$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/B34C91C4B14311EF8479AA21C4F9AE02.roa File: B34C91C4B14311EF8479AA21C4F9AE02.roa (raw, json) Hash identifier: zX8SsdngBGocfr0PjyPYjkXeGxhOELPXVhgI6hsEekQ= Subject key identifier: 83:1F:47:96:A9:81:2F:10:DD:EF:BA:8A:27:C3:4C:0D:F0:F0:A8:36 Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0AB6 Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/B34C91C4B14311EF8479AA21C4F9AE02.roa Signing time: Tue 03 Dec 2024 06:56:20 +0000 ROA not before: Tue 03 Dec 2024 06:56:20 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 131243 IP address blocks: 2001:df3:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2742 (0xab6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0 Validity Not Before: Dec 3 06:56:20 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674eab94-72e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:e1:97:26:aa:a2:4c:62:c1:ba:00:e3:9f: 07:40:b0:6c:84:04:2d:f6:6a:65:1c:c9:b0:65:11: c7:6e:32:30:a3:0f:5f:bb:a9:8e:b8:3a:92:27:d4: 1b:7a:e4:58:19:7b:95:c8:15:28:bc:4a:80:49:d7: 6c:31:33:7d:09:47:e0:27:38:12:19:66:64:58:94: b7:a3:f0:0b:f7:d5:4e:d6:34:53:e3:4e:ab:59:74: 3d:d0:f1:2e:16:c9:94:f8:31:6e:3c:8d:ef:6e:43: 54:69:5a:93:4d:6c:90:51:9c:4e:04:11:4f:a7:6c: f6:09:d1:25:7e:fd:f9:c3:48:ee:b3:ba:49:22:36: 53:07:29:08:3e:1f:7a:3f:be:bc:b8:3a:fe:5a:40: 92:c0:90:5c:02:f4:28:c9:7a:dc:a9:df:02:b1:3f: 10:15:74:52:45:d2:74:cf:d4:5d:b6:13:31:c7:e2: 76:a7:6d:64:f0:82:54:37:ca:77:f9:0f:4f:44:13: c7:06:ff:03:a0:36:91:6d:2a:25:51:4e:e5:34:3e: 0b:b7:50:db:c1:a2:8c:10:df:1e:79:4d:12:0b:a2: c1:76:5c:8b:28:13:25:ac:65:80:c4:ba:21:3a:cf: 5a:4c:a8:87:a8:3b:a5:7c:2f:db:09:97:78:e3:8c: 1c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1F:47:96:A9:81:2F:10:DD:EF:BA:8A:27:C3:4C:0D:F0:F0:A8:36 X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/B34C91C4B14311EF8479AA21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:500::/48 Signature Algorithm: sha256WithRSAEncryption b7:fe:8c:35:84:9b:9b:25:32:88:8a:d8:14:59:60:e9:ba:04: 54:7b:95:22:49:18:1f:a8:65:0e:44:ba:86:25:7c:e5:14:0b: 88:75:c5:e5:40:93:2c:12:54:a8:34:8e:e0:25:e8:00:cc:5b: af:6a:fd:0f:78:c7:a9:96:b1:75:14:e9:29:25:fe:9c:e7:2c: 9c:fb:47:7b:00:74:0b:92:b9:39:15:df:ba:f8:dc:17:99:70: fd:36:0d:25:5c:91:9d:67:0a:70:59:12:98:fd:82:21:52:ad: d4:6b:5d:8e:8c:0c:41:2a:64:00:ec:68:fc:07:fd:c3:e6:92: 31:ff:55:4d:9f:36:bc:f7:1c:d0:a7:f3:51:81:94:fd:87:6c: ac:fd:2e:b1:14:7f:b8:c6:16:00:f6:57:a5:7a:fc:db:3e:1d: 42:c4:8d:cb:04:6a:3d:08:ee:0a:11:00:97:68:0d:fb:92:da: 76:68:eb:06:ce:0b:2a:d7:6c:73:70:d3:24:a5:91:73:ac:3b: d5:e9:7e:ba:a9:8f:15:4a:8e:69:4d:c0:ca:a4:4d:5d:fc:67: b2:3d:4c:60:bd:65:43:a4:7b:4e:e1:5e:1e:4c:8f:9e:1b:de: f5:2e:11:d8:2f:20:ae:d6:d5:72:76:d8:66:b8:44:fe:a7:b4: 50:81:49:18 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjQxMjAzMDY1NjIwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlYWI5NC03MmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcfhlyaqokxiwboA458HQLBshAQt9mplHMmwZRHHbjIwow9fu6mOuDqSJ9Qb euRYGXuVyBUovEqASddsMTN9CUfgJzgSGWZkWJS3o/AL99VO1jRT406rWXQ90PEu FsmU+DFuPI3vbkNUaVqTTWyQUZxOBBFPp2z2CdElfv35w0jus7pJIjZTBykIPh96 P768uDr+WkCSwJBcAvQoyXrcqd8CsT8QFXRSRdJ0z9RdthMxx+J2p21k8IJUN8p3 +Q9PRBPHBv8DoDaRbSolUU7lND4Lt1DbwaKMEN8eeU0SC6LBdlyLKBMlrGWAxLoh Os9aTKiHqDulfC/bCZd444wcaQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIMfR5ap gS8Q3e+6iifDTA3w8Kg2MB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTIyRTAvQzlCOTBGRjg0Njg4MTFFQUFDRjE4QTI4QzRGOUFFMDIvQjM0QzkxQzRC MTQzMTFFRjg0NzlBQTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zBQAwDQYJKoZIhvcNAQELBQADggEBALf+jDWEm5sl MoiK2BRZYOm6BFR7lSJJGB+oZQ5EuoYlfOUUC4h1xeVAkywSVKg0juAl6ADMW69q /Q94x6mWsXUU6Skl/pznLJz7R3sAdAuSuTkV37r43BeZcP02DSVckZ1nCnBZEpj9 giFSrdRrXY6MDEEqZADsaPwH/cPmkjH/VU2fNrz3HNCn81GBlP2HbKz9LrEUf7jG FgD2V6V6/Ns+HULEjcsEaj0I7goRAJdoDfuS2nZo6wbOCyrXbHNw0ySlkXOsO9Xp frqpjxVKjmlNwMqkTV38Z7I9TGC9ZUOke07hXh5Mj54b3vUuEdgvIK7W1XJ22Ga4 RP6ntFCBSRg= -----END CERTIFICATE-----Generated at Sat Apr 5 22:18:20 2025 by rpki-client