$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/14F7BC00CEEF11EFAF6F762FC4F9AE02.roa File: 14F7BC00CEEF11EFAF6F762FC4F9AE02.roa (raw, json) Hash identifier: ky3VVMd3//RxqftA8fTaKeSx7YmcJGB1DWo9MLV8eHo= Subject key identifier: 48:3B:0B:07:9D:53:2B:2C:4E:EE:2A:12:64:AB:06:AF:71:E4:ED:6A Certificate issuer: /CN=A91B15DC/serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Certificate serial: 02 Authority key identifier: 1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/14F7BC00CEEF11EFAF6F762FC4F9AE02.roa Signing time: Fri 10 Jan 2025 01:06:12 +0000 ROA not before: Fri 10 Jan 2025 01:06:12 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 134602 IP address blocks: 2001:df4:8bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC Validity Not Before: Jan 10 01:06:12 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67807283-0790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:28:4a:87:db:da:74:fb:29:71:2f:af:84:59: 71:6f:26:f3:eb:1b:6b:35:4c:d4:4f:7e:64:5b:f5: a6:1c:fd:61:e4:1f:42:d0:22:d3:11:02:fe:08:8a: 2b:05:8e:dc:cb:ee:24:a0:f6:c1:c3:17:27:af:94: 6d:aa:b5:a3:9f:84:93:5e:10:c8:24:4b:20:93:fd: ea:2a:37:6c:f8:ac:97:37:84:77:dd:6d:a6:49:d4: 41:f2:44:11:f9:eb:eb:5a:52:70:b5:82:a3:57:d8: 44:22:8f:15:cb:3f:fa:94:e2:38:79:6b:a1:fe:92: 49:f0:f5:96:58:96:f5:a6:81:11:ba:43:3c:c7:0b: 46:8c:51:62:63:1c:7a:df:15:33:d9:85:24:41:24: 91:24:de:ca:9d:01:9e:bc:fa:f4:75:27:6a:47:f9: a5:bb:b2:29:04:35:c2:fa:f7:93:29:d2:20:6b:a6: 02:e8:2b:ca:90:13:9a:ec:85:87:6b:53:ed:cb:4c: cb:0e:83:ce:50:99:6a:19:a7:91:b1:f6:ae:46:eb: b0:bc:f6:cc:e8:79:d3:93:df:4e:07:5e:20:5a:a8: 42:61:7e:79:c7:58:00:a8:a0:a5:9f:0b:2d:4d:0a: 1a:9c:19:4c:b9:de:08:31:ac:f0:08:63:41:6f:80: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3B:0B:07:9D:53:2B:2C:4E:EE:2A:12:64:AB:06:AF:71:E4:ED:6A X509v3 Authority Key Identifier: keyid:1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/14F7BC00CEEF11EFAF6F762FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:8bc0::/48 Signature Algorithm: sha256WithRSAEncryption 90:50:c0:03:1e:f4:09:da:71:97:10:63:95:8e:89:cb:89:81: 1d:bb:38:3f:cf:9f:5e:f5:4d:44:6f:d0:c6:d0:d9:ce:b2:44: 1f:8c:8a:bd:cc:fb:ef:1e:a5:46:43:29:ee:6a:45:e9:68:60: b1:bc:b8:bc:e6:15:6a:d1:9e:80:74:16:f3:b0:4f:29:42:ab: 4d:39:5c:5c:41:4a:56:70:03:8f:d7:6c:f3:e2:89:1e:42:50: c7:53:8b:24:68:11:bd:45:2c:1f:40:82:0b:7f:15:7d:dd:97: 2f:2b:05:f2:e9:a3:e5:84:94:f5:7c:c8:32:b2:39:29:b1:66: 24:e1:30:72:08:8f:aa:4a:4e:2d:da:da:5b:99:03:d7:f2:65: 23:3c:c6:b3:dc:9a:0f:90:d4:76:a0:cb:7e:f7:13:1c:65:67: d7:97:9f:31:48:58:69:a7:e6:2d:bf:22:60:62:b7:79:ad:6c: 0b:65:0e:28:9e:e8:fd:dc:33:9a:74:15:b4:c1:5e:38:b3:5e: 50:18:66:c3:a8:dd:87:f3:bf:d1:45:82:55:97:b5:c0:e2:e5: c7:4a:99:45:d7:b0:e9:b6:e4:a6:69:28:20:49:e0:0a:cc:c6: 4d:52:90:ae:55:95:b6:f0:8f:91:20:3a:6c:af:6c:fb:6b:8b: d5:1f:2d:cf -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTVEQzExMC8GA1UEBRMoMUQ0NUU3Mjk0NTRBMjQyNDQ2N0IwM0NGQzk5N0Q3RUIx ODRBRTc2NjAeFw0yNTAxMTAwMTA2MTJaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ODA3MjgzLTA3OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoKEqH29p0+ylxL6+EWXFvJvPrG2s1TNRPfmRb9aYc/WHkH0LQItMRAv4IiisF jtzL7iSg9sHDFyevlG2qtaOfhJNeEMgkSyCT/eoqN2z4rJc3hHfdbaZJ1EHyRBH5 6+taUnC1gqNX2EQijxXLP/qU4jh5a6H+kknw9ZZYlvWmgRG6QzzHC0aMUWJjHHrf FTPZhSRBJJEk3sqdAZ68+vR1J2pH+aW7sikENcL695Mp0iBrpgLoK8qQE5rshYdr U+3LTMsOg85QmWoZp5Gx9q5G67C89szoedOT304HXiBaqEJhfnnHWACooKWfCy1N ChqcGUy53ggxrPAIY0FvgAVNAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUSDsLB51T KyxO7ioSZKsGr3Hk7WowHwYDVR0jBBgwFoAUHUXnKUVKJCRGewPPyZfX6xhK52Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNURDLzU4MjNBRjg2Q0VF RDExRUZCRDY1NTUxMUM0RjlBRTAyL0hVWG5LVVZLSkNSR2V3UFB5WmZYNnhoSzUy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFVYbktVVktKQ1JHZXdQUHlaZlg2eGhLNTJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTVEQy81ODIzQUY4NkNFRUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi8xNEY3QkMwMENF RUYxMUVGQUY2Rjc2MkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfSLwDANBgkqhkiG9w0BAQsFAAOCAQEAkFDAAx70Cdpx lxBjlY6Jy4mBHbs4P8+fXvVNRG/QxtDZzrJEH4yKvcz77x6lRkMp7mpF6Whgsby4 vOYVatGegHQW87BPKUKrTTlcXEFKVnADj9ds8+KJHkJQx1OLJGgRvUUsH0CCC38V fd2XLysF8umj5YSU9XzIMrI5KbFmJOEwcgiPqkpOLdraW5kD1/JlIzzGs9yaD5DU dqDLfvcTHGVn15efMUhYaafmLb8iYGK3ea1sC2UOKJ7o/dwzmnQVtMFeOLNeUBhm w6jdh/O/0UWCVZe1wOLlx0qZRdew6bbkpmkoIEngCszGTVKQrlWVtvCPkSA6bK9s +2uL1R8tzw== -----END CERTIFICATE-----Generated at Sat Apr 5 02:10:21 2025 by rpki-client