$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/AA778F4CAF8A11EEB167DB64C4F9AE02.roa File: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (raw, json) Hash identifier: fgJGtU/PUtSjCXondPTJa4miuZo+FHMCntsgLV0Tifg= Subject key identifier: 13:EA:E8:0E:60:27:C5:27:6D:A1:DD:85:D2:03:2A:AB:27:5E:41:CA Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Certificate serial: F1 Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/AA778F4CAF8A11EEB167DB64C4F9AE02.roa Signing time: Thu 03 Apr 2025 05:02:18 +0000 ROA not before: Thu 03 Apr 2025 05:02:18 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 152322 IP address blocks: 2001:df3:5ac0::/49 maxlen: 49 2001:df3:5ac0:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Validity Not Before: Apr 3 05:02:18 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67ee165a-991f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:74:64:17:ef:2d:ab:49:31:02:d3:c6:fa: 92:bb:91:f8:d8:5e:48:06:54:3e:44:dc:d3:fe:48: 98:51:9b:03:88:3b:54:7b:23:f4:2b:f9:c2:c7:65: 6b:48:b4:0f:d3:1b:a1:d0:b7:a2:b4:77:3a:19:f3: d9:37:2f:81:46:a5:c8:ca:49:83:13:cf:7f:cd:10: f1:2c:6a:9a:b8:38:e0:f5:37:73:53:45:74:f7:d4: d3:23:01:88:9b:62:20:49:3e:e2:c5:70:21:33:f9: 33:02:2e:66:0e:0a:d0:c2:66:f5:0b:10:38:bd:63: 60:99:0a:9d:90:a6:9c:4c:3e:96:ed:52:59:4c:9a: f5:a1:3f:9e:59:58:2c:46:ab:0a:96:50:a5:6b:8d: a0:c3:ba:3e:05:1d:bf:63:13:9f:76:53:c8:82:1c: 93:60:c6:13:17:31:6f:d0:4d:93:43:f5:0b:44:93: ac:2e:4c:99:6e:69:59:39:63:df:2a:a7:c5:80:60: e2:f6:25:44:2f:66:b5:c4:b3:0a:b1:b7:d7:8e:e3: 3c:78:e7:5e:e7:84:60:38:62:4c:a4:cc:6a:bc:5f: be:c1:48:13:e0:95:d9:e1:4a:b5:11:8f:9d:0c:3a: b9:a9:73:8c:40:18:6f:67:71:fc:55:97:88:e9:81: 0d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EA:E8:0E:60:27:C5:27:6D:A1:DD:85:D2:03:2A:AB:27:5E:41:CA X509v3 Authority Key Identifier: keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/AA778F4CAF8A11EEB167DB64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:5ac0::/48 Signature Algorithm: sha256WithRSAEncryption b1:b2:30:ad:b0:23:29:ca:07:0a:98:8c:fa:d2:14:b0:a0:4b: e5:7e:83:95:61:6d:24:f4:a0:9c:2e:d0:ce:8d:4c:22:97:82: 61:6f:c4:d2:89:92:ff:cf:93:fe:8c:42:da:52:76:65:60:e5: b7:2e:aa:43:2f:f1:ef:33:e1:15:de:24:d2:b4:6e:9a:e0:14: eb:3a:45:d4:06:c5:c6:17:82:8d:8f:8d:0b:28:40:56:7b:2c: d2:ab:e0:6b:88:2f:0e:52:b6:aa:19:71:6f:ac:5d:4a:00:b3: 0c:29:93:53:5f:df:97:17:29:c5:29:f6:3f:90:5e:b8:6e:6e: db:ba:dc:0c:2b:fd:00:5f:51:c6:d6:e1:5e:33:3f:ce:3d:8b: 59:f4:ca:e1:47:89:a9:6b:50:35:4b:89:df:7a:26:6f:92:4e: 17:16:63:e3:69:26:ea:61:f7:7e:7e:1e:8d:d5:41:b9:b4:d8: 1b:6f:c6:e0:15:f4:9d:f8:fc:cc:7f:3e:3a:c9:1b:37:97:23: c2:a1:ee:02:6f:47:4c:13:03:85:e6:e9:df:3d:d2:a4:16:74: 3b:4b:11:60:42:0a:b1:d6:33:8f:9d:26:65:64:af:11:5e:70: 91:a0:ef:66:3f:67:f1:7c:94:3e:ea:08:94:c6:79:e9:41:4c: 7d:22:2a:ae -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1 MzI2ODBDREYwHhcNMjUwNDAzMDUwMjE4WhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VlMTY1YS05OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8h0ZBfvLatJMQLTxvqSu5H42F5IBlQ+RNzT/kiYUZsDiDtUeyP0K/nCx2Vr SLQP0xuh0LeitHc6GfPZNy+BRqXIykmDE89/zRDxLGqauDjg9TdzU0V099TTIwGI m2IgST7ixXAhM/kzAi5mDgrQwmb1CxA4vWNgmQqdkKacTD6W7VJZTJr1oT+eWVgs RqsKllCla42gw7o+BR2/YxOfdlPIghyTYMYTFzFv0E2TQ/ULRJOsLkyZbmlZOWPf KqfFgGDi9iVEL2a1xLMKsbfXjuM8eOde54RgOGJMpMxqvF++wUgT4JXZ4Uq1EY+d DDq5qXOMQBhvZ3H8VZeI6YENDQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBPq6A5g J8UnbaHdhdIDKqsnXkHKMB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRCMzkvRkVGNTQ5RThBRjE2MTFFRThDNDhBNzREQzRGOUFFMDIvQUE3NzhGNENB RjhBMTFFRUIxNjdEQjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zWsAwDQYJKoZIhvcNAQELBQADggEBALGyMK2wIynK BwqYjPrSFLCgS+V+g5VhbST0oJwu0M6NTCKXgmFvxNKJkv/Pk/6MQtpSdmVg5bcu qkMv8e8z4RXeJNK0bprgFOs6RdQGxcYXgo2PjQsoQFZ7LNKr4GuILw5StqoZcW+s XUoAswwpk1Nf35cXKcUp9j+QXrhubtu63Awr/QBfUcbW4V4zP849i1n0yuFHialr UDVLid96Jm+SThcWY+NpJuph935+Ho3VQbm02BtvxuAV9J34/Mx/PjrJGzeXI8Kh 7gJvR0wTA4Xm6d890qQWdDtLEWBCCrHWM4+dJmVkrxFecJGg72Y/Z/F8lD7qCJTG eelBTH0iKq4= -----END CERTIFICATE-----Generated at Sat Apr 26 07:45:30 2025 by rpki-client