$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa File: F693F2689CB811EB97F77E14C4F9AE02.roa (raw, json) Hash identifier: U3tQJQlcyfHM4FE2g1sFZHo1n5O210FCbrxqZ5WoAEg= Subject key identifier: 38:46:A2:C4:C7:33:40:95:6A:D3:0D:4C:82:15:BB:A8:F4:9B:7C:E4 Certificate issuer: /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70 Certificate serial: 1443 Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa Signing time: Tue 18 Feb 2025 17:35:12 +0000 ROA not before: Tue 18 Feb 2025 17:35:12 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 9443 IP address blocks: 139.216.0.0/16 maxlen: 16 139.218.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5187 (0x1443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70 Validity Not Before: Feb 18 17:35:12 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67b4c4d0-2039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d6:fd:55:0f:bd:4a:44:dd:c9:75:27:8d:37: cd:1e:9f:db:e6:49:d0:41:c4:a7:4d:87:99:d6:2e: 87:3e:82:fd:57:12:d9:50:6e:6c:47:fe:66:33:9a: c7:de:89:13:e6:7b:bc:6c:83:5b:b9:7e:d1:74:b0: ce:9e:d4:63:44:72:fb:ad:25:cb:7a:32:6b:0a:c7: 51:db:e9:bb:6d:71:21:ce:52:2e:66:b9:db:00:9d: b2:7f:02:7e:d9:b4:b0:66:f2:98:c8:b6:8c:1a:33: d0:26:10:28:91:60:25:93:af:11:13:1e:e9:be:10: e2:b7:53:e9:55:55:35:b1:b3:93:55:26:4b:91:69: 20:d7:79:cf:e8:43:57:68:8f:0d:69:71:a5:9b:94: e3:49:db:be:e1:a0:1b:57:bb:ff:48:62:bf:e7:73: 22:64:4c:c0:c8:d2:30:58:b7:ca:0d:cb:cb:28:0e: ef:c9:95:bc:3b:99:56:27:96:c7:31:0d:61:14:b6: 06:f1:3b:78:28:aa:e8:66:c1:23:6a:33:32:49:4b: 63:8d:79:6a:9c:ec:88:11:56:63:06:5e:09:7a:af: 3d:07:a3:61:00:7c:9f:30:ec:75:72:16:70:fd:56: 65:63:7b:97:9b:0b:4d:12:46:30:cd:d0:b4:56:25: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:46:A2:C4:C7:33:40:95:6A:D3:0D:4C:82:15:BB:A8:F4:9B:7C:E4 X509v3 Authority Key Identifier: keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.216.0.0/16 139.218.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:f7:8b:72:9e:52:ff:ef:fc:58:d3:2a:88:fe:61:47:e1:f2: b8:15:a3:60:59:f8:c3:20:67:a5:d7:45:66:79:5d:8e:23:e5: b2:58:09:d9:6b:a5:bc:fc:46:2f:f6:7e:7c:68:d5:33:a9:51: 15:bb:59:18:0d:95:02:21:e0:f8:6c:25:a2:b7:53:5e:b3:96: 8a:bb:b7:b5:01:1a:90:24:c0:ee:f9:76:07:12:85:cb:fa:0c: c3:28:6b:9b:0b:9f:79:ff:6d:eb:ac:42:d8:f8:9f:98:74:99: 4a:01:91:a3:20:09:36:3c:11:f2:23:dd:ef:65:ca:ee:df:23: 7c:ae:44:41:75:10:59:7e:ff:27:d9:de:ab:f4:ec:16:5d:43: 60:d5:ff:f9:65:e4:8e:69:20:52:e3:e0:c5:d8:02:91:59:e9: 1e:fc:b5:a4:d0:71:f0:5f:43:7d:78:cc:e7:f8:16:b1:8a:bb: 71:1a:2b:96:79:b4:ae:55:22:67:66:9e:50:20:ba:e6:f3:cf: a4:16:70:47:3d:ea:49:a4:51:9c:87:a1:44:33:4b:2f:fa:b4: 18:56:a4:e3:aa:e5:3a:9e:5f:73:d9:33:37:d0:36:b1:56:df: 1e:b5:fb:6b:b2:ba:e8:c5:30:ab:8c:3c:41:e7:e1:6b:79:08: 63:d3:39:11 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICFEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKDZCNTY3Qzg0M0U0MjUyM0UwRTVCNjRGNjRBMEYyQUUw NTUxN0JCNzAwHhcNMjUwMjE4MTczNTEyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I0YzRkMC0yMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9b9VQ+9SkTdyXUnjTfNHp/b5knQQcSnTYeZ1i6HPoL9VxLZUG5sR/5mM5rH 3okT5nu8bINbuX7RdLDOntRjRHL7rSXLejJrCsdR2+m7bXEhzlIuZrnbAJ2yfwJ+ 2bSwZvKYyLaMGjPQJhAokWAlk68REx7pvhDit1PpVVU1sbOTVSZLkWkg13nP6ENX aI8NaXGlm5TjSdu+4aAbV7v/SGK/53MiZEzAyNIwWLfKDcvLKA7vyZW8O5lWJ5bH MQ1hFLYG8Tt4KKroZsEjajMySUtjjXlqnOyIEVZjBl4Jeq89B6NhAHyfMOx1chZw /VZlY3uXmwtNEkYwzdC0ViWNkQIDAQABo4ICmTCCApUwHQYDVR0OBBYEFDhGosTH M0CVatMNTIIVu6j0m3zkMB8GA1UdIwQYMBaAFGtWfIQ+QlI+Dltk9koPKuBVF7tw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC84RUY0MkE0Njc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi9hMVo4aEQ1Q1VqNE9XMlQyU2c4cTRGVVh1 M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ExWjhoRDVDVWo0T1cyVDJTZzhxNEZVWHUzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFM0QvOEVGNDJBNDY3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvRjY5M0YyNjg5 Q0I4MTFFQjk3Rjc3RTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIwYIKwYBBQUHAQcBAf8E FDASMBAEAgABMAoDAwCL2AMDAIvaMA0GCSqGSIb3DQEBCwUAA4IBAQAK94tynlL/ 7/xY0yqI/mFH4fK4FaNgWfjDIGel10VmeV2OI+WyWAnZa6W8/EYv9n58aNUzqVEV u1kYDZUCIeD4bCWit1Nes5aKu7e1ARqQJMDu+XYHEoXL+gzDKGubC595/23rrELY +J+YdJlKAZGjIAk2PBHyI93vZcru3yN8rkRBdRBZfv8n2d6r9OwWXUNg1f/5ZeSO aSBS4+DF2AKRWeke/LWk0HHwX0N9eMzn+BaxirtxGiuWebSuVSJnZp5QILrm88+k FnBHPepJpFGch6FEM0sv+rQYVqTjquU6nl9z2TM30DaxVt8etftrsrroxTCrjDxB 5+FreQhj0zkR -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:29 2025 by rpki-client