$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/2AB990CAF0A911ED80D2CB35C4F9AE02.roa File: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (raw, json) Hash identifier: jWM3qF3q7kpRiSXeFFNjIBgWbV7okecU61rSD6G1V5E= Subject key identifier: BE:A9:9A:0D:16:81:A4:37:7F:49:C6:5A:86:E2:62:C2:9D:4E:4C:75 Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Certificate serial: 0160 Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/2AB990CAF0A911ED80D2CB35C4F9AE02.roa Signing time: Wed 05 Feb 2025 02:55:57 +0000 ROA not before: Wed 05 Feb 2025 02:55:57 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135391 IP address blocks: 2404:2480::/32 maxlen: 32 2404:2480::/33 maxlen: 35 2404:2480::/34 maxlen: 40 2404:2480:4000::/35 maxlen: 40 2404:2480:6000::/36 maxlen: 40 2404:2480:8000::/33 maxlen: 33 2404:2480:8000::/34 maxlen: 34 2404:2480:8000::/35 maxlen: 36 2404:2480:8000::/36 maxlen: 40 2404:2480:9000::/37 maxlen: 37 2404:2480:9000::/38 maxlen: 39 2404:2480:9000::/39 maxlen: 40 2404:2480:9200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 02:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1E9 Validity Not Before: Feb 5 02:55:57 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a2d33d-d8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f4:5d:34:0d:87:4c:ca:4c:53:3e:9c:3e:a0: 5f:b2:a3:0e:41:04:1d:fd:70:06:ea:1e:86:94:39: 95:de:17:4b:18:dc:98:97:a4:72:0f:75:4e:99:cd: 58:21:08:f2:e4:b5:79:80:24:f9:33:36:4b:36:7f: e5:5e:c8:be:b1:d7:35:5f:d2:09:9a:43:8b:b3:a8: c1:1f:a8:19:b0:a2:64:1a:02:4c:a0:19:e0:08:34: 35:17:9a:a7:6b:be:9b:f0:31:74:09:24:38:85:aa: 9e:c4:d4:86:4f:89:85:82:a7:54:f0:28:9c:3f:da: 5b:e9:c9:c9:b5:13:47:cc:3d:d0:21:44:ff:3c:37: a2:99:bd:f3:68:75:85:2d:8c:a0:a9:28:43:22:56: 79:5d:69:e8:df:54:1e:d4:19:a0:f8:a8:58:8e:ad: b9:a7:19:5e:bc:02:1e:3e:44:34:f4:4b:24:92:c7: 00:be:74:b2:cf:c8:b7:41:73:0b:f8:eb:3d:94:b0: d1:90:bf:1d:c7:b5:cd:97:83:79:64:93:88:27:93: 6c:57:44:47:d4:62:2f:93:5c:45:bd:46:47:fe:aa: 72:73:93:d3:b1:0d:a4:e3:e2:6f:a9:f9:fe:ec:57: be:57:81:ce:af:91:32:a4:64:dc:75:76:8e:a4:b7: 2c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A9:9A:0D:16:81:A4:37:7F:49:C6:5A:86:E2:62:C2:9D:4E:4C:75 X509v3 Authority Key Identifier: keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/2AB990CAF0A911ED80D2CB35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:2480::/32 Signature Algorithm: sha256WithRSAEncryption 60:a5:56:5d:4c:c8:00:bf:12:e8:0f:8c:73:29:de:11:28:4d: b4:89:61:63:0f:73:55:59:af:e9:10:66:da:1b:fa:38:40:7b: e5:50:f7:22:01:de:3a:8a:f2:67:a6:1d:57:19:d7:c3:78:fd: 6f:3b:0e:c4:14:63:58:2f:f7:b4:fa:ca:eb:d7:48:d5:ef:e0: f2:e8:85:95:73:e6:4b:e2:10:7c:63:9a:47:da:6b:27:26:0c: c6:7d:a1:60:43:a1:a3:b3:f5:3c:cf:5a:7e:1a:20:dd:db:b0: 1c:30:a2:ab:19:08:1f:c1:e0:cd:01:76:1d:57:0e:55:fd:ed: e6:c4:2f:e9:24:8e:93:10:b1:92:dc:8d:6c:a5:fd:e3:c5:a8: 68:6b:6e:c9:47:dd:d8:02:07:11:f9:9a:bf:fa:0b:cb:b2:76: 0d:0b:03:da:be:b1:4b:7c:e1:84:66:05:17:e7:77:b0:8c:d5: 80:75:4b:dd:29:e9:70:ad:cb:d9:63:18:b5:7f:a5:e7:07:a8: 83:c0:14:c8:ca:ea:7a:ef:c4:ac:38:33:42:72:8f:2f:de:ba: 0d:95:bb:36:0c:c5:57:5a:75:3e:be:13:86:3c:a3:82:3e:f2: 20:7f:b6:b2:1f:e7:25:a9:50:40:4a:66:84:e8:55:f9:21:be: 51:6a:a7:b7 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxRTkxMTAvBgNVBAUTKDcyRDE1NzQzRjU5QzgzQTVDMTk1QTVFNkRCMUVBNDY0 NzYzNEJFRjcwHhcNMjUwMjA1MDI1NTU3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyZDMzZC1kOGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fRdNA2HTMpMUz6cPqBfsqMOQQQd/XAG6h6GlDmV3hdLGNyYl6RyD3VOmc1Y IQjy5LV5gCT5MzZLNn/lXsi+sdc1X9IJmkOLs6jBH6gZsKJkGgJMoBngCDQ1F5qn a76b8DF0CSQ4haqexNSGT4mFgqdU8CicP9pb6cnJtRNHzD3QIUT/PDeimb3zaHWF LYygqShDIlZ5XWno31Qe1Bmg+KhYjq25pxlevAIePkQ09EskkscAvnSyz8i3QXML +Os9lLDRkL8dx7XNl4N5ZJOIJ5NsV0RH1GIvk1xFvUZH/qpyc5PTsQ2k4+Jvqfn+ 7Fe+V4HOr5EypGTcdXaOpLcsTwIDAQABo4ICljCCApIwHQYDVR0OBBYEFL6pmg0W gaQ3f0nGWobiYsKdTkx1MB8GA1UdIwQYMBaAFHLRV0P1nIOlwZWl5tsepGR2NL73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFOS9CQkNENUQyQ0VG Q0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2WEJsYVhtMng2a1pIWTB2 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N0RlhRX1djZzZYQmxhWG0yeDZrWkhZMHZ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0MxRTkvQkJDRDVEMkNFRkNDMTFFREIyOUJCMDZDQzRGOUFFMDIvMkFCOTkwQ0FG MEE5MTFFRDgwRDJDQjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBCSAMA0GCSqGSIb3DQEBCwUAA4IBAQBgpVZdTMgAvxLo D4xzKd4RKE20iWFjD3NVWa/pEGbaG/o4QHvlUPciAd46ivJnph1XGdfDeP1vOw7E FGNYL/e0+srr10jV7+Dy6IWVc+ZL4hB8Y5pH2msnJgzGfaFgQ6Gjs/U8z1p+GiDd 27AcMKKrGQgfweDNAXYdVw5V/e3mxC/pJI6TELGS3I1spf3jxahoa27JR93YAgcR +Zq/+gvLsnYNCwPavrFLfOGEZgUX53ewjNWAdUvdKelwrcvZYxi1f6XnB6iDwBTI yup678SsODNCco8v3roNlbs2DMVXWnU+vhOGPKOCPvIgf7ayH+clqVBASmaE6FX5 Ib5Raqe3 -----END CERTIFICATE-----Generated at Thu Apr 10 18:39:20 2025 by rpki-client