$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/C8A0E422831611EA95762453C4F9AE02.roa File: C8A0E422831611EA95762453C4F9AE02.roa (raw, json) Hash identifier: yUwouY97arbHx1ysSRkQtB3/fVJX2BMSgtA5eI1eKIg= Subject key identifier: EE:CA:F0:16:4F:77:8D:CD:BE:0A:D1:0E:55:19:9A:B0:58:6E:D7:2A Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 09D3 Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/C8A0E422831611EA95762453C4F9AE02.roa Signing time: Wed 12 Feb 2025 20:58:14 +0000 ROA not before: Wed 12 Feb 2025 20:58:14 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 56054 IP address blocks: 123.0.16.0/20 maxlen: 24 2400:cb60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2515 (0x9d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC, serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: Feb 12 20:58:14 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ad0b65-bd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:39:73:0e:ed:54:aa:0b:1d:4b:aa:1e:72: c4:8f:35:8a:c8:97:3a:25:cd:42:6a:f8:86:26:03: 9e:01:ab:41:29:3d:b2:72:42:56:20:25:6a:3c:80: 03:3f:f8:64:96:a4:bf:5e:8b:ec:84:32:25:5c:ae: 79:db:05:27:81:2a:af:78:d0:c7:37:f6:75:04:8e: 02:db:2a:54:ec:bc:2c:40:56:aa:0c:44:77:a1:46: bb:c9:b1:18:6d:5a:91:62:70:14:04:90:2b:cc:47: 7d:fb:ea:32:df:32:62:30:4c:4d:9e:ec:b0:08:39: 80:a2:f2:ad:24:50:76:61:c3:53:58:58:b7:15:c0: ad:b6:b8:55:49:d2:74:89:f9:6c:5b:46:99:51:1c: 7b:27:d8:78:9e:f9:d8:f0:8a:7f:ee:83:7a:bf:0c: 77:7b:fb:3f:84:a7:5f:c7:76:c1:a7:07:d8:d4:12: 8c:da:c7:55:40:4b:c9:08:37:7f:96:b5:15:c3:c4: 6c:37:b1:25:9c:20:4d:64:65:c6:cb:cd:52:9d:3e: 54:03:70:df:e8:62:cc:0b:9d:99:8a:c4:f0:f4:b2: a9:f4:5c:dc:ac:24:82:2a:ec:38:7e:6b:93:77:6f: eb:b0:7b:d2:63:82:96:8d:07:cf:ab:e9:fb:2d:8e: e1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CA:F0:16:4F:77:8D:CD:BE:0A:D1:0E:55:19:9A:B0:58:6E:D7:2A X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/C8A0E422831611EA95762453C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.0.16.0/20 IPv6: 2400:cb60::/32 Signature Algorithm: sha256WithRSAEncryption 7c:56:0d:ef:df:7f:c2:11:0f:58:cd:de:21:48:ea:0c:7a:7a: 20:b3:b8:8b:d5:7c:ad:f7:2a:9c:6b:bd:87:e5:48:61:c7:51: 1e:13:ac:b3:f5:b2:14:1a:f2:53:92:e5:72:7c:c0:af:71:80: de:36:66:c4:1f:3f:21:58:7a:05:fa:4c:45:df:bf:79:22:4a: e7:35:27:b5:6f:50:10:0e:d2:a4:61:d9:1f:f1:af:c5:fd:f3: bc:50:cc:7e:a3:2c:6e:07:ef:3d:69:32:6c:cd:da:fa:02:a6: b7:81:a2:fb:3d:78:95:ff:f8:cc:3c:6d:14:26:51:74:f1:97: 08:ad:f0:98:ae:50:2d:21:38:6d:af:4d:c8:cf:03:1c:f7:57: 92:3d:ff:eb:8d:c0:48:95:35:ea:e7:e0:28:02:53:ea:f5:7c: 97:2d:8d:24:b2:80:bc:23:56:85:09:e1:20:15:03:f5:5c:96: 10:f5:81:ca:d6:6e:28:f0:ac:3a:62:bb:b4:25:fd:5f:81:3d: 3b:6d:77:92:3b:a5:f1:a8:2c:5c:fb:c1:11:34:d2:0b:06:30: c9:c4:46:1d:0e:e5:43:76:9b:6c:71:12:5e:36:60:f0:8f:a3: 9f:d2:9c:e9:ad:1b:f1:ce:73:e0:15:22:1f:af:b7:ab:a5:88: 0a:2d:02:88 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjUwMjEyMjA1ODE0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FkMGI2NS1iZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhs5cw7tVKoLHUuqHnLEjzWKyJc6Jc1CaviGJgOeAatBKT2yckJWICVqPIAD P/hklqS/XovshDIlXK552wUngSqveNDHN/Z1BI4C2ypU7LwsQFaqDER3oUa7ybEY bVqRYnAUBJArzEd9++oy3zJiMExNnuywCDmAovKtJFB2YcNTWFi3FcCttrhVSdJ0 iflsW0aZURx7J9h4nvnY8Ip/7oN6vwx3e/s/hKdfx3bBpwfY1BKM2sdVQEvJCDd/ lrUVw8RsN7ElnCBNZGXGy81SnT5UA3Df6GLMC52ZisTw9LKp9FzcrCSCKuw4fmuT d2/rsHvSY4KWjQfPq+n7LY7hFwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFO7K8BZP d43NvgrRDlUZmrBYbtcqMB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REYwRUMvOTkxQ0VGN0U3OTU4MTFFQTkzQUU5NjQ2QzRGOUFFMDIvQzhBMEU0MjI4 MzE2MTFFQTk1NzYyNDUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAR7ABAwDQQCAAIwBwMFACQAy2AwDQYJKoZIhvcNAQELBQAD ggEBAHxWDe/ff8IRD1jN3iFI6gx6eiCzuIvVfK33KpxrvYflSGHHUR4TrLP1shQa 8lOS5XJ8wK9xgN42ZsQfPyFYegX6TEXfv3kiSuc1J7VvUBAO0qRh2R/xr8X987xQ zH6jLG4H7z1pMmzN2voCpreBovs9eJX/+Mw8bRQmUXTxlwit8JiuUC0hOG2vTcjP Axz3V5I9/+uNwEiVNern4CgCU+r1fJctjSSygLwjVoUJ4SAVA/VclhD1gcrWbijw rDpiu7Ql/V+BPTttd5I7pfGoLFz7wRE00gsGMMnERh0O5UN2m2xxEl42YPCPo5/S nOmtG/HOc+AVIh+vt6uliAotAog= -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:30 2025 by rpki-client