$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/44B43AAECC1011EFA5596A50C4F9AE02.roa File: 44B43AAECC1011EFA5596A50C4F9AE02.roa (raw, json) Hash identifier: uRW4bqoOWcKD9JjoYymAbjdIYpBJL8ZXTg4SH6smXUk= Subject key identifier: 46:FE:F4:D1:B1:AA:D0:7F:48:82:AC:E9:4E:32:5A:42:1E:12:C7:0B Certificate issuer: /CN=A91CE7A4/serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB Certificate serial: 02 Authority key identifier: 78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/44B43AAECC1011EFA5596A50C4F9AE02.roa Signing time: Mon 06 Jan 2025 09:26:12 +0000 ROA not before: Mon 06 Jan 2025 09:26:12 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 153483 IP address blocks: 2001:df4:dec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4 Validity Not Before: Jan 6 09:26:12 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677ba1b3-af2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:6b:b9:b3:23:9b:e0:d1:f5:72:e8:3d:84: 3a:83:8f:8c:16:44:01:7c:d9:ef:75:a6:c0:af:08: 87:50:1b:bf:76:29:ba:82:d1:ae:67:8e:d1:59:ed: 8c:83:55:a3:7c:f6:59:6b:b0:b9:0e:bc:ad:fb:ca: 0a:c0:8c:02:d7:ef:64:36:08:c6:bf:99:8e:59:39: 01:2a:62:92:41:2a:1a:f1:d6:94:c6:fa:30:31:77: b6:ef:a6:44:7f:40:71:71:bb:5b:d1:5e:34:e8:e1: bd:90:de:bf:ff:17:97:f6:13:34:c4:cf:d0:8b:ed: e7:35:9d:b9:de:84:90:f4:26:0a:d5:ba:50:db:f1: f5:1b:5f:29:af:4d:6d:38:9e:df:36:5f:39:e9:01: 5c:05:1a:a7:b5:c8:3a:3f:5f:2b:d5:f9:43:5d:42: c1:4b:85:a9:6c:57:7a:d2:23:83:b9:9f:0f:34:c5: e2:fa:5e:90:3f:60:65:d1:13:db:c5:57:ee:b4:6c: 6f:86:6b:df:03:70:e6:1d:fe:6c:6d:66:a5:6a:33: e9:6e:1d:cc:ca:90:74:d7:5b:f1:0c:da:6e:c7:2b: 53:d9:58:1f:69:42:45:ed:ca:f3:7d:cb:9e:8a:9b: 75:a7:73:36:99:ab:68:fe:9d:e1:ab:71:77:cf:b0: 8c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FE:F4:D1:B1:AA:D0:7F:48:82:AC:E9:4E:32:5A:42:1E:12:C7:0B X509v3 Authority Key Identifier: keyid:78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/44B43AAECC1011EFA5596A50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:dec0::/48 Signature Algorithm: sha256WithRSAEncryption a0:98:27:a9:5a:07:ee:d8:79:d4:0b:df:12:ab:ac:fe:b4:a4: 2b:98:53:b6:ad:02:37:03:0c:e2:b8:d5:37:12:05:72:26:31: 6a:56:e2:20:78:88:2a:1d:2f:e3:25:82:d1:65:e1:21:45:a2: 41:46:07:54:e5:5c:bb:ef:5e:be:f0:a1:fd:a3:22:a3:47:17: 78:76:b3:cf:e5:2f:f3:a6:be:9d:0f:cb:37:6c:e7:b4:18:5c: aa:f2:7a:e1:73:d6:6d:f5:1c:d8:bc:1a:23:17:33:5f:29:60: a2:0e:8f:ee:ff:b2:b9:27:34:61:68:1c:19:30:8c:96:19:02: 5d:47:15:1a:a9:4e:d1:06:36:67:11:1a:d7:f2:37:f2:da:08: b5:14:d0:f9:62:d5:1d:41:e5:b6:84:12:04:c9:97:ce:8f:0d: 64:be:01:2a:2a:e0:b1:33:e7:18:de:96:06:99:26:b9:d7:13: 82:c3:55:a5:cb:59:33:5d:49:3f:86:27:7d:ce:b9:ae:8b:1b: 36:e0:46:5b:41:a8:0b:f8:c0:10:40:08:47:34:05:4d:96:2f: 5b:c0:ec:46:f5:f7:71:71:8e:7b:c3:8d:45:1f:20:09:ae:e7: 40:38:c4:f5:7a:42:38:87:93:c0:53:97:27:5d:dc:d0:59:e3: 4c:c3:60:4f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTdBNDExMC8GA1UEBRMoNzgzNjJFRjlGRTM5NDk2RUY2NUIzNkY4M0I2Njk4QUY5 MzA4REZBQjAeFw0yNTAxMDYwOTI2MTJaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2JhMWIzLWFmMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk2Gu5syOb4NH1cug9hDqDj4wWRAF82e91psCvCIdQG792KbqC0a5njtFZ7YyD VaN89llrsLkOvK37ygrAjALX72Q2CMa/mY5ZOQEqYpJBKhrx1pTG+jAxd7bvpkR/ QHFxu1vRXjTo4b2Q3r//F5f2EzTEz9CL7ec1nbnehJD0JgrVulDb8fUbXymvTW04 nt82XznpAVwFGqe1yDo/XyvV+UNdQsFLhalsV3rSI4O5nw80xeL6XpA/YGXRE9vF V+60bG+Ga98DcOYd/mxtZqVqM+luHczKkHTXW/EM2m7HK1PZWB9pQkXtyvN9y56K m3WnczaZq2j+neGrcXfPsIz1AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQURv700bGq 0H9IgqzpTjJaQh4SxwswHwYDVR0jBBgwFoAUeDYu+f45SW72Wzb4O2aYr5MI36sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFN0E0L0MwQ0FFNzQyQ0Mw RjExRUZBMjc4RkQ0Q0M0RjlBRTAyL2VEWXUtZjQ1U1c3Mld6YjRPMmFZcjVNSTM2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZURZdS1mNDVTVzcyV3piNE8yYVlyNU1JMzZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdBNC9DMENBRTc0MkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi80NEI0M0FBRUND MTAxMUVGQTU1OTZBNTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfTewDANBgkqhkiG9w0BAQsFAAOCAQEAoJgnqVoH7th5 1AvfEqus/rSkK5hTtq0CNwMM4rjVNxIFciYxalbiIHiIKh0v4yWC0WXhIUWiQUYH VOVcu+9evvCh/aMio0cXeHazz+Uv86a+nQ/LN2zntBhcqvJ64XPWbfUc2LwaIxcz Xylgog6P7v+yuSc0YWgcGTCMlhkCXUcVGqlO0QY2ZxEa1/I38toItRTQ+WLVHUHl toQSBMmXzo8NZL4BKirgsTPnGN6WBpkmudcTgsNVpctZM11JP4Ynfc65rosbNuBG W0GoC/jAEEAIRzQFTZYvW8DsRvX3cXGOe8ONRR8gCa7nQDjE9XpCOIeTwFOXJ13c 0FnjTMNgTw== -----END CERTIFICATE-----Generated at Thu Feb 6 03:35:05 2025 by rpki-client