$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/C4BA1CE6E69211EE99E71B6AC4F9AE02.roa File: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (raw, json) Hash identifier: y3j/TCNZc4+9GUOHxfPGcXJYdNwoHrgSAKMjnwhnAHY= Subject key identifier: 9C:9D:20:24:48:29:D7:E5:AE:A6:C9:D3:8C:63:59:A1:CF:43:0D:8A Certificate issuer: /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2 Certificate serial: B7 Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/C4BA1CE6E69211EE99E71B6AC4F9AE02.roa Signing time: Fri 07 Mar 2025 05:21:29 +0000 ROA not before: Fri 07 Mar 2025 05:21:29 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 152458 IP address blocks: 2001:df3:7140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3 Validity Not Before: Mar 7 05:21:29 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ca8259-face Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:31:e2:0a:2d:bc:c1:6e:d7:4d:16:62:f2:c2: cf:f4:00:92:1b:80:6c:f5:9f:d8:c6:65:95:a1:c6: bd:55:65:80:37:19:f0:03:2a:b6:b3:68:21:a1:dc: 4a:05:23:ba:c6:6a:86:64:8c:6e:5e:e8:7b:41:e0: 55:5f:0b:2c:c9:90:ad:31:6e:a9:ca:37:8c:db:d7: b7:50:f5:b8:26:a7:84:d3:25:13:1e:86:7b:f5:d7: 21:15:f8:c7:84:38:e4:a0:11:bd:6e:52:4f:d8:f2: 40:b2:4c:ed:14:2a:96:63:d7:39:b5:57:a1:a8:b0: 2e:df:58:96:7d:26:32:28:a7:7c:dc:c3:3d:a0:1f: fc:db:fe:7b:ff:8f:a5:07:b1:74:35:f1:71:cf:78: 0e:9b:72:f9:cd:79:a3:a1:35:84:3c:38:af:64:ee: 30:09:97:26:2d:ee:ac:01:2b:53:a9:de:f8:5a:8b: 94:72:a3:64:89:32:0f:e7:aa:b1:33:8c:08:4c:f9: e3:cf:9d:cd:08:06:5b:c1:c3:7a:ac:f2:3a:97:0f: da:f0:2a:45:ae:76:a6:4a:1e:7a:57:e6:15:42:4e: ad:76:1c:92:1f:5c:61:a4:35:cc:b0:cb:91:e7:40: 2c:12:8a:3d:12:07:2f:a4:db:4b:40:ed:ab:0c:fc: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9D:20:24:48:29:D7:E5:AE:A6:C9:D3:8C:63:59:A1:CF:43:0D:8A X509v3 Authority Key Identifier: keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/C4BA1CE6E69211EE99E71B6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:7140::/48 Signature Algorithm: sha256WithRSAEncryption 2c:bd:9b:67:3b:79:f2:d8:a4:95:72:2f:66:ce:f7:0d:65:0e: 8d:3e:dc:82:d4:7f:35:56:96:81:a8:a0:8e:1c:e2:b9:0e:91: fc:89:7f:64:b3:35:24:ae:fc:9d:6a:70:da:36:e9:a4:3d:cf: 85:ae:92:37:d3:cb:87:4c:65:41:d7:bb:b2:60:1e:e5:f0:c7: 40:d7:af:fd:ab:c4:ca:f1:03:58:0f:4e:2d:47:ae:53:75:e1: 88:43:87:f3:8c:73:a2:86:de:5e:70:01:3f:38:2e:f6:b7:f1: 7f:df:61:e6:a8:95:64:47:77:91:e8:c5:1e:b2:cb:e2:a2:1d: fd:3c:a1:b5:7b:1e:c9:79:cd:ff:e6:6f:c7:a2:99:39:13:02: fa:e3:8d:a9:87:71:22:da:e2:29:df:ff:c7:99:dc:08:17:b7: 8e:8e:32:88:50:f0:e5:a5:7e:67:c2:84:e7:fb:f8:b8:b9:d4: 7f:f1:d8:b8:78:56:f0:8a:7e:d0:ff:ec:31:60:45:a3:28:ec: 49:df:d6:22:ab:b6:72:24:b8:70:17:6e:f0:05:04:6b:5e:86: 29:ae:fc:47:9d:39:46:c2:17:e1:06:8c:42:e0:e1:16:0a:c8: 93:26:2b:0b:49:f7:ea:e2:b4:b1:7b:8f:03:dd:8c:4e:c9:d0: d9:16:f7:58 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2QjMxMTAvBgNVBAUTKDAwNEJCQkMwMUM1NzFGQTcwRjIwRUE0NDA1MDA1N0Q5 REM5RUJBRDIwHhcNMjUwMzA3MDUyMTI5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhODI1OS1mYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zHiCi28wW7XTRZi8sLP9ACSG4Bs9Z/YxmWVoca9VWWANxnwAyq2s2ghodxK BSO6xmqGZIxuXuh7QeBVXwssyZCtMW6pyjeM29e3UPW4JqeE0yUTHoZ79dchFfjH hDjkoBG9blJP2PJAskztFCqWY9c5tVehqLAu31iWfSYyKKd83MM9oB/82/57/4+l B7F0NfFxz3gOm3L5zXmjoTWEPDivZO4wCZcmLe6sAStTqd74WouUcqNkiTIP56qx M4wITPnjz53NCAZbwcN6rPI6lw/a8CpFrnamSh56V+YVQk6tdhySH1xhpDXMsMuR 50AsEoo9EgcvpNtLQO2rDPyb3QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJydICRI KdflrqbJ04xjWaHPQw2KMB8GA1UdIwQYMBaAFABLu8AcVx+nDyDqRAUAV9ncnrrS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DRTlGMTZGRUU2 OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9BRXU3d0J4WEg2Y1BJT3BFQlFCWDJkeWV1 dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FFdTd3QnhYSDZjUElPcEVCUUJYMmR5ZXV0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzI2QjMvQ0U5RjE2RkVFNjkxMTFFRUJGMDU4OTMyQzRGOUFFMDIvQzRCQTFDRTZF NjkyMTFFRTk5RTcxQjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zcUAwDQYJKoZIhvcNAQELBQADggEBACy9m2c7efLY pJVyL2bO9w1lDo0+3ILUfzVWloGooI4c4rkOkfyJf2SzNSSu/J1qcNo26aQ9z4Wu kjfTy4dMZUHXu7JgHuXwx0DXr/2rxMrxA1gPTi1HrlN14YhDh/OMc6KG3l5wAT84 Lva38X/fYeaolWRHd5HoxR6yy+KiHf08obV7Hsl5zf/mb8eimTkTAvrjjamHcSLa 4inf/8eZ3AgXt46OMohQ8OWlfmfChOf7+Li51H/x2Lh4VvCKftD/7DFgRaMo7Enf 1iKrtnIkuHAXbvAFBGtehimu/EedOUbCF+EGjELg4RYKyJMmKwtJ9+ritLF7jwPd jE7J0NkW91g= -----END CERTIFICATE-----Generated at Sun Apr 6 06:13:18 2025 by rpki-client