$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/C13E824AC49F11EBAC936D7AC4F9AE02.roa File: C13E824AC49F11EBAC936D7AC4F9AE02.roa (raw, json) Hash identifier: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0= Subject key identifier: 2A:76:70:42:3E:86:9C:A8:B2:31:E1:60:B2:4A:47:CD:5B:60:CF:1A Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 079C Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/C13E824AC49F11EBAC936D7AC4F9AE02.roa Signing time: Tue 10 Dec 2024 21:50:49 +0000 ROA not before: Tue 10 Dec 2024 21:50:49 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 141747 IP address blocks: 2406:9dc0:1010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1948 (0x79c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: Dec 10 21:50:49 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6758b7b8-8d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e1:db:64:4e:db:ae:49:29:9c:33:3a:17:79: 91:ac:26:0b:76:2a:a4:67:c3:43:a5:b5:67:e2:1a: b8:c8:96:91:ee:57:26:d3:30:60:ce:d5:3c:36:2e: 59:e3:e7:05:c6:31:51:26:c9:51:f1:13:56:a8:30: 59:ab:03:e8:b9:ac:9d:83:22:18:64:18:00:ec:55: 24:b9:d6:a5:fa:98:49:9c:22:c7:f9:51:2e:03:c6: dc:e8:20:a3:89:b9:d0:64:6b:d4:f8:a9:32:dd:ea: 99:d3:bd:01:11:98:6a:f1:aa:78:85:c6:d4:46:bf: 36:1a:19:29:90:3f:19:c4:12:86:42:0b:1b:52:8f: e8:9a:9f:9b:88:46:7a:c9:23:48:10:5f:61:3f:64: 85:a1:7e:f2:3e:64:0a:1e:f3:65:3d:3f:91:51:1e: a9:51:5d:c9:86:21:57:0f:d7:46:8c:c1:82:0c:56: 91:83:7e:c6:b6:b8:07:e1:e2:72:5d:01:87:93:28: f5:d6:e2:83:30:6b:f6:cb:f4:6a:aa:90:ba:72:e6: 4e:f4:08:f5:ea:31:e2:e0:35:26:d0:f2:18:fb:04: 30:90:c1:c1:07:2a:8b:b8:cf:9c:3f:bd:a8:08:f4: 8b:32:49:4e:1a:0b:73:52:c5:78:82:5b:2d:62:55: 80:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:76:70:42:3E:86:9C:A8:B2:31:E1:60:B2:4A:47:CD:5B:60:CF:1A X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/C13E824AC49F11EBAC936D7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:9dc0:1010::/44 Signature Algorithm: sha256WithRSAEncryption 08:59:f2:4f:8b:5f:37:35:d7:f9:e0:79:8c:f9:31:c6:52:31: ae:5e:1f:7d:5d:91:64:ec:dd:c5:01:8e:1e:8a:e8:e5:82:97: 90:1b:aa:70:ac:37:b9:09:8a:32:b0:68:b6:5e:be:da:0b:a1: f1:00:73:04:30:12:4d:97:be:92:0b:0f:01:6d:d4:7a:81:da: 91:b9:bc:39:f3:2a:31:b3:b8:8b:f5:96:c1:1a:ed:49:33:37: bd:a1:d2:18:16:26:10:f7:5a:00:b5:2d:9e:9f:54:a1:37:d3: fe:38:0c:3a:d5:3d:6b:cb:c1:69:18:83:d3:f6:a1:92:ce:a7: a2:db:f8:08:78:93:18:eb:23:17:eb:ab:bb:87:ac:8d:d8:7b: 33:34:bf:21:11:ab:dc:2c:24:0d:74:65:94:82:d0:e7:91:91: 8f:7f:c5:19:c8:1f:bb:17:56:0f:8b:29:6e:dc:4c:84:ac:c3: 77:05:21:2d:1d:8f:72:a0:fe:55:dd:ad:c2:d2:3f:ca:ce:5a: 98:3f:94:0f:6d:cd:8a:48:90:fe:04:a5:7d:09:63:e2:a2:db: 80:5a:a2:54:1c:65:64:db:09:f0:18:70:7e:2e:ea:c5:4c:4b: ae:b8:8a:4a:7a:5f:5f:4a:87:69:e9:4c:4b:7d:c9:72:e2:10: c1:83:9e:18 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjQxMjEwMjE1MDQ5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU4YjdiOC04ZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eHbZE7brkkpnDM6F3mRrCYLdiqkZ8NDpbVn4hq4yJaR7lcm0zBgztU8Ni5Z 4+cFxjFRJslR8RNWqDBZqwPouaydgyIYZBgA7FUkudal+phJnCLH+VEuA8bc6CCj ibnQZGvU+Kky3eqZ070BEZhq8ap4hcbURr82GhkpkD8ZxBKGQgsbUo/omp+biEZ6 ySNIEF9hP2SFoX7yPmQKHvNlPT+RUR6pUV3JhiFXD9dGjMGCDFaRg37GtrgH4eJy XQGHkyj11uKDMGv2y/RqqpC6cuZO9Aj16jHi4DUm0PIY+wQwkMHBByqLuM+cP72o CPSLMklOGgtzUsV4glstYlWAGQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCp2cEI+ hpyosjHhYLJKR81bYM8aMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYyNUYvMjJEOTFGNzIxMUNFMTFFQjhBRDA1QTJCQzRGOUFFMDIvQzEzRTgyNEFD NDlGMTFFQkFDOTM2RDdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBp3AEBAwDQYJKoZIhvcNAQELBQADggEBAAhZ8k+LXzc1 1/ngeYz5McZSMa5eH31dkWTs3cUBjh6K6OWCl5AbqnCsN7kJijKwaLZevtoLofEA cwQwEk2XvpILDwFt1HqB2pG5vDnzKjGzuIv1lsEa7UkzN72h0hgWJhD3WgC1LZ6f VKE30/44DDrVPWvLwWkYg9P2oZLOp6Lb+Ah4kxjrIxfrq7uHrI3YezM0vyERq9ws JA10ZZSC0OeRkY9/xRnIH7sXVg+LKW7cTISsw3cFIS0dj3Kg/lXdrcLSP8rOWpg/ lA9tzYpIkP4EpX0JY+Ki24BaolQcZWTbCfAYcH4u6sVMS664ikp6X19Kh2npTEt9 yXLiEMGDnhg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:03 2025 by rpki-client