$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/56C3DC822B0B11EF97C4A74AC4F9AE02.roa File: 56C3DC822B0B11EF97C4A74AC4F9AE02.roa (raw, json) Hash identifier: CVWZvuJMAyjtpzrMYgtcHwOIm2n01TzT8z4GiPVYHFA= Subject key identifier: AA:E7:75:A7:4B:EA:88:1D:CA:DC:A2:14:4D:42:C7:46:1A:BB:F6:7A Certificate issuer: /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB Certificate serial: 33BA Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/56C3DC822B0B11EF97C4A74AC4F9AE02.roa Signing time: Thu 02 Jan 2025 15:40:58 +0000 ROA not before: Thu 02 Jan 2025 15:40:58 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 58779 IP address blocks: 43.243.224.0/22 maxlen: 24 2405:ef00::/32 maxlen: 32 2405:ef00::/32 maxlen: 48 2405:ef00:17::/48 maxlen: 48 2405:ef00:17::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13242 (0x33ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D27 Validity Not Before: Jan 2 15:40:58 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6776b38a-a7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:17:74:00:9e:85:34:1b:04:8b:a4:8e:5c: a3:af:33:d1:db:78:96:e7:4b:5b:29:e3:33:a9:1b: 8f:a6:26:67:04:a0:97:09:4e:a0:28:dc:a3:c4:e3: 20:8d:cf:be:4a:f2:29:85:78:4f:09:70:5e:c3:7a: 4b:00:b4:42:7c:79:3c:da:69:50:19:99:e7:10:cc: c1:1b:09:ca:f7:6e:a3:b9:c2:c3:06:2e:84:09:81: c5:68:7e:76:fa:f6:e7:f7:59:72:be:8b:7f:85:8e: 7c:20:f5:6b:8f:f6:7a:eb:48:40:17:3e:0f:d8:02: 0e:fd:db:fb:55:6a:2f:43:4f:eb:21:00:06:2f:99: 07:8b:ca:52:3e:ef:22:3f:2b:af:11:85:fa:a0:09: ae:87:90:5f:65:fd:a8:ee:86:e7:45:47:fc:5d:3e: 27:70:db:74:36:db:46:e5:b1:6d:4f:f7:c0:e5:d6: 14:12:3d:bf:a8:62:33:c9:cc:20:72:4d:ca:27:0f: 3a:61:74:ff:8f:56:ae:f5:c4:3b:e8:8e:be:6d:d3: 1c:76:17:20:2b:12:88:dc:98:60:b3:30:b7:9a:55: 76:1d:68:5e:b4:dd:fb:bf:3a:16:e5:ec:d1:7d:9c: 1a:b0:f1:4c:59:37:74:8c:7f:d1:1d:ff:53:c1:31: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E7:75:A7:4B:EA:88:1D:CA:DC:A2:14:4D:42:C7:46:1A:BB:F6:7A X509v3 Authority Key Identifier: keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/56C3DC822B0B11EF97C4A74AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.224.0/22 IPv6: 2405:ef00::/32 Signature Algorithm: sha256WithRSAEncryption 80:6c:d8:d4:1d:cd:76:89:1a:d2:8e:a3:ee:69:92:02:67:41: c6:42:cb:4e:a2:d2:16:48:47:60:ca:4c:65:41:b0:ab:b4:88: fd:68:41:99:60:3d:10:af:bf:3c:18:80:aa:aa:62:e2:33:f9: 59:8e:62:b6:ea:e9:1e:f8:6b:78:12:cd:6f:6c:91:da:d4:e4: 6a:35:e9:e7:0b:b8:6c:0b:93:cb:46:6b:de:d3:4f:e6:e8:0c: d7:49:d2:eb:05:51:37:d1:68:3d:b1:f1:56:7e:ab:10:e4:19: 22:81:25:4c:b0:dc:bf:6a:28:93:87:37:b5:c3:b0:1f:53:29: 1a:af:78:06:06:cb:96:ce:d0:a2:27:39:6e:72:76:50:7b:ad: a7:ee:95:6d:06:a3:cb:26:f5:97:6f:0d:6b:dc:55:4c:af:c0: d9:f0:c8:3f:66:5b:e7:e2:1f:af:30:15:fb:53:80:f2:46:57: 77:1f:68:45:37:d5:0c:eb:af:3e:ad:ba:0a:0f:01:d0:b6:a0: 9d:27:52:ac:ba:33:aa:ac:06:e7:ae:8b:a2:fd:35:a9:11:da: a8:69:1b:73:4b:18:58:da:a7:38:d5:6c:f3:6b:c1:89:8a:7b: 20:2a:1c:3b:8b:fd:db:da:e1:cd:97:16:a6:17:b3:1d:c5:17: fa:8b:bd:c5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICM7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZERjczMjNCNTAz QzQ5MzExREIwHhcNMjUwMTAyMTU0MDU4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc2YjM4YS1hN2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt8XdACehTQbBIukjlyjrzPR23iW50tbKeMzqRuPpiZnBKCXCU6gKNyjxOMg jc++SvIphXhPCXBew3pLALRCfHk82mlQGZnnEMzBGwnK926jucLDBi6ECYHFaH52 +vbn91lyvot/hY58IPVrj/Z660hAFz4P2AIO/dv7VWovQ0/rIQAGL5kHi8pSPu8i PyuvEYX6oAmuh5BfZf2o7obnRUf8XT4ncNt0NttG5bFtT/fA5dYUEj2/qGIzycwg ck3KJw86YXT/j1au9cQ76I6+bdMcdhcgKxKI3JhgszC3mlV2HWhetN37vzoW5ezR fZwasPFMWTd0jH/RHf9TwTF3cQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKrndadL 6ogdytyiFE1Cx0Yau/Z6MB8GA1UdIwQYMBaAFGvkPmsTlkPLTBnm33MjtQPEkxHb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyNy9DMEM1ODA3MDQy RTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4dE1HZWJmY3lPMUE4U1RF ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtUS1heE9XUTh0TUdlYmZjeU8xQThTVEVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThEMjcvQzBDNTgwNzA0MkU5MTFFMjk3NTBBMzJFMjk3OUJCMjAvNTZDM0RDODIy QjBCMTFFRjk3QzRBNzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAIr8+AwDQQCAAIwBwMFACQF7wAwDQYJKoZIhvcNAQELBQAD ggEBAIBs2NQdzXaJGtKOo+5pkgJnQcZCy06i0hZIR2DKTGVBsKu0iP1oQZlgPRCv vzwYgKqqYuIz+VmOYrbq6R74a3gSzW9skdrU5Go16ecLuGwLk8tGa97TT+boDNdJ 0usFUTfRaD2x8VZ+qxDkGSKBJUyw3L9qKJOHN7XDsB9TKRqveAYGy5bO0KInOW5y dlB7rafulW0Go8sm9ZdvDWvcVUyvwNnwyD9mW+fiH68wFftTgPJGV3cfaEU31Qzr rz6tugoPAdC2oJ0nUqy6M6qsBueui6L9NakR2qhpG3NLGFjapzjVbPNrwYmKeyAq HDuL/dva4c2XFqYXsx3FF/qLvcU= -----END CERTIFICATE-----Generated at Sun Apr 6 12:23:52 2025 by rpki-client