$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/1BC8D5FCE2B211EE946C6541C4F9AE02.roa File: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (raw, json) Hash identifier: iCp30dussETMXyoeph6Ol3mQ5L5KpmSd4EZLSV4J5eE= Subject key identifier: A4:AB:41:CD:EB:26:FF:D1:07:F0:C8:A4:9D:3F:27:E3:CD:66:57:87 Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Certificate serial: A9 Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/1BC8D5FCE2B211EE946C6541C4F9AE02.roa Signing time: Wed 05 Feb 2025 05:07:31 +0000 ROA not before: Wed 05 Feb 2025 05:07:31 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 152337 IP address blocks: 2001:df3:62c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Validity Not Before: Feb 5 05:07:31 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a2f212-b1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:1c:51:09:03:85:78:00:47:fd:cd:06:c0: 55:db:c9:22:76:44:fd:fd:7a:f6:51:fa:f3:79:08: fb:9b:43:f3:d9:a5:00:da:0d:56:83:6c:a0:1f:49: ca:e2:16:58:d2:d2:d4:3b:5d:fd:20:9a:db:c4:2c: d6:f7:7d:22:4c:c9:d7:da:27:da:38:cf:28:da:33: 9b:c0:91:72:a5:1d:dd:dc:0c:3a:19:15:ac:58:ad: e0:c1:8c:bc:1d:ed:f0:42:b4:b7:7f:0a:f0:07:2b: d6:2d:e1:7d:1a:42:c8:7e:18:6d:d7:e3:71:64:aa: 7e:61:b9:f0:6b:b7:f1:4f:ab:90:55:21:aa:62:26: de:a4:9b:62:3c:c2:76:ba:e0:e3:96:85:2f:9c:b6: 3e:23:07:05:3d:21:5a:fd:19:cd:49:6c:3a:00:95: e8:2d:d2:da:80:76:52:f3:47:2a:aa:7d:36:46:f6: bc:b1:93:a5:6b:f0:5e:fb:ad:7b:42:c6:96:0a:70: 5f:db:0d:3c:02:b4:54:8f:ad:52:5c:95:4b:be:42: fc:1c:c2:d2:2e:50:6a:70:f7:7f:0d:bf:25:38:3c: dd:71:9e:41:56:24:88:4d:8e:54:84:c2:8d:48:8b: 26:09:38:ad:57:45:24:de:5b:e0:96:fe:22:9a:2b: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AB:41:CD:EB:26:FF:D1:07:F0:C8:A4:9D:3F:27:E3:CD:66:57:87 X509v3 Authority Key Identifier: keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/1BC8D5FCE2B211EE946C6541C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:62c0::/48 Signature Algorithm: sha256WithRSAEncryption 05:f8:4d:c2:a5:6d:da:94:de:f3:e3:e8:ca:c8:08:50:b0:d9: 05:f0:8d:64:a9:07:81:67:63:26:02:4c:ec:6b:52:c8:b4:3c: 81:61:25:ec:bf:fe:9d:c9:af:24:07:3d:83:19:0a:cc:d4:21: 5a:44:6f:6c:79:1c:cd:db:e1:86:4f:a8:3e:5f:dd:97:4e:82: cc:34:92:72:e2:b9:8e:7e:cb:52:df:66:f7:8e:2d:3e:9f:c6: c7:92:73:43:c9:3c:da:fd:b2:d4:7f:33:7b:e0:3d:a2:66:f6: 21:91:3f:2f:5f:35:74:07:1c:15:19:30:48:1a:d8:30:b4:0d: 0f:a4:ea:3e:8a:57:9e:16:a1:8f:f4:2c:05:70:21:78:c2:ce: 37:16:d2:9c:ab:a5:a6:6e:fb:da:b8:84:d3:14:2c:40:45:3a: 1b:99:f8:c4:f5:97:0c:fe:cc:19:7d:d0:fa:ea:1b:23:1d:8b: 66:38:28:e5:9b:9e:46:8f:93:42:3a:ad:39:b1:a4:68:fe:67: 18:c7:c6:bf:19:20:95:83:86:55:e7:77:fc:ca:59:ea:d8:5e: 2a:f2:22:a4:04:c4:a1:a7:c9:d8:66:7f:0f:d0:42:3a:30:ee: 99:cb:47:cf:44:03:e5:bf:7c:ab:38:74:77:3b:d6:5d:fa:2a: d7:c4:6c:2d -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3OUQxMTAvBgNVBAUTKDkxMkZCNUY3MzUxQ0Y5OEZCOTY3NDUxRkVFREFGNDlG MTQ4RTFBM0EwHhcNMjUwMjA1MDUwNzMxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyZjIxMi1iMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOkcUQkDhXgAR/3NBsBV28kidkT9/Xr2UfrzeQj7m0Pz2aUA2g1Wg2ygH0nK 4hZY0tLUO139IJrbxCzW930iTMnX2ifaOM8o2jObwJFypR3d3Aw6GRWsWK3gwYy8 He3wQrS3fwrwByvWLeF9GkLIfhht1+NxZKp+Ybnwa7fxT6uQVSGqYibepJtiPMJ2 uuDjloUvnLY+IwcFPSFa/RnNSWw6AJXoLdLagHZS80cqqn02Rva8sZOla/Be+617 QsaWCnBf2w08ArRUj61SXJVLvkL8HMLSLlBqcPd/Db8lODzdcZ5BViSITY5UhMKN SIsmCTitV0Uk3lvglv4imiuTHwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKSrQc3r Jv/RB/DIpJ0/J+PNZleHMB8GA1UdIwQYMBaAFJEvtfc1HPmPuWdFH+7a9J8Ujho6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80RkQ1OTQyNEUy QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1ZLTVaMFVmN3RyMG54U09H am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTLTE5elVjLVktNVowVWY3dHIwbnhTT0dqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzc3OUQvNEZENTk0MjRFMkFFMTFFRTg2RjMzQzFFQzRGOUFFMDIvMUJDOEQ1RkNF MkIyMTFFRTk0NkM2NTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zYsAwDQYJKoZIhvcNAQELBQADggEBAAX4TcKlbdqU 3vPj6MrICFCw2QXwjWSpB4FnYyYCTOxrUsi0PIFhJey//p3JryQHPYMZCszUIVpE b2x5HM3b4YZPqD5f3ZdOgsw0knLiuY5+y1LfZveOLT6fxseSc0PJPNr9stR/M3vg PaJm9iGRPy9fNXQHHBUZMEga2DC0DQ+k6j6KV54WoY/0LAVwIXjCzjcW0pyrpaZu +9q4hNMULEBFOhuZ+MT1lwz+zBl90PrqGyMdi2Y4KOWbnkaPk0I6rTmxpGj+ZxjH xr8ZIJWDhlXnd/zKWerYXiryIqQExKGnydhmfw/QQjow7pnLR89EA+W/fKs4dHc7 1l36KtfEbC0= -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:59 2025 by rpki-client