$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/B2DE2498C4FD11ED909F2770C4F9AE02.roa File: B2DE2498C4FD11ED909F2770C4F9AE02.roa (raw, json) Hash identifier: sz+mmIZs/29Io2xKT3w1Go850hnuQbV97uqO5OCD7zA= Subject key identifier: 21:80:B0:8E:88:C0:82:6B:71:E7:06:11:7C:B2:7A:9C:07:26:F7:CF Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Certificate serial: 0175 Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/B2DE2498C4FD11ED909F2770C4F9AE02.roa Signing time: Fri 21 Feb 2025 04:56:12 +0000 ROA not before: Fri 21 Feb 2025 04:56:12 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 38016 IP address blocks: 2406:c800::/32 maxlen: 32 2406:c800:a1ca::/48 maxlen: 48 2406:c800:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA66B Validity Not Before: Feb 21 04:56:12 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67b8076b-a4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:6e:d5:2e:a9:07:87:3b:a9:8d:ac:e6:c1: 0f:ab:7b:0b:30:b5:94:ee:6d:a9:63:f9:6e:7c:4e: 3e:18:e7:18:d8:3c:e0:81:50:14:a2:72:3e:ed:7b: b2:90:4c:91:4d:78:97:70:21:33:e1:76:55:a7:4e: 93:69:45:66:8b:4e:28:83:a0:e5:a6:e5:24:9b:d0: 4f:62:6f:10:5d:0f:fd:ed:66:3a:6b:5a:62:06:be: 14:ad:bf:48:58:21:30:50:cf:0e:2f:2b:14:7d:1c: 69:20:ab:a6:37:d2:57:54:b9:3d:ad:29:90:92:6c: c0:fc:06:c6:86:fc:9b:ee:9d:f9:61:85:37:d6:a0: 53:4b:96:c6:bf:d8:4e:20:11:ca:53:09:41:bd:ec: d1:50:d6:bc:86:04:87:59:47:87:ea:f9:9e:13:fa: b6:46:30:08:48:96:a6:1b:0e:98:d8:ce:73:32:71: 38:e4:16:58:70:d9:bc:8b:b2:58:33:35:96:9e:45: c2:0b:2e:29:38:3f:1a:e7:6b:1c:91:0f:b0:01:e2: ef:66:50:c1:d2:4d:d4:7b:54:35:39:5b:05:10:27: 33:45:d0:06:3f:a8:6d:e6:00:73:e3:f7:a3:0f:45: 1e:16:96:b0:42:fb:fd:51:46:fc:c8:64:86:c1:bf: cf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:80:B0:8E:88:C0:82:6B:71:E7:06:11:7C:B2:7A:9C:07:26:F7:CF X509v3 Authority Key Identifier: keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/B2DE2498C4FD11ED909F2770C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:c800::/32 Signature Algorithm: sha256WithRSAEncryption 63:8a:50:5f:43:0e:49:18:b5:0e:3d:4b:5d:de:f5:d2:1a:e3: db:85:70:75:66:6d:7b:a3:76:3b:d5:06:a1:53:8b:9f:d2:c6: 7a:78:b2:58:b5:ac:ef:9b:45:f8:71:80:86:7e:e1:f3:e5:9f: f1:32:80:54:1e:b1:45:52:27:19:3c:6c:00:51:fc:cd:3e:de: 9a:0d:4c:ce:73:fc:f2:b7:35:af:e2:a2:95:18:98:f2:5f:f4: dc:38:34:77:f0:87:b3:68:f7:d7:58:5e:87:7d:68:58:60:13: 6a:66:91:85:59:64:c4:c3:07:6b:46:0a:5b:1c:a9:6e:38:ab: 20:ad:6b:7b:39:86:45:1e:9d:97:60:e5:e0:ec:09:7a:d2:bf: 1e:d6:4c:f9:99:9d:ca:16:80:c9:95:de:2d:42:5c:4d:13:2d: 3e:fc:bf:e4:81:1c:ba:06:10:1c:2b:55:31:37:8a:c1:99:22: cc:dc:9b:21:21:2d:e8:59:30:4f:73:9d:98:de:c9:bb:68:36: 83:96:91:60:18:05:a0:68:ea:ac:6a:f1:16:a5:51:f5:94:eb: db:f8:14:ce:f7:1b:d4:e9:68:88:61:19:da:f3:72:22:5c:c9: 2d:c6:78:65:28:0d:7c:2a:79:2a:70:2a:87:da:48:3a:e0:ff: 0c:88:83:d1 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NkIxMTAvBgNVBAUTKDYyNjdDOTdFQjRBMERGMDFFREJENkY5RDQxQTg2QTg3 OUUwMjc5N0YwHhcNMjUwMjIxMDQ1NjEyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I4MDc2Yi1hNGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuG9u1S6pB4c7qY2s5sEPq3sLMLWU7m2pY/lufE4+GOcY2DzggVAUonI+7Xuy kEyRTXiXcCEz4XZVp06TaUVmi04og6DlpuUkm9BPYm8QXQ/97WY6a1piBr4Urb9I WCEwUM8OLysUfRxpIKumN9JXVLk9rSmQkmzA/AbGhvyb7p35YYU31qBTS5bGv9hO IBHKUwlBvezRUNa8hgSHWUeH6vmeE/q2RjAISJamGw6Y2M5zMnE45BZYcNm8i7JY MzWWnkXCCy4pOD8a52sckQ+wAeLvZlDB0k3Ue1Q1OVsFECczRdAGP6ht5gBz4/ej D0UeFpawQvv9UUb8yGSGwb/PLQIDAQABo4ICljCCApIwHQYDVR0OBBYEFCGAsI6I wIJrcecGEXyyepwHJvfPMB8GA1UdIwQYMBaAFGJnyX60oN8B7b1vnUGoaoeeAnl/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY2Qi8xNDJCQ0I5NkM0 RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3SHR2Vy1kUWFocWg1NENl WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltZkpmclNnM3dIdHZXLWRRYWhxaDU0Q2VYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE2NkIvMTQyQkNCOTZDNEZBMTFFRDlCREYzMTU3QzRGOUFFMDIvQjJERTI0OThD NEZEMTFFRDkwOUYyNzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBsgAMA0GCSqGSIb3DQEBCwUAA4IBAQBjilBfQw5JGLUO PUtd3vXSGuPbhXB1Zm17o3Y71QahU4uf0sZ6eLJYtazvm0X4cYCGfuHz5Z/xMoBU HrFFUicZPGwAUfzNPt6aDUzOc/zytzWv4qKVGJjyX/TcODR38IezaPfXWF6HfWhY YBNqZpGFWWTEwwdrRgpbHKluOKsgrWt7OYZFHp2XYOXg7Al60r8e1kz5mZ3KFoDJ ld4tQlxNEy0+/L/kgRy6BhAcK1UxN4rBmSLM3JshIS3oWTBPc52Y3sm7aDaDlpFg GAWgaOqsavEWpVH1lOvb+BTO9xvU6WiIYRna83IiXMktxnhlKA18KnkqcCqH2kg6 4P8MiIPR -----END CERTIFICATE-----Generated at Sat Apr 5 02:15:44 2025 by rpki-client