$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/DC23F5180E1611EF91DF311EC4F9AE02.roa File: DC23F5180E1611EF91DF311EC4F9AE02.roa (raw, json) Hash identifier: PDtdUX6JrHo4d5GjgXXthgA5sLxtJKv9u0i8nv/vqsk= Subject key identifier: 6C:1A:E1:BD:0D:91:AB:25:85:80:DA:2C:BE:49:5A:73:59:61:EE:82 Certificate issuer: /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32 Certificate serial: BC Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/DC23F5180E1611EF91DF311EC4F9AE02.roa Signing time: Tue 11 Mar 2025 05:23:08 +0000 ROA not before: Tue 11 Mar 2025 05:23:08 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 138195 IP address blocks: 2400:b8c0::/32 maxlen: 32 2404:2040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB86D Validity Not Before: Mar 11 05:23:08 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67cfc8bc-026a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:b3:2e:87:83:8a:8b:f9:69:18:89:c9:bd: aa:f4:83:86:e6:cc:b8:47:a4:4c:0b:aa:34:fa:7b: 81:81:cf:b2:15:17:b9:25:2c:a1:ea:80:9e:38:94: fe:b6:7c:76:c8:03:f3:46:99:3c:fd:d2:28:03:45: 47:c0:68:11:f3:80:96:98:d5:04:48:e0:e1:dd:e2: c8:ef:9f:ef:f8:0c:3b:49:83:9e:09:f1:ed:2c:e8: ce:3d:d6:30:47:f5:79:98:ca:77:22:e4:a4:18:48: 9c:ba:d1:4b:3b:61:7c:9c:cb:ac:51:e8:bc:0f:04: 44:3e:10:8c:49:ae:35:1f:5b:55:0f:ed:e8:e4:d6: 2d:36:d8:d1:73:2d:de:ce:ef:a7:98:4e:bd:9d:29: 16:b6:9c:f0:a6:aa:aa:35:cc:cb:d2:1a:c2:9a:5e: 10:6d:85:87:17:66:e6:fd:8f:3c:3a:57:e3:e6:30: 1b:ad:b5:9e:91:d9:99:3e:d3:62:ee:8a:ef:5b:52: 5c:63:58:96:21:85:6e:26:72:1b:ce:76:35:09:5a: f4:cb:cc:8d:73:49:0d:45:9f:51:8d:ad:39:ec:e5: 7b:6b:f1:0e:7a:59:93:c7:7e:4e:1f:a5:98:d5:3a: 7c:1c:e7:54:5b:73:43:f4:c9:42:51:5e:fb:36:cd: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1A:E1:BD:0D:91:AB:25:85:80:DA:2C:BE:49:5A:73:59:61:EE:82 X509v3 Authority Key Identifier: keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/DC23F5180E1611EF91DF311EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:b8c0::/32 2404:2040::/32 Signature Algorithm: sha256WithRSAEncryption 42:90:3f:de:6c:0d:89:95:73:f2:88:f0:a2:89:7d:84:86:5e: 1a:b8:4d:5f:c3:30:59:df:7e:d0:93:fc:92:64:32:89:d1:c6: 14:b7:54:99:e1:a1:82:bd:43:2d:75:34:22:bd:43:72:b5:04: 8b:9b:f8:d2:01:f7:fc:d8:4e:0d:7b:5f:c9:e7:88:80:70:ff: 1d:21:87:bd:cb:3e:6a:ff:26:4a:7d:19:5c:0b:aa:4e:39:fd: f5:b5:1b:f9:ca:0f:9d:b2:cc:56:be:73:83:de:10:40:94:86: 4e:e2:50:ed:57:11:d3:38:03:61:3c:d3:a2:05:66:9c:09:92: bd:d6:e6:f6:14:23:2b:76:2d:ff:91:7b:53:4a:a6:fb:db:0f: ea:28:db:ed:22:7e:eb:48:df:3a:36:53:39:82:92:a0:25:3f: 32:d6:0a:89:73:2c:b3:26:2c:5e:b5:9a:c4:ca:3d:2e:91:78: 2d:ec:72:98:f3:6e:67:15:02:4b:8f:02:c1:e6:6c:54:69:47: d4:2a:76:4b:cc:53:d2:bd:22:5e:16:fb:7a:ed:16:eb:05:16: 2b:07:24:48:27:59:dd:20:a6:ea:9b:74:ac:02:b1:57:88:68: d1:16:3f:ab:5a:88:51:ed:3e:f3:0d:90:46:9a:4d:5a:7f:ac: 34:67:62:a4 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4NkQxMTAvBgNVBAUTKDI1NkI1RDE3OTBEMjRDNEQ2Qzk3MjA2NEU5MUM2QUYw MEJENjhFMzIwHhcNMjUwMzExMDUyMzA4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmYzhiYy0wMjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlCzLoeDiov5aRiJyb2q9IOG5sy4R6RMC6o0+nuBgc+yFRe5JSyh6oCeOJT+ tnx2yAPzRpk8/dIoA0VHwGgR84CWmNUESODh3eLI75/v+Aw7SYOeCfHtLOjOPdYw R/V5mMp3IuSkGEicutFLO2F8nMusUei8DwREPhCMSa41H1tVD+3o5NYtNtjRcy3e zu+nmE69nSkWtpzwpqqqNczL0hrCml4QbYWHF2bm/Y88Olfj5jAbrbWekdmZPtNi 7orvW1JcY1iWIYVuJnIbznY1CVr0y8yNc0kNRZ9Rja057OV7a/EOelmTx35OH6WY 1Tp8HOdUW3ND9MlCUV77Ns1xpQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFGwa4b0N kaslhYDaLL5JWnNZYe6CMB8GA1UdIwQYMBaAFCVrXReQ0kxNbJcgZOkcavAL1o4y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjg2RC82RjA1ODIwRUU1 M0UxMUVFQTM4RjA4NzdDNEY5QUUwMi9KV3RkRjVEU1RFMXNseUJrNlJ4cThBdldq akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXdGRGNURTVEUxc2x5Qms2UnhxOEF2V2pqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I4NkQvNkYwNTgyMEVFNTNFMTFFRUEzOEYwODc3QzRGOUFFMDIvREMyM0Y1MTgw RTE2MTFFRjkxREYzMTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgACMA4DBQAkALjAAwUAJAQgQDANBgkqhkiG9w0BAQsFAAOCAQEAQpA/ 3mwNiZVz8ojwool9hIZeGrhNX8MwWd9+0JP8kmQyidHGFLdUmeGhgr1DLXU0Ir1D crUEi5v40gH3/NhODXtfyeeIgHD/HSGHvcs+av8mSn0ZXAuqTjn99bUb+coPnbLM Vr5zg94QQJSGTuJQ7VcR0zgDYTzTogVmnAmSvdbm9hQjK3Yt/5F7U0qm+9sP6ijb 7SJ+60jfOjZTOYKSoCU/MtYKiXMssyYsXrWaxMo9LpF4LexymPNuZxUCS48CweZs VGlH1Cp2S8xT0r0iXhb7eu0W6wUWKwckSCdZ3SCm6pt0rAKxV4ho0RY/q1qIUe0+ 8w2QRppNWn+sNGdipA== -----END CERTIFICATE-----Generated at Sat Apr 5 02:00:30 2025 by rpki-client