$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/2902D956492411EAAC15FB67C4F9AE02.roa File: 2902D956492411EAAC15FB67C4F9AE02.roa (raw, json) Hash identifier: ndMYLuFm1npGXhTqyafB2ux+qylKnhbABDCIs0+SmbQ= Subject key identifier: F4:8A:09:BF:FA:4B:B6:17:3E:CF:B8:3D:BE:8D:B2:43:0E:4F:C9:15 Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Certificate serial: 0A91 Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/2902D956492411EAAC15FB67C4F9AE02.roa Signing time: Tue 26 Nov 2024 19:28:29 +0000 ROA not before: Tue 26 Nov 2024 19:28:29 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 45637 IP address blocks: 2001:df5:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 19:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2705 (0xa91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Validity Not Before: Nov 26 19:28:29 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6746215c-a2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:1b:e3:ec:ee:4b:a3:84:1c:29:d4:e1:21: c1:4c:54:24:e4:eb:22:57:4a:b9:d1:85:f7:f2:fb: 34:da:5e:c4:87:37:14:a5:ea:2a:21:a7:a8:f0:2c: 1e:2b:ef:d4:cf:f3:11:44:32:84:8f:d9:53:d5:42: 8f:c5:9a:96:09:ce:6c:89:47:31:28:63:45:6b:b5: bd:a5:ad:96:44:01:bf:30:df:27:9c:55:3f:f5:d9: 45:11:0e:ea:c5:fa:93:19:23:21:69:0e:6f:6d:27: 51:08:cc:4e:eb:3e:3e:77:28:de:ab:6c:9d:b7:b6: 17:cc:94:72:46:47:fd:19:7b:3c:7e:05:e6:ae:7f: 34:4f:93:79:f0:1b:0f:21:3e:ec:a0:ea:40:19:83: e3:26:22:90:f6:98:29:8b:32:fa:ec:ca:59:9f:fd: a7:07:07:5c:7e:8c:4d:11:97:05:05:76:e5:4b:58: 9b:29:1c:8e:23:c6:ff:a1:ab:1d:d4:fc:19:cc:e0: 4d:11:13:66:9c:84:0b:44:69:56:e6:48:71:8b:11: a8:af:0e:26:08:b5:f2:44:9a:bd:46:71:86:e7:f2: 54:90:d2:63:32:61:ad:7d:3e:0a:c5:ad:bd:4a:e2: 2a:1b:74:cf:47:d6:8d:8d:eb:d2:5c:24:7d:8d:a0: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8A:09:BF:FA:4B:B6:17:3E:CF:B8:3D:BE:8D:B2:43:0E:4F:C9:15 X509v3 Authority Key Identifier: keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/2902D956492411EAAC15FB67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df5:b000::/48 Signature Algorithm: sha256WithRSAEncryption 93:85:59:8d:53:f8:c6:4d:f2:82:3d:31:c2:3a:7c:44:2a:f4: 10:0c:de:51:e7:a9:a1:ff:b1:ba:77:7f:26:61:31:e8:d3:08: 00:e2:d8:b1:e3:07:f0:fe:12:df:0d:7f:7c:7a:fb:df:98:c0: 64:a4:45:b2:e9:f6:d4:10:91:b9:29:d0:6a:f3:1b:8c:ee:ca: a3:2d:e7:7d:07:86:a5:d1:84:b8:cb:c7:65:fe:9b:44:d2:53: c3:14:ea:57:ad:de:9a:c1:56:83:66:68:65:36:af:d3:fc:99: c4:ec:2c:ec:f1:31:aa:b4:da:8f:68:8d:1b:ce:3d:88:f6:26: bb:f4:58:cf:cd:da:2b:ba:ae:7f:9a:9c:aa:4a:a1:ea:e5:cc: 66:61:38:0b:69:8b:ff:7a:ac:fd:52:d0:dd:51:d9:df:55:91: 3e:9e:14:1b:29:fb:79:13:e9:a6:05:41:92:2a:bc:26:b5:25: c2:25:c7:f6:c3:2c:eb:42:36:56:27:dc:8a:d3:96:f9:2a:27: 75:13:a4:ac:a1:dd:c4:2c:d7:b0:d1:5f:28:6b:32:52:6e:e6: c0:c3:11:32:06:c9:68:93:68:77:65:c6:a5:6b:fa:d0:d1:e2: f2:2a:66:c7:87:94:5e:c2:82:b6:69:bf:78:20:f3:fe:0b:dd: 82:88:78:79 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFRjMxMTAvBgNVBAUTKEY2Q0IyRThFQkM3QTg5MkJGQTE1QzQ0N0IzOTgyNEEw NThDNzU1QUUwHhcNMjQxMTI2MTkyODI5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ2MjE1Yy1hMmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykYb4+zuS6OEHCnU4SHBTFQk5OsiV0q50YX38vs02l7EhzcUpeoqIaeo8Cwe K+/Uz/MRRDKEj9lT1UKPxZqWCc5siUcxKGNFa7W9pa2WRAG/MN8nnFU/9dlFEQ7q xfqTGSMhaQ5vbSdRCMxO6z4+dyjeq2ydt7YXzJRyRkf9GXs8fgXmrn80T5N58BsP IT7soOpAGYPjJiKQ9pgpizL67MpZn/2nBwdcfoxNEZcFBXblS1ibKRyOI8b/oasd 1PwZzOBNERNmnIQLRGlW5khxixGorw4mCLXyRJq9RnGG5/JUkNJjMmGtfT4Kxa29 SuIqG3TPR9aNjevSXCR9jaDY6wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFPSKCb/6 S7YXPs+4Pb6NskMOT8kVMB8GA1UdIwQYMBaAFPbLLo68eokr+hXER7OYJKBYx1Wu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVGMy8yNTE5Q0RGMDQ5 MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlTdjZGY1JIczVna29GakhW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlzc3Vqcng2aVN2NkZjUkhzNWdrb0ZqSFZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjlFRjMvMjUxOUNERjA0OTIzMTFFQUEwNjlBNTY2QzRGOUFFMDIvMjkwMkQ5NTY0 OTI0MTFFQUFDMTVGQjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ31sAAwDQYJKoZIhvcNAQELBQADggEBAJOFWY1T+MZN 8oI9McI6fEQq9BAM3lHnqaH/sbp3fyZhMejTCADi2LHjB/D+Et8Nf3x6+9+YwGSk RbLp9tQQkbkp0GrzG4zuyqMt530HhqXRhLjLx2X+m0TSU8MU6let3prBVoNmaGU2 r9P8mcTsLOzxMaq02o9ojRvOPYj2Jrv0WM/N2iu6rn+anKpKoerlzGZhOAtpi/96 rP1S0N1R2d9VkT6eFBsp+3kT6aYFQZIqvCa1JcIlx/bDLOtCNlYn3IrTlvkqJ3UT pKyh3cQs17DRXyhrMlJu5sDDETIGyWiTaHdlxqVr+tDR4vIqZseHlF7CgrZpv3gg 8/4L3YKIeHk= -----END CERTIFICATE-----Generated at Fri Apr 18 08:26:52 2025 by rpki-client