$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/2BC34BC6404A11F0B481CC7CC4F9AE02.roa File: 2BC34BC6404A11F0B481CC7CC4F9AE02.roa (raw, json) Hash identifier: 5kE1p13DLUf3CMV1uPaDHHW1FGlxES6xsk7p+yKiahI= Subject key identifier: 07:D7:6F:28:44:8B:04:C2:CB:41:AE:97:0E:15:90:17:89:4B:21:F4 Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Certificate serial: 08F9 Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/2BC34BC6404A11F0B481CC7CC4F9AE02.roa Signing time: Tue 03 Jun 2025 07:12:56 +0000 ROA not before: Tue 03 Jun 2025 07:12:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41378 IP address blocks: 2405:f3c0:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 20:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4502, serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Validity Not Before: Jun 3 07:12:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=683ea077-015d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:44:6c:c4:03:30:c5:3a:aa:92:2d:1d:43: 46:6c:73:72:0f:8a:e6:c4:e9:66:b4:81:90:1b:e7: af:cb:14:e2:50:7d:26:e1:57:f8:a8:4b:cf:23:15: 52:bd:59:29:ad:a6:28:f7:76:21:8e:7d:a5:58:e7: 68:f1:3a:0a:bd:43:3c:99:c7:cc:61:c3:c6:06:6d: f5:97:e7:56:95:f6:5a:3a:33:f6:6e:a5:0a:3f:2c: 6b:63:5f:d7:d0:92:cf:31:07:08:c1:6b:2c:15:ee: d1:dd:bc:a6:a9:c0:b2:a3:d3:4a:f5:bd:16:be:90: bc:2e:5c:1b:54:89:d8:5f:14:f4:13:61:d8:b2:e7: 8b:0a:57:15:85:af:58:f7:94:1f:7d:ff:ff:3d:db: 4d:0a:ea:8a:47:89:b3:7d:b1:95:ff:51:47:9b:5a: 22:a9:0b:96:eb:e0:5d:e7:e6:1e:41:30:a1:6e:75: f6:f2:03:21:af:62:b6:df:51:76:0f:6e:3f:ad:3a: c4:8a:cb:d9:41:01:f6:9e:19:3c:1c:7c:04:b7:75: f4:7e:8c:b7:07:1c:22:1a:59:1e:5a:4d:d5:cd:39: da:40:e8:c6:92:01:f8:db:45:86:4b:e9:80:a9:81: 17:50:56:4c:36:f4:ba:fd:aa:a8:c3:85:26:1b:8a: 37:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D7:6F:28:44:8B:04:C2:CB:41:AE:97:0E:15:90:17:89:4B:21:F4 X509v3 Authority Key Identifier: keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/2BC34BC6404A11F0B481CC7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:f3c0:400::/40 Signature Algorithm: sha256WithRSAEncryption 11:ff:85:26:f0:62:9a:5b:cc:06:96:15:61:35:96:b7:2a:da: ab:5d:a3:d1:e1:b3:30:56:a7:60:93:a5:56:19:2a:24:a2:b8: 30:07:78:50:89:fb:4e:78:3e:8d:24:f8:ae:76:c0:95:c1:09: bc:db:7e:5b:83:37:a2:61:2e:b4:dc:df:30:73:f2:ac:c4:ed: f8:ee:74:13:41:97:08:53:c4:63:27:92:44:c7:2e:92:3a:8c: 06:8e:6e:eb:78:e1:e4:c5:5a:7b:fb:a3:ff:9a:2c:88:e8:cf: 31:a8:6e:81:97:62:fd:50:5b:07:cb:d9:89:29:f5:75:64:04: 4d:f8:83:17:38:a1:66:f8:f3:a0:94:f4:ea:01:b1:35:dc:ca: d4:34:5c:00:fb:7e:61:61:eb:f2:4c:b8:c5:97:c8:fd:23:82: c5:11:7f:ac:27:fe:b0:e3:c4:80:15:24:23:6c:e6:56:7e:10: 24:ec:77:ff:2f:60:37:f6:75:08:48:d3:1e:be:28:c6:f8:f7: 1c:8e:c4:6a:ef:73:8d:22:53:e1:a6:e1:37:5b:58:c8:61:18: 55:0b:89:f4:0e:7b:8d:5f:66:7b:88:e9:18:bc:1c:bb:e2:64: 77:0d:ab:dd:ff:dd:c6:af:99:4c:4f:66:6b:db:99:fa:7b:74: 3e:ce:1c:0c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1MDIxMTAvBgNVBAUTKENCNEM5NUY4MzlFMjFEMURFMEY0NTg1NTNEOUE0Q0Uy OEU0MTREODgwHhcNMjUwNjAzMDcxMjU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlYTA3Ny0wMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8NEbMQDMMU6qpItHUNGbHNyD4rmxOlmtIGQG+evyxTiUH0m4Vf4qEvPIxVS vVkpraYo93Yhjn2lWOdo8ToKvUM8mcfMYcPGBm31l+dWlfZaOjP2bqUKPyxrY1/X 0JLPMQcIwWssFe7R3bymqcCyo9NK9b0WvpC8LlwbVInYXxT0E2HYsueLClcVha9Y 95Qfff//PdtNCuqKR4mzfbGV/1FHm1oiqQuW6+Bd5+YeQTChbnX28gMhr2K231F2 D24/rTrEisvZQQH2nhk8HHwEt3X0foy3BxwiGlkeWk3VzTnaQOjGkgH420WGS+mA qYEXUFZMNvS6/aqow4UmG4o3dwIDAQABo4IClzCCApMwHQYDVR0OBBYEFAfXbyhE iwTCy0Gulw4VkBeJSyH0MB8GA1UdIwQYMBaAFMtMlfg54h0d4PRYVT2aTOKOQU2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDUwMi80MEUyREZDQ0I1 MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhSM2c5RmhWUFpwTTRvNUJU WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kweVYtRG5pSFIzZzlGaFZQWnBNNG81QlRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQ1MDIvNDBFMkRGQ0NCNTAyMTFFQUEyOUYyNzdBQzRGOUFFMDIvMkJDMzRCQzY0 MDRBMTFGMEI0ODFDQzdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkBfPABDANBgkqhkiG9w0BAQsFAAOCAQEAEf+FJvBimlvM BpYVYTWWtyraq12j0eGzMFanYJOlVhkqJKK4MAd4UIn7Tng+jST4rnbAlcEJvNt+ W4M3omEutNzfMHPyrMTt+O50E0GXCFPEYyeSRMcukjqMBo5u63jh5MVae/uj/5os iOjPMahugZdi/VBbB8vZiSn1dWQETfiDFzihZvjzoJT06gGxNdzK1DRcAPt+YWHr 8ky4xZfI/SOCxRF/rCf+sOPEgBUkI2zmVn4QJOx3/y9gN/Z1CEjTHr4oxvj3HI7E au9zjSJT4abhN1tYyGEYVQuJ9A57jV9me4jpGLwcu+Jkdw2r3f/dxq+ZTE9ma9uZ +nt0Ps4cDA== -----END CERTIFICATE-----Generated at Fri Jun 6 17:15:54 2025 by rpki-client