$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/7D2E766CE5AF11EE9A0A642FC4F9AE02.roa File: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (raw, json) Hash identifier: Fb0vXPsGENJ9HpaLetk+Rjo+o9pYvcloVY8N7cgyCIk= Subject key identifier: 94:C7:43:A1:A4:08:19:C3:81:40:B6:E1:E7:62:F3:D1:58:1F:C0:76 Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Certificate serial: C8 Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/7D2E766CE5AF11EE9A0A642FC4F9AE02.roa Signing time: Thu 03 Apr 2025 05:03:40 +0000 ROA not before: Thu 03 Apr 2025 05:03:40 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152594 IP address blocks: 2001:df3:8240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65AC Validity Not Before: Apr 3 05:03:40 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ee16ac-bd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:77:f3:b7:89:82:d7:77:8d:13:b7:15:03: b2:7c:9b:db:f7:05:3d:34:97:60:03:ad:a2:d5:c3: ac:7c:5d:e2:d5:49:88:5c:8b:20:58:be:20:92:02: 38:15:00:ac:d7:90:59:39:20:c6:d5:16:5e:2f:86: 87:04:65:21:36:ea:20:96:87:40:87:9e:cf:51:1d: f5:bd:0a:e6:12:46:42:07:ff:41:12:cd:db:da:99: 2d:48:a1:cb:0d:d9:9b:e5:a1:15:7d:f4:34:de:14: e0:ad:e7:7a:c8:a9:a9:8b:9d:87:28:7c:a2:c6:4f: 12:32:ca:40:9a:93:aa:65:ea:ee:07:7f:e1:47:e0: 96:6e:fd:e5:1b:5c:10:be:8e:84:97:ea:d8:5b:de: 96:a8:38:10:97:61:c9:eb:cf:c8:21:1e:81:9c:61: e1:d9:0e:50:f1:0c:8d:0f:2c:95:6f:dd:26:9c:d5: ec:58:be:b8:0d:a4:b2:72:8b:97:ee:53:6f:af:cd: 07:8e:9b:0d:b2:29:88:6c:e7:9c:e3:75:0e:85:c5: c7:75:8e:9a:3c:ae:64:bf:3b:a4:45:d0:6b:6a:d4: e8:7f:e7:04:e8:1c:e4:1a:3c:ba:57:1f:1a:61:65: bb:3d:0a:52:82:51:df:58:de:2b:16:bb:4d:ec:f4: 4b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C7:43:A1:A4:08:19:C3:81:40:B6:E1:E7:62:F3:D1:58:1F:C0:76 X509v3 Authority Key Identifier: keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/7D2E766CE5AF11EE9A0A642FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:8240::/48 Signature Algorithm: sha256WithRSAEncryption b0:7d:63:ae:0a:69:ef:eb:ef:20:24:bb:e2:a2:c0:21:d3:75: a8:be:1b:df:6e:f9:c4:df:29:16:65:6e:fc:ae:66:67:d7:a7: 4b:47:d3:79:0b:11:cf:7f:44:32:2d:6d:43:e7:32:b5:be:f2: c6:1a:41:f3:22:3e:11:e4:57:18:8a:68:78:06:77:66:31:45: 4b:5c:cd:92:a5:9c:80:ed:13:a5:fd:b1:9c:c4:b0:7f:44:4f: 44:0c:16:ff:78:32:35:e2:30:0d:2b:60:a7:f4:51:4d:50:13: 2e:b7:d2:89:95:54:80:00:36:5b:fc:43:a1:c7:aa:df:5b:d2: e8:a4:7e:ed:f2:95:d3:3f:d1:77:cd:31:2e:f4:a8:a1:a4:ba: 6e:ca:b7:ec:4f:74:88:08:36:10:7d:ca:82:83:53:93:1c:27: 9c:07:de:fb:23:b8:d3:bc:9f:05:b7:aa:37:66:cd:24:44:f7: 5a:b1:67:1f:51:d5:a7:25:aa:e5:f7:12:e2:25:2b:07:6d:00: 32:61:b8:f5:73:cd:2e:cc:34:2f:42:05:ee:94:c8:4c:cc:a8: b6:80:3c:7d:6d:2e:47:83:0b:b0:5b:ee:da:d6:26:94:22:44: 1d:9b:f2:92:b8:0d:65:59:00:4c:d0:d2:c7:3a:db:32:d5:7c: 63:fe:13:24 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1QUMxMTAvBgNVBAUTKDczMDYxQkE5MDQwMTgxRUMwQUVCNEQ4RjZFMDAzRjgz OEZDOUM0OEYwHhcNMjUwNDAzMDUwMzQwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VlMTZhYy1iZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rV387eJgtd3jRO3FQOyfJvb9wU9NJdgA62i1cOsfF3i1UmIXIsgWL4gkgI4 FQCs15BZOSDG1RZeL4aHBGUhNuoglodAh57PUR31vQrmEkZCB/9BEs3b2pktSKHL Ddmb5aEVffQ03hTgred6yKmpi52HKHyixk8SMspAmpOqZeruB3/hR+CWbv3lG1wQ vo6El+rYW96WqDgQl2HJ68/IIR6BnGHh2Q5Q8QyNDyyVb90mnNXsWL64DaSycouX 7lNvr80HjpsNsimIbOec43UOhcXHdY6aPK5kvzukRdBratTof+cE6BzkGjy6Vx8a YWW7PQpSglHfWN4rFrtN7PRLPwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJTHQ6Gk CBnDgUC24edi89FYH8B2MB8GA1UdIwQYMBaAFHMGG6kEAYHsCutNj24AP4OPycSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVBQy9ENEYzREI5RUUx RTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdld0s2MDJQYmdBX2c0X0p4 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3WWJxUVFCZ2V3SzYwMlBiZ0FfZzRfSnhJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY1QUMvRDRGM0RCOUVFMUUwMTFFRUFGNkUxRTY4QzRGOUFFMDIvN0QyRTc2NkNF NUFGMTFFRTlBMEE2NDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zgkAwDQYJKoZIhvcNAQELBQADggEBALB9Y64Kae/r 7yAku+KiwCHTdai+G99u+cTfKRZlbvyuZmfXp0tH03kLEc9/RDItbUPnMrW+8sYa QfMiPhHkVxiKaHgGd2YxRUtczZKlnIDtE6X9sZzEsH9ET0QMFv94MjXiMA0rYKf0 UU1QEy630omVVIAANlv8Q6HHqt9b0uikfu3yldM/0XfNMS70qKGkum7Kt+xPdIgI NhB9yoKDU5McJ5wH3vsjuNO8nwW3qjdmzSRE91qxZx9R1aclquX3EuIlKwdtADJh uPVzzS7MNC9CBe6UyEzMqLaAPH1tLkeDC7Bb7trWJpQiRB2b8pK4DWVZAEzQ0sc6 2zLVfGP+EyQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:36:59 2025 by rpki-client