$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/B0A65A04B2A711EEA3E1C240C4F9AE02.roa File: B0A65A04B2A711EEA3E1C240C4F9AE02.roa (raw, json) Hash identifier: QoBrjdE7zvAjaiSCN1er3BuillGq1x50DkwdZeeuwBk= Subject key identifier: 18:16:77:FB:2C:93:30:16:C6:C0:56:44:4B:61:EE:1B:47:B6:5C:48 Certificate issuer: /CN=A91EC8F7/serialNumber=B1927F1382AFC884430C965EAD289BC3BEC64BEC Certificate serial: D6 Authority key identifier: B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/B0A65A04B2A711EEA3E1C240C4F9AE02.roa Signing time: Sat 01 Mar 2025 07:38:31 +0000 ROA not before: Sat 01 Mar 2025 07:38:31 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152324 IP address blocks: 2001:df3:5f40::/48 maxlen: 51 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.crl rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 04:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8F7, serialNumber=B1927F1382AFC884430C965EAD289BC3BEC64BEC Validity Not Before: Mar 1 07:38:31 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67c2b976-b2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:07:fe:50:64:2c:75:01:52:6a:3c:04:07: 2d:51:e0:4a:90:aa:e9:bb:bf:f5:f0:ae:fe:76:e3: 6f:e4:40:30:8b:b8:76:c4:13:82:06:87:18:2f:e0: 1e:0d:9f:d0:0e:c9:c2:12:a6:92:e6:ef:91:44:06: 42:13:c4:c2:e1:29:8d:09:26:8b:c7:1b:57:81:d3: 4d:1f:e6:5e:0b:d2:e9:4b:0d:f3:04:9b:ef:3e:b8: 8a:30:15:ac:47:5d:f4:69:ea:2f:ab:b7:b7:95:46: 4f:81:b3:d0:77:bd:85:3d:24:fb:34:8b:87:29:ae: 13:65:d1:8a:1a:87:b5:1e:85:d0:92:43:2a:90:42: 4c:e4:4f:36:d5:b8:37:17:75:fe:23:45:bd:92:23: e4:2c:b8:2d:0c:4d:74:93:5c:d1:5f:78:be:b1:c2: 30:eb:11:7b:38:48:44:c7:23:be:f3:19:f7:9e:ab: fb:3e:01:65:8a:8d:9f:52:e6:e5:63:e3:7e:80:7f: 09:61:9f:78:b9:1f:6e:ca:4c:bc:7d:b5:26:f0:59: aa:cc:40:bd:85:68:61:a8:d5:bd:8f:31:80:e9:95: de:8e:dd:e6:88:00:38:88:c5:fd:e3:f9:46:28:f5: d7:89:31:f4:50:10:38:05:3b:dd:9c:c0:03:a5:9d: 18:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:16:77:FB:2C:93:30:16:C6:C0:56:44:4B:61:EE:1B:47:B6:5C:48 X509v3 Authority Key Identifier: keyid:B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/B0A65A04B2A711EEA3E1C240C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:5f40::/48 Signature Algorithm: sha256WithRSAEncryption 5f:e9:60:40:2e:62:27:71:43:c0:6e:6e:6e:28:27:23:37:1c: a6:25:a1:3e:ac:70:10:0a:fd:ff:96:d8:c8:78:91:9c:b3:8b: 44:ca:0d:96:cf:59:a9:3b:37:80:24:af:d1:d3:4d:50:71:2b: f7:f9:ae:67:b4:58:ca:6f:c0:fb:3e:dd:f6:b6:c5:c7:e5:ce: 24:be:96:36:2f:8b:a7:83:07:9f:4c:18:16:d4:a9:65:98:1e: a0:0d:c8:97:e0:25:40:81:11:2d:ff:80:72:80:c4:1b:aa:52: e0:8e:32:f7:ea:32:5d:cf:b4:dd:6d:47:2f:a7:c1:26:c4:0d: e1:5e:a4:7b:0c:b7:38:18:92:1e:c6:c8:9f:7f:c1:71:fd:ea: a8:03:b7:1b:3d:8b:b2:bb:59:33:06:45:6f:94:c3:0e:22:58: f5:06:44:fe:4e:24:df:32:e3:df:5a:3b:ee:0e:ae:05:6b:18: 3d:c3:31:d7:5f:67:76:93:b5:da:a2:3b:19:2b:d9:c3:21:ce: fa:df:f8:e7:96:14:03:d0:11:47:f2:cb:b2:1e:2a:d2:ff:f7: b7:88:53:ba:e9:a1:ff:24:0c:c7:67:d4:d4:6a:aa:26:94:bb: 83:b8:68:24:04:91:b5:94:c3:db:71:1d:9b:72:25:a3:6a:91: 6b:0f:cb:ba -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM4RjcxMTAvBgNVBAUTKEIxOTI3RjEzODJBRkM4ODQ0MzBDOTY1RUFEMjg5QkMz QkVDNjRCRUMwHhcNMjUwMzAxMDczODMxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyYjk3Ni1iMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQgH/lBkLHUBUmo8BActUeBKkKrpu7/18K7+duNv5EAwi7h2xBOCBocYL+Ae DZ/QDsnCEqaS5u+RRAZCE8TC4SmNCSaLxxtXgdNNH+ZeC9LpSw3zBJvvPriKMBWs R130aeovq7e3lUZPgbPQd72FPST7NIuHKa4TZdGKGoe1HoXQkkMqkEJM5E821bg3 F3X+I0W9kiPkLLgtDE10k1zRX3i+scIw6xF7OEhExyO+8xn3nqv7PgFlio2fUubl Y+N+gH8JYZ94uR9uyky8fbUm8FmqzEC9hWhhqNW9jzGA6ZXejt3miAA4iMX94/lG KPXXiTH0UBA4BTvdnMADpZ0YHQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBgWd/ss kzAWxsBWREth7htHtlxIMB8GA1UdIwQYMBaAFLGSfxOCr8iEQwyWXq0om8O+xkvs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzhGNy84MDkzQzMwOEIy QTUxMUVFOTBERUEyMjBDNEY5QUUwMi9zWkpfRTRLdnlJUkRESlplclNpYnc3N0dT LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaSl9FNEt2eUlSRERKWmVyU2lidzc3R1Mtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM4RjcvODA5M0MzMDhCMkE1MTFFRTkwREVBMjIwQzRGOUFFMDIvQjBBNjVBMDRC MkE3MTFFRUEzRTFDMjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zX0AwDQYJKoZIhvcNAQELBQADggEBAF/pYEAuYidx Q8Bubm4oJyM3HKYloT6scBAK/f+W2Mh4kZyzi0TKDZbPWak7N4Akr9HTTVBxK/f5 rme0WMpvwPs+3fa2xcflziS+ljYvi6eDB59MGBbUqWWYHqANyJfgJUCBES3/gHKA xBuqUuCOMvfqMl3PtN1tRy+nwSbEDeFepHsMtzgYkh7GyJ9/wXH96qgDtxs9i7K7 WTMGRW+Uww4iWPUGRP5OJN8y499aO+4OrgVrGD3DMddfZ3aTtdqiOxkr2cMhzvrf +OeWFAPQEUfyy7IeKtL/97eIU7rpof8kDMdn1NRqqiaUu4O4aCQEkbWUw9txHZty JaNqkWsPy7o= -----END CERTIFICATE-----Generated at Thu Apr 17 21:02:26 2025 by rpki-client