$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/9074B02EB13D11EF9EFDE433C4F9AE02.roa File: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (raw, json) Hash identifier: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM= Subject key identifier: 5A:BE:35:9C:89:95:16:4A:DC:00:85:FE:90:9F:CC:BA:0C:5A:96:30 Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Certificate serial: 1C Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/9074B02EB13D11EF9EFDE433C4F9AE02.roa Signing time: Tue 14 Jan 2025 03:09:49 +0000 ROA not before: Tue 14 Jan 2025 03:09:49 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9433 IP address blocks: 2001:4530::/32 maxlen: 32 2001:4530:1::/48 maxlen: 48 2001:4530:2::/48 maxlen: 48 2001:4530:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Validity Not Before: Jan 14 03:09:49 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6785d57d-305a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:58:2a:47:f9:bc:a0:b4:f2:64:98:2b:4c:de: 8d:4f:aa:21:ff:85:b8:af:10:3c:97:5c:fd:ce:4e: 69:60:19:51:e3:6d:bb:98:06:91:44:03:6a:4f:35: a4:d0:aa:c1:6d:5f:75:1a:bf:ad:08:68:85:1c:60: 0d:b4:34:41:fa:4b:7e:47:38:61:24:0f:1f:28:18: 5d:02:af:a1:31:e1:0b:09:4b:50:81:16:a8:8b:e3: 48:a2:a3:19:09:03:a0:f2:a0:0a:f6:a1:f2:37:de: b1:eb:32:3f:53:3f:8c:9c:3e:d3:af:ba:87:42:e2: 05:c4:f8:08:2d:37:ac:cb:71:5f:1c:c6:ce:4a:90: a7:c8:3c:18:20:4b:04:68:6f:f5:0c:91:7a:66:6e: 1f:79:e8:90:8f:26:5e:b7:c9:45:38:10:53:c1:59: ab:5f:b5:52:fe:f2:42:9e:ef:0a:80:68:a1:f3:ec: 90:a1:ac:2a:6c:5c:69:83:07:62:6f:02:54:8e:eb: b0:ec:89:1f:a1:62:3c:c8:77:76:86:c0:7c:63:52: 3f:35:b8:3b:b4:7f:89:39:94:a4:2d:20:13:ef:63: 3c:a2:9e:d5:01:b1:62:63:d8:8e:f7:69:66:ae:4e: 38:44:62:f5:2d:33:6d:28:b8:30:e0:e3:81:f1:77: e3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BE:35:9C:89:95:16:4A:DC:00:85:FE:90:9F:CC:BA:0C:5A:96:30 X509v3 Authority Key Identifier: keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/9074B02EB13D11EF9EFDE433C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:4530::/32 Signature Algorithm: sha256WithRSAEncryption 16:b3:ca:f4:93:06:f1:8f:4f:c4:25:61:c7:ab:9c:d9:1a:a7: 4f:eb:80:84:db:85:07:be:80:67:96:b1:f8:7f:90:22:b3:36: a3:55:e7:93:d9:63:3c:93:4a:9f:35:4a:e8:a5:63:e3:c7:11: 1c:cc:1e:55:18:9b:b8:0d:86:ae:59:b1:33:64:58:a2:a4:52: fe:1f:e0:b4:f3:55:9e:dd:6d:8e:a7:e0:38:53:8b:d7:26:db: 8f:67:ed:7f:ee:ee:f0:b9:78:3d:c7:2c:c8:dd:dd:fc:d8:68: a7:ce:27:89:98:cd:6c:4f:60:6b:f0:90:b0:95:7a:a3:5f:30: 3c:c8:c5:3b:f7:27:b3:3d:d1:fe:84:c2:08:89:2b:6f:93:6e: fa:06:0c:29:5a:b1:31:6d:62:62:5a:56:61:f1:62:8f:ef:10: 6f:4a:44:5f:d7:96:37:d4:44:01:ef:b1:01:b2:02:f6:91:29: c8:33:b2:d7:7a:ce:b6:29:58:ea:c6:39:f1:b7:95:8c:67:a4: 21:57:d9:f1:46:68:1c:23:bf:87:05:c4:b5:19:23:34:4c:9f: e0:8e:8d:ce:84:4e:bf:2f:78:05:77:82:09:48:99:bd:f9:17: f6:8b:d8:ab:ee:c2:66:2c:db:42:5e:d2:35:ac:c3:45:d8:ef: 6c:7f:44:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTJFNjMwNjY3NUQ1RjU0RDIwN0I2NzgyQTk2QzdBQTk2 N0IxRkM5MTAeFw0yNTAxMTQwMzA5NDlaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ODVkNTdkLTMwNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoWCpH+bygtPJkmCtM3o1PqiH/hbivEDyXXP3OTmlgGVHjbbuYBpFEA2pPNaTQ qsFtX3Uav60IaIUcYA20NEH6S35HOGEkDx8oGF0Cr6Ex4QsJS1CBFqiL40iioxkJ A6DyoAr2ofI33rHrMj9TP4ycPtOvuodC4gXE+AgtN6zLcV8cxs5KkKfIPBggSwRo b/UMkXpmbh956JCPJl63yUU4EFPBWatftVL+8kKe7wqAaKHz7JChrCpsXGmDB2Jv AlSO67DsiR+hYjzId3aGwHxjUj81uDu0f4k5lKQtIBPvYzyintUBsWJj2I73aWau TjhEYvUtM20ouDDg44Hxd+NzAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUWr41nImV FkrcAIX+kJ/MugxaljAwHwYDVR0jBBgwFoAU4uYwZnXV9U0ge2eCqWx6qWex/JEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0U5QkUwNURDQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9K RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHVZd1puWFY5VTBnZTJlQ3FXeDZxV2V4X0pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FOUJFMDVEQ0IxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi85MDc0QjAyRUIx M0QxMUVGOUVGREU0MzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACABRTAwDQYJKoZIhvcNAQELBQADggEBABazyvSTBvGPT8Ql YcernNkap0/rgITbhQe+gGeWsfh/kCKzNqNV55PZYzyTSp81SuilY+PHERzMHlUY m7gNhq5ZsTNkWKKkUv4f4LTzVZ7dbY6n4DhTi9cm249n7X/u7vC5eD3HLMjd3fzY aKfOJ4mYzWxPYGvwkLCVeqNfMDzIxTv3J7M90f6EwgiJK2+TbvoGDClasTFtYmJa VmHxYo/vEG9KRF/XljfURAHvsQGyAvaRKcgzstd6zrYpWOrGOfG3lYxnpCFX2fFG aBwjv4cFxLUZIzRMn+COjc6ETr8veAV3gglImb35F/aL2KvuwmYs20Je0jWsw0XY 72x/RNk= -----END CERTIFICATE-----Generated at Sun Apr 13 05:49:03 2025 by rpki-client