$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/93F95BE673C711E98CD6D335C4F9AE02.roa File: 93F95BE673C711E98CD6D335C4F9AE02.roa (raw, json) Hash identifier: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc= Subject key identifier: E4:67:76:FC:27:DD:E3:A2:DC:D8:FE:93:E1:30:D2:16:41:20:C3:AB Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1122 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/93F95BE673C711E98CD6D335C4F9AE02.roa Signing time: Wed 02 Apr 2025 17:46:31 +0000 ROA not before: Wed 02 Apr 2025 17:46:31 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138990 IP address blocks: 2404:7ac0:680::/48 maxlen: 48 2404:7ac0:681::/48 maxlen: 48 2404:7ac0:682::/48 maxlen: 48 2404:7ac0:683::/48 maxlen: 48 2404:7ac0:684::/48 maxlen: 48 2404:7ac0:685::/48 maxlen: 48 2404:7ac0:686::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4386 (0x1122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Apr 2 17:46:31 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ed77f6-9132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:a9:3e:ee:94:3b:a7:16:7d:98:7e:b5:89: c4:94:02:ed:79:df:42:6f:24:e0:6a:e6:8a:b1:bc: d3:70:43:05:9d:6b:f8:41:40:1a:63:ad:30:2e:59: bc:d2:54:d6:b2:21:bd:a0:a9:ab:fc:19:1d:ac:83: 3a:c3:75:f1:67:bd:04:00:6e:5d:52:fa:d4:28:08: cd:d5:f2:6b:40:fd:96:c4:3c:17:16:54:d6:44:0d: 36:4a:b8:34:ec:2d:ea:cd:23:25:71:d2:90:e9:e4: b8:9c:04:d3:b2:c2:a1:ae:40:48:b8:14:34:f8:1f: 6b:52:fd:45:ce:ee:b9:b5:99:51:31:d0:a5:a0:92: 1c:ba:ca:1d:92:6f:bf:72:ce:54:10:5a:06:46:4b: 0a:94:9f:28:3c:2e:05:fa:a4:82:20:e6:b7:9c:05: 8b:da:c2:76:13:ff:78:cb:87:72:32:6b:20:56:fe: e5:8d:91:e7:59:ea:ea:98:7d:f9:7a:74:82:46:7c: dd:25:9c:92:4a:28:f2:63:b0:55:6f:4d:da:4d:38: 65:a9:3f:4b:91:8e:59:3f:53:cd:6d:45:40:32:94: 25:0b:2f:84:71:9b:db:c8:05:16:be:37:97:2f:5d: a7:89:9a:9b:11:b3:e5:b4:28:3f:39:80:2a:46:af: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:76:FC:27:DD:E3:A2:DC:D8:FE:93:E1:30:D2:16:41:20:C3:AB X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/93F95BE673C711E98CD6D335C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:7ac0:680::-2404:7ac0:686:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2e:ac:5d:38:4c:93:9d:6a:af:8f:64:97:d6:17:64:c7:d1:5e: de:6c:33:8d:6f:c0:56:ca:c9:67:61:cd:5f:49:93:8a:8a:26: 6b:9a:6e:2c:95:0b:59:bd:7a:b2:37:36:fb:ca:a6:4e:5e:25: a4:dd:74:a6:06:7a:20:36:8b:3a:7a:3c:86:93:36:32:ce:ac: 14:9b:93:2a:2d:55:32:48:66:6b:69:ff:67:d3:d6:98:26:31: fe:89:58:2b:ba:fb:3f:6a:5d:28:63:d8:6f:e5:bb:42:d2:ae: 24:5e:d7:bd:35:7d:cc:03:c1:0f:5c:c8:bb:75:3b:a1:44:93: 8f:c7:e0:96:96:0c:94:2f:e6:e6:e8:45:74:f1:54:fd:9d:76: 93:29:2a:d9:4f:35:5e:8b:e3:72:c9:bd:f6:f4:21:22:d7:7b: ef:14:cf:a4:76:21:7d:5f:2c:8a:1e:e7:11:b7:22:87:e3:ff: 06:dc:0b:d7:03:06:05:1d:be:5a:95:2c:23:ee:d5:a8:af:20: db:58:d8:20:7f:e4:58:11:6d:2e:75:7a:0b:be:78:97:88:68: 94:40:b3:11:0b:e1:f9:72:95:20:f3:67:ac:87:a2:7a:7a:e7: 62:49:b0:ed:54:c3:b6:eb:63:2a:1d:5a:4f:a6:51:7a:cd:80: a0:cf:85:55 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICESIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwNDAyMTc0NjMxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkNzdmNi05MTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydepPu6UO6cWfZh+tYnElALted9CbyTgauaKsbzTcEMFnWv4QUAaY60wLlm8 0lTWsiG9oKmr/BkdrIM6w3XxZ70EAG5dUvrUKAjN1fJrQP2WxDwXFlTWRA02Srg0 7C3qzSMlcdKQ6eS4nATTssKhrkBIuBQ0+B9rUv1Fzu65tZlRMdCloJIcusodkm+/ cs5UEFoGRksKlJ8oPC4F+qSCIOa3nAWL2sJ2E/94y4dyMmsgVv7ljZHnWerqmH35 enSCRnzdJZySSijyY7BVb03aTThlqT9LkY5ZP1PNbUVAMpQlCy+EcZvbyAUWvjeX L12niZqbEbPltCg/OYAqRq+BnwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFORndvwn 3eOi3Nj+k+Ew0hZBIMOrMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE2QTMvNzcyN0NFNUMzOEM3MTFFOUE3QjVDMjMzQzRGOUFFMDIvOTNGOTVCRTY3 M0M3MTFFOThDRDZEMzM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgACMBQwEgMHByQEesAGgAMHACQEesAGhjANBgkqhkiG9w0BAQsFAAOC AQEALqxdOEyTnWqvj2SX1hdkx9Fe3mwzjW/AVsrJZ2HNX0mTiooma5puLJULWb16 sjc2+8qmTl4lpN10pgZ6IDaLOno8hpM2Ms6sFJuTKi1VMkhma2n/Z9PWmCYx/olY K7r7P2pdKGPYb+W7QtKuJF7XvTV9zAPBD1zIu3U7oUSTj8fglpYMlC/m5uhFdPFU /Z12kykq2U81Xovjcsm99vQhItd77xTPpHYhfV8sih7nEbcih+P/BtwL1wMGBR2+ WpUsI+7VqK8g21jYIH/kWBFtLnV6C754l4holECzEQvh+XKVIPNnrIeienrnYkmw 7VTDtutjKh1aT6ZRes2AoM+FVQ== -----END CERTIFICATE-----Generated at Sat Apr 26 08:32:51 2025 by rpki-client