$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/D9173AE459E811ED85614349C4F9AE02.roa File: D9173AE459E811ED85614349C4F9AE02.roa (raw, json) Hash identifier: 1x/xZd5ESf0eokaSQgyIvd0x7KIP8tNAt27myAiJemw= Subject key identifier: 1B:52:F1:5C:0C:C5:E3:6F:8D:9D:41:E9:8C:5D:1D:C0:F3:0E:CB:03 Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Certificate serial: 0B82 Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/D9173AE459E811ED85614349C4F9AE02.roa Signing time: Fri 02 May 2025 19:27:37 +0000 ROA not before: Fri 02 May 2025 19:27:37 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137548 IP address blocks: 2402:b1c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2946 (0xb82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Validity Not Before: May 2 19:27:37 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68151ca9-b8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:a0:38:cb:54:5d:65:8f:96:6a:e3:4d:81: 28:29:bb:b1:20:2c:b1:89:12:f5:5b:64:89:9e:4d: 69:39:52:6f:08:d1:a1:c8:87:e5:4d:0a:51:9e:f1: 5c:46:45:d6:37:53:63:5c:cc:96:0c:c3:8c:18:93: 38:fc:52:88:d0:03:6e:66:d9:8c:31:1a:63:f7:b2: 91:4c:36:cb:0d:0b:2e:35:66:bb:b3:3a:e3:93:4a: 31:c4:af:a2:90:4b:cb:b2:64:be:5d:fa:9a:76:83: 0c:70:86:26:1f:44:d3:73:c2:d0:35:99:43:72:b0: 9f:d9:d6:4f:8e:13:0d:94:5f:ac:d9:66:0b:1c:fc: 69:6e:24:02:fd:47:d2:c8:b9:45:a8:40:2a:60:8f: 4e:7f:02:a3:ac:68:bb:37:4d:78:38:88:5f:19:09: c6:24:e3:35:49:34:eb:c6:6c:31:28:d2:ed:37:b7: 5b:0d:47:42:5b:75:15:4b:be:f5:ea:e2:33:29:52: 6b:70:10:90:e8:eb:e2:9a:4a:fc:64:78:eb:f4:74: db:6f:9b:97:10:0d:78:c9:dc:a0:ea:74:eb:67:fb: 3c:55:d2:0b:57:4b:f1:84:c1:13:c7:ac:0e:0c:16: 37:ce:83:d9:c5:c8:c0:1d:99:f3:80:4b:44:7b:9f: 5e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:52:F1:5C:0C:C5:E3:6F:8D:9D:41:E9:8C:5D:1D:C0:F3:0E:CB:03 X509v3 Authority Key Identifier: keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/D9173AE459E811ED85614349C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:b1c0::/32 Signature Algorithm: sha256WithRSAEncryption a1:77:1e:4f:ac:05:f0:88:0a:b6:f0:29:ea:b4:b8:03:82:08: 52:16:44:80:d8:01:4f:69:cb:f5:04:fb:81:2c:10:1c:5d:03: 4b:05:17:7e:c4:38:64:75:69:1f:1c:7f:cc:e9:c6:24:e6:72: d7:1e:2e:c4:3d:e0:6c:a5:98:e2:86:3b:db:29:69:bc:b9:3a: 5e:7f:dd:f7:49:14:11:bc:5f:41:f4:48:84:61:db:05:dc:51: 4c:a4:2d:8b:8e:2f:46:77:30:86:f2:ff:d4:8f:23:a4:64:80: f8:31:7b:78:b1:25:a9:47:fb:6d:00:a0:e8:65:1c:dd:f0:ad: 72:a2:04:0a:cd:5f:c7:ab:96:6b:16:60:ca:62:b8:9c:3b:45: 0e:92:4f:33:7c:96:e4:40:fa:4f:f9:9b:66:54:1a:43:e8:f6: 18:76:93:74:79:70:f2:9c:52:67:9e:b7:6f:46:43:c5:75:98: 99:7d:62:f8:bf:03:75:07:a7:ca:b5:e9:a2:7e:86:16:c6:f2: e3:3e:02:80:c4:7e:9c:cf:96:d5:99:20:40:db:83:20:bb:0c: 70:43:cb:4d:ec:6b:7c:f9:10:62:42:fb:ba:0e:6f:e4:21:20: cb:5b:71:3d:5c:e3:14:93:60:0d:4d:8b:fc:04:91:63:00:d0: 9e:b4:81:b4 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICC4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC N0E0MjE4OEYwHhcNMjUwNTAyMTkyNzM3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1MWNhOS1iOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2OgOMtUXWWPlmrjTYEoKbuxICyxiRL1W2SJnk1pOVJvCNGhyIflTQpRnvFc RkXWN1NjXMyWDMOMGJM4/FKI0ANuZtmMMRpj97KRTDbLDQsuNWa7szrjk0oxxK+i kEvLsmS+XfqadoMMcIYmH0TTc8LQNZlDcrCf2dZPjhMNlF+s2WYLHPxpbiQC/UfS yLlFqEAqYI9OfwKjrGi7N014OIhfGQnGJOM1STTrxmwxKNLtN7dbDUdCW3UVS771 6uIzKVJrcBCQ6Ovimkr8ZHjr9HTbb5uXEA14ydyg6nTrZ/s8VdILV0vxhMETx6wO DBY3zoPZxcjAHZnzgEtEe59eLQIDAQABo4ICljCCApIwHQYDVR0OBBYEFBtS8VwM xeNvjZ1B6YxdHcDzDssDMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTg0MDUvRjlDMTk2OTYzMjEyMTFFQTkzNjMzQTU5QzRGOUFFMDIvRDkxNzNBRTQ1 OUU4MTFFRDg1NjE0MzQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkArHAMA0GCSqGSIb3DQEBCwUAA4IBAQChdx5PrAXwiAq2 8CnqtLgDgghSFkSA2AFPacv1BPuBLBAcXQNLBRd+xDhkdWkfHH/M6cYk5nLXHi7E PeBspZjihjvbKWm8uTpef933SRQRvF9B9EiEYdsF3FFMpC2Lji9GdzCG8v/UjyOk ZID4MXt4sSWpR/ttAKDoZRzd8K1yogQKzV/Hq5ZrFmDKYricO0UOkk8zfJbkQPpP +ZtmVBpD6PYYdpN0eXDynFJnnrdvRkPFdZiZfWL4vwN1B6fKtemifoYWxvLjPgKA xH6cz5bVmSBA24MguwxwQ8tN7Gt8+RBiQvu6Dm/kISDLW3E9XOMUk2ANTYv8BJFj ANCetIG0 -----END CERTIFICATE-----Generated at Mon Jun 2 07:10:13 2025 by rpki-client