$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/F34C44FC3F7511F0A963EE11C4F9AE02.roa File: F34C44FC3F7511F0A963EE11C4F9AE02.roa (raw, json) Hash identifier: 0lT1AyOiOXe+BKO1a/7QwW0Ghznoxt7Inz7Ksh5dWQc= Subject key identifier: 6D:65:24:A4:52:6E:59:EE:82:65:E0:8A:B3:6A:A4:4B:06:DC:E2:24 Certificate issuer: /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F Certificate serial: 02 Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/F34C44FC3F7511F0A963EE11C4F9AE02.roa Signing time: Mon 02 Jun 2025 05:53:47 +0000 ROA not before: Mon 02 Jun 2025 05:53:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 4694 IP address blocks: 223.27.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 07:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F Validity Not Before: Jun 2 05:53:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=683d3c6b-3358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:fa:4e:85:70:3f:d6:25:8a:ce:76:6d:db: 87:81:24:49:3d:a7:3d:2c:74:e0:a9:da:9e:59:4c: ae:66:77:3e:71:76:29:ec:08:a5:2e:4d:af:ff:99: ce:db:4b:a9:2d:87:f6:5c:29:77:29:f2:bd:2c:7b: 95:d9:2c:33:6d:87:0c:29:05:ee:75:21:0e:d2:92: a4:f5:c3:53:42:36:86:ab:c6:85:87:a3:4f:da:2e: 4f:50:2a:8a:5d:02:9b:f7:05:25:c2:0c:3e:a2:69: f4:b6:e4:36:31:c6:33:10:35:89:b4:d8:2b:3c:d4: b2:52:64:7b:9c:db:42:79:e3:28:86:8b:b3:fa:6d: 73:00:9a:dc:69:46:6c:7f:74:37:c6:d1:73:f2:5c: 53:55:b5:ff:4a:1f:7a:a5:32:1c:1c:79:6e:ff:b2: 94:3a:41:25:68:92:ce:61:e9:64:84:a1:54:f9:69: 60:f2:5a:a9:98:6c:47:60:7a:0d:fa:66:91:34:18: 69:6a:6c:d1:d9:c4:f1:d9:f8:a2:ec:db:93:b8:fe: ab:88:91:e2:96:16:51:d1:7e:eb:95:96:9f:6c:5d: 6d:7c:0d:cd:e6:92:6f:e0:86:77:f8:ff:22:29:f7: eb:6f:60:4f:2f:a7:dd:f9:08:ed:d6:5b:a9:c4:10: 29:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:65:24:A4:52:6E:59:EE:82:65:E0:8A:B3:6A:A4:4B:06:DC:E2:24 X509v3 Authority Key Identifier: keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/F34C44FC3F7511F0A963EE11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.27.118.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:64:69:38:c9:91:74:f1:0a:21:54:8e:df:c6:ea:32:b2:b0: 81:e3:8d:29:c2:43:35:84:7a:08:19:8f:64:5f:3b:4e:11:0c: 08:40:b3:86:9d:db:ff:82:73:37:9d:59:1d:8a:cb:b0:73:af: 90:ac:b7:8f:91:f7:94:08:0e:7d:74:d4:52:63:4d:bd:9d:df: eb:3c:98:e8:92:6c:ec:e0:dd:2e:99:66:ed:7f:83:09:58:61: ab:3e:99:d5:64:14:8a:57:80:01:ca:3d:65:b5:ce:3d:7b:6c: 9f:16:c0:25:c9:19:43:9e:58:6b:49:34:27:4e:a0:a4:6e:35: 40:ad:e9:b7:c3:4f:82:ee:a0:ee:aa:46:84:c9:da:bb:01:fd: 25:28:7c:dc:7e:ea:52:57:22:99:b6:5a:90:5b:5b:c6:48:25: d9:02:35:f6:67:7b:e1:7c:9e:a6:27:75:2d:8c:20:d9:0e:78: a7:0c:2b:c5:25:56:81:2f:dd:3d:f1:84:ae:da:35:aa:2c:6d: f6:8a:95:be:6e:9b:4d:5a:b9:bf:a4:75:e9:37:42:ac:e8:85: c4:da:0c:31:99:7e:d1:67:12:96:77:e3:4e:11:07:a0:85:40: e0:d7:48:69:34:0f:77:74:0b:44:af:e4:7c:af:2a:43:5b:30: bc:f7:3c:b1 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjZFODExMC8GA1UEBRMoRjM3MTg5NTcwNTBDNEJDRTE0QTRFQzM4RUFBQ0VFOUM3 NDI0NEM0RjAeFw0yNTA2MDIwNTUzNDdaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4M2QzYzZiLTMzNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDONvpOhXA/1iWKznZt24eBJEk9pz0sdOCp2p5ZTK5mdz5xdinsCKUuTa//mc7b S6kth/ZcKXcp8r0se5XZLDNthwwpBe51IQ7SkqT1w1NCNoarxoWHo0/aLk9QKopd Apv3BSXCDD6iafS25DYxxjMQNYm02Cs81LJSZHuc20J54yiGi7P6bXMAmtxpRmx/ dDfG0XPyXFNVtf9KH3qlMhwceW7/spQ6QSVoks5h6WSEoVT5aWDyWqmYbEdgeg36 ZpE0GGlqbNHZxPHZ+KLs25O4/quIkeKWFlHRfuuVlp9sXW18Dc3mkm/ghnf4/yIp 9+tvYE8vp935CO3WW6nEECmhAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUbWUkpFJu We6CZeCKs2qkSwbc4iQwHwYDVR0jBBgwFoAU83GJVwUMS84UpOw46qzunHQkTE8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNkU4LzhENUFBMTdBM0Y3 NTExRjA5NjIzMkExMUM0RjlBRTAyLzgzR0pWd1VNUzg0VXBPdzQ2cXp1bkhRa1RF OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODNHSlZ3VU1TODRVcE93NDZxenVuSFFrVEU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjZFOC84RDVBQTE3QTNGNzUxMUYwOTYyMzJBMTFDNEY5QUUwMi9GMzRDNDRGQzNG NzUxMUYwQTk2M0VFMTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAd8bdjANBgkqhkiG9w0BAQsFAAOCAQEATWRpOMmRdPEKIVSO 38bqMrKwgeONKcJDNYR6CBmPZF87ThEMCECzhp3b/4JzN51ZHYrLsHOvkKy3j5H3 lAgOfXTUUmNNvZ3f6zyY6JJs7ODdLplm7X+DCVhhqz6Z1WQUileAAco9ZbXOPXts nxbAJckZQ55Ya0k0J06gpG41QK3pt8NPgu6g7qpGhMnauwH9JSh83H7qUlcimbZa kFtbxkgl2QI19md74Xyepid1LYwg2Q54pwwrxSVWgS/dPfGErto1qixt9oqVvm6b TVq5v6R16TdCrOiFxNoMMZl+0WcSlnfjThEHoIVA4NdIaTQPd3QLRK/kfK8qQ1sw vPc8sQ== -----END CERTIFICATE-----Generated at Thu Jun 12 19:24:04 2025 by rpki-client