$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/89D7E6869E9211EF8726F76AC4F9AE02.roa File: 89D7E6869E9211EF8726F76AC4F9AE02.roa (raw, json) Hash identifier: eR3ZfuR9RyqPpaPkm8/eTtTofU/j1Qdzro/M+iP00QE= Subject key identifier: 15:2C:82:C2:22:DB:32:A0:21:46:65:61:AA:9C:8B:2D:03:D0:67:8D Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: D5 Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/89D7E6869E9211EF8726F76AC4F9AE02.roa Signing time: Thu 03 Apr 2025 05:02:51 +0000 ROA not before: Thu 03 Apr 2025 05:02:51 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 152482 IP address blocks: 2001:df3:7940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE Validity Not Before: Apr 3 05:02:51 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67ee167b-4dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:35:96:2d:64:17:39:09:f8:ea:d4:d0:c9: 35:93:56:33:f2:1c:f2:ca:78:fc:a4:dc:1b:0f:1d: cd:da:5a:4e:f4:58:59:10:85:d3:d7:9c:9d:c0:1b: 5d:89:14:b1:1c:32:4d:77:cb:b5:68:24:a5:34:6b: 7d:05:cd:7f:10:7b:b9:08:2c:1b:cf:01:ae:ee:2a: 3b:97:8c:b9:82:96:d1:dc:f8:14:bc:ce:ac:3f:e3: 9a:22:d5:e3:62:8a:16:fa:00:70:00:62:9a:72:18: 52:ec:15:d3:d5:9e:bd:37:58:70:28:32:27:13:55: af:ad:3f:bc:f4:b6:f1:e0:b4:22:17:11:5a:81:b6: 73:d4:c2:fe:1e:f5:e0:43:85:fb:86:ea:74:65:a1: 5c:5b:c4:a6:e7:d7:12:63:03:40:4a:9c:03:f0:3a: fe:e3:ad:60:f9:68:fe:82:e3:b6:93:ba:46:51:ac: 0a:84:57:8c:b1:79:8b:2b:db:0c:0b:73:f7:41:4a: d8:66:9c:af:2a:3e:ea:ab:b3:bd:a7:a0:ce:65:9d: fd:cc:cc:98:1e:70:31:a7:4d:e7:09:b4:16:84:a5: 23:69:1d:05:cd:49:bb:79:00:ab:3b:46:8e:ea:6e: f9:ef:b6:68:4e:b2:d4:11:e0:bb:ed:36:b5:42:c1: 2d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2C:82:C2:22:DB:32:A0:21:46:65:61:AA:9C:8B:2D:03:D0:67:8D X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/89D7E6869E9211EF8726F76AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:7940::/48 Signature Algorithm: sha256WithRSAEncryption 13:aa:fc:ca:c1:d0:62:d1:3d:3e:4c:76:c1:c4:83:2e:b8:51: 97:99:26:4f:bc:df:21:e8:0e:dc:93:e9:f2:b1:87:3e:d4:a6: d1:1a:25:45:6d:e7:25:b1:3c:e4:be:bc:92:51:c3:d5:3c:1f: 4d:b4:68:4f:9b:73:98:ad:4c:90:a6:b7:de:0c:18:a2:66:1d: 56:8e:88:ee:a0:79:17:27:61:d9:d5:6c:4d:ee:ac:01:ef:94: 7a:be:2e:11:14:fa:ff:2a:c4:ac:96:f7:7b:58:7e:17:db:cb: 91:53:06:78:7c:e9:55:44:9b:c7:85:4a:39:80:8e:6a:01:90: 9f:e6:d5:73:af:cf:02:5d:46:2c:7f:f4:40:be:aa:df:bc:af: 87:6f:96:a6:79:03:56:2b:a2:65:a4:41:12:57:87:a5:d3:df: 22:e0:07:55:f2:5b:59:75:ea:c7:38:e2:e7:0f:1a:31:63:b4: b7:c0:88:83:69:82:1b:28:8f:1a:0e:26:fa:7a:61:e4:d7:f1: 92:06:e7:0e:8f:06:ec:f5:b5:36:8c:87:93:12:4c:57:27:3a: e6:17:57:4f:0d:9b:03:2c:fa:4c:2d:f0:6f:fb:f2:25:6c:83: 02:0d:54:3a:fc:f4:f0:31:b3:95:0a:8e:cf:cc:67:1a:6c:e5: 46:61:17:4e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKEREMzZFNDVDNzFEM0Q5MkIzQ0QxQTcyRDVGNUFCMzI1 QjM0NkFEQ0EwHhcNMjUwNDAzMDUwMjUxWhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VlMTY3Yi00ZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCo1li1kFzkJ+OrU0Mk1k1Yz8hzyynj8pNwbDx3N2lpO9FhZEIXT15ydwBtd iRSxHDJNd8u1aCSlNGt9Bc1/EHu5CCwbzwGu7io7l4y5gpbR3PgUvM6sP+OaItXj YooW+gBwAGKachhS7BXT1Z69N1hwKDInE1WvrT+89Lbx4LQiFxFagbZz1ML+HvXg Q4X7hup0ZaFcW8Sm59cSYwNASpwD8Dr+461g+Wj+guO2k7pGUawKhFeMsXmLK9sM C3P3QUrYZpyvKj7qq7O9p6DOZZ39zMyYHnAxp03nCbQWhKUjaR0FzUm7eQCrO0aO 6m7577ZoTrLUEeC77Ta1QsEtyQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBUsgsIi 2zKgIUZlYaqciy0D0GeNMB8GA1UdIwQYMBaAFN025Fxx09krPNGnLV9asyWzRq3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS83OEJEMzIyNEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJTczgwYWN0WDFxekpiTkdy Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0I0QkUvNzhCRDMyMjRDQ0Y3MTFFRTlFODlENjdBQzRGOUFFMDIvODlEN0U2ODY5 RTkyMTFFRjg3MjZGNzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zeUAwDQYJKoZIhvcNAQELBQADggEBABOq/MrB0GLR PT5MdsHEgy64UZeZJk+83yHoDtyT6fKxhz7UptEaJUVt5yWxPOS+vJJRw9U8H020 aE+bc5itTJCmt94MGKJmHVaOiO6geRcnYdnVbE3urAHvlHq+LhEU+v8qxKyW93tY fhfby5FTBnh86VVEm8eFSjmAjmoBkJ/m1XOvzwJdRix/9EC+qt+8r4dvlqZ5A1Yr omWkQRJXh6XT3yLgB1XyW1l16sc44ucPGjFjtLfAiINpghsojxoOJvp6YeTX8ZIG 5w6PBuz1tTaMh5MSTFcnOuYXV08NmwMs+kwt8G/78iVsgwINVDr89PAxs5UKjs/M Zxps5UZhF04= -----END CERTIFICATE-----Generated at Sat Apr 5 06:04:47 2025 by rpki-client