$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/58C16E043B7811F099AF3F55C4F9AE02.roa File: 58C16E043B7811F099AF3F55C4F9AE02.roa (raw, json) Hash identifier: EdyHrGdK241FduLFJE474YipzEeOWQ4qQLPgbqAJOd8= Subject key identifier: 7B:00:81:EE:B6:88:38:EC:14:B4:5E:3B:60:89:12:FC:13:9B:C1:9A Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Certificate serial: 02 Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/58C16E043B7811F099AF3F55C4F9AE02.roa Signing time: Wed 28 May 2025 04:00:52 +0000 ROA not before: Wed 28 May 2025 04:00:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152583 IP address blocks: 2001:df3:7d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Validity Not Before: May 28 04:00:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68368a74-90da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:07:ca:01:70:02:fd:f8:74:f8:bb:c0:4b: f9:a4:df:f2:8d:26:18:b6:dc:2f:59:8b:1e:ca:f4: 51:39:ab:c1:1a:23:0e:b1:5d:31:07:9e:fe:4f:39: 65:82:46:db:c9:86:b4:19:40:62:60:ea:03:39:ba: 74:cd:b6:ba:97:e6:62:57:4f:23:68:32:5a:e6:41: a1:e4:7d:ed:00:93:c8:a6:42:9e:43:44:f8:87:c9: 87:88:08:4b:a1:cb:42:fe:cd:94:87:e7:d0:b1:8a: b6:4f:e9:58:8c:4e:3d:2f:11:b3:02:85:bd:2a:bd: 80:09:b6:af:f4:f4:9e:33:da:9f:01:cf:3a:16:69: 05:6f:6b:f9:92:c4:ce:ea:a8:bb:6f:75:0d:a8:53: a5:a1:22:58:9e:5f:20:bb:9f:9c:e2:c6:d8:cb:19: e3:09:12:39:42:6c:2f:4d:11:dd:e9:ec:41:f7:97: e7:a4:33:02:0b:a0:86:88:68:5b:86:a8:14:b3:9b: 1d:1a:40:2a:c5:b1:e5:78:7b:79:2c:6d:59:36:94: 50:c9:66:8a:99:e7:ec:27:32:60:59:d2:56:ca:ca: 87:1e:ad:b8:71:f9:3a:3a:b7:5d:83:f8:6c:cf:db: 2c:1e:35:3a:06:d7:f1:2d:17:1e:a0:36:0e:7b:8c: 7f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:00:81:EE:B6:88:38:EC:14:B4:5E:3B:60:89:12:FC:13:9B:C1:9A X509v3 Authority Key Identifier: keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/58C16E043B7811F099AF3F55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:7d40::/48 Signature Algorithm: sha256WithRSAEncryption d1:5a:b1:1d:03:22:a9:df:22:3c:e5:ef:bd:e2:cf:2e:cb:a7: 5c:fc:ef:62:7c:90:49:4c:32:b3:8a:13:b9:cf:7b:5b:eb:a7: 05:52:61:00:84:9d:5f:74:76:3a:71:87:59:45:4d:31:90:4f: 59:e6:ec:73:df:e1:54:e4:f1:48:e7:4f:6b:45:3f:86:79:f9: 0e:c0:08:a1:a4:79:c7:72:0f:2d:a6:ca:fe:34:df:cc:2f:c3: 45:bb:1d:05:6a:1d:08:a8:fe:f6:8a:9d:ee:0c:1c:c5:c2:7d: 98:9c:95:d1:a3:9b:a5:91:64:16:76:33:a2:8d:2b:64:66:77: 50:4b:49:52:5f:37:60:7b:d5:de:80:64:c4:76:e5:fb:de:e2: 8b:17:3b:f9:ea:79:80:1c:2e:eb:b6:02:56:d5:a9:0b:53:a8: 6a:af:38:a3:08:ab:ce:bb:66:6e:50:7b:0c:1b:c8:70:f7:47: 02:1e:dc:72:51:c9:82:7e:11:24:54:c1:3d:11:ff:ca:43:32: 2c:61:ab:fd:99:5a:0f:5a:7f:68:6c:83:9d:74:69:7f:5a:65: 44:36:f1:a7:9f:64:13:00:b9:fe:40:de:50:f7:25:ab:ce:f2: dd:4b:a6:c4:19:56:73:32:2e:3b:8e:ae:1f:a1:ae:25:70:4c: 13:22:02:7e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTAzOThENTRBQ0Q5REIzM0VENEZDQUE4RDIyODA1RDQ1 RTgwQ0JCNjAeFw0yNTA1MjgwNDAwNTJaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MzY4YTc0LTkwZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtQQfKAXAC/fh0+LvAS/mk3/KNJhi23C9Zix7K9FE5q8EaIw6xXTEHnv5POWWC RtvJhrQZQGJg6gM5unTNtrqX5mJXTyNoMlrmQaHkfe0Ak8imQp5DRPiHyYeICEuh y0L+zZSH59CxirZP6ViMTj0vEbMChb0qvYAJtq/09J4z2p8BzzoWaQVva/mSxM7q qLtvdQ2oU6WhIlieXyC7n5zixtjLGeMJEjlCbC9NEd3p7EH3l+ekMwILoIaIaFuG qBSzmx0aQCrFseV4e3ksbVk2lFDJZoqZ5+wnMmBZ0lbKyocerbhx+To6t12D+GzP 2yweNToG1/EtFx6gNg57jH+HAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUewCB7raI OOwUtF47YIkS/BObwZowHwYDVR0jBBgwFoAU4DmNVKzZ2zPtT8qo0igF1F6Ay7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzU4N0YzNURBM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNERtTlZLeloyelB0VDhxbzBpZ0YxRjZBeTdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE0Ri81ODdGMzVEQTNCNzcxMUYwOTdBOEJCMjRDNEY5QUUwMi81OEMxNkUwNDNC NzgxMUYwOTlBRjNGNTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfN9QDANBgkqhkiG9w0BAQsFAAOCAQEA0VqxHQMiqd8i POXvveLPLsunXPzvYnyQSUwys4oTuc97W+unBVJhAISdX3R2OnGHWUVNMZBPWebs c9/hVOTxSOdPa0U/hnn5DsAIoaR5x3IPLabK/jTfzC/DRbsdBWodCKj+9oqd7gwc xcJ9mJyV0aObpZFkFnYzoo0rZGZ3UEtJUl83YHvV3oBkxHbl+97iixc7+ep5gBwu 67YCVtWpC1Ooaq84owirzrtmblB7DBvIcPdHAh7cclHJgn4RJFTBPRH/ykMyLGGr /ZlaD1p/aGyDnXRpf1plRDbxp59kEwC5/kDeUPclq87y3UumxBlWczIuO46uH6Gu JXBMEyICfg== -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:53 2025 by rpki-client