$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/C352565AC6E011EF87D90241C4F9AE02.roa File: C352565AC6E011EF87D90241C4F9AE02.roa (raw, json) Hash identifier: mUqqXY0c6pz96Csa4vpgVVN0TcEzh2ALUeu6fy0AUoM= Subject key identifier: BF:ED:C7:73:C6:04:85:46:42:4A:12:BA:1E:B0:15:9A:6A:C6:CC:BC Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 0122 Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/C352565AC6E011EF87D90241C4F9AE02.roa Signing time: Sat 01 Mar 2025 07:38:19 +0000 ROA not before: Sat 01 Mar 2025 07:38:19 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 152300 IP address blocks: 2001:df3:5240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D Validity Not Before: Mar 1 07:38:19 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67c2b96b-722c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:84:ba:77:6e:0d:e3:92:ef:98:15:d4:65: ab:d1:c2:13:4b:8f:99:53:bb:bb:0d:db:39:e4:82: ba:ca:1b:4c:5d:ff:82:b8:70:10:10:04:91:d2:12: bf:00:7e:92:d3:79:4b:9f:7e:09:07:72:bb:62:6d: b1:86:dc:52:6c:d6:0c:c5:5a:19:79:a2:e8:a4:22: a0:37:a8:5a:2b:0c:41:bb:5f:ad:d6:14:e9:7d:5b: 8f:af:b8:a0:7e:50:b3:22:2f:12:85:f0:94:fe:6e: a5:0c:f6:c9:b7:1e:2a:a9:d1:1a:30:9d:b4:6d:be: c0:0a:6b:b6:43:e1:13:28:68:09:2a:f9:84:d9:90: e7:a0:2c:bf:71:46:31:ef:ac:d5:aa:75:c0:a2:13: c3:30:61:d4:09:5a:9d:d9:0e:66:95:23:0b:95:0a: 49:d6:f7:af:48:b4:e0:04:c5:fa:ae:7c:ac:07:cf: f0:02:d9:f1:de:90:94:e2:6e:12:dd:b2:b7:2a:85: 6f:e5:33:b5:fd:bd:b9:8e:b3:01:ec:5b:7e:6b:a0: 95:bb:99:0e:89:bf:c1:53:c8:a5:5a:e7:84:73:30: 14:b7:c1:48:51:16:89:4e:d5:7d:5d:1a:e6:da:e1: 53:15:75:e1:c6:6f:9a:ae:7f:88:20:70:83:78:61: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:ED:C7:73:C6:04:85:46:42:4A:12:BA:1E:B0:15:9A:6A:C6:CC:BC X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/C352565AC6E011EF87D90241C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:5240::/48 Signature Algorithm: sha256WithRSAEncryption 19:da:5f:a9:d5:94:74:a3:c2:0a:29:f2:34:fc:26:98:0e:b0: 75:33:21:f6:83:72:6b:53:93:59:db:3d:36:47:eb:ea:da:b9: 32:05:40:03:52:e8:57:c6:24:e7:ee:97:2d:84:78:47:aa:90: d6:c2:b5:23:f7:12:69:2f:0b:98:83:a0:a3:9a:1f:cc:69:d1: da:cf:58:1d:b9:b7:f5:0f:c2:32:8d:3e:f6:60:c0:e5:7e:6f: 8b:40:ff:0f:25:35:f1:a7:1e:a8:f2:67:e5:73:df:a9:30:e2: e6:91:a5:8d:92:4e:e6:07:da:b7:e3:a3:c3:fb:e0:73:69:9d: 34:d1:03:c8:0d:6e:03:c8:f3:20:d0:f3:0a:74:5e:bf:08:b4: 84:37:9e:d7:7f:8a:fe:2a:eb:32:33:9e:59:c3:72:d6:c0:5a: d9:f4:c5:97:30:dd:6d:9a:66:02:7b:ec:81:19:3a:65:27:91: 3b:b0:49:4c:8f:d5:03:c6:4c:41:2b:9d:40:fd:6d:c4:10:74: bc:02:2e:29:5d:d1:27:9f:03:65:14:0b:45:7a:cc:a6:fa:f6: 0a:91:96:7d:b9:e3:7e:6b:48:f6:a9:32:93:b4:97:10:ce:c3: 48:eb:0d:35:d2:c4:a0:97:ea:f9:c3:28:1f:b1:f5:e7:76:e7: 37:22:2c:0d -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0 RDQ2RkQwMjQwHhcNMjUwMzAxMDczODE5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyYjk2Yi03MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vqEunduDeOS75gV1GWr0cITS4+ZU7u7Dds55IK6yhtMXf+CuHAQEASR0hK/ AH6S03lLn34JB3K7Ym2xhtxSbNYMxVoZeaLopCKgN6haKwxBu1+t1hTpfVuPr7ig flCzIi8ShfCU/m6lDPbJtx4qqdEaMJ20bb7ACmu2Q+ETKGgJKvmE2ZDnoCy/cUYx 76zVqnXAohPDMGHUCVqd2Q5mlSMLlQpJ1vevSLTgBMX6rnysB8/wAtnx3pCU4m4S 3bK3KoVv5TO1/b25jrMB7Ft+a6CVu5kOib/BU8ilWueEczAUt8FIURaJTtV9XRrm 2uFTFXXhxm+arn+IIHCDeGF8tQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFL/tx3PG BIVGQkoSuh6wFZpqxsy8MB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0 QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTE5MkQvQ0M2N0QyNTJBNEJDMTFFRTlFNUE1RDcyQzRGOUFFMDIvQzM1MjU2NUFD NkUwMTFFRjg3RDkwMjQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zUkAwDQYJKoZIhvcNAQELBQADggEBABnaX6nVlHSj wgop8jT8JpgOsHUzIfaDcmtTk1nbPTZH6+rauTIFQANS6FfGJOfuly2EeEeqkNbC tSP3EmkvC5iDoKOaH8xp0drPWB25t/UPwjKNPvZgwOV+b4tA/w8lNfGnHqjyZ+Vz 36kw4uaRpY2STuYH2rfjo8P74HNpnTTRA8gNbgPI8yDQ8wp0Xr8ItIQ3ntd/iv4q 6zIznlnDctbAWtn0xZcw3W2aZgJ77IEZOmUnkTuwSUyP1QPGTEErnUD9bcQQdLwC Lild0SefA2UUC0V6zKb69gqRln25435rSPapMpO0lxDOw0jrDTXSxKCX6vnDKB+x 9ed25zciLA0= -----END CERTIFICATE-----Generated at Sat Apr 5 07:14:19 2025 by rpki-client