$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/B710956ACD7E11EFBBAE2137C4F9AE02.roa File: B710956ACD7E11EFBBAE2137C4F9AE02.roa (raw, json) Hash identifier: JjAbZf5k619HY4BxA5a3XYqwkE4mZ8Dpr0cRyMIFTZI= Subject key identifier: FC:08:23:2F:BE:95:DB:05:68:D7:0C:2A:B7:97:B8:EB:8B:80:7C:E8 Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07 Certificate serial: 02 Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/B710956ACD7E11EFBBAE2137C4F9AE02.roa Signing time: Wed 08 Jan 2025 05:09:19 +0000 ROA not before: Wed 08 Jan 2025 05:09:19 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150339 IP address blocks: 2001:df4:dbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B Validity Not Before: Jan 8 05:09:19 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677e087f-f4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:fd:41:2d:91:86:cd:7e:b0:b0:4c:05:77: 55:2c:2c:9f:71:18:8d:84:6c:e6:64:f1:f8:ed:9a: 4e:4a:35:6e:47:24:01:04:73:6e:6d:4a:8c:ac:8b: 7a:f7:ca:f2:c5:ec:3c:05:61:01:35:b9:20:04:a2: 0d:26:60:7e:c4:f5:dc:bc:48:7d:47:46:be:e6:d8: c8:b3:a2:af:a9:cf:f4:c4:3f:09:30:56:bc:db:a3: ae:5c:08:57:b2:bf:38:a8:a4:37:ae:b3:1d:bc:fc: 12:f8:9e:0b:35:14:5b:df:db:fa:f7:30:29:f1:45: e4:16:f0:bb:a7:c4:b3:cb:d6:e7:eb:66:d9:03:35: 95:9b:c1:d6:6b:a0:03:26:78:ed:4e:04:08:cd:36: 3d:5a:ad:0f:9f:67:e7:6a:b9:27:1f:a3:e2:70:cc: e6:ae:cf:36:6b:81:2e:eb:36:41:cf:c9:21:1c:1b: ca:28:a6:17:f6:1a:f9:0c:f7:05:5a:c7:7f:1f:fc: 2a:42:50:79:74:fa:13:f3:40:bc:8d:6f:03:3d:3f: 63:64:5d:c9:26:e5:98:64:40:bf:01:91:6b:8b:39: 01:01:a4:5d:73:27:d5:c0:ea:93:5c:92:de:42:96: 1b:27:d2:db:8f:a2:c1:43:0c:d2:9a:d2:7e:ee:96: 02:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:08:23:2F:BE:95:DB:05:68:D7:0C:2A:B7:97:B8:EB:8B:80:7C:E8 X509v3 Authority Key Identifier: keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/B710956ACD7E11EFBBAE2137C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:dbc0::/48 Signature Algorithm: sha256WithRSAEncryption 6f:a1:9a:e0:2b:98:d1:15:3f:81:f1:00:64:20:f2:39:c2:d3: 44:f7:34:54:9d:1d:dd:09:fe:b5:9f:ff:28:f8:b8:47:ae:1a: ef:42:f1:ba:cb:fa:1e:d4:bc:ae:97:86:d2:42:8d:27:87:75: 0c:31:63:47:09:cc:27:a0:ab:d6:b3:24:40:7d:3d:ca:42:59: 08:ce:1c:98:fe:0f:6f:91:13:a5:50:56:00:f1:96:87:c6:9f: b1:30:df:7d:01:72:49:13:74:ba:39:88:55:3a:4e:58:9e:4b: 79:a6:c1:74:ea:fd:ff:47:e6:bc:3b:2f:92:a8:16:f8:74:10: a7:2d:55:6d:4c:d6:b7:29:93:b6:0f:d0:19:95:a6:b6:4c:dd: 9b:7e:9f:c5:e7:af:56:55:a9:d5:15:18:2c:d8:cb:29:6a:3d: fc:6c:25:c0:8d:49:61:8b:43:82:79:77:c3:8c:46:65:89:b6: 16:ec:7b:64:bc:7b:d0:ed:91:49:9d:ac:6c:b2:0b:ae:eb:82: 26:72:b7:ba:8e:ef:c0:55:3c:e6:54:8f:ac:b0:fb:c6:37:e3: b7:35:07:61:d6:3b:74:7f:33:d1:ea:46:6a:d3:85:82:e3:be: 4c:1d:82:6e:d8:cb:71:98:8b:fc:92:f1:e1:38:8e:f9:f5:31: 50:4b:3e:ab -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUM0QjExMC8GA1UEBRMoODUyMDQ2OTE1MTg1Rjg1NUUwOUVCMzQ0Nzg4MTM5NDMw RTc0MEYwNzAeFw0yNTAxMDgwNTA5MTlaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2UwODdmLWY0ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHmv1BLZGGzX6wsEwFd1UsLJ9xGI2EbOZk8fjtmk5KNW5HJAEEc25tSoysi3r3 yvLF7DwFYQE1uSAEog0mYH7E9dy8SH1HRr7m2Mizoq+pz/TEPwkwVrzbo65cCFey vziopDeusx28/BL4ngs1FFvf2/r3MCnxReQW8LunxLPL1ufrZtkDNZWbwdZroAMm eO1OBAjNNj1arQ+fZ+dquScfo+JwzOauzzZrgS7rNkHPySEcG8oophf2GvkM9wVa x38f/CpCUHl0+hPzQLyNbwM9P2NkXckm5ZhkQL8BkWuLOQEBpF1zJ9XA6pNckt5C lhsn0tuPosFDDNKa0n7ulgL9AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQU/AgjL76V 2wVo1wwqt5e464uAfOgwHwYDVR0jBBgwFoAUhSBGkVGF+FXgnrNEeIE5Qw50Dwcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBQzRCL0U2MzVGNzk2Q0Q3 RDExRUZBQTA3MjMwQUM0RjlBRTAyL2hTQkdrVkdGLUZYZ25yTkVlSUU1UXc1MER3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFNCR2tWR0YtRlhnbnJORWVJRTVRdzUwRHdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUM0Qi9FNjM1Rjc5NkNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9CNzEwOTU2QUNE N0UxMUVGQkJBRTIxMzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfTbwDANBgkqhkiG9w0BAQsFAAOCAQEAb6Ga4CuY0RU/ gfEAZCDyOcLTRPc0VJ0d3Qn+tZ//KPi4R64a70Lxusv6HtS8rpeG0kKNJ4d1DDFj RwnMJ6Cr1rMkQH09ykJZCM4cmP4Pb5ETpVBWAPGWh8afsTDffQFySRN0ujmIVTpO WJ5LeabBdOr9/0fmvDsvkqgW+HQQpy1VbUzWtymTtg/QGZWmtkzdm36fxeevVlWp 1RUYLNjLKWo9/GwlwI1JYYtDgnl3w4xGZYm2Fux7ZLx70O2RSZ2sbLILruuCJnK3 uo7vwFU85lSPrLD7xjfjtzUHYdY7dH8z0epGatOFguO+TB2CbtjLcZiL/JLx4TiO +fUxUEs+qw== -----END CERTIFICATE-----Generated at Thu Feb 6 05:11:06 2025 by rpki-client