$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/159F22549D1B11ED96607C22C4F9AE02.roa File: 159F22549D1B11ED96607C22C4F9AE02.roa (raw, json) Hash identifier: ud9Bxa6I3Lg7uR5uUGw9rl68XdwSN3BQlbT+nAu1Wxo= Subject key identifier: B7:4E:1F:1D:BA:37:4F:11:AB:B0:3B:19:DD:4F:0C:BA:63:03:28:E2 Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 0FE3 Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/159F22549D1B11ED96607C22C4F9AE02.roa Signing time: Fri 30 May 2025 17:41:12 +0000 ROA not before: Fri 30 May 2025 17:41:12 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 18231 IP address blocks: 2400:f640::/32 maxlen: 32 2400:f640::/48 maxlen: 48 2400:f640::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4067 (0xfe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: May 30 17:41:12 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6839edb7-52e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:40:e2:ef:50:b7:55:5e:6d:ba:99:4a:a5:8e: e9:af:de:cc:1b:ea:02:97:31:f7:a2:5a:c6:4a:8d: 71:76:3a:c5:7e:31:37:90:fe:31:99:d7:8f:ef:f7: 0c:52:ba:0b:50:da:59:8c:26:d3:75:7e:d5:50:b4: f5:bd:16:b6:c2:08:b0:fe:45:9f:58:46:a3:af:5b: b2:4e:00:5b:14:da:b5:6e:5c:49:37:1e:a1:1e:b4: f4:ad:9d:b2:85:70:87:3a:be:84:0a:5a:39:7c:c9: 78:e7:4a:9a:98:1b:73:c5:eb:db:32:d5:dd:fd:32: 3e:73:38:81:3d:30:16:56:e9:30:58:7f:cc:23:91: 99:75:0d:d5:0c:57:56:cf:45:3d:1f:93:d8:91:b5: 97:9f:f4:d0:97:68:13:b1:d3:5f:9c:15:10:5f:d1: 7a:a5:3a:e0:e7:b3:57:18:66:f4:67:3a:f8:5a:6f: f8:98:56:8d:96:38:a1:b9:2a:44:b9:04:a0:57:a9: 03:83:2f:a9:72:9d:b1:92:a7:7d:e4:8d:ea:6d:76: c6:39:80:ac:0a:7b:b8:0a:2b:b4:49:d9:cd:d5:de: 3a:b4:c9:f2:c2:0c:c6:f7:96:aa:03:c4:28:cc:08: c7:8e:25:64:be:c7:dd:4c:c5:c3:5d:84:9e:2d:16: 0c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4E:1F:1D:BA:37:4F:11:AB:B0:3B:19:DD:4F:0C:BA:63:03:28:E2 X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/159F22549D1B11ED96607C22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:f640::/32 Signature Algorithm: sha256WithRSAEncryption a4:cd:26:ab:cb:2e:0f:6e:a9:8c:37:81:b7:87:5a:37:5e:13: 07:d2:2e:4d:32:38:1f:98:b3:67:db:6a:45:94:98:3f:65:d1: 63:d4:5d:54:e0:e3:bd:d3:40:01:e4:90:8c:9f:88:46:9c:21: a4:ec:40:dc:d2:34:a5:72:73:02:81:3e:d5:47:2f:09:b7:09: 6c:14:1a:0c:96:99:e3:82:c7:4b:75:5e:a4:b2:00:12:e7:aa: 55:e0:bf:c6:d6:ec:6e:5c:21:e9:00:a0:b1:a2:97:9e:b2:fc: 40:fa:fc:81:e7:f9:a2:fd:62:06:23:0f:6f:c1:8e:bb:12:52: 58:01:93:2e:bc:80:08:b1:ac:32:61:12:48:39:af:65:86:9c: db:1c:81:c0:e4:bc:0f:6d:72:26:45:93:72:d4:21:c3:f1:c1: 22:50:07:50:f0:97:dd:de:c5:28:9f:0c:f8:d0:8a:d5:80:63: 51:d2:f7:41:0e:67:8f:a8:1e:8c:77:80:9a:ec:93:0f:15:f8: fa:31:f5:70:5e:05:26:8b:fe:8c:d7:f6:93:36:9d:1a:c2:ed: 15:4d:80:c4:06:f4:ea:6b:e7:4c:30:2f:f3:e1:4a:84:7f:83: 02:ee:eb:f8:6b:e9:df:d7:fe:2c:ea:f7:b1:c9:48:86:b0:ca: 06:a8:23:5d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICD+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjUwNTMwMTc0MTEyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM5ZWRiNy01MmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA90Di71C3VV5tuplKpY7pr97MG+oClzH3olrGSo1xdjrFfjE3kP4xmdeP7/cM UroLUNpZjCbTdX7VULT1vRa2wgiw/kWfWEajr1uyTgBbFNq1blxJNx6hHrT0rZ2y hXCHOr6EClo5fMl450qamBtzxevbMtXd/TI+cziBPTAWVukwWH/MI5GZdQ3VDFdW z0U9H5PYkbWXn/TQl2gTsdNfnBUQX9F6pTrg57NXGGb0Zzr4Wm/4mFaNljihuSpE uQSgV6kDgy+pcp2xkqd95I3qbXbGOYCsCnu4Ciu0SdnN1d46tMnywgzG95aqA8Qo zAjHjiVkvsfdTMXDXYSeLRYM3QIDAQABo4ICljCCApIwHQYDVR0OBBYEFLdOHx26 N08Rq7A7Gd1PDLpjAyjiMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTc5M0EvNzZBRjMzNEM1MTY5MTFFOUE3OUMxRTgxQzRGOUFFMDIvMTU5RjIyNTQ5 RDFCMTFFRDk2NjA3QzIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAPZAMA0GCSqGSIb3DQEBCwUAA4IBAQCkzSaryy4PbqmM N4G3h1o3XhMH0i5NMjgfmLNn22pFlJg/ZdFj1F1U4OO900AB5JCMn4hGnCGk7EDc 0jSlcnMCgT7VRy8JtwlsFBoMlpnjgsdLdV6ksgAS56pV4L/G1uxuXCHpAKCxopee svxA+vyB5/mi/WIGIw9vwY67ElJYAZMuvIAIsawyYRJIOa9lhpzbHIHA5LwPbXIm RZNy1CHD8cEiUAdQ8Jfd3sUonwz40IrVgGNR0vdBDmePqB6Md4Ca7JMPFfj6MfVw XgUmi/6M1/aTNp0awu0VTYDEBvTqa+dMMC/z4UqEf4MC7uv4a+nf1/4s6vexyUiG sMoGqCNd -----END CERTIFICATE-----Generated at Wed Jun 4 00:05:28 2025 by rpki-client