$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4F186696C2BF11EFBE205D3DC4F9AE02.roa File: 4F186696C2BF11EFBE205D3DC4F9AE02.roa (raw, json) Hash identifier: R7o1+jBwp1xmSwd/Oq61hZGCuRK2IEaKd/3uPBodbIo= Subject key identifier: 95:80:19:09:3B:24:B9:96:12:92:44:3A:BB:66:54:53:DA:97:AD:A3 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 48FA Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4F186696C2BF11EFBE205D3DC4F9AE02.roa Signing time: Wed 25 Dec 2024 12:53:59 +0000 ROA not before: Wed 25 Dec 2024 12:53:59 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153013 IP address blocks: 2001:df4:6fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18682 (0x48fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Dec 25 12:53:59 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=676c0067-d5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:94:6f:11:29:ff:21:c9:aa:67:72:b0:3b: cc:58:75:a0:b0:1a:76:4a:3a:2e:1c:d2:d1:c6:27: 08:e8:8d:79:c5:06:cf:13:d4:42:40:08:dc:72:75: ab:e5:ed:21:16:58:05:11:ba:c6:68:02:80:9f:f0: 79:2d:41:79:d2:51:46:dc:46:aa:cb:d3:1d:d7:40: 74:61:e4:e8:ac:a8:6c:fd:60:db:a0:a9:28:f0:f3: 2e:32:45:0a:d6:e9:88:ed:0a:3e:47:70:a2:db:8b: c9:88:b6:72:b3:66:a4:23:bf:43:dc:5a:03:46:55: eb:8b:6f:93:e8:82:a1:22:25:39:16:66:8c:0b:ef: 6d:bb:2f:44:e7:fd:c7:4a:90:2b:47:f7:47:a7:26: 3c:98:c7:fb:41:71:90:f1:e5:cc:e6:0d:4d:15:7f: 9c:e1:bd:8a:ea:4d:6a:ac:a4:86:a8:43:49:9d:c4: 0c:6c:4b:7d:6d:96:ec:36:3e:94:c8:d3:ee:ff:4b: 97:b7:4b:56:d6:bc:ad:7b:86:04:2d:64:2a:90:8f: 5f:a4:28:5b:10:75:64:af:8d:db:75:4a:86:db:95: 8b:08:78:b3:a5:f1:33:df:d5:d6:92:f4:82:9b:e0: 4a:43:23:09:c5:5f:e0:9c:12:2f:ff:f6:33:7e:9c: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:80:19:09:3B:24:B9:96:12:92:44:3A:BB:66:54:53:DA:97:AD:A3 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4F186696C2BF11EFBE205D3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:6fc0::/48 Signature Algorithm: sha256WithRSAEncryption 5e:89:c4:6d:46:64:c4:bb:f1:03:0e:53:9a:60:a4:1f:34:e2: eb:3b:8b:a3:c4:68:7c:80:93:b6:23:43:4e:c6:fd:54:c1:27: ec:50:ee:38:23:db:96:c2:0e:61:c8:ac:ad:41:03:c4:92:fd: 46:71:d5:01:50:23:b2:58:8c:41:19:14:1a:13:b7:0c:ea:35: 12:2f:6e:8a:70:be:1a:84:14:9a:b7:8c:63:a9:60:f6:bc:3d: 83:56:c0:c6:25:fe:89:44:b5:63:73:84:8d:37:35:2b:a1:92: 55:03:88:8a:81:a4:44:e4:2f:dd:69:7a:93:f2:d0:60:53:64: 8d:89:c6:be:48:7e:6b:5c:60:67:a8:ee:d3:92:84:c0:fe:b2: 42:b6:4d:65:ed:57:53:24:5d:77:0c:00:c0:0f:33:1e:be:25: 7d:02:48:d4:32:03:3e:26:28:46:52:ac:e8:cd:1a:ed:b8:40: ff:38:84:60:e6:5b:ef:5b:09:0b:5c:76:f3:79:80:89:4c:31: 4e:58:ab:0d:bc:43:56:89:0c:c8:02:91:70:af:0c:23:44:60: 2d:02:d7:cc:92:2f:39:cc:1e:db:06:5d:87:20:ef:cc:c9:c1: 42:d8:78:ed:61:dd:7e:90:9f:0e:9f:6f:db:c7:0d:04:72:c8: 98:27:0c:19 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICSPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMjI1MTI1MzU5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZjMDA2Ny1kNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmiUbxEp/yHJqmdysDvMWHWgsBp2SjouHNLRxicI6I15xQbPE9RCQAjccnWr 5e0hFlgFEbrGaAKAn/B5LUF50lFG3Eaqy9Md10B0YeTorKhs/WDboKko8PMuMkUK 1umI7Qo+R3Ci24vJiLZys2akI79D3FoDRlXri2+T6IKhIiU5FmaMC+9tuy9E5/3H SpArR/dHpyY8mMf7QXGQ8eXM5g1NFX+c4b2K6k1qrKSGqENJncQMbEt9bZbsNj6U yNPu/0uXt0tW1ryte4YELWQqkI9fpChbEHVkr43bdUqG25WLCHizpfEz39XWkvSC m+BKQyMJxV/gnBIv//YzfpwUbwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJWAGQk7 JLmWEpJEOrtmVFPal62jMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNEYxODY2OTZD MkJGMTFFRkJFMjA1RDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30b8AwDQYJKoZIhvcNAQELBQADggEBAF6JxG1GZMS7 8QMOU5pgpB804us7i6PEaHyAk7YjQ07G/VTBJ+xQ7jgj25bCDmHIrK1BA8SS/UZx 1QFQI7JYjEEZFBoTtwzqNRIvbopwvhqEFJq3jGOpYPa8PYNWwMYl/olEtWNzhI03 NSuhklUDiIqBpETkL91pepPy0GBTZI2Jxr5IfmtcYGeo7tOShMD+skK2TWXtV1Mk XXcMAMAPMx6+JX0CSNQyAz4mKEZSrOjNGu24QP84hGDmW+9bCQtcdvN5gIlMMU5Y qw28Q1aJDMgCkXCvDCNEYC0C18ySLznMHtsGXYcg78zJwULYeO1h3X6Qnw6fb9vH DQRyyJgnDBk= -----END CERTIFICATE-----Generated at Sat Apr 5 14:25:02 2025 by rpki-client