:c7:58:0c:9b:45:86:8e:53:9e: 2f:7e:a5:c1:ba:e3:ce:6e:fa:09:66:6d:d8:a7:b3:d1:e6:d2: c2:8e:7f:cb:25:4e:5a:63:57:d5:c2:8e:d9:7b:0a:01:fb:00: ef:a5:df:f0:9e:b1:17:7c:c7:b6:f2:25:00:98:80:18:6f:df: 48:a0:6d:f2 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5 ODJFQzdENzkwHhcNMjUwNjA1MDUxNTExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQxMjdkZi1jY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl9njSQg+6aUjww92xJj61z8OJLjie4tEIUiiUmIQ/EdJsDurq29lcsoXsLK sEJkMl+VHMqRSa/NSHEKwt8rHKNr2OWxxd/Vq/Pa4jLv23ucYxViwLemAEQMGdoU ZHZkyDEFZEsqC/r5gdI65x0qXeLcPEmiOvdfl7w+IlF/5VKt9p5n3ocr/chpY/uR /FuBMfYIOufSpLxX7svwLk0xXltksDitEsR80wdOe/7yklTNt/TW/43X6eFw7RrQ 3LcSlf+B6FK6MNd8UJiBZ2r7AgDX0oRP9QX1/AFVQ5JMQ0hcIGKhWJeAXcI7droV KbGJhAevng4R3fwodJreNvO1WQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFagrG2y kg43EwsPp8LYMxnWIwE0MB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk4RUMvMjFFNUEzMEExRUUxMTFFRjkzRjk4NTNEQzRGOUFFMDIvMDJCQ0U1MDI4 NkFGMTFFRjlFRkZENTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3z3sAwDQYJKoZIhvcNAQELBQADggEBAL4tRZEvE+8T oCtH9ZKrDmFaIj4O112yHIBq77v8CF7ADiI21jjLYih9+CsXbvwuZSyHnBSQqOdu x/cBSorWqVw3JcgScNnmA9GhHd1jMB+rfFJ+6mDto8exExIMokdQOpsTGiNc5qDh UPZprOfK+oh3qAuWrPfSemQpH9XD27tP2GiL/pO4jd5MN47eL4DYJhpPpWqQ/oi1 oZ479JgrN9f/n/hE1E9wZgsGM36++b3TOOd24UOWuY5ywJz2MsdYDJtFho5Tni9+ pcG6485u+glmbdins9Hm0sKOf8slTlpjV9XCjtl7CgH7AO+l3/CesRd8x7byJQCY gBhv30igbfI= -----END CERTIFICATE-----Generated at Sun Jun 15 17:29:17 2025 by rpki-client