$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa File: B91F8BF69EE211EF883C7D14C4F9AE02.roa (raw, json) Hash identifier: Y3nxj0fo17afWS9kISA2qz006sX13/ROncukXnBfO9g= Subject key identifier: CC:49:F9:74:9A:C0:CE:E5:DD:CF:95:55:27:79:47:C8:A7:2F:36:EE Certificate issuer: /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A Certificate serial: 67 Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa Signing time: Thu 13 Mar 2025 19:57:17 +0000 ROA not before: Thu 13 Mar 2025 19:57:17 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 153371 IP address blocks: 2401:ce20::/48 maxlen: 48 2401:ce20:1::/48 maxlen: 48 2401:ce20:2::/48 maxlen: 48 2401:ce20:3::/48 maxlen: 48 2401:ce20:4::/48 maxlen: 48 2401:ce20:5::/48 maxlen: 48 2401:ce20:10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190818, serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A Validity Not Before: Mar 13 19:57:17 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67d3389d-7e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:74:fc:b3:b9:01:2b:54:65:70:a0:2a:76: b4:62:9f:03:42:27:1e:d0:52:67:52:40:91:b8:c8: f3:ce:f1:59:ce:4a:52:8e:8f:60:8b:26:e8:1d:ea: 5d:35:47:4b:47:35:df:6e:32:2a:8d:e3:61:1d:77: a3:d0:e3:65:a8:9d:1c:14:49:e8:58:34:20:3e:1d: 8f:fd:d0:5b:2f:87:05:ed:3c:26:1c:55:50:5b:9a: 6c:f3:37:59:b3:66:00:1b:20:6e:c7:0d:04:e8:66: a5:6f:6c:7c:ae:2a:a9:4d:cc:74:ad:a0:1a:1a:98: 2e:18:9e:ad:dc:d4:a8:f3:c7:f8:5a:55:17:1f:05: 47:f4:75:61:b9:96:d3:37:c7:71:03:9d:ff:d7:5e: cb:81:4c:b5:91:94:e9:48:5b:3b:89:a3:a9:13:bf: c2:c2:f8:a3:ca:1c:b3:e2:56:53:fa:ca:b9:03:55: e8:bc:6b:17:1d:be:25:32:54:8c:44:a3:eb:5c:66: 26:c1:e8:27:0a:57:27:76:bd:0e:ca:c7:53:a2:e9: 10:d5:ac:10:86:8d:d1:93:3f:6a:47:2e:90:97:ee: cf:91:f6:c2:5c:08:0b:d4:df:bf:f9:62:f0:4c:20: 4d:74:1d:e2:3e:67:d5:e2:e8:37:b8:55:76:c4:7a: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:49:F9:74:9A:C0:CE:E5:DD:CF:95:55:27:79:47:C8:A7:2F:36:EE X509v3 Authority Key Identifier: keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:ce20::-2401:ce20:5:ffff:ffff:ffff:ffff:ffff 2401:ce20:10::/44 Signature Algorithm: sha256WithRSAEncryption 28:30:2e:40:41:2a:ba:3e:66:c3:07:30:cf:a4:f9:f1:41:5b: 3b:dd:99:65:47:75:26:d8:b2:9a:df:4d:a7:b7:40:c9:14:ea: 55:1e:8d:02:9e:09:29:36:37:99:a5:f5:49:19:74:35:5a:af: 14:c4:a6:89:1b:4e:e3:7f:e9:09:cf:e9:8c:07:f2:e6:68:29: 17:f3:a0:be:6d:86:b8:9d:80:91:61:da:1f:ad:88:7b:bb:e4: ae:5c:9f:7f:a3:94:9b:09:92:fa:5d:a0:05:6b:84:d9:78:43: 45:f4:3f:6f:22:ea:8a:08:9a:31:da:a0:35:21:4f:f1:cd:d8: e7:75:9a:6a:83:a3:af:06:04:8a:e3:f8:c8:ed:7c:5e:50:11: f8:b2:47:e4:71:5d:a1:1f:c9:22:d2:a9:41:1c:c4:8d:bb:0a: ac:a4:b3:1c:3b:64:9e:c8:46:39:ae:73:f3:83:bc:70:f4:0a: 2c:18:ef:34:ee:e6:b2:a0:ee:4d:28:90:10:dd:28:5a:63:5e: 0e:42:a9:9c:36:eb:8d:49:85:62:75:f6:ac:c2:7f:5c:c4:06: da:be:18:95:95:fd:db:d5:b3:f8:fa:dd:1a:71:82:24:a8:5c: 00:c1:bc:ac:1b:e9:bf:0e:88:7a:99:ba:e2:df:83:ba:07:a4: a8:36:bb:4b -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDgxODExMC8GA1UEBRMoNTQ4NDMwRUFCODhFNEUzNzhGQjUwMDVBRkFFNUNBQjlD MDAwN0ExQTAeFw0yNTAzMTMxOTU3MTdaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZDMzODlkLTdlODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3LXT8s7kBK1RlcKAqdrRinwNCJx7QUmdSQJG4yPPO8VnOSlKOj2CLJugd6l01 R0tHNd9uMiqN42Edd6PQ42WonRwUSehYNCA+HY/90FsvhwXtPCYcVVBbmmzzN1mz ZgAbIG7HDQToZqVvbHyuKqlNzHStoBoamC4Ynq3c1Kjzx/haVRcfBUf0dWG5ltM3 x3EDnf/XXsuBTLWRlOlIWzuJo6kTv8LC+KPKHLPiVlP6yrkDVei8axcdviUyVIxE o+tcZibB6CcKVyd2vQ7Kx1Oi6RDVrBCGjdGTP2pHLpCX7s+R9sJcCAvU37/5YvBM IE10HeI+Z9Xi6De4VXbEeoWNAgMBAAGjggKqMIICpjAdBgNVHQ4EFgQUzEn5dJrA zuXdz5VVJ3lHyKcvNu4wHwYDVR0jBBgwFoAUVIQw6riOTjePtQBa+uXKucAAehow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODE4LzdFMUY2QUUyOTA5 RDExRUY5NzE3RjY1MEM0RjlBRTAyL1ZJUXc2cmlPVGplUHRRQmEtdVhLdWNBQWVo by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVklRdzZyaU9UamVQdFFCYS11WEt1Y0FBZWhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDgxOC83RTFGNkFFMjkwOUQxMUVGOTcxN0Y2NTBDNEY5QUUwMi9COTFGOEJGNjlF RTIxMUVGODgzQzdEMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl MCMwIQQCAAIwGzAQAwUFJAHOIAMHASQBziAABAMHBCQBziAAEDANBgkqhkiG9w0B AQsFAAOCAQEAKDAuQEEquj5mwwcwz6T58UFbO92ZZUd1Jtiymt9Np7dAyRTqVR6N Ap4JKTY3maX1SRl0NVqvFMSmiRtO43/pCc/pjAfy5mgpF/Ogvm2GuJ2AkWHaH62I e7vkrlyff6OUmwmS+l2gBWuE2XhDRfQ/byLqigiaMdqgNSFP8c3Y53WaaoOjrwYE iuP4yO18XlAR+LJH5HFdoR/JItKpQRzEjbsKrKSzHDtknshGOa5z84O8cPQKLBjv NO7msqDuTSiQEN0oWmNeDkKpnDbrjUmFYnX2rMJ/XMQG2r4YlZX929Wz+PrdGnGC JKhcAMG8rBvpvw6Iepm64t+DugekqDa7Sw== -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:41 2025 by rpki-client