$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/FFF8A36A34E311EE877E760DC4F9AE02.roa File: FFF8A36A34E311EE877E760DC4F9AE02.roa (raw, json) Hash identifier: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U= Subject key identifier: AD:DA:EF:63:59:E3:8E:5D:2C:54:8F:DE:8F:8A:C7:40:07:9F:D4:D5 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 037A Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/FFF8A36A34E311EE877E760DC4F9AE02.roa Signing time: Sat 05 Apr 2025 01:06:40 +0000 ROA not before: Sat 05 Apr 2025 01:06:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60021 IP address blocks: 2400:6520::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 890 (0x37a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE Validity Not Before: Apr 5 01:06:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f08220-73f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:90:2e:9a:30:17:6c:2b:b7:84:9f:3c:47: c7:1f:80:e0:1a:69:da:3a:2e:75:06:84:38:0b:05: 68:ea:68:2f:43:9e:45:48:b4:19:91:1d:fd:e3:8c: 5a:6f:e0:41:b5:e1:6b:51:96:3c:60:e9:3e:3b:a5: 89:b9:72:42:8f:e5:05:73:6a:72:c6:c9:59:25:0c: 43:34:0a:77:b7:51:8b:82:33:78:f2:26:94:09:cd: d4:70:1a:50:e2:58:71:91:d5:ba:00:1e:0c:0c:5d: 0b:53:e1:c8:dc:65:10:dd:6a:15:c9:ad:2f:7b:99: 5e:8e:4f:47:28:c9:92:b9:6f:34:38:dc:28:50:05: c3:f2:5d:98:02:cb:a1:b8:33:f6:89:ad:d1:b0:74: 8c:68:47:98:cd:0b:91:45:d9:e2:87:2f:c6:79:95: 66:89:3e:d7:59:ae:aa:f5:ca:de:d6:e5:08:1d:3a: 05:ce:a9:db:fa:fd:4e:a4:90:1b:13:57:7b:60:61: af:29:39:4a:cc:76:4d:86:e9:e1:b7:28:69:29:ed: 54:93:99:20:06:87:8c:d5:33:4e:2b:dc:1e:97:7c: fa:1f:79:f0:92:67:20:63:0a:5f:e1:d1:12:a3:6f: 1b:d9:38:1e:75:5f:78:da:d7:c9:94:93:00:f4:62: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DA:EF:63:59:E3:8E:5D:2C:54:8F:DE:8F:8A:C7:40:07:9F:D4:D5 X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/FFF8A36A34E311EE877E760DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:6520::/32 Signature Algorithm: sha256WithRSAEncryption 19:9a:75:28:60:16:20:48:1d:d3:91:7b:9b:18:38:5d:6b:b8: 80:2f:8f:53:9b:90:36:cc:fa:c6:49:45:1e:28:59:5b:a5:26: e2:5d:e4:4b:ad:82:09:87:b6:e6:3b:5c:35:b9:fa:3e:10:12: a1:d9:99:6b:54:ed:b2:84:0b:6b:eb:e7:59:27:c7:88:bc:a1: 07:f3:fa:94:96:77:88:f1:f8:97:8e:2e:d2:51:51:e5:50:ca: 39:ef:9e:da:a8:37:c2:fd:2f:18:13:2d:0e:d2:98:c0:33:59: 4c:2b:32:5f:b0:55:0e:85:e7:91:db:2f:37:76:9e:34:b6:f3: e1:a0:92:3c:fa:5d:36:4d:a0:21:da:d6:d4:c1:f9:4c:3b:e9: e3:e0:0c:69:05:da:7c:d3:2e:f6:aa:a1:93:0a:82:10:d8:cf: 46:d7:da:cd:b9:28:1e:c7:cf:ee:57:51:ad:92:7d:de:a4:e0: ab:17:ac:8e:7c:f0:f5:29:44:b8:12:f3:50:68:f6:71:d6:e4: 51:7a:e5:f5:4f:b2:45:b6:9e:37:8c:a0:cf:ef:79:63:2c:5b: 1f:07:84:7c:c2:01:b6:54:b6:c3:ab:13:77:a5:a8:2d:a2:1e: 9b:c6:d2:96:4f:bf:58:5f:cc:05:e3:1a:04:8d:be:0c:02:b5: 9b:77:5d:9f -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjUwNDA1MDEwNjQwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwODIyMC03M2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgyQLpowF2wrt4SfPEfHH4DgGmnaOi51BoQ4CwVo6mgvQ55FSLQZkR3944xa b+BBteFrUZY8YOk+O6WJuXJCj+UFc2pyxslZJQxDNAp3t1GLgjN48iaUCc3UcBpQ 4lhxkdW6AB4MDF0LU+HI3GUQ3WoVya0ve5lejk9HKMmSuW80ONwoUAXD8l2YAsuh uDP2ia3RsHSMaEeYzQuRRdnihy/GeZVmiT7XWa6q9cre1uUIHToFzqnb+v1OpJAb E1d7YGGvKTlKzHZNhunhtyhpKe1Uk5kgBoeM1TNOK9wel3z6H3nwkmcgYwpf4dES o28b2TgedV942tfJlJMA9GLoCQIDAQABo4ICljCCApIwHQYDVR0OBBYEFK3a72NZ 445dLFSP3o+Kx0AHn9TVMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU0QUUvNkM5RjJERkFBNTAxMTFFQzg5NjQyNzU3QzRGOUFFMDIvRkZGOEEzNkEz NEUzMTFFRTg3N0U3NjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAGUgMA0GCSqGSIb3DQEBCwUAA4IBAQAZmnUoYBYgSB3T kXubGDhda7iAL49Tm5A2zPrGSUUeKFlbpSbiXeRLrYIJh7bmO1w1ufo+EBKh2Zlr VO2yhAtr6+dZJ8eIvKEH8/qUlneI8fiXji7SUVHlUMo5757aqDfC/S8YEy0O0pjA M1lMKzJfsFUOheeR2y83dp40tvPhoJI8+l02TaAh2tbUwflMO+nj4AxpBdp80y72 qqGTCoIQ2M9G19rNuSgex8/uV1Gtkn3epOCrF6yOfPD1KUS4EvNQaPZx1uRReuX1 T7JFtp43jKDP73ljLFsfB4R8wgG2VLbDqxN3pagtoh6bxtKWT79YX8wF4xoEjb4M ArWbd12f -----END CERTIFICATE-----Generated at Sun Apr 6 21:56:52 2025 by rpki-client