$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/30A1B4D0C67E11EEB4008058C4F9AE02.roa File: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (raw, json) Hash identifier: F4PEaJfd6HP1/7qcDw3hvzZGyQ0ocll5S0CbxU1lwXk= Subject key identifier: 66:3A:24:75:F7:3F:98:24:A8:BC:BD:39:46:6E:C0:2E:F4:AD:A2:E0 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: C6 Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/30A1B4D0C67E11EEB4008058C4F9AE02.roa Signing time: Tue 25 Feb 2025 07:08:44 +0000 ROA not before: Tue 25 Feb 2025 07:08:44 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 152456 IP address blocks: 2001:df3:7040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1 Validity Not Before: Feb 25 07:08:44 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67bd6c7c-eee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:55:0a:cb:e1:bb:ee:75:7d:82:69:5c:87:08: 8e:ec:a3:e7:1c:f1:74:b6:09:49:9e:84:3f:ce:03: 09:47:3e:f4:b9:65:1b:46:85:97:8c:84:d0:ca:5c: 0a:e2:99:ca:ef:92:ff:5c:5a:64:c1:e6:ae:e8:93: d4:03:32:21:68:6b:8c:25:3a:4b:b8:12:e2:e7:a4: 62:43:c0:57:eb:0d:1d:20:f9:eb:83:8d:76:49:ff: a7:51:8b:6b:b6:ce:a9:dc:5d:ba:6b:0b:b4:29:77: de:e7:5d:0d:6f:f7:7d:c4:10:f5:e2:8f:96:8a:0f: 8d:12:52:12:17:39:43:21:6a:5e:e8:93:1b:11:aa: 6c:bd:07:46:fe:bf:f1:a3:d6:6a:a1:27:55:85:1f: 2e:33:97:63:e1:50:1b:c2:23:b1:c3:3f:28:be:fe: d4:7b:41:21:c8:8e:bc:a2:30:c2:76:c6:8a:02:99: 29:0b:98:fc:a4:d2:b4:13:85:a5:59:5b:8d:d7:67: 24:b8:bc:4f:1b:c9:28:0a:f7:94:a5:5e:c6:c7:41: ab:2e:71:77:53:9d:95:2a:42:10:1c:ca:58:59:2b: 8d:64:8f:c0:54:0b:ee:d0:e5:7c:f9:a3:32:f0:80: 08:56:6a:11:4b:1b:dc:42:12:2e:d5:55:71:94:47: 3c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3A:24:75:F7:3F:98:24:A8:BC:BD:39:46:6E:C0:2E:F4:AD:A2:E0 X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/30A1B4D0C67E11EEB4008058C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:7040::/48 Signature Algorithm: sha256WithRSAEncryption 7a:a1:3d:aa:3a:41:7a:aa:6c:bf:33:be:a7:4b:31:c5:6b:31: ae:79:c2:af:10:b9:84:eb:4c:25:d2:88:ed:a1:15:7a:7f:c0: 28:0b:fb:58:18:49:0c:2d:8f:67:4b:8a:f6:1a:8b:15:99:20: 9f:95:bb:b3:85:5b:ad:04:f4:4d:6a:88:20:eb:68:53:14:88: 9d:f5:5b:25:f1:58:67:d7:4d:28:94:3d:a4:70:3c:75:6a:c5: c0:87:85:91:a6:4c:1a:f9:51:0b:1e:83:73:11:15:dd:ad:5b: 9a:04:af:f8:71:59:4c:1a:cd:0f:9f:64:1b:57:5f:77:21:2c: 95:1a:27:ad:4b:da:77:f0:02:d1:ee:eb:32:1b:b8:47:7f:ab: 58:98:84:5d:7b:b3:af:6c:33:cd:6d:ec:8a:4b:9a:48:19:79: 84:e7:08:b4:15:70:27:6e:10:d1:db:63:3f:13:62:03:55:73: 4f:e2:b4:4c:2f:17:a3:69:2e:9c:7c:e1:d3:8e:18:d6:e1:f7: ce:f5:9b:6b:49:b1:33:75:e7:34:f5:03:7c:51:8b:f3:1e:3c: cc:37:d0:65:21:df:f0:d7:4a:9f:9c:b4:58:22:f3:13:6d:d4: 26:6f:c5:bc:57:d4:10:a7:9c:97:45:32:eb:a8:a8:e9:83:d9: af:55:ce:7c -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5 NTREREMwRTUwHhcNMjUwMjI1MDcwODQ0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JkNmM3Yy1lZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1UKy+G77nV9gmlchwiO7KPnHPF0tglJnoQ/zgMJRz70uWUbRoWXjITQylwK 4pnK75L/XFpkweau6JPUAzIhaGuMJTpLuBLi56RiQ8BX6w0dIPnrg412Sf+nUYtr ts6p3F26awu0KXfe510Nb/d9xBD14o+Wig+NElISFzlDIWpe6JMbEapsvQdG/r/x o9ZqoSdVhR8uM5dj4VAbwiOxwz8ovv7Ue0EhyI68ojDCdsaKApkpC5j8pNK0E4Wl WVuN12ckuLxPG8koCveUpV7Gx0GrLnF3U52VKkIQHMpYWSuNZI/AVAvu0OV8+aMy 8IAIVmoRSxvcQhIu1VVxlEc8ewIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGY6JHX3 P5gkqLy9OUZuwC70raLgMB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3 T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzY0RTEvNkI1ODREMjRDNjdEMTFFRTg3MDI3QjNBQzRGOUFFMDIvMzBBMUI0RDBD NjdFMTFFRUI0MDA4MDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zcEAwDQYJKoZIhvcNAQELBQADggEBAHqhPao6QXqq bL8zvqdLMcVrMa55wq8QuYTrTCXSiO2hFXp/wCgL+1gYSQwtj2dLivYaixWZIJ+V u7OFW60E9E1qiCDraFMUiJ31WyXxWGfXTSiUPaRwPHVqxcCHhZGmTBr5UQseg3MR Fd2tW5oEr/hxWUwazQ+fZBtXX3chLJUaJ61L2nfwAtHu6zIbuEd/q1iYhF17s69s M81t7IpLmkgZeYTnCLQVcCduENHbYz8TYgNVc0/itEwvF6NpLpx84dOOGNbh9871 m2tJsTN15zT1A3xRi/MePMw30GUh3/DXSp+ctFgi8xNt1CZvxbxX1BCnnJdFMuuo qOmD2a9Vznw= -----END CERTIFICATE-----Generated at Sat Apr 5 23:06:34 2025 by rpki-client