$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/05473E9EF28911EAB006D11BC4F9AE02.roa File: 05473E9EF28911EAB006D11BC4F9AE02.roa (raw, json) Hash identifier: XQc3pF8G20Y24MbmGRMd8iGWGDKIE6b3RdlXoHLAo9o= Subject key identifier: 9D:E2:E6:71:34:BF:9A:AF:58:7B:88:48:BA:66:8C:BA:34:C2:CE:B8 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 22BB Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/05473E9EF28911EAB006D11BC4F9AE02.roa Signing time: Mon 02 Dec 2024 15:52:57 +0000 ROA not before: Mon 02 Dec 2024 15:52:57 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 36351 IP address blocks: 2403:5680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 15:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8891 (0x22bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE Validity Not Before: Dec 2 15:52:57 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674dd7d9-376c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:f6:61:62:f7:1b:5a:6a:00:2b:d6:64:52: f3:41:ad:90:7b:f0:ca:44:87:44:fc:0b:f1:48:1b: 3e:d4:3b:21:9d:23:27:a4:09:e5:58:59:14:e8:43: aa:f7:a0:d0:e3:d4:72:6e:c9:dc:84:65:c7:61:7b: 46:d9:25:75:bd:02:ea:41:30:ae:9b:63:81:50:f8: 17:de:7d:2c:d0:66:24:55:f6:c7:7d:f4:ff:e5:7a: c6:5a:c2:63:68:3b:99:c1:94:c8:66:66:1d:96:f0: b9:e9:45:b0:aa:ef:8c:56:63:47:aa:2c:81:60:38: 30:f9:1f:89:60:c5:71:14:4b:77:7b:8e:79:92:dd: 0e:b7:0b:1d:c5:ab:dd:fd:4d:ac:bb:32:45:b3:07: f8:a9:58:d9:39:91:50:54:7e:ef:8b:45:25:00:80: f7:1a:6c:d1:4c:65:cf:90:3e:04:6c:c2:0c:a4:38: be:ee:8b:09:0f:fc:e0:34:14:e9:de:cd:1e:be:5c: 96:9c:9c:93:bd:a1:9a:9c:62:12:13:be:78:6d:fc: 2b:a5:16:2c:a3:ab:7d:d1:1e:20:ce:79:68:40:a5: 8c:7b:94:ac:32:f4:d8:b9:63:8f:ff:8f:2b:17:75: 0e:1d:90:16:4e:c3:68:b0:22:48:6d:a1:2f:07:f3: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E2:E6:71:34:BF:9A:AF:58:7B:88:48:BA:66:8C:BA:34:C2:CE:B8 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/05473E9EF28911EAB006D11BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:5680::/48 Signature Algorithm: sha256WithRSAEncryption 13:4b:e6:7e:e4:bd:89:57:14:50:9f:70:c9:ef:4f:cf:8e:a8: 07:2a:63:dc:b1:f8:9d:9c:7c:7e:7e:a4:75:fe:ab:95:a5:0f: ef:ed:3a:67:5f:6c:a1:fc:e4:c0:fb:e7:1d:f8:ec:11:69:6a: 28:b1:de:76:54:65:b9:15:04:88:85:a5:05:d2:69:d1:7b:0d: 6d:b2:9d:da:78:15:c8:8d:ce:a8:27:fa:7d:dc:53:4b:28:10: fa:c8:bf:e9:ee:87:e0:ec:67:cd:2d:0c:b7:01:4b:45:c3:1a: 8f:66:33:23:a3:64:01:ce:38:fc:91:89:30:39:d0:b1:ef:52: 33:a5:a1:de:8b:b7:a6:49:97:ba:fc:93:f8:ee:4e:d2:4a:c2: b9:9e:c8:9d:07:c5:dd:b6:85:6d:2c:8b:1f:c0:f3:97:48:04: d4:41:b5:75:7d:21:eb:44:a8:71:50:3d:c7:24:5f:94:ee:8e: f9:e8:71:fa:cd:a9:0e:30:be:7d:51:9c:70:ae:19:1b:16:52: d7:4e:4f:50:0e:7c:26:2a:63:a0:12:10:79:df:46:50:72:1a: d5:93:54:96:87:36:99:1b:0d:39:0e:79:30:94:68:51:83:a6: ba:67:ee:44:c5:78:ca:0f:b9:e3:d4:cc:10:f1:38:0c:5c:27: dc:b4:76:a2 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICIrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjQxMjAyMTU1MjU3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRkZDdkOS0zNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33H2YWL3G1pqACvWZFLzQa2Qe/DKRIdE/AvxSBs+1DshnSMnpAnlWFkU6EOq 96DQ49RybsnchGXHYXtG2SV1vQLqQTCum2OBUPgX3n0s0GYkVfbHffT/5XrGWsJj aDuZwZTIZmYdlvC56UWwqu+MVmNHqiyBYDgw+R+JYMVxFEt3e455kt0Otwsdxavd /U2suzJFswf4qVjZOZFQVH7vi0UlAID3GmzRTGXPkD4EbMIMpDi+7osJD/zgNBTp 3s0evlyWnJyTvaGanGISE754bfwrpRYso6t90R4gznloQKWMe5SsMvTYuWOP/48r F3UOHZAWTsNosCJIbaEvB/NoMwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJ3i5nE0 v5qvWHuISLpmjLo0ws64MB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTAxQ0UvOTNCQTg1M0E5N0YwMTFFNUI5MjAxMDZBQzRGOUFFMDIvMDU0NzNFOUVG Mjg5MTFFQUIwMDZEMTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkA1aAAAAwDQYJKoZIhvcNAQELBQADggEBABNL5n7kvYlX FFCfcMnvT8+OqAcqY9yx+J2cfH5+pHX+q5WlD+/tOmdfbKH85MD75x347BFpaiix 3nZUZbkVBIiFpQXSadF7DW2yndp4FciNzqgn+n3cU0soEPrIv+nuh+DsZ80tDLcB S0XDGo9mMyOjZAHOOPyRiTA50LHvUjOlod6Lt6ZJl7r8k/juTtJKwrmeyJ0Hxd22 hW0six/A85dIBNRBtXV9IetEqHFQPcckX5TujvnocfrNqQ4wvn1RnHCuGRsWUtdO T1AOfCYqY6ASEHnfRlByGtWTVJaHNpkbDTkOeTCUaFGDprpn7kTFeMoPuePUzBDx OAxcJ9y0dqI= -----END CERTIFICATE-----Generated at Thu Mar 13 21:57:04 2025 by rpki-client