$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/48243250E78D11EF98760355C4F9AE02.roa File: 48243250E78D11EF98760355C4F9AE02.roa (raw, json) Hash identifier: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o= Subject key identifier: 88:59:2F:FF:12:23:0A:4A:66:EA:D4:1D:E8:C3:91:4B:A9:E6:1B:2A Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: 1A Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/48243250E78D11EF98760355C4F9AE02.roa Signing time: Mon 10 Feb 2025 08:59:07 +0000 ROA not before: Mon 10 Feb 2025 08:59:07 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153568 IP address blocks: 2001:df5:6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: Feb 10 08:59:07 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a9bfda-63d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e6:e5:8c:13:c5:84:fd:3d:5d:23:97:dc:1f: d6:0f:a2:ec:da:6a:65:8e:6c:9b:56:35:34:4c:cf: 6f:80:ea:b0:9c:83:c8:98:c7:cd:da:52:8c:89:72: f5:8c:01:85:94:ce:70:ca:12:0e:58:48:23:7b:82: 3a:72:88:ac:50:c1:25:97:69:1e:e8:26:7c:af:72: 14:68:dd:f3:fa:95:7f:3b:ae:06:7b:51:63:b1:e2: 04:59:9a:a8:64:20:60:e9:8b:bc:d0:26:c3:06:27: ed:51:f4:89:d1:db:34:d4:cf:78:5a:94:1a:e4:f7: d3:ba:2d:0e:13:e1:73:cc:38:2d:19:60:e5:20:e4: db:8b:f0:39:56:09:a3:1d:c3:7a:9b:91:4c:0d:7a: 04:b9:d3:6b:f3:00:f3:b8:58:05:c5:e7:25:70:03: 03:e2:b3:aa:8b:de:29:c5:88:37:f4:df:3b:69:3d: c1:21:7e:71:c9:36:6d:f4:73:03:cf:0c:6f:f1:e4: 77:f5:62:7b:1e:d0:b0:3e:d1:56:b2:5b:95:14:bd: 7a:48:a1:b9:5e:a0:dc:e4:fd:ec:27:33:3b:b9:93: 30:5c:f7:db:29:31:78:1b:43:98:61:15:8d:f1:10: 94:0d:5c:4e:9e:51:bb:f2:53:ca:96:55:5e:b1:25: 57:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:59:2F:FF:12:23:0A:4A:66:EA:D4:1D:E8:C3:91:4B:A9:E6:1B:2A X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/48243250E78D11EF98760355C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df5:6c0::/48 Signature Algorithm: sha256WithRSAEncryption 81:9b:64:15:c9:d8:5d:c2:88:ce:e6:22:ee:08:4b:72:ad:65: e4:41:59:71:41:2a:f0:9c:09:d8:aa:42:86:e6:9f:a5:5e:38: 98:f2:f4:ff:37:bc:bc:94:de:b3:5b:98:e3:3f:2e:08:70:ac: 4a:6b:b0:27:aa:14:67:06:9e:5f:7a:16:cc:4a:85:ba:b0:05: 54:f2:99:86:b6:6f:e9:1f:01:4a:cb:03:46:5b:6b:74:51:29: 5d:34:2c:19:bc:db:dc:f5:d4:99:92:76:a3:92:38:56:13:d2: 95:41:a0:1a:fe:f1:c9:82:cd:c9:a6:f4:90:fa:ce:45:5d:55: a8:7a:e1:0e:18:7c:b8:d5:5d:0d:29:58:57:30:50:d5:f8:d2: f4:56:2e:0c:2f:f2:37:f9:16:9b:18:9f:62:81:76:44:bc:d9: 3e:f2:48:4b:95:3b:cc:4e:a0:66:a3:ed:db:92:ac:dc:13:27: 89:0b:aa:f7:d3:36:18:bb:27:c5:37:1f:57:39:ed:95:57:08: ed:e0:6e:7b:03:ed:61:90:46:51:22:77:d8:b8:d8:cf:53:f2: 79:7f:7d:b9:24:65:29:a5:7a:59:16:74:be:ab:b6:6d:a0:33: 1e:78:b0:44:38:33:d6:2c:c8:99:0b:34:66:5d:8e:18:22:46: 90:ef:24:c8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RDM0QjExMC8GA1UEBRMoNjRDQjZFQTdEN0QwRTUxRjRENDJCMkQ2ODQ3Mjc0QUJC MDczNjU5ODAeFw0yNTAyMTAwODU5MDdaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTliZmRhLTYzZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ5uWME8WE/T1dI5fcH9YPouzaamWObJtWNTRMz2+A6rCcg8iYx83aUoyJcvWM AYWUznDKEg5YSCN7gjpyiKxQwSWXaR7oJnyvchRo3fP6lX87rgZ7UWOx4gRZmqhk IGDpi7zQJsMGJ+1R9InR2zTUz3halBrk99O6LQ4T4XPMOC0ZYOUg5NuL8DlWCaMd w3qbkUwNegS502vzAPO4WAXF5yVwAwPis6qL3inFiDf03ztpPcEhfnHJNm30cwPP DG/x5Hf1Ynse0LA+0VayW5UUvXpIobleoNzk/ewnMzu5kzBc99spMXgbQ5hhFY3x EJQNXE6eUbvyU8qWVV6xJVeHAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUiFkv/xIj Ckpm6tQd6MORS6nmGyowHwYDVR0jBBgwFoAUZMtup9fQ5R9NQrLWhHJ0q7BzZZgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFEMzRCL0IzREI1MUQyREYz NTExRUZBNThENjUzQkM0RjlBRTAyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpa Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk10dXA5ZlE1UjlOUXJMV2hISjBxN0J6WlpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi80ODI0MzI1MEU3 OEQxMUVGOTg3NjAzNTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfUGwDANBgkqhkiG9w0BAQsFAAOCAQEAgZtkFcnYXcKI zuYi7ghLcq1l5EFZcUEq8JwJ2KpChuafpV44mPL0/ze8vJTes1uY4z8uCHCsSmuw J6oUZwaeX3oWzEqFurAFVPKZhrZv6R8BSssDRltrdFEpXTQsGbzb3PXUmZJ2o5I4 VhPSlUGgGv7xyYLNyab0kPrORV1VqHrhDhh8uNVdDSlYVzBQ1fjS9FYuDC/yN/kW mxifYoF2RLzZPvJIS5U7zE6gZqPt25Ks3BMniQuq99M2GLsnxTcfVzntlVcI7eBu ewPtYZBGUSJ32LjYz1PyeX99uSRlKaV6WRZ0vqu2baAzHniwRDgz1izImQs0Zl2O GCJGkO8kyA== -----END CERTIFICATE-----Generated at Sat Apr 26 09:30:29 2025 by rpki-client