$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/CB1303A4A28F11EBA97D6163C4F9AE02.roa File: CB1303A4A28F11EBA97D6163C4F9AE02.roa (raw, json) Hash identifier: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc= Subject key identifier: 0C:8F:F6:2E:BD:A1:B7:F8:19:8A:71:17:6A:85:E9:CE:63:90:9A:54 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1126 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/CB1303A4A28F11EBA97D6163C4F9AE02.roa Signing time: Wed 02 Apr 2025 17:46:34 +0000 ROA not before: Wed 02 Apr 2025 17:46:34 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 24124 IP address blocks: 2404:7ac0:200::/48 maxlen: 48 2404:7ac0:206::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4390 (0x1126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Apr 2 17:46:34 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ed77fa-461c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c0:3c:cc:7d:fd:15:03:09:c7:13:36:7c:23: 12:dc:48:d4:46:0e:ee:6a:9f:72:33:e5:95:7d:90: 0a:3c:a1:59:0c:5b:fb:e0:0f:ec:2a:32:05:b0:79: 16:7b:2b:eb:18:53:d7:e5:f1:25:5e:cd:0c:87:4e: 66:f6:aa:45:da:88:55:be:08:84:07:d4:98:56:86: 34:62:2f:5f:30:be:3a:77:c1:1d:93:d3:9c:dd:45: 08:f0:07:5f:1b:2e:25:bb:41:45:ed:af:6e:17:5d: aa:a2:38:f8:ff:35:bb:9f:9d:13:20:c2:5d:ea:f5: 2a:42:f1:cc:7b:9b:8a:c3:ee:f3:25:f4:ef:04:68: 31:35:c9:5b:af:b1:2d:90:80:a1:f6:bf:37:fc:1b: 34:2a:8e:c2:0a:f0:48:fb:e2:71:0e:ea:15:ba:30: b6:a2:b5:83:c6:b4:c7:84:f3:5d:e5:1b:92:23:08: a3:00:86:03:38:46:c0:97:bc:a2:f3:56:10:72:0f: 63:0b:be:aa:a6:45:a9:1d:bd:aa:0d:cb:38:90:d5: fc:52:bf:d9:40:a2:d1:3f:bd:c7:75:a4:a4:de:15: 00:ce:9e:11:7b:cb:78:bd:d0:af:5a:b1:d7:f2:0a: 0d:98:e8:48:30:c9:ef:24:b7:08:d8:e7:a9:13:43: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8F:F6:2E:BD:A1:B7:F8:19:8A:71:17:6A:85:E9:CE:63:90:9A:54 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/CB1303A4A28F11EBA97D6163C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:7ac0:200::/48 2404:7ac0:206::/47 Signature Algorithm: sha256WithRSAEncryption 20:3d:63:39:c8:c3:8c:56:3e:6c:c3:77:b2:20:a0:7b:c0:f7: 37:2a:ac:2a:13:ae:29:51:cf:2d:42:f7:c7:c7:80:8d:94:20: 3a:cb:06:12:71:df:79:7c:e0:1e:bd:65:5e:0d:83:ee:41:7a: 64:f3:58:ab:36:b5:12:0f:a1:b0:f6:69:4b:43:57:27:95:cb: 7f:c0:b7:28:9e:4a:2c:13:96:22:c3:82:c9:77:b9:75:65:9d: c9:64:7d:a6:f5:39:c2:90:fb:0c:fb:bc:01:81:39:eb:bd:a4: 14:18:6a:f4:94:61:33:f6:25:49:bb:d3:e8:ed:be:37:fe:48: 6e:a8:a2:65:91:21:0a:88:22:b9:36:65:7b:be:60:2e:62:28: dd:24:7b:a6:0a:7d:a2:59:29:91:ed:33:df:57:db:73:48:01: 1c:8e:58:9e:87:ee:8f:9f:e5:aa:f0:16:3f:b8:48:17:58:fb: 6c:f1:27:10:4c:24:4b:2e:bd:5d:5a:6f:06:85:9b:02:56:2f: 7f:3f:af:2e:53:94:e0:4e:8f:0a:5f:71:8e:15:d4:39:66:1e: 31:fc:e3:7b:78:42:4f:00:aa:ef:b7:e8:19:67:49:de:78:b8: d0:65:3b:69:c6:af:e5:a4:80:59:23:63:fd:6a:70:28:2f:5a: 0d:2e:2c:9d -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICESYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwNDAyMTc0NjM0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkNzdmYS00NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cA8zH39FQMJxxM2fCMS3EjURg7uap9yM+WVfZAKPKFZDFv74A/sKjIFsHkW eyvrGFPX5fElXs0Mh05m9qpF2ohVvgiEB9SYVoY0Yi9fML46d8Edk9Oc3UUI8Adf Gy4lu0FF7a9uF12qojj4/zW7n50TIMJd6vUqQvHMe5uKw+7zJfTvBGgxNclbr7Et kICh9r83/Bs0Ko7CCvBI++JxDuoVujC2orWDxrTHhPNd5RuSIwijAIYDOEbAl7yi 81YQcg9jC76qpkWpHb2qDcs4kNX8Ur/ZQKLRP73HdaSk3hUAzp4Re8t4vdCvWrHX 8goNmOhIMMnvJLcI2OepE0NrDwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFAyP9i69 obf4GYpxF2qF6c5jkJpUMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE2QTMvNzcyN0NFNUMzOEM3MTFFOUE3QjVDMjMzQzRGOUFFMDIvQ0IxMzAzQTRB MjhGMTFFQkE5N0Q2MTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkBHrAAgADBwEkBHrAAgYwDQYJKoZIhvcNAQELBQADggEB ACA9YznIw4xWPmzDd7IgoHvA9zcqrCoTrilRzy1C98fHgI2UIDrLBhJx33l84B69 ZV4Ng+5BemTzWKs2tRIPobD2aUtDVyeVy3/AtyieSiwTliLDgsl3uXVlnclkfab1 OcKQ+wz7vAGBOeu9pBQYavSUYTP2JUm70+jtvjf+SG6oomWRIQqIIrk2ZXu+YC5i KN0ke6YKfaJZKZHtM99X23NIARyOWJ6H7o+f5arwFj+4SBdY+2zxJxBMJEsuvV1a bwaFmwJWL38/ry5TlOBOjwpfcY4V1DlmHjH843t4Qk8Aqu+36BlnSd54uNBlO2nG r+WkgFkjY/1qcCgvWg0uLJ0= -----END CERTIFICATE-----Generated at Sat Apr 26 08:29:52 2025 by rpki-client