$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6FFAF082B5E411EF98A07C1CC4F9AE02.roa File: 6FFAF082B5E411EF98A07C1CC4F9AE02.roa (raw, json) Hash identifier: gDx4WcOHmv6+3EzPIIF5tKo5JM14rlT+r7rkFn4t+3A= Subject key identifier: E1:31:99:ED:18:5A:52:56:3F:24:88:DE:53:A1:86:94:97:1A:9E:CA Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 48AC Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6FFAF082B5E411EF98A07C1CC4F9AE02.roa Signing time: Mon 09 Dec 2024 04:17:02 +0000 ROA not before: Mon 09 Dec 2024 04:17:02 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153439 IP address blocks: 2001:df4:b3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18604 (0x48ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Dec 9 04:17:02 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67566f3d-f5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3d:45:3d:c9:2b:98:3e:a9:1f:39:f3:b9:ee: 73:3f:07:da:64:44:04:52:da:2f:13:41:53:1d:01: 72:59:c6:5e:ba:60:73:1c:0a:87:55:06:d5:b4:41: 83:2f:4f:43:3e:ce:6b:6c:08:83:26:db:29:88:be: 2a:b3:df:fc:67:2c:95:df:51:34:17:00:c3:fe:8b: 6d:83:0f:e6:64:8e:2f:3e:c7:f7:ad:25:20:0f:00: 7a:aa:69:d0:8a:c1:a4:58:12:0a:9b:e4:2d:43:44: 1c:7d:40:6d:59:12:07:6f:d5:46:fd:c5:65:21:f6: 30:62:db:e7:a9:c9:79:6e:21:84:f6:08:f5:95:e0: dd:32:7b:3c:f1:c9:d9:cc:9d:04:f0:ea:d8:52:49: a6:49:f1:8d:66:f0:e8:e1:f3:35:5c:3b:44:3c:83: 13:b0:e5:f9:67:f6:f7:47:d8:fb:e9:c9:ea:3c:21: 60:db:aa:6c:ee:00:86:f2:4b:ca:69:35:23:ea:68: 97:75:b5:79:28:89:21:b3:4c:72:db:ac:bb:59:cc: e2:fe:af:21:56:f1:57:23:38:dc:9f:f0:28:08:8c: c3:3a:88:e8:ad:df:29:bc:3a:4a:b3:37:cd:e4:c2: e9:8f:79:65:40:04:af:43:9e:17:4f:24:0a:ad:cc: 24:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:31:99:ED:18:5A:52:56:3F:24:88:DE:53:A1:86:94:97:1A:9E:CA X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6FFAF082B5E411EF98A07C1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:b3c0::/48 Signature Algorithm: sha256WithRSAEncryption 33:98:7a:1d:95:14:db:e7:ae:3f:1c:0b:6f:c2:81:25:fa:61: 2d:a3:c8:b4:4c:8d:9b:b3:23:09:03:fb:6e:fc:16:d7:c2:2a: 1c:11:8f:4f:01:ce:95:3e:56:af:fb:c1:d3:37:ff:f0:5f:6d: d0:f1:d3:0b:78:75:8b:3f:64:46:56:5a:78:c7:e0:14:d9:79: 89:12:f1:90:70:df:5f:b4:98:e0:c3:fc:d8:56:b9:08:de:9e: 12:df:24:8c:ad:a3:57:02:df:f1:93:cd:2f:e5:40:be:9a:72: 98:61:5a:b8:76:9e:02:c9:35:c3:d6:d2:08:83:c3:88:7c:5d: 3c:30:65:74:8c:bd:90:3b:a6:3a:4e:3d:8d:73:aa:36:55:ee: 5d:ec:e0:c1:00:30:40:fc:77:18:3c:88:e3:a8:96:05:5a:48: fc:58:99:b0:5b:f5:12:b6:e0:6d:89:e7:47:e4:be:a6:8a:68: 01:ee:be:ea:d1:a7:bd:d3:01:6d:03:b3:44:73:03:a2:3a:bb: a7:0b:39:5b:40:89:bb:e6:68:2e:10:6a:16:50:1f:04:cf:41: 93:f0:f6:79:17:4a:95:ad:1d:63:c0:73:19:6b:41:96:bc:d1: 13:7f:f0:c6:7c:fd:f6:96:9b:ba:40:41:34:7b:3c:eb:59:3c: a7:c1:b8:20 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICSKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMjA5MDQxNzAyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU2NmYzZC1mNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6j1FPckrmD6pHznzue5zPwfaZEQEUtovE0FTHQFyWcZeumBzHAqHVQbVtEGD L09DPs5rbAiDJtspiL4qs9/8ZyyV31E0FwDD/ottgw/mZI4vPsf3rSUgDwB6qmnQ isGkWBIKm+QtQ0QcfUBtWRIHb9VG/cVlIfYwYtvnqcl5biGE9gj1leDdMns88cnZ zJ0E8OrYUkmmSfGNZvDo4fM1XDtEPIMTsOX5Z/b3R9j76cnqPCFg26ps7gCG8kvK aTUj6miXdbV5KIkhs0xy26y7Wczi/q8hVvFXIzjcn/AoCIzDOojord8pvDpKszfN 5MLpj3llQASvQ54XTyQKrcwkxwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOExme0Y WlJWPySI3lOhhpSXGp7KMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNkZGQUYwODJC NUU0MTFFRjk4QTA3QzFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30s8AwDQYJKoZIhvcNAQELBQADggEBADOYeh2VFNvn rj8cC2/CgSX6YS2jyLRMjZuzIwkD+278FtfCKhwRj08BzpU+Vq/7wdM3//BfbdDx 0wt4dYs/ZEZWWnjH4BTZeYkS8ZBw31+0mODD/NhWuQjenhLfJIyto1cC3/GTzS/l QL6acphhWrh2ngLJNcPW0giDw4h8XTwwZXSMvZA7pjpOPY1zqjZV7l3s4MEAMED8 dxg8iOOolgVaSPxYmbBb9RK24G2J50fkvqaKaAHuvurRp73TAW0Ds0RzA6I6u6cL OVtAibvmaC4QahZQHwTPQZPw9nkXSpWtHWPAcxlrQZa80RN/8MZ8/faWm7pAQTR7 POtZPKfBuCA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:54 2025 by rpki-client