$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/3AA17754FD8211EFB5BB677AC4F9AE02.roa File: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (raw, json) Hash identifier: da3U2GtkpOoVBwWufrocmgg3FRuPwauXLqHebrDKF4w= Subject key identifier: F9:90:44:40:57:DE:5E:BB:99:8B:9E:68:C2:AA:CA:5F:17:C2:8A:80 Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Certificate serial: 1D Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/3AA17754FD8211EFB5BB677AC4F9AE02.roa Signing time: Mon 10 Mar 2025 07:35:24 +0000 ROA not before: Mon 10 Mar 2025 07:35:24 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 141383 IP address blocks: 2001:df4:ffc0::/48 maxlen: 52 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DE3D Validity Not Before: Mar 10 07:35:24 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67ce963c-3179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f9:d5:65:5f:b6:40:b6:b0:43:45:db:e2:66: ed:90:ae:db:4b:27:05:9f:b4:2a:21:75:76:12:8e: 4d:a9:d7:77:bb:e5:0d:c6:24:da:77:ce:4d:d9:fb: cf:69:d9:87:62:b4:c0:92:ca:51:5b:12:76:a4:50: 50:fe:b2:3a:29:ad:11:bc:0a:e4:8f:ac:fe:c2:ee: c3:88:e2:0b:07:27:4d:77:f0:4c:b4:eb:cf:3a:18: cc:fd:2f:0f:0b:d0:b1:8c:5e:91:ad:4c:53:ec:fc: 09:c9:0c:f4:21:43:45:74:26:dc:51:82:28:b8:e1: 26:88:aa:22:f0:d9:9f:c1:ee:11:ad:aa:6d:70:00: 2e:7c:e2:57:de:72:c8:b2:bb:55:1a:ff:ed:65:5f: 9d:9a:0a:e6:3f:f1:25:8c:5d:b1:45:a1:d8:fe:7b: 3f:0a:f4:18:e0:c7:0a:79:e9:bd:86:41:db:fb:ce: 8b:a4:b7:30:54:fb:b9:0c:fb:98:89:55:6f:c4:08: f9:70:47:19:f8:fb:73:ba:c8:ae:16:3f:5d:fa:5b: 02:59:59:2b:48:79:f5:6e:f5:63:95:60:64:24:36: 6d:8b:2d:d3:ae:ff:ba:3e:dd:36:0f:be:69:10:35: b0:06:c3:70:ba:42:5d:c9:74:39:fa:4a:cb:eb:85: f7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:90:44:40:57:DE:5E:BB:99:8B:9E:68:C2:AA:CA:5F:17:C2:8A:80 X509v3 Authority Key Identifier: keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/3AA17754FD8211EFB5BB677AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:ffc0::/48 Signature Algorithm: sha256WithRSAEncryption 20:d4:08:fd:81:69:e4:ee:ae:04:8b:b8:6d:a7:2f:d2:4a:91: 4f:b7:e8:95:67:d6:f2:72:89:f3:94:71:f3:a6:b8:c2:c0:20: db:8d:96:74:8d:7a:5a:d6:17:99:60:88:33:46:d3:ff:af:e6: 2d:bd:40:d8:a5:c1:94:27:f9:ca:5c:ea:26:fc:9b:6b:3e:19: 62:1f:41:ee:9a:c3:59:cc:3d:59:83:ab:e4:f4:e1:af:8d:f6: 2c:7a:23:bb:90:9a:0b:3d:74:32:5a:e3:d2:18:aa:92:15:01: 5f:28:a9:2f:39:68:88:f4:a6:f2:73:6c:16:fc:ea:d4:b2:e2: f9:24:b5:c4:9f:45:50:0b:09:95:92:e4:c0:bd:b8:79:1e:9e: c1:cd:4f:6e:1d:73:01:69:d9:38:d4:ac:55:e3:ef:43:a9:79: ce:7e:4a:52:5a:6c:20:88:f2:d1:39:8f:ad:38:f5:c3:d8:42: af:e5:b0:29:11:18:95:9c:cc:aa:11:5b:cd:0d:31:9a:1c:64: 49:8b:55:ed:99:3f:40:4b:54:1b:a4:54:a6:4d:b1:06:fa:45: 2a:78:44:89:f6:2b:7f:9a:1f:bc:f0:32:82:e8:a3:1f:cb:44: d4:07:c7:69:2b:85:f6:bd:4b:a8:ec:e4:6b:f5:1f:4a:86:b3: 67:f4:8e:d4 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REUzRDExMC8GA1UEBRMoNjkxODFDRjQ1MUY4QjNGRUM2NEZDODI5OEI1MjJENDg4 Q0E1QzlFNjAeFw0yNTAzMTAwNzM1MjRaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Y2U5NjNjLTMxNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe+dVlX7ZAtrBDRdviZu2QrttLJwWftCohdXYSjk2p13e75Q3GJNp3zk3Z+89p 2YditMCSylFbEnakUFD+sjoprRG8CuSPrP7C7sOI4gsHJ0138Ey06886GMz9Lw8L 0LGMXpGtTFPs/AnJDPQhQ0V0JtxRgii44SaIqiLw2Z/B7hGtqm1wAC584lfecsiy u1Ua/+1lX52aCuY/8SWMXbFFodj+ez8K9Bjgxwp56b2GQdv7zouktzBU+7kM+5iJ VW/ECPlwRxn4+3O6yK4WP136WwJZWStIefVu9WOVYGQkNm2LLdOu/7o+3TYPvmkQ NbAGw3C6Ql3JdDn6SsvrhfeJAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQU+ZBEQFfe XruZi55owqrKXxfCioAwHwYDVR0jBBgwFoAUaRgc9FH4s/7GT8gpi1ItSIylyeYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERTNEL0ZEMUU0NTUwREU2 NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHll WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVJnYzlGSDRzXzdHVDhncGkxSXRTSXlseWVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REUzRC9GRDFFNDU1MERFNjUxMUVGODI0M0VFMzBDNEY5QUUwMi8zQUExNzc1NEZE ODIxMUVGQjVCQjY3N0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfT/wDANBgkqhkiG9w0BAQsFAAOCAQEAINQI/YFp5O6u BIu4bacv0kqRT7folWfW8nKJ85Rx86a4wsAg242WdI16WtYXmWCIM0bT/6/mLb1A 2KXBlCf5ylzqJvybaz4ZYh9B7prDWcw9WYOr5PThr432LHoju5CaCz10Mlrj0hiq khUBXyipLzloiPSm8nNsFvzq1LLi+SS1xJ9FUAsJlZLkwL24eR6ewc1Pbh1zAWnZ ONSsVePvQ6l5zn5KUlpsIIjy0TmPrTj1w9hCr+WwKREYlZzMqhFbzQ0xmhxkSYtV 7Zk/QEtUG6RUpk2xBvpFKnhEifYrf5ofvPAyguijH8tE1AfHaSuF9r1LqOzka/Uf SoazZ/SO1A== -----END CERTIFICATE-----Generated at Sat Apr 5 02:13:28 2025 by rpki-client