$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5DB4FB7CE3AA11EFA9ED913FC4F9AE02.roa File: 5DB4FB7CE3AA11EFA9ED913FC4F9AE02.roa (raw, json) Hash identifier: ECOhT+5TrVG5+4TZ+JNrJkr16PLKm0jSREbq20+DZBo= Subject key identifier: BB:F0:51:9C:A7:8B:1D:49:DB:51:4D:61:E6:C7:A7:12:97:21:E8:2C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4984 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5DB4FB7CE3AA11EFA9ED913FC4F9AE02.roa Signing time: Wed 05 Feb 2025 10:17:13 +0000 ROA not before: Wed 05 Feb 2025 10:17:13 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153543 IP address blocks: 2001:df4:ef40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18820 (0x4984) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Feb 5 10:17:13 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67a33aa9-e934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:0f:cd:82:b8:8d:22:81:5d:24:11:03:5c: 1b:cf:fd:fc:45:1f:74:23:bb:c4:70:81:7c:19:76: 3e:bc:23:74:e2:e9:fc:e1:f2:5d:33:06:2f:6d:ee: d8:75:b9:db:b9:30:7e:3e:2b:28:f9:9f:36:7b:46: 66:20:ec:82:1c:35:13:93:a0:21:68:1f:2b:4c:dc: 75:01:88:00:e8:c7:01:c5:aa:f5:9e:f6:ef:7f:f4: b9:d9:35:69:71:bf:80:00:a4:77:ea:16:50:06:6c: 69:f3:02:9e:5b:a2:7d:bb:36:47:af:b7:1d:d2:32: 26:4f:35:fa:2b:8b:89:30:cd:cd:04:e1:5a:b8:51: ad:51:4c:d2:07:1e:dc:35:58:c8:56:63:7e:86:0f: 50:b1:3d:7d:e4:49:93:f1:3a:70:3d:ce:19:fd:17: 7a:06:61:79:9b:84:96:30:17:01:84:60:71:61:2a: e3:a2:4f:41:09:2e:83:44:bc:71:48:da:4c:ad:53: c3:f7:72:f7:85:f5:bc:c5:8d:f4:ea:95:3d:a6:5b: 18:0f:4e:47:ee:3a:1b:7d:88:54:48:6d:02:44:e5: 14:81:8d:1c:30:fd:10:06:8e:01:40:0a:0e:56:da: ad:2d:24:68:33:e5:e7:2b:76:f4:6c:50:64:8d:3b: 4f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F0:51:9C:A7:8B:1D:49:DB:51:4D:61:E6:C7:A7:12:97:21:E8:2C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5DB4FB7CE3AA11EFA9ED913FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:ef40::/48 Signature Algorithm: sha256WithRSAEncryption 22:bb:78:33:f9:1e:89:35:b6:bc:33:ea:4e:43:48:5b:32:d2: 0f:8a:62:11:20:bd:16:fc:ce:d9:9a:9d:80:36:6a:df:65:75: 85:b2:94:0a:68:88:84:b2:d6:b5:df:a6:27:2e:55:40:9f:bd: 06:61:c1:a5:06:98:25:a4:95:c6:ad:90:d9:cd:62:7b:36:18: 74:d6:55:95:27:00:65:9c:79:01:35:fb:e6:c6:53:a2:71:b7: c3:67:a0:45:89:3e:fc:04:30:51:f2:60:bc:5c:ac:f2:c5:c5: 51:23:ac:d8:4a:7a:5c:57:92:7b:38:38:81:de:6c:2e:d6:da: 3c:3a:78:2a:53:7e:1e:39:21:85:1a:b6:89:66:86:e5:d5:c5: 26:86:c6:fa:47:a3:b5:6a:40:e1:f2:ec:3c:1c:c1:e2:cc:7c: b8:22:d0:c0:0c:8b:2b:39:95:2d:26:4c:c7:c7:2b:26:30:2b: c0:19:e1:c9:fa:eb:2c:34:7b:f6:cb:41:67:8f:23:32:f3:1e: 93:63:a4:d1:9c:b3:e6:fc:86:76:b6:a5:9d:73:79:25:05:b9: 65:e8:61:1f:b7:2e:b3:ec:89:de:4c:fc:d9:d9:b7:a1:f5:9a: 80:37:97:b4:2b:7d:1d:e5:69:d9:40:22:69:44:2a:5e:08:3e: 3f:d3:72:64 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICSYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwMjA1MTAxNzEzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EzM2FhOS1lOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+gPzYK4jSKBXSQRA1wbz/38RR90I7vEcIF8GXY+vCN04un84fJdMwYvbe7Y dbnbuTB+Piso+Z82e0ZmIOyCHDUTk6AhaB8rTNx1AYgA6McBxar1nvbvf/S52TVp cb+AAKR36hZQBmxp8wKeW6J9uzZHr7cd0jImTzX6K4uJMM3NBOFauFGtUUzSBx7c NVjIVmN+hg9QsT195EmT8TpwPc4Z/Rd6BmF5m4SWMBcBhGBxYSrjok9BCS6DRLxx SNpMrVPD93L3hfW8xY306pU9plsYD05H7jobfYhUSG0CROUUgY0cMP0QBo4BQAoO VtqtLSRoM+XnK3b0bFBkjTtPPwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLvwUZyn ix1J21FNYebHpxKXIegsMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNURCNEZCN0NF M0FBMTFFRkE5RUQ5MTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3070AwDQYJKoZIhvcNAQELBQADggEBACK7eDP5Hok1 trwz6k5DSFsy0g+KYhEgvRb8ztmanYA2at9ldYWylApoiISy1rXfpicuVUCfvQZh waUGmCWklcatkNnNYns2GHTWVZUnAGWceQE1++bGU6Jxt8NnoEWJPvwEMFHyYLxc rPLFxVEjrNhKelxXkns4OIHebC7W2jw6eCpTfh45IYUatolmhuXVxSaGxvpHo7Vq QOHy7DwcweLMfLgi0MAMiys5lS0mTMfHKyYwK8AZ4cn66yw0e/bLQWePIzLzHpNj pNGcs+b8hna2pZ1zeSUFuWXoYR+3LrPsid5M/NnZt6H1moA3l7QrfR3ladlAImlE Kl4IPj/TcmQ= -----END CERTIFICATE-----Generated at Sat Apr 5 14:33:19 2025 by rpki-client