$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/D1C1AFB2135511F0976BA50CC4F9AE02.roa File: D1C1AFB2135511F0976BA50CC4F9AE02.roa (raw, json) Hash identifier: 4UcuR0Va16pIipTBZBi5kSdFR7fOLDQRz2cgCZTL1W0= Subject key identifier: 67:D6:81:0E:80:D3:2A:2F:1B:23:72:4B:B5:FA:7E:C1:2C:05:7F:F8 Certificate issuer: /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20 Certificate serial: 33 Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/D1C1AFB2135511F0976BA50CC4F9AE02.roa Signing time: Mon 07 Apr 2025 02:12:56 +0000 ROA not before: Mon 07 Apr 2025 02:12:56 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 152657 IP address blocks: 2001:df4:df40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20 Validity Not Before: Apr 7 02:12:56 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67f334a8-216c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:04:37:4f:24:d9:15:77:6a:78:a4:be:40:cc: d6:fa:59:b6:5b:b2:a2:32:b2:d2:1c:47:bb:d4:ae: 2c:bd:58:04:38:75:c4:95:4a:72:3d:e6:07:c9:f8: 6e:a2:de:a3:c3:46:13:39:b5:9f:f5:ce:0d:47:db: 3c:e0:2b:05:1b:72:e1:d0:84:11:52:69:31:ac:40: d9:5d:d9:a1:ee:18:cc:32:24:f1:50:19:d0:b9:4f: 0d:82:70:c5:2d:e0:87:9d:ee:fc:21:fc:0f:20:2a: 81:c0:3b:9e:ea:cc:74:93:de:97:47:1c:f4:14:00: 8d:e7:58:26:fe:ec:f2:e5:b1:5f:31:33:fb:a5:4d: 64:e1:7d:49:71:ce:9d:b9:27:54:f0:57:b1:15:f2: 08:2c:53:cb:0e:d2:10:6c:50:33:80:76:78:9f:3b: b4:06:6e:97:28:bf:7d:9c:18:52:2d:cc:fc:f6:17: 49:3f:4d:2f:bb:4f:ea:09:81:9a:a1:93:27:59:db: 1b:ae:97:a5:7d:bd:b9:74:3b:83:b1:6a:a8:73:c1: 1f:2d:6a:1d:91:5c:b6:f0:4b:74:10:1a:d2:7b:8d: 3e:ca:88:4f:29:dc:91:b6:6d:f4:e6:a8:95:63:6e: 03:a5:fb:97:cb:e0:b1:60:aa:58:ab:27:fc:09:57: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D6:81:0E:80:D3:2A:2F:1B:23:72:4B:B5:FA:7E:C1:2C:05:7F:F8 X509v3 Authority Key Identifier: keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/D1C1AFB2135511F0976BA50CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:df40::/48 Signature Algorithm: sha256WithRSAEncryption 73:77:e6:1b:a2:5c:f2:b3:73:70:95:2a:45:b8:15:8e:36:cb: b3:1e:fe:3e:26:6c:d3:f9:16:96:2b:1a:c6:c9:49:d4:1e:eb: 9f:61:87:8b:f5:60:c2:db:85:d5:0c:02:03:9d:16:2a:fb:35: c3:3d:3a:bb:88:dc:b2:c9:7e:63:26:56:bc:8a:2e:d2:e1:33: df:ca:e6:f5:2e:8b:b7:22:ea:30:57:9c:60:a6:7c:d9:26:f6: 69:18:b1:6b:8c:46:04:eb:7b:a2:0d:85:06:21:c0:0e:31:09: 2b:a1:a4:bb:79:ac:c7:e5:05:d3:0b:2c:e6:ce:b1:6e:c2:6a: 39:15:5c:62:e7:9e:5a:3e:62:cf:90:fa:c0:c3:ec:1f:6f:29: b1:8b:a3:b1:4b:e8:84:83:5c:a2:de:64:6a:8a:5e:59:b6:59: a0:4b:a8:da:f0:d7:07:42:c2:38:84:bb:cc:bd:f3:48:60:4b: 43:0e:c3:8c:b9:56:31:38:48:c8:5f:8e:6d:0f:71:d8:33:d0: 9e:6f:d1:7b:2f:b9:a4:02:10:75:f3:d3:35:4d:28:19:32:bb: a4:66:0f:12:8b:0c:c9:53:d7:02:89:54:b9:d3:7c:61:54:1a: b7:67:ec:fd:c3:bc:01:0e:4e:12:2f:8a:4c:aa:8d:35:61:7b: bb:e5:c7:35 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTY3MjExMC8GA1UEBRMoMEM2OTcwQ0FCOURGOEU5QkQxMEUxQzNFOTE4OTFBMDlB N0U4OEMyMDAeFw0yNTA0MDcwMjEyNTZaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZjMzNGE4LTIxNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuBDdPJNkVd2p4pL5AzNb6WbZbsqIystIcR7vUriy9WAQ4dcSVSnI95gfJ+G6i 3qPDRhM5tZ/1zg1H2zzgKwUbcuHQhBFSaTGsQNld2aHuGMwyJPFQGdC5Tw2CcMUt 4Ied7vwh/A8gKoHAO57qzHST3pdHHPQUAI3nWCb+7PLlsV8xM/ulTWThfUlxzp25 J1TwV7EV8ggsU8sO0hBsUDOAdnifO7QGbpcov32cGFItzPz2F0k/TS+7T+oJgZqh kydZ2xuul6V9vbl0O4OxaqhzwR8tah2RXLbwS3QQGtJ7jT7KiE8p3JG2bfTmqJVj bgOl+5fL4LFgqlirJ/wJVwDDAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUZ9aBDoDT Ki8bI3JLtfp+wSwFf/gwHwYDVR0jBBgwFoAUDGlwyrnfjpvRDhw+kYkaCafojCAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NjcyLzg4QURDQTk4Q0JF RjExRUY5MTY1QzI0NkM0RjlBRTAyL0RHbHd5cm5manB2UkRody1rWWthQ2Fmb2pD QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREdsd3lybmZqcHZSRGh3LWtZa2FDYWZvakNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTY3Mi84OEFEQ0E5OENCRUYxMUVGOTE2NUMyNDZDNEY5QUUwMi9EMUMxQUZCMjEz NTUxMUYwOTc2QkE1MENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfTfQDANBgkqhkiG9w0BAQsFAAOCAQEAc3fmG6Jc8rNz cJUqRbgVjjbLsx7+PiZs0/kWlisaxslJ1B7rn2GHi/VgwtuF1QwCA50WKvs1wz06 u4jcssl+YyZWvIou0uEz38rm9S6LtyLqMFecYKZ82Sb2aRixa4xGBOt7og2FBiHA DjEJK6Gku3msx+UF0wss5s6xbsJqORVcYueeWj5iz5D6wMPsH28psYujsUvohINc ot5kaopeWbZZoEuo2vDXB0LCOIS7zL3zSGBLQw7DjLlWMThIyF+ObQ9x2DPQnm/R ey+5pAIQdfPTNU0oGTK7pGYPEosMyVPXAolUudN8YVQat2fs/cO8AQ5OEi+KTKqN NWF7u+XHNQ== -----END CERTIFICATE-----Generated at Mon Jun 2 07:15:27 2025 by rpki-client