$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/CC2A0136F58C11EEB142585CC4F9AE02.roa File: CC2A0136F58C11EEB142585CC4F9AE02.roa (raw, json) Hash identifier: LcIUX4YJ29+aJV1+YxaPbbSzmp98riAGflfyDE/z+VQ= Subject key identifier: AB:37:41:DA:F4:D5:77:DE:8C:E2:6F:7A:E9:AE:CF:ED:85:E6:3B:E8 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 1461 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/CC2A0136F58C11EEB142585CC4F9AE02.roa Signing time: Wed 16 Apr 2025 16:55:23 +0000 ROA not before: Wed 16 Apr 2025 16:55:23 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 37988 IP address blocks: 2402:7340:2::/48 maxlen: 48 2402:7340:5::/48 maxlen: 48 2402:7340:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5217 (0x1461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Apr 16 16:55:23 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ffe0fb-2082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:e2:38:54:0e:03:a7:3c:ed:b2:9d:3e:05: 5e:fb:e2:0c:ed:9f:aa:90:f7:89:5d:d0:21:86:40: 99:4b:64:88:94:2a:88:e1:04:1f:c9:39:ea:d1:05: cb:69:65:2a:da:33:65:cd:e7:b6:44:f4:d5:a5:1e: 8b:e3:98:76:7a:5b:b4:57:8c:ee:ac:db:c7:ed:8b: 62:dc:fc:98:05:ed:8d:d8:ba:f5:36:f1:e0:3a:f7: 8d:45:3a:f9:1f:7c:76:45:93:73:1c:04:72:95:e8: 83:64:7b:ff:60:da:d8:d6:27:b6:c5:39:5b:f7:d9: 48:8a:32:56:89:b1:17:83:1b:a8:22:4e:83:73:28: bb:7c:ea:30:7e:b4:cf:cc:b3:d7:d3:fe:e4:75:a4: e5:c2:09:d6:49:f6:6a:ca:34:56:2b:8d:5f:46:cd: fe:a0:ca:61:68:5b:47:2d:37:ee:69:8d:3a:27:cb: 63:61:ce:ba:85:5e:8a:75:12:16:98:ab:db:14:25: 91:05:f9:c7:e1:0d:b5:bb:01:9c:cd:b0:4b:0e:c3: a1:5a:65:df:be:b6:42:3e:63:34:58:16:64:7f:fd: 08:ba:87:7f:0e:99:47:26:62:ab:24:15:f0:c4:b1: b1:0c:05:6e:32:ad:15:c5:50:1b:45:97:b4:1f:7f: c4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:37:41:DA:F4:D5:77:DE:8C:E2:6F:7A:E9:AE:CF:ED:85:E6:3B:E8 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/CC2A0136F58C11EEB142585CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:7340:2::/48 2402:7340:5::/48 2402:7340:4000::/34 Signature Algorithm: sha256WithRSAEncryption 47:0c:29:1c:94:68:ab:91:5b:6a:66:a0:5b:59:4e:05:1e:68: 75:ec:f2:52:31:68:fd:4a:9e:db:d6:62:2b:1b:ea:81:9f:b8: 83:53:81:73:ed:e7:3b:c2:0b:29:8d:51:15:fa:f8:c4:ea:3f: a6:43:22:a5:e4:04:0b:35:03:69:78:23:73:35:bf:4e:a6:58: f1:59:5e:c3:9a:81:6b:4f:d4:d6:5e:7a:bd:63:f3:c5:3a:a0: 93:df:5c:05:02:03:ad:10:93:27:6b:e2:d3:a8:09:13:1d:ac: 41:f4:e4:ab:c7:97:c6:96:7a:a6:05:73:f0:b2:12:7a:0f:03: 71:14:5b:29:2e:8f:6c:0d:66:bd:32:9a:14:81:c3:71:0d:21: 3b:7a:11:1b:3f:64:72:d0:6f:ad:74:69:4d:78:da:5b:64:f0: 53:d9:95:a0:53:54:6d:ba:27:3f:12:98:0c:3b:aa:a3:f4:c0: 16:89:40:b0:ba:8c:e0:0b:11:99:54:19:54:7a:dd:86:6c:62: 13:b3:a8:c6:97:e1:c9:1e:63:e2:0f:a1:f6:94:3c:86:c4:72: 3e:34:eb:0d:db:82:2d:ff:ef:b9:b9:aa:af:b4:bc:83:09:22: 08:94:bd:17:2e:3b:04:47:f3:1e:37:bf:c3:ae:38:dd:31:65: f1:1f:1f:72 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICFGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUwNDE2MTY1NTIzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZmZTBmYi0yMDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyniOFQOA6c87bKdPgVe++IM7Z+qkPeJXdAhhkCZS2SIlCqI4QQfyTnq0QXL aWUq2jNlzee2RPTVpR6L45h2elu0V4zurNvH7Yti3PyYBe2N2Lr1NvHgOveNRTr5 H3x2RZNzHARyleiDZHv/YNrY1ie2xTlb99lIijJWibEXgxuoIk6Dcyi7fOowfrTP zLPX0/7kdaTlwgnWSfZqyjRWK41fRs3+oMphaFtHLTfuaY06J8tjYc66hV6KdRIW mKvbFCWRBfnH4Q21uwGczbBLDsOhWmXfvrZCPmM0WBZkf/0Iuod/DplHJmKrJBXw xLGxDAVuMq0VxVAbRZe0H3/ECwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFKs3Qdr0 1XfejOJveumuz+2F5jvoMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdCMTUvRkFGNkZENzg3MUU2MTFFODk5NkUyRTY0QzRGOUFFMDIvQ0MyQTAxMzZG NThDMTFFRUIxNDI1ODVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgACMBoDBwAkAnNAAAIDBwAkAnNAAAUDBgYkAnNAQDANBgkqhkiG9w0B AQsFAAOCAQEARwwpHJRoq5FbamagW1lOBR5odezyUjFo/Uqe29ZiKxvqgZ+4g1OB c+3nO8ILKY1RFfr4xOo/pkMipeQECzUDaXgjczW/TqZY8Vlew5qBa0/U1l56vWPz xTqgk99cBQIDrRCTJ2vi06gJEx2sQfTkq8eXxpZ6pgVz8LISeg8DcRRbKS6PbA1m vTKaFIHDcQ0hO3oRGz9kctBvrXRpTXjaW2TwU9mVoFNUbbonPxKYDDuqo/TAFolA sLqM4AsRmVQZVHrdhmxiE7OoxpfhyR5j4g+h9pQ8hsRyPjTrDduCLf/vubmqr7S8 gwkiCJS9Fy47BEfzHje/w6443TFl8R8fcg== -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:34 2025 by rpki-client