$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/90405CE2D5DD11EF99075D78C4F9AE02.roa File: 90405CE2D5DD11EF99075D78C4F9AE02.roa (raw, json) Hash identifier: hTL1z9/ySOlu0XaviOinYnMnBTyzcwAp4EbODVpERNU= Subject key identifier: 54:70:F4:1E:66:45:4D:9A:E4:17:27:F6:BA:77:C2:B7:E7:D8:9D:12 Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Certificate serial: 09 Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/90405CE2D5DD11EF99075D78C4F9AE02.roa Signing time: Sat 18 Jan 2025 20:48:26 +0000 ROA not before: Sat 18 Jan 2025 20:48:26 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 23470 IP address blocks: 2001:df4:ec40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C022C Validity Not Before: Jan 18 20:48:26 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=678c1399-07eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3c:2a:d0:e2:56:23:fa:8c:2e:d3:47:f7:90: b6:55:c1:16:b9:1a:b7:9a:de:e3:ba:0a:2e:f0:df: 81:2a:bc:11:11:1d:77:52:c7:23:f5:ce:8c:bd:3c: a0:32:c7:55:e8:17:9d:04:b4:c1:fd:5d:f3:09:6e: b6:c1:fb:e2:a2:ef:1d:4c:c4:1f:27:15:b3:bc:0a: ee:09:80:90:a6:94:82:a2:0b:90:82:18:9e:bf:d6: a7:90:d3:b3:35:54:94:e3:d5:a5:f1:96:1d:55:1b: 06:56:25:e3:52:d7:a4:40:30:fb:2b:c0:9e:97:db: 3c:bf:91:6b:fc:1b:68:59:55:77:1a:de:48:34:bc: 61:49:08:9a:b9:05:2d:27:08:3a:8e:4b:80:15:12: 76:65:38:93:31:0c:9a:ce:af:17:23:98:d3:20:9b: 4a:d9:42:ee:4e:88:7f:4c:7f:94:14:17:1a:58:29: 2d:35:69:7b:0d:88:d3:e0:27:f5:1d:d1:53:03:4b: c8:f5:c5:a2:aa:48:2f:23:1f:c1:8c:a0:25:fa:98: b7:36:cc:90:33:41:f2:c1:0e:b5:11:58:6f:4d:f0: ac:47:e0:9d:9e:1c:00:8a:55:d9:14:26:be:3c:3b: d4:d3:1d:f3:a9:07:a7:4d:63:d5:06:df:93:f2:f0: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:70:F4:1E:66:45:4D:9A:E4:17:27:F6:BA:77:C2:B7:E7:D8:9D:12 X509v3 Authority Key Identifier: keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/90405CE2D5DD11EF99075D78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:ec40::/48 Signature Algorithm: sha256WithRSAEncryption 3c:6a:df:a5:c3:82:2d:40:07:78:90:b1:78:da:7d:61:3d:42: 99:0f:d4:8e:87:e3:75:00:ac:7c:32:60:d0:42:27:de:be:bf: 8c:3e:58:46:83:21:5c:74:b7:03:4e:cf:d2:44:b4:36:52:2c: cd:33:1f:84:5d:c7:43:1f:11:4c:5a:4f:5b:bf:c8:f1:8b:36: cb:a1:e7:e3:df:36:6b:52:8b:ee:17:43:f2:55:ba:95:de:12: 22:d9:3e:0a:47:51:2c:e1:98:36:f2:9f:a2:76:34:5e:ef:9f: 63:40:84:fe:b7:87:8d:5e:85:07:36:68:82:0b:f4:91:0f:4a: 6b:fd:5e:34:b9:61:51:6d:82:b1:af:d8:2b:2f:1f:8c:6b:ec: 43:e9:cf:ed:c0:ee:09:ed:62:9d:d5:0b:ba:d3:62:d5:60:86: 32:90:38:81:7f:dd:f5:38:26:df:ed:93:1a:14:23:e7:b5:4d: 03:f8:b1:6d:cd:88:39:e7:48:89:31:8b:44:d7:88:b1:b4:8e: 89:c2:21:c8:ad:00:b4:e4:d9:37:8b:4a:ec:b7:f5:d5:45:ff: 48:66:4d:a8:e4:5c:45:3f:6a:d3:fb:08:ad:a1:e6:74:0f:72: 64:8b:09:0e:6d:ac:b4:08:a0:0e:00:06:b0:00:57:dd:77:62: 3c:a4:e3:a8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDIyQzExMC8GA1UEBRMoRDc5Njk5NUE3NzY3NTlDNDI2NDMxNzgwMDI4N0VCRUVF RkI0QkE2QTAeFw0yNTAxMTgyMDQ4MjZaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OGMxMzk5LTA3ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDePCrQ4lYj+owu00f3kLZVwRa5Grea3uO6Ci7w34EqvBERHXdSxyP1zoy9PKAy x1XoF50EtMH9XfMJbrbB++Ki7x1MxB8nFbO8Cu4JgJCmlIKiC5CCGJ6/1qeQ07M1 VJTj1aXxlh1VGwZWJeNS16RAMPsrwJ6X2zy/kWv8G2hZVXca3kg0vGFJCJq5BS0n CDqOS4AVEnZlOJMxDJrOrxcjmNMgm0rZQu5OiH9Mf5QUFxpYKS01aXsNiNPgJ/Ud 0VMDS8j1xaKqSC8jH8GMoCX6mLc2zJAzQfLBDrURWG9N8KxH4J2eHACKVdkUJr48 O9TTHfOpB6dNY9UG35Py8DARAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUVHD0HmZF TZrkFyf2unfCt+fYnRIwHwYDVR0jBBgwFoAU15aZWndnWcQmQxeAAofr7u+0umow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMjJDL0JBMEYyREYyRDRC OTExRUY5RkE4RTI0RkM0RjlBRTAyLzE1YVpXbmRuV2NRbVF4ZUFBb2ZyN3UtMHVt by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVhWlduZG5XY1FtUXhlQUFvZnI3dS0wdW1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDIyQy9CQTBGMkRGMkQ0QjkxMUVGOUZBOEUyNEZDNEY5QUUwMi85MDQwNUNFMkQ1 REQxMUVGOTkwNzVENzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfTsQDANBgkqhkiG9w0BAQsFAAOCAQEAPGrfpcOCLUAH eJCxeNp9YT1CmQ/UjofjdQCsfDJg0EIn3r6/jD5YRoMhXHS3A07P0kS0NlIszTMf hF3HQx8RTFpPW7/I8Ys2y6Hn4982a1KL7hdD8lW6ld4SItk+CkdRLOGYNvKfonY0 Xu+fY0CE/reHjV6FBzZoggv0kQ9Ka/1eNLlhUW2Csa/YKy8fjGvsQ+nP7cDuCe1i ndULutNi1WCGMpA4gX/d9Tgm3+2TGhQj57VNA/ixbc2IOedIiTGLRNeIsbSOicIh yK0AtOTZN4tK7Lf11UX/SGZNqORcRT9q0/sIraHmdA9yZIsJDm2stAigDgAGsABX 3XdiPKTjqA== -----END CERTIFICATE-----Generated at Thu Feb 6 04:52:34 2025 by rpki-client