$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CF89F560B5E511EFBD3C4A3EC4F9AE02.roa File: CF89F560B5E511EFBD3C4A3EC4F9AE02.roa (raw, json) Hash identifier: B32DEZ0wjdrBaf0d9jsmPj4+w9HH9B/1pO+T3YUmmFs= Subject key identifier: 0A:DE:DA:94:E1:E4:EE:8C:8C:60:0A:4A:7A:50:7C:72:87:49:14:9C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 48B2 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CF89F560B5E511EFBD3C4A3EC4F9AE02.roa Signing time: Mon 09 Dec 2024 04:26:51 +0000 ROA not before: Mon 09 Dec 2024 04:26:51 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153005 IP address blocks: 2001:df4:5940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18610 (0x48b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Dec 9 04:26:51 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6756718a-4bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:71:3d:fd:1c:cd:60:0f:97:36:ae:a2:d9:f1: 33:75:bb:12:6c:df:59:66:ee:72:61:13:92:c6:71: e7:6c:23:50:19:ed:5c:0c:bd:67:12:86:64:75:9a: b0:2e:34:32:58:56:f3:50:e9:b3:d5:f9:6a:de:f6: f0:98:bc:82:14:81:da:67:08:b9:d2:1c:9e:2c:e8: 95:8f:49:29:4e:9a:c4:56:8c:e6:54:56:9d:05:b4: f1:46:b3:5b:3c:9e:3c:4d:aa:1c:1e:28:40:56:83: e4:06:d3:57:40:18:e2:2d:2a:7f:72:a9:ca:4d:51: 80:39:95:cb:3e:45:d6:23:d6:c7:d8:e1:3a:8c:62: 07:ae:b5:d1:c6:69:d1:f1:08:a2:d4:79:0f:f1:0d: aa:99:be:a8:2c:68:b7:47:16:50:fe:c7:0c:a3:fe: b6:63:9b:d1:81:e2:21:b9:bf:89:7d:b2:ac:30:a3: ab:c8:f2:a3:23:df:d6:4f:5c:21:d2:10:c1:64:94: cb:5c:7d:9a:e5:25:80:d9:a8:b7:82:00:ba:e7:ae: be:c1:68:3d:f6:cf:e0:46:74:88:f6:c7:3e:6a:56: 58:e2:fe:4d:02:ac:b4:f1:e8:e0:28:25:7b:e4:bc: a5:ed:34:22:aa:5c:e3:be:fb:0d:91:84:58:38:b8: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DE:DA:94:E1:E4:EE:8C:8C:60:0A:4A:7A:50:7C:72:87:49:14:9C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CF89F560B5E511EFBD3C4A3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:5940::/48 Signature Algorithm: sha256WithRSAEncryption 1c:09:92:1a:c4:cf:62:5e:5d:75:b1:0e:8f:aa:c2:04:19:41: a0:c4:ac:dc:5e:9a:71:93:22:4b:17:13:13:84:a5:ad:2c:30: 21:21:78:94:1f:2b:5e:b8:e5:d0:e0:74:db:cd:19:85:8c:4e: 83:76:99:17:1c:8f:eb:6e:d7:57:3e:b0:5b:a3:74:c4:5c:0c: 51:07:81:83:e2:4c:7d:f9:22:5c:a3:62:61:a3:94:71:d9:b3: c4:bc:3c:10:06:f0:6a:53:24:9a:df:73:f9:3f:ee:7c:67:ac: 6c:20:6a:5a:4f:5d:1a:26:01:2b:ce:7a:5d:ea:e5:cd:60:ab: 8a:b3:f1:9f:f7:93:44:46:6f:e1:19:15:b5:20:ef:98:8a:bd: 03:a7:08:9a:29:e8:5f:a3:6f:b6:f5:13:51:10:e4:ff:4d:d6: c3:3a:cf:7e:95:03:39:12:68:55:8a:62:43:f7:f3:ed:0c:f5: ce:ee:dd:7d:2d:66:55:3b:26:7b:c5:67:ba:ed:d3:d6:eb:e1: a6:4f:12:90:a0:5b:49:b8:66:e6:f5:91:58:77:ed:b1:49:6d: de:9b:0d:b2:02:41:51:8e:32:43:23:c4:30:27:49:6c:99:a0: 8c:60:8b:e8:84:71:84:4b:b5:9c:dc:78:81:10:f1:f5:89:0a: a7:8e:92:58 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICSLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMjA5MDQyNjUxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU2NzE4YS00YmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3E9/RzNYA+XNq6i2fEzdbsSbN9ZZu5yYROSxnHnbCNQGe1cDL1nEoZkdZqw LjQyWFbzUOmz1flq3vbwmLyCFIHaZwi50hyeLOiVj0kpTprEVozmVFadBbTxRrNb PJ48TaocHihAVoPkBtNXQBjiLSp/cqnKTVGAOZXLPkXWI9bH2OE6jGIHrrXRxmnR 8Qii1HkP8Q2qmb6oLGi3RxZQ/scMo/62Y5vRgeIhub+JfbKsMKOryPKjI9/WT1wh 0hDBZJTLXH2a5SWA2ai3ggC6566+wWg99s/gRnSI9sc+alZY4v5NAqy08ejgKCV7 5Lyl7TQiqlzjvvsNkYRYOLgF1QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAre2pTh 5O6MjGAKSnpQfHKHSRScMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQ0Y4OUY1NjBC NUU1MTFFRkJEM0M0QTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30WUAwDQYJKoZIhvcNAQELBQADggEBABwJkhrEz2Je XXWxDo+qwgQZQaDErNxemnGTIksXExOEpa0sMCEheJQfK1645dDgdNvNGYWMToN2 mRccj+tu11c+sFujdMRcDFEHgYPiTH35IlyjYmGjlHHZs8S8PBAG8GpTJJrfc/k/ 7nxnrGwgalpPXRomASvOel3q5c1gq4qz8Z/3k0RGb+EZFbUg75iKvQOnCJop6F+j b7b1E1EQ5P9N1sM6z36VAzkSaFWKYkP38+0M9c7u3X0tZlU7JnvFZ7rt09br4aZP EpCgW0m4Zub1kVh37bFJbd6bDbICQVGOMkMjxDAnSWyZoIxgi+iEcYRLtZzceIEQ 8fWJCqeOklg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:46:10 2025 by rpki-client