$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/11815E36135311EE94A8A114C4F9AE02.roa File: 11815E36135311EE94A8A114C4F9AE02.roa (raw, json) Hash identifier: 4RiRLEUaqFnMyzAxg+jhTtVSLZnRrw+D1OLV5ZjDtiE= Subject key identifier: D0:83:55:17:FA:EC:53:DF:7B:E6:62:34:FD:8E:95:35:24:7E:B2:26 Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Certificate serial: 0D1C Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/11815E36135311EE94A8A114C4F9AE02.roa Signing time: Thu 06 Feb 2025 18:16:18 +0000 ROA not before: Thu 06 Feb 2025 18:16:18 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 64075 IP address blocks: 2404:2980::/32 maxlen: 32 2404:2980::/48 maxlen: 48 2404:2980:1::/48 maxlen: 48 2404:2980:2::/48 maxlen: 48 2404:2980:3::/48 maxlen: 48 2404:2980:4::/48 maxlen: 48 2404:2980:5::/48 maxlen: 48 2404:2980:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 17:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA28B Validity Not Before: Feb 6 18:16:18 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a4fc72-f226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:88:38:10:79:3c:0b:a8:ca:45:3f:35:d4:06: 6f:73:ed:59:4a:ca:eb:3f:68:f9:c9:1e:0b:1e:8a: 7e:c4:61:9e:28:66:1d:b1:47:46:18:33:de:4e:4d: 00:2c:b1:b3:49:e8:c0:f2:37:d8:16:86:df:59:0e: 0b:6b:32:d7:a2:74:ee:8c:27:64:db:7c:34:aa:bc: 1c:22:d4:05:1a:db:c3:8e:14:86:09:d5:df:6c:ea: bd:2b:8a:8b:52:e9:6c:3e:ac:ca:77:0d:75:19:42: e4:76:b4:e5:c5:88:4a:47:d7:58:32:69:45:44:9a: ed:a0:a7:1c:67:1b:4f:34:38:15:39:8a:55:e5:bb: c0:f5:10:1b:93:0c:9e:d5:e7:01:a5:45:08:41:b3: 2e:70:3f:37:3b:81:59:e8:ba:f6:f1:cc:98:bf:15: 95:33:8b:73:6b:0a:9f:73:9f:b9:03:63:3f:91:3e: cb:77:74:6e:d3:5d:2f:ea:1c:0e:78:ee:34:e5:0a: 9d:b8:6d:a2:a7:95:d0:b6:97:d1:c1:43:37:e3:d2: 35:da:5d:2a:0f:49:ef:94:36:a2:3c:85:00:4d:7f: 68:ae:40:e3:ff:35:80:fc:30:be:5e:4e:67:2c:69: 7f:ff:d4:f7:1e:9f:ca:c6:18:46:69:9f:f6:14:43: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:83:55:17:FA:EC:53:DF:7B:E6:62:34:FD:8E:95:35:24:7E:B2:26 X509v3 Authority Key Identifier: keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/11815E36135311EE94A8A114C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:2980::/32 Signature Algorithm: sha256WithRSAEncryption 4b:5b:9a:aa:d7:28:3f:f1:21:85:02:79:67:46:53:9a:ac:b3: 25:85:2d:19:92:63:40:69:38:92:ce:ee:9f:a5:59:9e:08:1a: 49:9f:6a:05:0b:b2:ab:4b:1f:f0:2f:33:32:f6:8f:0f:3c:1e: 5f:2f:10:cc:b4:56:eb:3a:a2:8d:ed:6b:22:c5:db:2a:33:88: 8e:c8:a6:a0:d8:43:95:ea:63:05:59:c7:6f:1b:50:0a:e5:92: 5a:15:16:9d:0a:fe:2e:75:90:59:ce:c1:e4:d8:09:37:b8:59: 2e:32:0c:de:ff:25:eb:df:82:c3:66:68:25:41:32:fa:c4:8e: 6a:a4:20:75:e2:99:d8:cf:ac:ea:3a:53:c5:c8:07:57:3f:57: 3c:0a:2f:23:20:f2:5f:8a:65:cc:3a:09:99:5e:c7:2e:42:88: bf:14:13:5d:1a:cd:02:13:97:49:c5:8b:a5:ad:f3:67:05:2f: d5:be:36:48:56:be:c0:84:a9:f9:2e:fd:37:83:aa:e9:89:ae: 7d:22:a6:e0:e9:ed:4e:fe:d3:46:40:91:3a:ea:bf:be:4d:3a: d2:0d:7f:85:42:11:47:fa:5d:6e:9f:25:b2:33:e1:b5:a8:52: 74:52:2a:2b:99:22:45:89:af:8f:80:8c:fe:89:83:0f:ea:b4: 74:c9:d2:35 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEyOEIxMTAvBgNVBAUTKDZGQzJFREYwQzUxMTUyQTNCRUMxMTQ5QTFCREIyRURC MjkzQzlEOTUwHhcNMjUwMjA2MTgxNjE4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E0ZmM3Mi1mMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7og4EHk8C6jKRT811AZvc+1ZSsrrP2j5yR4LHop+xGGeKGYdsUdGGDPeTk0A LLGzSejA8jfYFobfWQ4LazLXonTujCdk23w0qrwcItQFGtvDjhSGCdXfbOq9K4qL UulsPqzKdw11GULkdrTlxYhKR9dYMmlFRJrtoKccZxtPNDgVOYpV5bvA9RAbkwye 1ecBpUUIQbMucD83O4FZ6Lr28cyYvxWVM4tzawqfc5+5A2M/kT7Ld3Ru010v6hwO eO405QqduG2ip5XQtpfRwUM349I12l0qD0nvlDaiPIUATX9orkDj/zWA/DC+Xk5n LGl//9T3Hp/KxhhGaZ/2FEOIUwIDAQABo4ICljCCApIwHQYDVR0OBBYEFNCDVRf6 7FPfe+ZiNP2OlTUkfrImMB8GA1UdIwQYMBaAFG/C7fDFEVKjvsEUmhvbLtspPJ2V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTI4Qi8xRTAyNjRBQURC QzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVxTy13UlNhRzlzdTJ5azhu WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4THQ4TVVSVXFPLXdSU2FHOXN1MnlrOG5aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUEyOEIvMUUwMjY0QUFEQkM4MTFFOUJFQTkxMDUxQzRGOUFFMDIvMTE4MTVFMzYx MzUzMTFFRTk0QThBMTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBCmAMA0GCSqGSIb3DQEBCwUAA4IBAQBLW5qq1yg/8SGF AnlnRlOarLMlhS0ZkmNAaTiSzu6fpVmeCBpJn2oFC7KrSx/wLzMy9o8PPB5fLxDM tFbrOqKN7WsixdsqM4iOyKag2EOV6mMFWcdvG1AK5ZJaFRadCv4udZBZzsHk2Ak3 uFkuMgze/yXr34LDZmglQTL6xI5qpCB14pnYz6zqOlPFyAdXP1c8Ci8jIPJfimXM OgmZXscuQoi/FBNdGs0CE5dJxYulrfNnBS/VvjZIVr7AhKn5Lv03g6rpia59Iqbg 6e1O/tNGQJE66r++TTrSDX+FQhFH+l1unyWyM+G1qFJ0UiormSJFia+PgIz+iYMP 6rR0ydI1 -----END CERTIFICATE-----Generated at Mon Apr 7 09:01:43 2025 by rpki-client