$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/FC6A19D892D511EC8FBFF32AC4F9AE02.roa File: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (raw, json) Hash identifier: kjWRly5sP345NgQNsNa2Y38tsuhMAJkUf7cDKkslnxQ= Subject key identifier: C8:89:AB:CA:00:48:0B:7D:38:62:7B:5C:C3:38:68:17:67:9E:8F:BF Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1ABA Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/FC6A19D892D511EC8FBFF32AC4F9AE02.roa Signing time: Mon 24 Mar 2025 14:50:39 +0000 ROA not before: Mon 24 Mar 2025 14:50:39 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 399734 IP address blocks: 116.51.29.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6842 (0x1aba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Mar 24 14:50:39 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e1713f-16b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6c:22:2c:00:74:d3:69:83:13:0a:01:7f:fe: 1a:cc:7f:a4:fc:74:53:96:52:d0:ec:77:d2:fc:13: 5d:0c:37:92:a1:81:51:8d:ea:2a:43:84:67:53:e1: 89:fa:d6:2a:5c:4e:28:1f:44:e2:2f:8c:a1:2d:f0: 5b:a9:50:71:5c:84:f9:b3:3d:e2:0e:e1:ba:72:58: d1:d0:f8:2b:38:7c:50:06:f7:9d:c5:ea:35:df:1b: 4b:0d:23:ad:3f:87:3c:39:5d:fb:de:78:03:7e:a4: ef:1a:d3:99:3b:f0:16:cd:8c:0d:27:07:00:c2:07: 70:8f:87:98:28:b0:fb:00:5c:4a:3d:0c:c3:1e:1a: d0:8e:15:df:f9:32:a1:ce:a0:70:ff:5a:fd:29:40: 25:e6:82:9e:25:b3:76:5f:33:9c:a3:f0:cc:2c:83: b9:ba:07:a4:26:bb:ba:06:9a:be:95:1c:73:eb:06: e6:fb:a1:10:04:7a:96:cb:61:fc:ed:2b:3e:48:e8: 7b:c7:fc:7c:fc:c6:2e:a7:a2:2f:c4:eb:f8:84:63: ad:93:f9:2e:a7:c7:b1:5d:53:67:73:f2:ed:30:53: 97:6c:94:52:c4:c2:c5:81:f2:4e:c8:5d:bc:16:08: 3c:33:11:4e:df:ab:3b:1c:6f:d2:cf:f1:83:7d:93: 9a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:89:AB:CA:00:48:0B:7D:38:62:7B:5C:C3:38:68:17:67:9E:8F:BF X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/FC6A19D892D511EC8FBFF32AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.51.29.128/26 Signature Algorithm: sha256WithRSAEncryption 93:6d:47:bb:fe:8a:21:d0:1f:c6:25:e2:d0:04:7c:85:f3:8f: f0:c0:4d:9b:bf:c2:0d:6e:72:1e:6a:ef:1e:13:e6:83:34:a8: eb:6b:6a:f7:ec:d2:a4:d1:89:54:c2:df:b5:f0:fe:77:14:ac: 9d:15:c7:9e:ea:11:4f:06:3f:6a:9f:e2:f9:cc:30:c8:fa:e9: c6:71:dc:ae:9f:a6:7e:e4:21:c5:bb:f8:a7:2f:ed:f8:61:58: 73:06:97:aa:bf:ab:42:81:4d:9e:c8:ce:b5:68:a0:86:19:37: 62:ad:d9:ab:4b:60:9d:68:bb:86:a4:48:ca:25:f2:df:2b:93: 4a:68:69:f6:d5:46:e6:3c:24:e1:74:8d:5b:84:e0:4c:80:40: 7d:99:7e:9c:e0:73:e4:67:96:ed:e8:05:7b:a1:07:36:12:c9: 9b:91:7e:60:3c:7c:17:60:95:84:4d:57:0d:26:1a:91:f1:f0: fd:d6:ae:52:5d:1d:0a:0b:da:4c:81:da:e6:f1:d8:b1:0c:d4: 86:7b:a5:0f:dd:57:3f:6e:af:6c:26:0a:92:a9:58:ae:9b:4b: 0f:51:49:2c:7e:b7:2d:3c:ba:ac:1b:f5:f1:88:81:72:ac:1d: c6:96:55:08:54:13:e9:38:3f:dc:36:80:bf:1e:55:43:9b:1b: 0b:bd:a6:4c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICGrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjUwMzI0MTQ1MDM5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2UxNzEzZi0xNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGwiLAB002mDEwoBf/4azH+k/HRTllLQ7HfS/BNdDDeSoYFRjeoqQ4RnU+GJ +tYqXE4oH0TiL4yhLfBbqVBxXIT5sz3iDuG6cljR0PgrOHxQBvedxeo13xtLDSOt P4c8OV373ngDfqTvGtOZO/AWzYwNJwcAwgdwj4eYKLD7AFxKPQzDHhrQjhXf+TKh zqBw/1r9KUAl5oKeJbN2XzOco/DMLIO5ugekJru6Bpq+lRxz6wbm+6EQBHqWy2H8 7Ss+SOh7x/x8/MYup6IvxOv4hGOtk/kup8exXVNnc/LtMFOXbJRSxMLFgfJOyF28 Fgg8MxFO36s7HG/Sz/GDfZOaxwIDAQABo4ICljCCApIwHQYDVR0OBBYEFMiJq8oA SAt9OGJ7XMM4aBdnno+/MB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvRkM2QTE5RDg5 MkQ1MTFFQzhGQkZGMzJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgABMAcDBQZ0Mx2AMA0GCSqGSIb3DQEBCwUAA4IBAQCTbUe7/ooh0B/G JeLQBHyF84/wwE2bv8INbnIeau8eE+aDNKjra2r37NKk0YlUwt+18P53FKydFcee 6hFPBj9qn+L5zDDI+unGcdyun6Z+5CHFu/inL+34YVhzBpeqv6tCgU2eyM61aKCG GTdirdmrS2CdaLuGpEjKJfLfK5NKaGn21UbmPCThdI1bhOBMgEB9mX6c4HPkZ5bt 6AV7oQc2EsmbkX5gPHwXYJWETVcNJhqR8fD91q5SXR0KC9pMgdrm8dixDNSGe6UP 3Vc/bq9sJgqSqVium0sPUUksfrctPLqsG/XxiIFyrB3GllUIVBPpOD/cNoC/HlVD mxsLvaZM -----END CERTIFICATE-----Generated at Sat Apr 26 06:15:42 2025 by rpki-client