$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/06C84D20DC9B11EFB3BCA087C4F9AE02.roa File: 06C84D20DC9B11EFB3BCA087C4F9AE02.roa (raw, json) Hash identifier: jckmyQxpUBI6CgfUPTNi2GpMJpyKjsAzxMXFFNKFXtE= Subject key identifier: 0D:DA:4D:E8:82:D4:89:69:C8:A1:F1:1E:AE:62:72:BA:34:82:4F:62 Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: 1D Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/06C84D20DC9B11EFB3BCA087C4F9AE02.roa Signing time: Mon 27 Jan 2025 10:39:46 +0000 ROA not before: Mon 27 Jan 2025 10:39:46 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153522 IP address blocks: 2401:e920:8100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9 Validity Not Before: Jan 27 10:39:46 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67976272-58d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:a3:8d:b7:a4:fb:8b:16:8c:e3:58:b4:d2: 56:78:1c:1c:db:d5:2f:d8:ce:2c:a9:23:cc:42:f9: f7:e0:5c:21:bd:e1:aa:5b:4a:24:51:e2:c3:22:1c: 69:3a:4f:85:41:85:02:a4:8e:f8:2b:d4:f2:3b:5a: 80:61:a2:80:55:63:6a:27:fd:20:8f:d8:75:2f:a2: cd:b1:1c:f9:54:43:4f:ac:e3:da:c9:7b:15:39:a0: eb:8b:87:fe:a1:df:37:4c:cf:18:8a:8d:27:25:e5: 39:5e:07:e6:69:41:1b:8c:bc:c0:2b:cd:e8:d9:f3: 5e:ec:fe:aa:b9:d5:63:f8:f6:21:78:d1:ba:f7:eb: c7:e1:53:16:88:9a:cc:f7:f8:ab:45:93:53:72:d1: 5d:a9:30:99:14:e7:0a:91:5c:61:67:41:d6:f6:ad: 0c:6a:fd:78:6e:a7:49:72:5f:f3:93:c9:cb:27:8f: 2d:5f:b8:32:63:26:5f:4a:d5:2c:72:41:3d:83:55: a7:16:f7:e3:95:4c:e3:d7:fa:6a:dc:b2:8e:5d:9b: 73:04:a9:6b:3e:3d:e8:8f:8d:8b:49:21:23:51:3a: 7c:4b:c8:b5:d5:6d:ad:6e:50:60:59:79:29:e7:80: d4:dd:f5:15:7c:35:57:d0:3c:dc:53:fd:42:14:c4: 87:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DA:4D:E8:82:D4:89:69:C8:A1:F1:1E:AE:62:72:BA:34:82:4F:62 X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/06C84D20DC9B11EFB3BCA087C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:e920:8100::/40 Signature Algorithm: sha256WithRSAEncryption 05:77:4a:0d:91:48:a1:21:d1:05:19:a1:5f:00:a0:aa:0d:49: a1:d6:a6:74:d3:d8:f8:4d:64:6e:3b:cc:a6:7f:65:2a:33:51: 05:82:26:c7:6a:4c:9e:07:41:ba:2f:d8:fd:e2:53:e6:2d:c8: 74:69:40:7e:94:1c:13:77:44:fc:04:a5:4d:e0:f7:52:01:6d: 2f:8a:98:cb:b8:ec:cb:66:a0:32:3a:2c:ac:b1:64:0d:ce:f6: 72:6b:f0:ad:95:ce:af:bb:19:00:d5:49:53:da:81:10:e6:a8: a7:72:f9:09:e9:2b:3f:3e:cf:3f:e2:99:99:cf:a1:4f:b0:7a: fc:08:05:0f:a6:bf:32:29:c0:1a:14:5c:c9:d4:bf:73:f1:6e: 82:a3:0f:7b:1f:9f:2d:0d:f3:26:82:42:65:58:71:58:2e:10: 24:74:0c:d8:73:5b:e5:8a:09:39:f2:97:be:99:c9:84:a1:0c: 29:45:ce:71:df:52:20:bb:37:1d:a3:8e:61:c8:88:0e:66:f4: 3a:77:bf:75:4c:9a:ef:08:b5:c7:14:22:2d:46:bb:36:97:1c: 56:5d:17:6e:fc:e8:7b:c4:0d:6b:49:14:4a:b3:05:a9:f4:c5: fd:8f:cb:df:38:a7:0e:e7:f2:e6:f0:21:cb:f5:f1:f7:b7:c9: 8c:7c:c5:ea -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODVFOTExMC8GA1UEBRMoRjY5OEI1QjQ3QTA2RDUzMDdERUM2MDg5NjkwNjMwNzRC NjhGRjVDQTAeFw0yNTAxMjcxMDM5NDZaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OTc2MjcyLTU4ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIiqONt6T7ixaM41i00lZ4HBzb1S/YziypI8xC+ffgXCG94apbSiRR4sMiHGk6 T4VBhQKkjvgr1PI7WoBhooBVY2on/SCP2HUvos2xHPlUQ0+s49rJexU5oOuLh/6h 3zdMzxiKjScl5TleB+ZpQRuMvMArzejZ817s/qq51WP49iF40br368fhUxaImsz3 +KtFk1Ny0V2pMJkU5wqRXGFnQdb2rQxq/Xhup0lyX/OTycsnjy1fuDJjJl9K1Sxy QT2DVacW9+OVTOPX+mrcso5dm3MEqWs+PeiPjYtJISNROnxLyLXVba1uUGBZeSnn gNTd9RV8NVfQPNxT/UIUxIeVAgMBAAGjggKXMIICkzAdBgNVHQ4EFgQUDdpN6ILU iWnIofEermJyujSCT2IwHwYDVR0jBBgwFoAU9pi1tHoG1TB97GCJaQYwdLaP9cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NUU5L0M5MjgwNDNBRDE3 NjExRUY5NUM1REU1QUM0RjlBRTAyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDlj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXBpMXRIb0cxVEI5N0dDSmFRWXdkTGFQOWNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DOTI4MDQzQUQxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi8wNkM4NEQyMERD OUIxMUVGQjNCQ0EwODdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAhBggrBgEFBQcBBwEB/wQS MBAwDgQCAAIwCAMGACQB6SCBMA0GCSqGSIb3DQEBCwUAA4IBAQAFd0oNkUihIdEF GaFfAKCqDUmh1qZ009j4TWRuO8ymf2UqM1EFgibHakyeB0G6L9j94lPmLch0aUB+ lBwTd0T8BKVN4PdSAW0vipjLuOzLZqAyOiyssWQNzvZya/Ctlc6vuxkA1UlT2oEQ 5qincvkJ6Ss/Ps8/4pmZz6FPsHr8CAUPpr8yKcAaFFzJ1L9z8W6Cow97H58tDfMm gkJlWHFYLhAkdAzYc1vligk58pe+mcmEoQwpRc5x31Iguzcdo45hyIgOZvQ6d791 TJrvCLXHFCItRrs2lxxWXRdu/Oh7xA1rSRRKswWp9MX9j8vfOKcO5/Lm8CHL9fH3 t8mMfMXq -----END CERTIFICATE-----Generated at Sat Apr 5 07:06:46 2025 by rpki-client