$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/6AB0F2A2892611EEB5E27D69C4F9AE02.roa File: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (raw, json) Hash identifier: nicSmvXStk5YSg3xIJcJaFbSV0F719Jx8dhmknr9Hs0= Subject key identifier: A5:11:3C:6C:EB:2F:D7:97:52:13:20:28:42:16:81:F7:20:EA:CE:1A Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 0FA2 Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/6AB0F2A2892611EEB5E27D69C4F9AE02.roa Signing time: Thu 10 Apr 2025 17:56:44 +0000 ROA not before: Thu 10 Apr 2025 17:56:44 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9280 IP address blocks: 203.9.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4002 (0xfa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Apr 10 17:56:44 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f8065c-0f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:1f:fa:b1:ca:6f:2b:20:8d:73:00:bf:0e: 22:da:df:48:fe:af:f3:08:15:cd:a2:81:84:9d:4d: 48:d9:9c:76:e5:3a:b2:e3:31:b4:35:32:97:5c:9d: c8:27:e6:19:86:6f:86:1b:f9:de:8d:eb:fd:55:82: b6:57:b3:ac:72:6a:5c:ce:09:14:a8:5c:5b:5f:1d: 2e:b4:47:91:a5:d0:e1:1f:d6:ec:81:4f:8e:e6:8e: 91:44:6b:d2:d6:46:76:04:c4:47:06:ea:d9:8b:a1: aa:0a:ac:c0:02:35:61:de:31:97:2c:69:21:1e:7c: 03:9a:02:05:1d:93:25:50:4c:1b:21:0f:bd:93:49: 44:48:f5:56:76:0a:f3:6b:55:60:83:46:d5:81:53: 7d:89:c2:ac:58:09:7b:88:a2:ae:b2:4c:28:4e:f1: fe:21:56:36:b4:17:7f:15:49:06:5f:1d:9a:13:0f: b8:eb:23:61:7e:0d:6a:f1:a2:b8:d8:88:67:64:96: 79:53:49:2c:96:eb:f9:66:fe:81:7f:de:09:e3:d2: 03:fd:ca:5a:58:fb:1a:ef:b5:65:1f:9a:1b:19:85: f8:77:81:e4:6e:13:db:38:86:d4:80:bf:01:c0:ff: 26:24:8a:3b:39:74:3d:a0:5e:4b:62:7a:26:b0:c2: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:11:3C:6C:EB:2F:D7:97:52:13:20:28:42:16:81:F7:20:EA:CE:1A X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/6AB0F2A2892611EEB5E27D69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.9.24.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:0e:b3:50:45:e9:1f:02:6b:9b:f8:eb:ca:62:5f:9c:69:86: ea:a3:17:49:4c:ab:66:24:fe:94:fb:b9:a9:3d:c5:08:8d:6a: a2:31:68:d9:e9:89:6f:e9:6f:4f:18:ea:5f:fa:0c:ba:1e:bd: 20:22:3c:c1:d8:e0:61:08:7d:a3:74:36:77:7d:60:3d:51:e9: ff:fc:43:7e:7d:24:e6:45:48:1f:a7:44:8f:f7:21:d3:97:74: 2c:50:c8:89:fc:d6:21:49:b9:27:23:03:f6:90:13:26:16:5f: d9:fd:5b:9f:3c:69:33:5f:89:cd:f2:a7:fd:54:30:9e:0a:6a: 26:b0:97:79:3b:56:ee:20:89:f9:10:5b:9a:6b:a3:fd:eb:e3: 83:27:d1:07:7e:32:38:26:3c:ea:f3:58:4b:3c:5e:4d:a8:29: 83:54:14:f1:0a:5d:fb:29:a7:d9:bd:b1:3d:58:d2:fa:f5:07: 71:06:23:fb:4b:32:34:96:bc:3c:eb:f8:f3:4a:ee:5f:ac:29: 23:43:b7:ff:d9:fd:9f:4c:b8:ea:89:6d:b0:b2:0f:b8:e5:f2: 28:02:9d:97:07:08:9b:8f:1b:23:11:26:ba:ec:13:aa:6c:a0: ca:0a:be:45:91:2d:b3:2e:8a:0d:ce:ee:56:74:28:36:79:75: bc:39:17:bd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjUwNDEwMTc1NjQ0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y4MDY1Yy0wZjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArr4f+rHKbysgjXMAvw4i2t9I/q/zCBXNooGEnU1I2Zx25Tqy4zG0NTKXXJ3I J+YZhm+GG/nejev9VYK2V7OscmpczgkUqFxbXx0utEeRpdDhH9bsgU+O5o6RRGvS 1kZ2BMRHBurZi6GqCqzAAjVh3jGXLGkhHnwDmgIFHZMlUEwbIQ+9k0lESPVWdgrz a1Vgg0bVgVN9icKsWAl7iKKuskwoTvH+IVY2tBd/FUkGXx2aEw+46yNhfg1q8aK4 2IhnZJZ5U0ksluv5Zv6Bf94J49ID/cpaWPsa77VlH5obGYX4d4HkbhPbOIbUgL8B wP8mJIo7OXQ9oF5LYnomsMKelQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKURPGzr L9eXUhMgKEIWgfcg6s4aMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzJDQzcvNzkxQzZBMzQ3QjM4MTFFOUJDMEQzQjMyQzRGOUFFMDIvNkFCMEYyQTI4 OTI2MTFFRUI1RTI3RDY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALLCRgwDQYJKoZIhvcNAQELBQADggEBAE8Os1BF6R8Ca5v4 68piX5xphuqjF0lMq2Yk/pT7uak9xQiNaqIxaNnpiW/pb08Y6l/6DLoevSAiPMHY 4GEIfaN0Nnd9YD1R6f/8Q359JOZFSB+nRI/3IdOXdCxQyIn81iFJuScjA/aQEyYW X9n9W588aTNfic3yp/1UMJ4Kaiawl3k7Vu4gifkQW5pro/3r44Mn0Qd+MjgmPOrz WEs8Xk2oKYNUFPEKXfspp9m9sT1Y0vr1B3EGI/tLMjSWvDzr+PNK7l+sKSNDt//Z /Z9MuOqJbbCyD7jl8igCnZcHCJuPGyMRJrrsE6psoMoKvkWRLbMuig3O7lZ0KDZ5 dbw5F70= -----END CERTIFICATE-----Generated at Sat Apr 26 17:09:13 2025 by rpki-client