$ rpki-client -vvf rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/6F89ECBE80D611E99C76DF63C4F9AE02.roa File: 6F89ECBE80D611E99C76DF63C4F9AE02.roa (raw, json) Hash identifier: aXwfGlxqPqu7b393NAPdLMtIQdRhwXxgAFjX3VEBtag= Subject key identifier: 2D:FA:87:6C:03:F4:06:D6:B9:49:1B:B2:96:77:C1:E9:61:AA:E2:20 Certificate issuer: /CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79 Certificate serial: 0EC9 Authority key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/6F89ECBE80D611E99C76DF63C4F9AE02.roa Signing time: Mon 31 Mar 2025 17:47:09 +0000 ROA not before: Mon 31 Mar 2025 17:47:09 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 56123 IP address blocks: 115.124.8.0/21 maxlen: 21 2407:a200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 17:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3785 (0xec9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672F2, serialNumber=11D57A757ED56575D049E429C8EC737A56050B79 Validity Not Before: Mar 31 17:47:09 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ead51d-46f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:ff:80:13:fd:8e:e9:32:14:92:8e:21:47: 9f:8c:a7:0e:d3:d0:3e:34:38:bf:2d:05:df:2f:1e: a1:75:2c:7b:53:b4:61:46:5f:6e:3f:6a:12:ce:41: f2:2a:f4:bb:5a:75:a5:58:a5:72:d9:d8:2b:60:84: fa:fc:a2:ab:ca:2c:4d:2d:27:8a:79:89:e4:57:e8: ed:af:ea:7e:99:f2:48:a8:9a:f1:02:40:cc:78:cf: 84:6a:7d:72:cb:b9:6a:74:32:6c:8c:4b:b7:0f:2e: 34:1d:d4:9c:5d:08:5f:65:bd:7b:46:1f:5b:7a:fa: a4:7e:89:58:20:04:74:63:a4:69:34:98:8b:e0:0e: 9a:a9:08:d7:3f:5c:ab:47:56:3b:2b:6e:09:cc:35: 6b:e2:ff:8e:98:d0:ed:ae:13:2c:47:36:32:f5:dd: 7c:46:f4:46:62:13:be:53:91:50:0b:3f:5c:fd:4c: 90:1f:7e:35:67:cc:ee:38:af:1a:b2:e8:d2:b8:6e: 99:80:ed:1e:ad:ba:1e:5e:54:71:09:86:1c:5c:5e: bd:10:e0:18:5e:2d:c1:b6:18:b4:c3:40:e1:02:36: eb:df:84:9a:bd:75:5c:dd:81:be:e5:56:75:59:90: 03:65:c4:4a:e2:d2:0d:5b:cc:e2:f0:c0:e5:4c:ca: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FA:87:6C:03:F4:06:D6:B9:49:1B:B2:96:77:C1:E9:61:AA:E2:20 X509v3 Authority Key Identifier: keyid:11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/6F89ECBE80D611E99C76DF63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.124.8.0/21 IPv6: 2407:a200::/32 Signature Algorithm: sha256WithRSAEncryption ab:5f:b8:f8:75:21:d3:2c:b8:35:49:5b:cc:bc:56:d4:36:58: 8f:f3:d0:87:d4:9e:79:f4:0a:e7:8f:33:30:27:5b:35:aa:4d: 86:7c:55:96:ec:bd:7b:c7:be:b7:f0:06:82:b1:c5:42:a6:04: a4:a5:a7:34:31:de:3f:01:56:4f:c2:44:a5:d7:16:9a:0c:5c: 7a:d6:63:04:77:32:22:41:bf:e9:cf:e4:b1:66:fc:c0:16:02: 1b:bc:df:88:18:77:6e:4f:c0:be:15:36:67:70:c4:7a:20:a7: da:36:82:f9:93:60:1c:6d:cf:89:70:4b:3f:d3:84:f2:e2:31: 8a:77:d6:cb:de:f5:b0:cb:7e:e7:1d:84:c4:27:7c:f5:a0:18: cd:41:42:80:2c:ea:a3:45:ca:4a:3a:a6:48:e4:2c:2a:a1:d2: 15:e2:19:52:a4:89:e5:6a:e5:c5:be:57:d0:6d:ce:ff:19:ea: 92:38:4f:ca:fe:02:68:ab:74:a7:5c:3a:81:f0:fc:cd:ff:05: 38:87:71:85:19:00:38:8c:1b:c0:30:04:6a:28:56:49:3e:62: ec:d3:7b:f7:e2:c4:6e:9e:ee:b1:3b:fc:a6:9a:43:84:00:aa: 67:ff:e1:c0:54:0c:c3:49:d8:eb:6f:14:ce:36:c5:fe:e8:6d: ed:cf:18:4f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRjIxMTAvBgNVBAUTKDExRDU3QTc1N0VENTY1NzVEMDQ5RTQyOUM4RUM3MzdB NTYwNTBCNzkwHhcNMjUwMzMxMTc0NzA5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhZDUxZC00NmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJj/gBP9jukyFJKOIUefjKcO09A+NDi/LQXfLx6hdSx7U7RhRl9uP2oSzkHy KvS7WnWlWKVy2dgrYIT6/KKryixNLSeKeYnkV+jtr+p+mfJIqJrxAkDMeM+Ean1y y7lqdDJsjEu3Dy40HdScXQhfZb17Rh9bevqkfolYIAR0Y6RpNJiL4A6aqQjXP1yr R1Y7K24JzDVr4v+OmNDtrhMsRzYy9d18RvRGYhO+U5FQCz9c/UyQH341Z8zuOK8a sujSuG6ZgO0erboeXlRxCYYcXF69EOAYXi3Bthi0w0DhAjbr34SavXVc3YG+5VZ1 WZADZcRK4tINW8zi8MDlTMq6swIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFC36h2wD 9AbWuUkbspZ3welhquIgMB8GA1UdIwQYMBaAFBHVenV+1WV10EnkKcjsc3pWBQt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJGMi9ERDhFQzFDODgw RDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpYWFFTZVFweU94emVsWUZD M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkVjZkWDdWWlhYUVNlUXB5T3h6ZWxZRkMzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjcyRjIvREQ4RUMxQzg4MEQ0MTFFOUE5QzlDNzVFQzRGOUFFMDIvNkY4OUVDQkU4 MEQ2MTFFOTlDNzZERjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBANzfAgwDQQCAAIwBwMFACQHogAwDQYJKoZIhvcNAQELBQAD ggEBAKtfuPh1IdMsuDVJW8y8VtQ2WI/z0IfUnnn0CuePMzAnWzWqTYZ8VZbsvXvH vrfwBoKxxUKmBKSlpzQx3j8BVk/CRKXXFpoMXHrWYwR3MiJBv+nP5LFm/MAWAhu8 34gYd25PwL4VNmdwxHogp9o2gvmTYBxtz4lwSz/ThPLiMYp31sve9bDLfucdhMQn fPWgGM1BQoAs6qNFyko6pkjkLCqh0hXiGVKkieVq5cW+V9Btzv8Z6pI4T8r+Amir dKdcOoHw/M3/BTiHcYUZADiMG8AwBGooVkk+YuzTe/fixG6e7rE7/KaaQ4QAqmf/ 4cBUDMNJ2OtvFM42xf7obe3PGE8= -----END CERTIFICATE-----Generated at Tue Apr 15 15:10:59 2025 by rpki-client