$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A13BE9EE8EE911EE8698A64FC4F9AE02.roa File: A13BE9EE8EE911EE8698A64FC4F9AE02.roa (raw, json) Hash identifier: BbLe+tzPbnaYWKG7gM1VjEH/wcUFNySxqBWUmVUdKKg= Subject key identifier: B2:F5:E0:5D:35:7E:8F:0A:FC:FA:8D:05:56:4C:78:0D:F1:95:C1:E3 Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Certificate serial: 0172 Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A13BE9EE8EE911EE8698A64FC4F9AE02.roa Signing time: Sun 01 Dec 2024 22:43:02 +0000 ROA not before: Sun 01 Dec 2024 22:43:02 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 61112 IP address blocks: 2401:b60:5::/48 maxlen: 48 2401:b60:7::/48 maxlen: 48 2401:b60:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE03B Validity Not Before: Dec 1 22:43:02 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=674ce676-a161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:76:e7:55:31:9d:87:1e:e2:f6:83:ab:07: c0:5d:9f:6a:10:14:17:5e:1d:c9:fc:f0:64:8d:ef: 6d:00:de:30:72:bb:17:b6:da:fc:dc:0a:a2:be:8b: 91:7e:03:f2:d6:f5:6b:60:d1:e3:95:a4:6b:e8:1d: d7:0a:45:3c:9e:03:d0:f0:74:18:df:5e:14:e4:ed: f4:b9:dc:43:9b:8a:5a:f0:e0:20:f4:3f:12:6e:f6: a1:0e:44:9b:1b:4a:10:e5:f1:e4:c8:93:05:64:4a: 13:8e:c6:0e:a1:97:71:64:ab:55:38:67:7d:8c:65: f7:74:99:b4:3d:2d:e6:b7:ca:f0:93:0b:40:2a:35: b7:fe:4f:f9:55:e9:36:71:99:d6:9c:95:00:b8:2c: 56:6c:a5:f1:9b:ad:03:c6:b2:10:66:0b:2a:94:d9: 26:74:2d:3e:38:42:5b:7f:2c:32:b6:05:ee:64:3a: e5:63:ec:e8:d7:e9:b8:14:ec:58:be:32:07:c3:a7: aa:a3:7e:00:3e:4c:2f:3a:c6:e4:7c:9f:b4:21:dc: de:c0:6a:85:c2:ed:9c:26:db:cf:e2:11:a0:bb:ab: 77:14:10:01:46:29:35:24:d4:da:03:d7:91:7c:e6: d2:40:f8:8c:15:cc:14:32:7c:24:9a:66:11:cf:69: 7f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F5:E0:5D:35:7E:8F:0A:FC:FA:8D:05:56:4C:78:0D:F1:95:C1:E3 X509v3 Authority Key Identifier: keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A13BE9EE8EE911EE8698A64FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b60:5::/48 2401:b60:7::/48 2401:b60:2a::/48 Signature Algorithm: sha256WithRSAEncryption 4f:6e:31:23:74:29:45:bb:01:81:77:67:22:9b:ff:c1:56:1d: fe:43:6f:1a:59:65:d6:db:3d:cf:50:d7:5c:17:c5:0c:2c:2e: 16:96:9a:cd:49:a8:a8:2a:1e:8a:93:10:06:38:29:37:16:e0: 45:62:2d:49:67:53:1b:a6:ee:ed:40:b2:25:40:f2:10:6e:d2: 88:fb:14:bd:c5:0c:26:f5:2b:e2:42:58:bc:93:c5:73:bd:a7: 1f:33:81:48:02:dd:15:c4:a6:09:31:c3:cd:9d:66:4f:a7:ce: d1:96:6d:6a:c6:93:29:94:76:70:c3:07:d3:47:00:cd:1e:d1: 1e:e2:30:f9:08:01:d0:1a:db:41:9d:09:91:09:68:f7:8e:a3: fe:f7:7a:2f:07:99:2c:e0:84:45:65:e2:d0:2a:4a:21:00:49: 84:6d:09:b5:b6:05:46:e8:7f:1d:fc:c5:e1:f3:85:87:f5:5a: 78:5c:75:8d:3d:fd:e1:a9:83:96:b4:9f:e1:e3:aa:66:24:83: 83:3b:81:fe:e4:4b:87:fe:58:c0:b4:b4:57:9d:3c:3b:02:b8: 3b:f2:8a:95:c0:6f:8c:cc:6f:12:df:9a:7d:b9:80:65:7f:6a: 71:68:79:7d:f3:5c:e2:2c:35:b8:4b:7e:be:54:39:cf:03:f3: 76:8d:17:40 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0 NTIzOUNDRjQwHhcNMjQxMjAxMjI0MzAyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRjZTY3Ni1hMTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs5251UxnYce4vaDqwfAXZ9qEBQXXh3J/PBkje9tAN4wcrsXttr83AqivouR fgPy1vVrYNHjlaRr6B3XCkU8ngPQ8HQY314U5O30udxDm4pa8OAg9D8SbvahDkSb G0oQ5fHkyJMFZEoTjsYOoZdxZKtVOGd9jGX3dJm0PS3mt8rwkwtAKjW3/k/5Vek2 cZnWnJUAuCxWbKXxm60DxrIQZgsqlNkmdC0+OEJbfywytgXuZDrlY+zo1+m4FOxY vjIHw6eqo34APkwvOsbkfJ+0IdzewGqFwu2cJtvP4hGgu6t3FBABRik1JNTaA9eR fObSQPiMFcwUMnwkmmYRz2l/9QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLL14F01 fo8K/PqNBVZMeA3xlcHjMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvQTEzQkU5RUU4 RUU5MTFFRTg2OThBNjRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMCEEAgACMBsDBwAkAQtgAAUDBwAkAQtgAAcDBwAkAQtgACowDQYJKoZIhvcN AQELBQADggEBAE9uMSN0KUW7AYF3ZyKb/8FWHf5DbxpZZdbbPc9Q11wXxQwsLhaW ms1JqKgqHoqTEAY4KTcW4EViLUlnUxum7u1AsiVA8hBu0oj7FL3FDCb1K+JCWLyT xXO9px8zgUgC3RXEpgkxw82dZk+nztGWbWrGkymUdnDDB9NHAM0e0R7iMPkIAdAa 20GdCZEJaPeOo/73ei8HmSzghEVl4tAqSiEASYRtCbW2BUbofx38xeHzhYf1Wnhc dY09/eGpg5a0n+HjqmYkg4M7gf7kS4f+WMC0tFedPDsCuDvyipXAb4zMbxLfmn25 gGV/anFoeX3zXOIsNbhLfr5UOc8D83aNF0A= -----END CERTIFICATE-----Generated at Sat Apr 5 01:58:00 2025 by rpki-client