$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/65552C3AE8D411ED8D0FAD45C4F9AE02.roa File: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (raw, json) Hash identifier: ifJGYL5q49BedEWwURROMxMLmQuzo6sd4i9VU7gjPWk= Subject key identifier: EA:27:72:7B:20:70:50:E8:67:B2:36:87:AA:B8:4B:5D:33:75:1B:34 Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Certificate serial: 3482 Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/65552C3AE8D411ED8D0FAD45C4F9AE02.roa Signing time: Sun 22 Dec 2024 14:50:52 +0000 ROA not before: Sun 22 Dec 2024 14:50:52 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 142435 IP address blocks: 2403:5000:187::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13442 (0x3482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Validity Not Before: Dec 22 14:50:52 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6768274c-3a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:4f:b6:51:f2:94:0f:b2:2a:88:5a:39:68: 12:b0:79:69:57:3f:f4:d8:ea:53:b3:de:1e:71:7b: 02:b7:9c:3a:7e:a4:54:14:7f:c8:d6:e2:14:eb:0f: 48:69:09:28:3b:07:1b:7f:24:fb:3b:b8:59:b1:4e: cd:87:0a:81:3a:14:87:93:f7:93:8a:d1:14:52:b8: fc:f4:d6:31:aa:d3:4b:4d:99:c0:b8:f7:04:9d:fe: 95:2d:fd:72:0f:39:6f:4d:36:ec:78:23:62:0e:ea: 96:02:1b:72:33:f0:e2:1c:21:bf:c1:e0:c3:66:58: e1:20:6d:4d:3a:8e:e2:b3:ac:4a:3d:a3:ef:e4:8a: ff:c6:8d:ae:08:49:fc:dc:2a:3b:76:c3:15:5c:16: ed:10:c8:12:59:2d:b4:53:88:a4:67:18:6c:23:ff: cc:b0:f3:19:50:a5:71:31:57:b8:7e:a6:92:ec:1a: bc:3b:23:4c:ab:b8:43:a8:15:0f:29:1e:69:42:1a: b5:36:b2:68:ea:7c:86:f9:b1:b8:d5:07:cc:47:18: 48:fb:da:67:fa:0d:76:3d:11:80:4d:ed:e4:60:fd: 9e:88:4c:e2:9f:b5:27:a8:97:62:63:3c:fb:57:7f: 87:32:8c:fc:3f:17:eb:49:8c:fc:70:c3:19:48:79: d2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:27:72:7B:20:70:50:E8:67:B2:36:87:AA:B8:4B:5D:33:75:1B:34 X509v3 Authority Key Identifier: keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/65552C3AE8D411ED8D0FAD45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:5000:187::/48 Signature Algorithm: sha256WithRSAEncryption 13:54:92:4d:cb:0b:e6:52:80:e9:03:8d:41:a2:43:7f:6e:16: 99:04:5e:a7:8b:ed:b8:37:c6:02:68:de:e9:ea:4f:ad:0d:50: d0:c2:83:0a:8f:34:99:28:14:9c:eb:9c:77:96:17:10:3c:b0: b5:65:91:21:f5:af:24:78:aa:be:b6:9e:5e:cb:93:c2:10:ca: 62:0b:49:e9:b3:b0:95:92:84:da:1e:66:b2:ab:5a:25:c6:45: 54:44:e0:89:bc:2f:e3:1b:c4:6a:b3:cc:a4:4f:60:93:cc:26: 8f:87:f1:64:e3:0b:f8:22:24:97:0c:d9:5f:a7:70:71:ed:15: 7e:5e:35:cd:29:2d:f2:dd:b9:d7:61:d3:92:e3:f2:b0:1a:6a: f3:65:b0:a5:ad:59:e2:c1:62:41:17:c3:88:2a:87:8a:97:fe: 37:f7:91:ba:a6:7f:77:31:93:7e:08:ca:f9:ac:81:cc:f3:c1: 68:96:62:34:d4:4d:a3:9b:03:86:ec:cd:af:d7:5a:51:48:ed: dc:ec:61:7c:2b:c3:bf:fa:15:40:d1:82:2c:1a:8d:56:55:f4: 4c:e6:4b:51:bd:7e:6f:c8:31:6a:3d:b9:d9:a1:c9:54:6a:0e: 3d:ed:8d:22:c8:fe:a6:b5:7d:50:6f:f9:bd:3b:19:81:b5:09: a3:da:84:65 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICNIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NUMxMTAvBgNVBAUTKDBEOEI3MUQ4NkI1RTIwMjkzM0JDQjAyQTVCNkQ3NDA5 MkE1MkExN0MwHhcNMjQxMjIyMTQ1MDUyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY4Mjc0Yy0zYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwd5PtlHylA+yKohaOWgSsHlpVz/02OpTs94ecXsCt5w6fqRUFH/I1uIU6w9I aQkoOwcbfyT7O7hZsU7NhwqBOhSHk/eTitEUUrj89NYxqtNLTZnAuPcEnf6VLf1y DzlvTTbseCNiDuqWAhtyM/DiHCG/weDDZljhIG1NOo7is6xKPaPv5Ir/xo2uCEn8 3Co7dsMVXBbtEMgSWS20U4ikZxhsI//MsPMZUKVxMVe4fqaS7Bq8OyNMq7hDqBUP KR5pQhq1NrJo6nyG+bG41QfMRxhI+9pn+g12PRGATe3kYP2eiEzin7UnqJdiYzz7 V3+HMoz8PxfrSYz8cMMZSHnS1wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOoncnsg cFDoZ7I2h6q4S10zdRs0MB8GA1UdIwQYMBaAFA2LcdhrXiApM7ywKlttdAkqUqF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk1Qy9CQjM0MTdDMDFE OTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlDa3p2TEFxVzIxMENTcFNv WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZdHgyR3RlSUNrenZMQXFXMjEwQ1NwU29Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTM5NUMvQkIzNDE3QzAxRDk2MTFFMkI4QkI4MjdGMDhCMDJDRDIvNjU1NTJDM0FF OEQ0MTFFRDhEMEZBRDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkA1AAAYcwDQYJKoZIhvcNAQELBQADggEBABNUkk3LC+ZS gOkDjUGiQ39uFpkEXqeL7bg3xgJo3unqT60NUNDCgwqPNJkoFJzrnHeWFxA8sLVl kSH1ryR4qr62nl7Lk8IQymILSemzsJWShNoeZrKrWiXGRVRE4Im8L+MbxGqzzKRP YJPMJo+H8WTjC/giJJcM2V+ncHHtFX5eNc0pLfLduddh05Lj8rAaavNlsKWtWeLB YkEXw4gqh4qX/jf3kbqmf3cxk34IyvmsgczzwWiWYjTUTaObA4bsza/XWlFI7dzs YXwrw7/6FUDRgiwajVZV9EzmS1G9fm/IMWo9udmhyVRqDj3tjSLI/qa1fVBv+b07 GYG1CaPahGU= -----END CERTIFICATE-----Generated at Sat Apr 26 07:40:08 2025 by rpki-client