$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/AFDE92321F5A11F0BA7E6961C4F9AE02.roa File: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (raw, json) Hash identifier: S2zfaKcticTwAxwJXdMxgXbdbp4SN51y6QSWO83OIuc= Subject key identifier: 43:DC:28:EE:3A:9C:91:5A:B1:DA:F5:DA:7E:0B:BB:10:E4:80:BB:EA Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 03A8 Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/AFDE92321F5A11F0BA7E6961C4F9AE02.roa Signing time: Tue 22 Apr 2025 09:18:01 +0000 ROA not before: Tue 22 Apr 2025 09:18:01 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 34927 IP address blocks: 2400:16e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Apr 22 09:18:01 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68075ec8-09fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1a:21:63:7b:fd:a6:8d:cf:61:cd:3f:2e:bf: 44:17:37:fb:d9:98:a0:bb:48:42:66:1e:c5:6b:24: c3:7b:15:df:53:44:c3:d9:e2:a7:fa:40:e0:28:44: 39:a7:7a:3c:43:48:48:69:f6:71:6a:f1:0f:12:3a: 43:9b:fa:c6:cd:55:95:e3:17:1f:46:40:cf:1a:21: ba:45:2a:3b:ab:bc:ee:fc:de:00:ab:43:33:0a:49: 2d:2d:b9:89:c4:25:b5:c0:f4:64:18:b5:7b:f7:e3: 1c:06:fa:7a:d9:e2:14:3a:2b:e7:fb:9f:a6:60:4b: e9:26:dc:6e:c0:56:bb:0e:a1:f7:c6:b8:f5:d7:1e: 36:2f:39:94:7e:d3:cf:d7:66:f8:07:4f:f1:bc:6b: 52:0e:09:e9:ec:36:a1:58:91:69:07:24:be:5f:d1: 87:31:61:50:94:0d:b6:4f:cd:8e:6a:7f:1d:d5:d4: eb:b0:08:9f:0f:20:07:2c:29:a5:e1:a8:56:40:5a: 59:99:89:e7:de:83:d5:b0:f1:69:eb:6a:49:74:2f: cd:09:c8:04:be:4d:2e:25:43:a3:f0:78:6e:f4:82: 14:44:93:ad:ed:fa:84:50:bb:4f:68:e8:22:3c:88: 5a:ff:01:7d:c3:9c:b8:04:86:87:4e:4e:ae:8b:82: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DC:28:EE:3A:9C:91:5A:B1:DA:F5:DA:7E:0B:BB:10:E4:80:BB:EA X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/AFDE92321F5A11F0BA7E6961C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:16e0::/48 Signature Algorithm: sha256WithRSAEncryption 51:c4:9f:55:eb:45:61:51:09:91:4d:2d:ae:a3:19:10:c6:61: 8b:83:b5:82:ec:94:78:a6:64:0d:56:45:8f:76:5a:3d:47:0f: 0b:72:91:eb:05:ff:71:96:29:7e:cc:08:95:f9:ed:ae:59:22: 63:ce:d7:af:4c:13:cd:7a:cf:95:b8:4f:5d:b7:11:5e:5b:85: 5d:a6:e4:06:e6:02:65:e8:e5:28:8f:d2:80:58:51:02:ef:47: 0b:e0:f6:70:1c:cd:68:44:1d:96:e9:b4:b3:c5:2c:ea:23:b8: 45:1e:64:3d:e7:5a:a8:df:86:2e:d1:73:30:24:95:f9:41:a1: 51:1d:aa:18:9c:30:a5:b5:8c:15:74:a8:fd:81:fe:9d:a3:0e: 2e:71:92:99:b9:42:5a:a0:c7:19:ff:f0:0e:77:56:4b:b2:85: 62:8a:8a:1f:8a:b8:61:ef:a1:f7:8a:3a:fe:23:e9:10:ae:10: 97:b2:50:d4:da:70:de:e3:84:31:16:63:d2:98:75:4f:4d:83: 5f:7a:e9:7d:c5:f1:94:79:0a:55:a0:0a:3b:57:fd:a2:ab:d1: a7:b0:c8:d0:3b:c5:2a:ff:45:a7:7d:e7:99:2b:7b:a4:8c:9e: 53:3f:1e:98:ec:de:60:f9:e6:c6:d6:16:5c:34:ce:3d:77:d1: c1:d3:49:65 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjUwNDIyMDkxODAxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA3NWVjOC0wOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hohY3v9po3PYc0/Lr9EFzf72Zigu0hCZh7FayTDexXfU0TD2eKn+kDgKEQ5 p3o8Q0hIafZxavEPEjpDm/rGzVWV4xcfRkDPGiG6RSo7q7zu/N4Aq0MzCkktLbmJ xCW1wPRkGLV79+McBvp62eIUOivn+5+mYEvpJtxuwFa7DqH3xrj11x42LzmUftPP 12b4B0/xvGtSDgnp7DahWJFpByS+X9GHMWFQlA22T82Oan8d1dTrsAifDyAHLCml 4ahWQFpZmYnn3oPVsPFp62pJdC/NCcgEvk0uJUOj8Hhu9IIURJOt7fqEULtPaOgi PIha/wF9w5y4BIaHTk6ui4LJ/QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEPcKO46 nJFasdr12n4LuxDkgLvqMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU4QzkvNDBFMEMwRUU5MzZDMTFFQ0JEQzExQTIwQzRGOUFFMDIvQUZERTkyMzIx RjVBMTFGMEJBN0U2OTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkABbgAAAwDQYJKoZIhvcNAQELBQADggEBAFHEn1XrRWFR CZFNLa6jGRDGYYuDtYLslHimZA1WRY92Wj1HDwtykesF/3GWKX7MCJX57a5ZImPO 169ME816z5W4T123EV5bhV2m5AbmAmXo5SiP0oBYUQLvRwvg9nAczWhEHZbptLPF LOojuEUeZD3nWqjfhi7RczAklflBoVEdqhicMKW1jBV0qP2B/p2jDi5xkpm5Qlqg xxn/8A53VkuyhWKKih+KuGHvofeKOv4j6RCuEJeyUNTacN7jhDEWY9KYdU9Ng196 6X3F8ZR5ClWgCjtX/aKr0aewyNA7xSr/Rad955kre6SMnlM/Hpjs3mD55sbWFlw0 zj130cHTSWU= -----END CERTIFICATE-----Generated at Sat Apr 26 12:26:39 2025 by rpki-client