$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/DF8D07E8FB7E11EFA25DF775C4F9AE02.roa File: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (raw, json) Hash identifier: unM5ewA/QOJvINE5uAU/tFjaV4piAYCJJAvmIWLeMb8= Subject key identifier: DC:AD:5F:FD:16:EB:86:25:E1:CB:57:1B:D8:16:F1:F5:37:83:26:A8 Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 0898 Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/DF8D07E8FB7E11EFA25DF775C4F9AE02.roa Signing time: Fri 07 Mar 2025 18:06:21 +0000 ROA not before: Fri 07 Mar 2025 18:06:21 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 400105 IP address blocks: 2001:df4:d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 20:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2200 (0x898) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39 Validity Not Before: Mar 7 18:06:21 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67cb359c-3d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e1:25:98:e7:66:9d:86:7e:d2:13:fd:66:b2: dd:f3:d5:8c:28:29:89:0d:ac:3e:14:ec:99:94:10: 5d:f3:70:35:69:df:f4:1b:24:2b:31:de:a7:d8:ca: 0f:6e:db:22:05:f9:5e:80:2d:2e:29:3c:6b:1c:09: eb:22:a4:69:35:b3:e2:2e:7e:6d:bd:7b:74:30:ab: 87:6f:03:07:1e:aa:e2:e1:f2:ff:32:39:37:25:bf: c8:26:e3:60:78:d7:24:a3:77:85:62:72:c0:77:5c: 2d:4a:5b:29:7c:73:ef:0d:2d:fc:5f:ef:6b:16:fa: 35:ed:ba:66:a3:40:65:f8:be:d2:4e:03:bc:1f:1b: 28:6b:56:09:59:c3:88:71:53:6d:b1:de:5a:0f:7f: d3:b7:c3:df:4d:3a:f7:07:01:75:07:47:d2:5e:36: d5:2a:90:b0:51:7b:8d:83:83:44:3f:2f:0a:82:ba: 3d:30:92:0f:fe:1f:60:3e:bc:96:e7:74:e1:c0:a6: b2:89:a5:fb:9c:ba:cf:74:93:c5:0d:5e:bc:79:08: b4:15:ed:15:e7:14:1b:3e:c8:9b:57:66:6c:28:bd: 57:01:14:cf:68:6b:4e:61:3f:71:74:33:7f:00:79: 88:4e:41:e3:f4:f8:b8:7c:88:2e:d6:f3:59:63:d3: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AD:5F:FD:16:EB:86:25:E1:CB:57:1B:D8:16:F1:F5:37:83:26:A8 X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/DF8D07E8FB7E11EFA25DF775C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:d80::/48 Signature Algorithm: sha256WithRSAEncryption 99:d1:da:75:57:7c:54:15:95:60:ac:74:fa:cd:36:94:da:25: ec:88:18:18:4a:5c:88:2e:0f:12:b8:aa:b9:fc:73:7c:ef:48: 60:1e:6a:98:e4:d8:82:fb:59:b6:de:82:cb:84:db:c8:fa:08: be:66:ea:0f:f3:bc:f1:a6:22:ae:90:13:ed:8c:e2:74:3a:9f: 20:a6:75:79:71:1c:f8:a0:ff:79:92:6f:80:04:9a:36:69:8b: b3:5a:80:0b:ba:fb:a1:34:e4:1e:8e:a4:8d:63:59:22:8d:38: 41:7b:79:4e:c2:89:7a:c1:ff:53:77:d2:bd:e9:df:7e:15:ca: 92:ab:a0:9e:00:db:e3:76:f6:ba:ab:69:98:e1:49:cd:67:67: ee:b3:ec:92:b5:a0:00:96:73:ab:39:9c:8d:69:00:1d:86:fe: 8f:35:1c:c8:95:81:87:7c:7f:43:01:92:76:fc:6f:58:a7:ca: 94:99:c0:ce:17:23:21:24:86:83:57:37:12:13:0b:6e:0f:7f: bc:06:ed:f7:c8:73:07:5a:b7:04:8e:c9:76:69:ef:c1:16:1a: 2d:a7:5f:9c:c8:44:39:8d:c5:89:d1:f7:77:34:26:40:24:e9: f6:43:c0:2c:d5:0a:47:2e:74:7f:c9:d1:85:f4:a7:af:14:35: 9a:5b:32:c4 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjUwMzA3MTgwNjIxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NiMzU5Yy0zZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eElmOdmnYZ+0hP9ZrLd89WMKCmJDaw+FOyZlBBd83A1ad/0GyQrMd6n2MoP btsiBflegC0uKTxrHAnrIqRpNbPiLn5tvXt0MKuHbwMHHqri4fL/Mjk3Jb/IJuNg eNcko3eFYnLAd1wtSlspfHPvDS38X+9rFvo17bpmo0Bl+L7STgO8Hxsoa1YJWcOI cVNtsd5aD3/Tt8PfTTr3BwF1B0fSXjbVKpCwUXuNg4NEPy8Kgro9MJIP/h9gPryW 53ThwKayiaX7nLrPdJPFDV68eQi0Fe0V5xQbPsibV2ZsKL1XARTPaGtOYT9xdDN/ AHmITkHj9Pi4fIgu1vNZY9O/5wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNytX/0W 64Yl4ctXG9gW8fU3gyaoMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjZDMzkvMjdFRUNGRDBCQjk3MTFFQUExQTY2QzUzQzRGOUFFMDIvREY4RDA3RThG QjdFMTFFRkEyNURGNzc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30DYAwDQYJKoZIhvcNAQELBQADggEBAJnR2nVXfFQV lWCsdPrNNpTaJeyIGBhKXIguDxK4qrn8c3zvSGAeapjk2IL7WbbegsuE28j6CL5m 6g/zvPGmIq6QE+2M4nQ6nyCmdXlxHPig/3mSb4AEmjZpi7NagAu6+6E05B6OpI1j WSKNOEF7eU7CiXrB/1N30r3p334VypKroJ4A2+N29rqraZjhSc1nZ+6z7JK1oACW c6s5nI1pAB2G/o81HMiVgYd8f0MBknb8b1inypSZwM4XIyEkhoNXNxITC24Pf7wG 7ffIcwdatwSOyXZp78EWGi2nX5zIRDmNxYnR93c0JkAk6fZDwCzVCkcudH/J0YX0 p68UNZpbMsQ= -----END CERTIFICATE-----Generated at Wed Apr 9 02:18:26 2025 by rpki-client