$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/A30DC17880FE11E985D53F55C4F9AE02.roa File: A30DC17880FE11E985D53F55C4F9AE02.roa (raw, json) Hash identifier: FAySI2su8cL3vKBRY/mDcgCBdpz6IW+fV0g4HW92eb8= Subject key identifier: EB:9F:09:63:1C:72:8D:C4:14:03:FB:C1:0C:AF:24:F1:31:27:7D:2F Certificate issuer: /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6 Certificate serial: 3376 Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/A30DC17880FE11E985D53F55C4F9AE02.roa Signing time: Thu 12 Dec 2024 15:31:06 +0000 ROA not before: Thu 12 Dec 2024 15:31:06 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 24514 IP address blocks: 2001:df0:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13174 (0x3376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8EF9 Validity Not Before: Dec 12 15:31:06 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675b01b9-f1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:15:ff:13:36:c2:9f:61:35:44:19:df:31: a9:8b:3b:a6:fb:ff:5b:5b:a8:f2:45:03:66:ca:ad: 5a:2d:11:65:37:1a:f4:07:b8:42:79:6a:1f:15:9c: f3:bf:21:10:55:d4:f7:80:e1:ef:21:f7:ca:0f:b9: 46:4f:35:0d:60:d4:24:9a:ce:50:dd:34:12:d7:1e: a8:c6:6b:dd:43:be:a1:89:76:72:af:21:98:f1:38: 91:a3:0f:98:bf:eb:cc:03:fb:5e:2b:de:46:bf:65: 2e:89:79:31:31:c4:32:b4:eb:3b:5e:4a:73:cd:77: 37:25:f2:dd:6b:7c:40:6d:e5:6c:60:97:03:26:59: 7d:53:a8:db:f4:59:33:ef:7b:ac:be:33:56:6b:70: 48:dc:30:61:a3:f5:8f:c4:02:4c:d5:16:26:66:d7: 30:3f:4f:a9:e8:be:b2:92:ba:97:5e:f8:44:bd:79: 42:34:85:0e:79:83:d7:23:6f:75:d9:c9:be:66:50: 3e:a5:bc:17:7b:d1:5d:6f:59:9a:a6:c6:4e:81:4d: fe:1c:48:53:c9:ef:d7:49:a6:bc:ae:a1:81:93:e2: 34:64:3a:54:e1:50:fa:a1:1a:80:d6:7d:b8:d8:cb: b3:3d:86:ad:ac:b6:08:80:80:8e:9f:73:aa:b3:64: 09:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9F:09:63:1C:72:8D:C4:14:03:FB:C1:0C:AF:24:F1:31:27:7D:2F X509v3 Authority Key Identifier: keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/A30DC17880FE11E985D53F55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:427::/48 Signature Algorithm: sha256WithRSAEncryption 4e:f0:14:da:e5:53:f7:75:51:da:8c:9f:e7:aa:39:2f:ff:17: 0a:eb:7c:15:d4:55:94:d4:e9:2d:25:57:e0:6c:c6:4c:8a:27: 87:43:82:12:79:aa:24:c5:1f:b4:ee:4c:ef:b9:0b:aa:af:b3: 1c:98:0d:a2:7a:fa:5d:b9:9c:87:2c:29:b8:bc:cd:08:67:fd: a8:28:b8:0a:5a:f3:46:65:87:cf:83:c4:4a:62:98:0f:50:cf: ad:90:4a:30:48:a7:07:cf:ab:7a:e4:d0:7c:34:30:76:03:9d: dd:ae:bb:f6:64:77:4c:e6:86:b7:df:6a:f7:b4:9c:66:1e:98: 0e:a8:c3:d3:c7:c8:19:89:af:14:6c:0f:4f:c9:20:08:15:44: 08:34:ee:47:74:90:27:58:d8:09:97:37:7a:74:c5:8a:7d:27: 7e:1f:55:2f:ec:98:f8:8a:6a:5d:bf:75:8d:f7:9b:d0:f9:b5: 8b:37:5d:63:c8:3a:6a:0e:d3:d5:b7:ed:94:e0:c6:08:43:e2: 71:dd:f0:ec:ea:fe:63:dd:7b:7b:18:99:db:3b:49:f2:4c:d3: 60:a0:ca:04:7c:82:6b:70:67:fb:44:f2:69:d3:1c:03:bb:ae: b6:2a:36:79:43:f1:ce:84:fc:69:53:2e:1b:79:52:67:be:86: a8:0f:d8:e0 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICM3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFRjkxMTAvBgNVBAUTKEQzMkRBMzZFODgyMTgyMkU2QkQzQzgyQ0ZGQTk4NEU3 QTkwOUMzRjYwHhcNMjQxMjEyMTUzMTA2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzViMDFiOS1mMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApR4V/xM2wp9hNUQZ3zGpizum+/9bW6jyRQNmyq1aLRFlNxr0B7hCeWofFZzz vyEQVdT3gOHvIffKD7lGTzUNYNQkms5Q3TQS1x6oxmvdQ76hiXZyryGY8TiRow+Y v+vMA/teK95Gv2UuiXkxMcQytOs7XkpzzXc3JfLda3xAbeVsYJcDJll9U6jb9Fkz 73usvjNWa3BI3DBho/WPxAJM1RYmZtcwP0+p6L6ykrqXXvhEvXlCNIUOeYPXI291 2cm+ZlA+pbwXe9Fdb1mapsZOgU3+HEhTye/XSaa8rqGBk+I0ZDpU4VD6oRqA1n24 2MuzPYatrLYIgICOn3Oqs2QJRQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOufCWMc co3EFAP7wQyvJPExJ30vMB8GA1UdIwQYMBaAFNMto26IIYIua9PILP+phOepCcP2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEVGOS80NEE4MDVFRTQ0 QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdpNXIwOGdzXzZtRTU2a0p3 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5Mmpib2doZ2k1cjA4Z3NfNm1FNTZrSndfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjhFRjkvNDRBODA1RUU0NEM5MTFFMkIzNUFDNDg0Mjk3OUJCMjAvQTMwREMxNzg4 MEZFMTFFOTg1RDUzRjU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3wBCcwDQYJKoZIhvcNAQELBQADggEBAE7wFNrlU/d1 UdqMn+eqOS//FwrrfBXUVZTU6S0lV+BsxkyKJ4dDghJ5qiTFH7TuTO+5C6qvsxyY DaJ6+l25nIcsKbi8zQhn/agouApa80Zlh8+DxEpimA9Qz62QSjBIpwfPq3rk0Hw0 MHYDnd2uu/Zkd0zmhrffave0nGYemA6ow9PHyBmJrxRsD0/JIAgVRAg07kd0kCdY 2AmXN3p0xYp9J34fVS/smPiKal2/dY33m9D5tYs3XWPIOmoO09W37ZTgxghD4nHd 8Ozq/mPde3sYmds7SfJM02CgygR8gmtwZ/tE8mnTHAO7rrYqNnlD8c6E/GlTLht5 Ume+hqgP2OA= -----END CERTIFICATE-----Generated at Sun Apr 6 02:44:20 2025 by rpki-client