$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8B083190C9DC11EE8B24C55EC4F9AE02.roa File: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (raw, json) Hash identifier: MEzvVgdoK3WuLUFmv9SwilQrCS7SZE01USmJAX6/Oss= Subject key identifier: D6:3F:41:61:5F:DA:F7:BA:51:3C:71:C1:40:90:7A:21:B4:BD:ED:14 Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Certificate serial: 0A63 Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8B083190C9DC11EE8B24C55EC4F9AE02.roa Signing time: Wed 26 Mar 2025 19:59:53 +0000 ROA not before: Wed 26 Mar 2025 19:59:53 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 18259 IP address blocks: 2001:218:2200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2659 (0xa63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB493 Validity Not Before: Mar 26 19:59:53 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e45cb9-9c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:52:43:30:20:de:8a:f7:0e:e5:c8:ab:53:41: 15:99:88:c7:d0:05:80:ed:40:34:15:b6:57:10:c1: e4:0d:b5:95:81:eb:b8:9d:36:d4:9e:3a:68:fe:ad: ae:da:31:75:07:14:c2:c5:72:80:a8:22:30:15:1d: af:d6:43:60:62:50:8f:7c:47:42:89:93:bb:21:96: f6:41:b8:6a:cf:1f:1c:ae:26:0a:ea:aa:e2:d6:29: 40:3d:d4:fb:85:77:13:54:9f:fe:48:63:f3:79:78: fe:b7:81:c8:07:e1:6f:1e:77:54:fc:51:fb:05:d1: df:df:50:2f:82:e7:55:16:f5:f6:4d:ce:c2:03:83: 18:da:cf:f3:57:8f:7a:3c:91:ba:96:af:bb:c2:aa: fa:af:28:6b:6f:ab:ee:20:7e:44:01:96:05:5c:1f: c4:94:0d:bf:ba:87:c9:35:52:03:bb:2e:d4:32:33: aa:7c:41:d8:5e:45:7b:19:1f:2f:11:b1:f1:55:4f: d9:79:1c:af:8c:05:af:bc:f5:5d:36:57:12:dd:01: 92:fe:48:f4:4e:fe:b8:c2:4f:f7:18:1d:0b:9f:ea: 6e:46:8f:7e:56:ed:ee:d4:e2:2a:7a:dc:66:18:9b: 60:95:d7:b3:85:2c:73:9a:23:01:b9:67:30:ac:db: 90:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3F:41:61:5F:DA:F7:BA:51:3C:71:C1:40:90:7A:21:B4:BD:ED:14 X509v3 Authority Key Identifier: keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8B083190C9DC11EE8B24C55EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:218:2200::/40 Signature Algorithm: sha256WithRSAEncryption 8a:6c:6f:e1:a3:60:0f:a2:4b:59:bb:44:f7:2b:87:63:7f:8e: f3:f8:1a:42:62:59:15:9a:8d:da:b9:2f:ec:50:48:5d:27:4c: af:92:a5:45:bd:7b:73:93:bb:28:22:54:c1:a1:63:b4:71:34: 79:c8:35:16:93:f7:6c:12:12:a6:a7:de:76:dc:d7:3e:fe:79: 7e:61:d1:1d:a0:df:a4:4d:ba:73:a9:a1:df:5a:9b:2e:9d:6e: ca:6f:05:0e:21:0a:27:b8:75:9c:fb:79:dc:71:45:d9:43:22: 19:72:f1:0b:88:0d:cd:f5:5f:f7:69:b5:b2:ae:54:72:18:e5: b5:41:90:6c:af:b7:34:74:55:9e:fd:8c:67:79:c4:5b:ed:72: 32:9d:7e:fa:65:ce:1a:25:ec:db:f6:9a:2c:98:7a:fa:c1:a5: 0b:cc:31:12:67:67:5e:2d:0a:13:84:57:e5:16:78:ac:4e:0e: 5f:cf:4b:e4:f4:53:d3:fa:00:67:d1:df:64:5e:72:ab:be:52: d3:95:e1:cc:b2:56:cb:6c:e1:ba:81:e1:ba:bc:ef:c7:20:1d: bb:9f:4f:49:92:0b:27:8c:b1:30:3a:0e:2c:f3:df:48:75:79: 54:99:57:4e:bb:05:bd:c9:ac:1c:5c:38:b1:3c:49:2e:1f:1f: fc:72:2c:40 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICCmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4 M0NCRTE4NjcwHhcNMjUwMzI2MTk1OTUzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0NWNiOS05YzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lJDMCDeivcO5cirU0EVmYjH0AWA7UA0FbZXEMHkDbWVgeu4nTbUnjpo/q2u 2jF1BxTCxXKAqCIwFR2v1kNgYlCPfEdCiZO7IZb2Qbhqzx8criYK6qri1ilAPdT7 hXcTVJ/+SGPzeXj+t4HIB+FvHndU/FH7BdHf31AvgudVFvX2Tc7CA4MY2s/zV496 PJG6lq+7wqr6ryhrb6vuIH5EAZYFXB/ElA2/uofJNVIDuy7UMjOqfEHYXkV7GR8v EbHxVU/ZeRyvjAWvvPVdNlcS3QGS/kj0Tv64wk/3GB0Ln+puRo9+Vu3u1OIqetxm GJtgldezhSxzmiMBuWcwrNuQdQIDAQABo4IClzCCApMwHQYDVR0OBBYEFNY/QWFf 2ve6UTxxwUCQeiG0ve0UMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4 RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI0OTMvNUZDQUI2NzI2OEYzMTFFQTgzMkREQjM3QzRGOUFFMDIvOEIwODMxOTBD OURDMTFFRThCMjRDNTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAgAQIYIjANBgkqhkiG9w0BAQsFAAOCAQEAimxv4aNgD6JL WbtE9yuHY3+O8/gaQmJZFZqN2rkv7FBIXSdMr5KlRb17c5O7KCJUwaFjtHE0ecg1 FpP3bBISpqfedtzXPv55fmHRHaDfpE26c6mh31qbLp1uym8FDiEKJ7h1nPt53HFF 2UMiGXLxC4gNzfVf92m1sq5UchjltUGQbK+3NHRVnv2MZ3nEW+1yMp1++mXOGiXs 2/aaLJh6+sGlC8wxEmdnXi0KE4RX5RZ4rE4OX89L5PRT0/oAZ9HfZF5yq75S05Xh zLJWy2zhuoHhurzvxyAdu59PSZILJ4yxMDoOLPPfSHV5VJlXTrsFvcmsHFw4sTxJ Lh8f/HIsQA== -----END CERTIFICATE-----Generated at Sat Apr 5 06:09:57 2025 by rpki-client