$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/345F56F87FE311EF80C0F71FC4F9AE02.roa File: 345F56F87FE311EF80C0F71FC4F9AE02.roa (raw, json) Hash identifier: GPBxxSS7tjXB56EHA0eFK8gRXpMRgACbmw5NUyFguDY= Subject key identifier: 0C:55:A1:7E:2C:27:D4:29:33:54:43:62:E3:90:FD:5A:5E:3D:11:56 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 04A9 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/345F56F87FE311EF80C0F71FC4F9AE02.roa Signing time: Tue 31 Dec 2024 23:42:54 +0000 ROA not before: Tue 31 Dec 2024 23:42:54 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 64071 IP address blocks: 2001:df7:e400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Dec 31 23:42:54 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6774817e-ecfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:9c:62:2f:3f:15:73:37:ae:da:7e:98:02: 64:b9:64:b1:45:3a:73:5e:03:37:a9:63:bb:33:55: 3e:c0:ed:b5:02:be:86:3e:ba:d3:cf:5d:2c:23:27: ad:a0:5c:78:40:f3:d2:9f:af:2e:f0:ae:c5:09:95: c5:2f:8e:b3:85:28:37:3c:1a:48:1b:25:39:d4:2c: 62:b7:11:4a:39:72:4d:dd:1a:36:76:5e:2c:f9:f7: 0f:18:6e:38:5e:f2:28:ef:77:8d:72:77:42:5c:dc: 0a:ad:c1:f8:9b:69:48:08:24:dc:4b:6a:7e:7b:bd: 54:5e:da:67:0e:04:87:af:c7:ab:37:74:44:54:12: 5d:ea:c2:bd:33:1d:f8:03:77:ce:6b:09:d8:7f:8f: d6:b2:43:e3:f6:68:b3:de:50:46:e8:33:2a:43:84: 86:8b:74:04:f8:22:cc:c8:8b:59:25:96:69:db:e1: 30:41:29:31:6a:86:14:fc:19:d4:0b:66:de:76:38: fc:ea:0a:77:e1:2d:27:8f:29:43:99:27:0e:8a:ad: 25:1a:23:9c:bb:87:30:46:7f:6e:df:10:7b:f3:03: 4c:73:bf:26:11:71:44:c2:76:07:4c:70:b6:85:14: 28:6c:b8:dd:d0:ea:a1:e2:54:f9:f1:a0:8f:03:11: 25:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:55:A1:7E:2C:27:D4:29:33:54:43:62:E3:90:FD:5A:5E:3D:11:56 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/345F56F87FE311EF80C0F71FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df7:e400::/48 Signature Algorithm: sha256WithRSAEncryption 0a:66:91:57:ef:98:4b:d7:da:8d:34:0b:74:7c:8e:47:a4:6c: c9:75:b7:c1:f7:aa:64:b2:b0:f2:25:5c:3c:00:6c:b1:5a:8b: 78:2e:9c:f8:e1:b8:c0:c8:fa:cf:29:a7:b5:fc:a3:0b:84:d5: b7:7d:ff:ae:5b:3b:c7:9f:df:97:b5:61:d5:8e:5f:e6:6e:df: 92:0b:f7:bd:a5:23:ef:bf:8f:45:20:96:3a:78:28:7c:b6:fd: 80:2e:70:7e:65:b8:36:36:d0:9a:84:00:8a:77:a7:33:73:ab: a6:cf:c8:9b:fa:b7:b0:ac:9f:4a:25:1a:3c:96:d6:d6:45:66: 2e:8b:bf:d5:fa:35:b9:02:20:05:da:17:ca:5d:3d:c3:f1:5a: 8c:ba:ef:af:0b:d8:ae:4c:32:9e:2c:ea:9b:9c:16:04:d0:4c: 0d:55:5a:9f:86:05:f5:3a:3d:ae:3c:e5:0d:95:a3:41:f5:cf: 89:3a:41:69:71:55:8c:cd:82:8c:cf:ee:e0:70:5d:df:06:86: 09:a0:a6:bc:c1:b1:71:6f:92:b1:1c:c9:10:2f:6d:0e:cd:43: e0:77:61:89:8e:22:22:9a:59:0a:3b:cf:10:e6:ea:44:ec:cb: 26:7a:61:fc:a5:ec:93:ef:a6:ca:4d:1d:9a:ec:e1:3a:b8:4a: 90:db:ac:f5 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjQxMjMxMjM0MjU0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0ODE3ZS1lY2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVycYi8/FXM3rtp+mAJkuWSxRTpzXgM3qWO7M1U+wO21Ar6GPrrTz10sIyet oFx4QPPSn68u8K7FCZXFL46zhSg3PBpIGyU51CxitxFKOXJN3Ro2dl4s+fcPGG44 XvIo73eNcndCXNwKrcH4m2lICCTcS2p+e71UXtpnDgSHr8erN3REVBJd6sK9Mx34 A3fOawnYf4/WskPj9miz3lBG6DMqQ4SGi3QE+CLMyItZJZZp2+EwQSkxaoYU/BnU C2bedjj86gp34S0njylDmScOiq0lGiOcu4cwRn9u3xB78wNMc78mEXFEwnYHTHC2 hRQobLjd0Oqh4lT58aCPAxEluQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAxVoX4s J9QpM1RDYuOQ/VpePRFWMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBEODcvRjY4M0NFRjIyMUVCMTFFQzkyNTAxODE5QzRGOUFFMDIvMzQ1RjU2Rjg3 RkUzMTFFRjgwQzBGNzFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ335AAwDQYJKoZIhvcNAQELBQADggEBAApmkVfvmEvX 2o00C3R8jkekbMl1t8H3qmSysPIlXDwAbLFai3gunPjhuMDI+s8pp7X8owuE1bd9 /65bO8ef35e1YdWOX+Zu35IL972lI++/j0Ugljp4KHy2/YAucH5luDY20JqEAIp3 pzNzq6bPyJv6t7Csn0olGjyW1tZFZi6Lv9X6NbkCIAXaF8pdPcPxWoy6768L2K5M Mp4s6pucFgTQTA1VWp+GBfU6Pa485Q2Vo0H1z4k6QWlxVYzNgozP7uBwXd8Ghgmg przBsXFvkrEcyRAvbQ7NQ+B3YYmOIiKaWQo7zxDm6kTsyyZ6Yfyl7JPvpspNHZrs 4Tq4SpDbrPU= -----END CERTIFICATE-----Generated at Sat Apr 26 08:13:09 2025 by rpki-client