$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/4B30B710167811F09A533762C4F9AE02.roa File: 4B30B710167811F09A533762C4F9AE02.roa (raw, json) Hash identifier: fouY10udNgi8BWLYS4oVYjPJTA2tkNL+swT69GBRmDQ= Subject key identifier: 87:FC:BA:03:99:03:0C:CC:B5:A2:6A:51:48:AA:41:64:96:F2:DE:AD Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Certificate serial: C2 Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/4B30B710167811F09A533762C4F9AE02.roa Signing time: Fri 11 Apr 2025 01:57:17 +0000 ROA not before: Fri 11 Apr 2025 01:57:17 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137443 IP address blocks: 2403:1a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Validity Not Before: Apr 11 01:57:17 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67f876fc-a0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e0:81:c7:20:5a:47:ce:5a:44:fb:c8:df:c1: 12:18:fd:26:8e:77:31:ce:71:c9:84:e4:54:25:a2: 3f:02:4d:a4:69:c5:5d:55:dc:df:83:53:05:70:f7: cc:6e:dc:cc:5f:bd:55:ca:99:69:7e:39:de:44:1e: 48:ad:90:0a:60:54:23:6d:ff:c8:ee:83:50:d6:f9: 20:39:8c:cf:b4:d2:ee:76:e9:5a:27:06:7f:1a:38: 96:00:69:50:53:56:2a:e9:d8:3e:50:d4:f4:88:14: ff:ca:74:58:92:40:07:51:f3:c5:50:98:0b:2a:f1: ce:f5:64:5a:24:dd:33:6d:5c:cd:ee:cd:df:28:7d: 97:c0:eb:af:61:5f:a9:9f:0f:50:94:9c:59:89:1f: 6c:55:5f:9e:ee:e4:33:fd:b7:33:bb:50:47:1b:3f: 31:4e:0c:b6:6e:90:64:04:9c:49:e6:95:67:b9:c9: 91:ef:db:d5:0e:cc:20:a9:06:c5:7b:25:1c:a2:1d: de:f5:97:ff:56:ec:33:39:bc:fc:ba:fe:b1:09:75: ee:45:52:42:53:af:26:1a:55:a7:b5:27:88:e1:52: ab:62:16:71:1d:20:3f:04:b4:a2:5a:3f:bb:0e:50: 5e:a6:40:4e:94:6d:14:5f:9f:a1:56:e1:24:24:fd: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FC:BA:03:99:03:0C:CC:B5:A2:6A:51:48:AA:41:64:96:F2:DE:AD X509v3 Authority Key Identifier: keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/4B30B710167811F09A533762C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:1a40::/32 Signature Algorithm: sha256WithRSAEncryption 6b:6c:c7:c2:d4:8c:f2:eb:95:a0:91:39:c4:8d:7d:90:36:46: d5:b1:9b:b8:46:4e:66:bc:31:f3:ac:16:af:87:ff:2f:1a:c7: 75:9a:b5:d0:05:07:cb:d7:60:d0:02:d7:f3:99:ae:1a:1a:4a: 6a:8b:df:61:20:32:cf:38:b8:1b:ec:85:e7:82:43:42:bc:c1: 0e:96:82:34:0e:5b:76:5b:d3:7a:8b:ad:a3:26:48:13:ad:95: 5e:fa:88:8b:78:06:60:99:e3:58:de:55:b2:7e:6e:ab:f5:86: c3:da:05:a2:51:86:f3:68:b3:e5:b0:81:c8:ad:e2:9b:19:39: da:e6:bb:a1:0b:d5:43:f8:53:fd:7e:50:b8:20:32:8d:8c:12: 90:6f:b2:5e:48:a4:97:7d:c8:20:20:4e:44:6f:ec:3b:d6:3e: 2a:fd:eb:68:49:7f:70:90:36:e7:37:ef:71:4d:ee:38:a6:d0: 1c:53:9b:c0:95:da:32:9d:12:81:b5:16:a9:ac:21:a5:0e:df: bb:46:0a:15:bd:8f:b7:72:a7:47:59:c9:56:8a:8a:1a:db:55: 18:47:64:cc:94:2e:c6:0e:7e:ed:28:2a:cb:45:43:91:27:75: 85:d5:19:07:75:94:d9:db:6b:d9:88:fd:67:18:8f:df:ff:4b: 0f:db:68:32 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD MThBQkYzM0IwHhcNMjUwNDExMDE1NzE3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y4NzZmYy1hMGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+CBxyBaR85aRPvI38ESGP0mjncxznHJhORUJaI/Ak2kacVdVdzfg1MFcPfM btzMX71VyplpfjneRB5IrZAKYFQjbf/I7oNQ1vkgOYzPtNLudulaJwZ/GjiWAGlQ U1Yq6dg+UNT0iBT/ynRYkkAHUfPFUJgLKvHO9WRaJN0zbVzN7s3fKH2XwOuvYV+p nw9QlJxZiR9sVV+e7uQz/bczu1BHGz8xTgy2bpBkBJxJ5pVnucmR79vVDswgqQbF eyUcoh3e9Zf/VuwzObz8uv6xCXXuRVJCU68mGlWntSeI4VKrYhZxHSA/BLSiWj+7 DlBepkBOlG0UX5+hVuEkJP1XDwIDAQABo4ICljCCApIwHQYDVR0OBBYEFIf8ugOZ AwzMtaJqUUiqQWSW8t6tMB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0 NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg4Q0EvNTY5NkU3NDYzNDY1MTFFRkFGNkRFQjRFQzRGOUFFMDIvNEIzMEI3MTAx Njc4MTFGMDlBNTMzNzYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAxpAMA0GCSqGSIb3DQEBCwUAA4IBAQBrbMfC1Izy65Wg kTnEjX2QNkbVsZu4Rk5mvDHzrBavh/8vGsd1mrXQBQfL12DQAtfzma4aGkpqi99h IDLPOLgb7IXngkNCvMEOloI0Dlt2W9N6i62jJkgTrZVe+oiLeAZgmeNY3lWyfm6r 9YbD2gWiUYbzaLPlsIHIreKbGTna5ruhC9VD+FP9flC4IDKNjBKQb7JeSKSXfcgg IE5Eb+w71j4q/etoSX9wkDbnN+9xTe44ptAcU5vAldoynRKBtRaprCGlDt+7RgoV vY+3cqdHWclWiooa21UYR2TMlC7GDn7tKCrLRUORJ3WF1RkHdZTZ22vZiP1nGI/f /0sP22gy -----END CERTIFICATE-----Generated at Tue Apr 22 23:52:45 2025 by rpki-client