$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/E6C1F0003C7E11F08A874435C4F9AE02.roa File: E6C1F0003C7E11F08A874435C4F9AE02.roa (raw, json) Hash identifier: gvU+qqa/2rO/E9CyKARNzA86Y3LagDLtRJRw3fbIF50= Subject key identifier: C8:60:E1:25:3D:D8:EB:54:99:CF:35:88:25:AD:BE:CB:DE:0C:9B:58 Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Certificate serial: 0C58 Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/E6C1F0003C7E11F08A874435C4F9AE02.roa Signing time: Thu 29 May 2025 11:20:18 +0000 ROA not before: Thu 29 May 2025 11:20:18 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 150774 IP address blocks: 2401:c5c0:2000::/48 maxlen: 48 2401:c5c0:2001::/48 maxlen: 48 2401:c5c0:2002::/48 maxlen: 48 2401:c5c0:2003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Validity Not Before: May 29 11:20:18 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683842f2-5fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d7:e4:83:a4:18:89:89:c3:87:d7:1f:0d:54: 22:88:77:d7:f7:48:55:75:5d:9d:9a:c6:aa:b9:8b: 01:6e:91:28:94:b9:06:22:e8:85:fb:a9:a1:45:60: de:71:44:b1:e2:20:64:4f:25:2c:bd:1e:20:af:8f: 12:29:6d:5c:dd:d4:ec:3c:87:05:74:f4:3f:46:a1: 6b:eb:e5:47:b3:80:6b:71:d6:7e:ec:13:ac:e4:ed: 57:82:f0:01:51:b2:b1:0a:44:09:9b:e1:de:d3:ef: b5:99:67:ed:1c:84:8c:df:d8:55:d6:ea:73:ef:bb: 14:c8:aa:cd:f8:3d:dc:50:17:e7:48:58:5a:03:72: b2:00:83:a7:2c:b3:79:3f:9a:5a:7d:3d:7f:7c:fd: cc:f9:59:0d:76:9f:1e:8d:04:c2:f3:22:b2:2e:8b: 52:eb:0d:01:4b:17:13:60:62:c4:7c:ec:d3:c7:56: 92:f6:6c:15:1d:b0:20:e8:d6:95:ab:01:f2:b3:a3: 10:e9:74:84:42:89:57:09:29:15:7f:c9:e6:63:86: f7:c2:cc:bf:0f:ef:2d:f8:01:8f:30:d2:71:b1:65: d5:c5:e0:ab:5c:fe:90:50:52:9f:1a:34:81:e2:86: 82:c4:14:f6:65:50:bb:b1:cd:be:ec:de:14:c0:2d: 8b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:60:E1:25:3D:D8:EB:54:99:CF:35:88:25:AD:BE:CB:DE:0C:9B:58 X509v3 Authority Key Identifier: keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/E6C1F0003C7E11F08A874435C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:c5c0:2000::/46 Signature Algorithm: sha256WithRSAEncryption 28:1f:09:37:7a:2b:a2:5b:2f:01:ea:74:cd:f9:72:f2:58:d5: 44:cc:93:96:98:94:b8:f4:97:cc:9e:85:d7:a3:5d:c7:f0:63: 37:21:29:fc:a0:fd:9f:b9:00:93:d1:1c:c1:ca:cc:14:ee:be: ee:3f:80:75:d0:c9:05:48:ed:b6:cc:27:c6:d1:14:05:52:06: 30:fc:57:90:56:3f:a9:b2:4a:dc:b5:a9:14:b4:9f:a1:a0:28: 1d:35:64:f0:09:59:0f:d3:73:00:13:06:04:d2:3b:0f:a9:5d: c4:a4:58:0b:6a:f5:3e:e1:cf:eb:5c:7c:c5:f7:e9:18:e0:8b: a7:60:82:1b:3f:79:27:27:f3:8b:86:69:ec:ab:8f:01:be:07: 43:4d:14:ca:52:4b:67:4f:de:87:26:08:51:81:26:0e:c2:a3: 44:b0:c1:19:ba:10:dd:33:a0:64:f0:bc:ec:cd:d5:e8:32:83: 24:fa:d7:03:e2:dd:63:29:4a:38:09:f3:71:4f:d7:71:69:64: 04:f5:a9:e3:19:9f:8c:23:94:55:7f:1a:ae:c9:f6:6d:43:89: 09:ac:56:20:e3:db:bd:54:b4:5f:ef:ae:8a:08:fd:b1:8c:3f: 81:00:54:e2:0e:a4:61:68:e5:b7:6e:be:a8:44:94:4c:01:f6: bd:70:a0:a5 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy NTNBQkQwMjYwHhcNMjUwNTI5MTEyMDE4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM4NDJmMi01ZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49fkg6QYiYnDh9cfDVQiiHfX90hVdV2dmsaquYsBbpEolLkGIuiF+6mhRWDe cUSx4iBkTyUsvR4gr48SKW1c3dTsPIcFdPQ/RqFr6+VHs4BrcdZ+7BOs5O1XgvAB UbKxCkQJm+He0++1mWftHISM39hV1upz77sUyKrN+D3cUBfnSFhaA3KyAIOnLLN5 P5pafT1/fP3M+VkNdp8ejQTC8yKyLotS6w0BSxcTYGLEfOzTx1aS9mwVHbAg6NaV qwHys6MQ6XSEQolXCSkVf8nmY4b3wsy/D+8t+AGPMNJxsWXVxeCrXP6QUFKfGjSB 4oaCxBT2ZVC7sc2+7N4UwC2LkQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMhg4SU9 2OtUmc81iCWtvsveDJtYMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5MjgvNERBN0JCMjAwQjVCMTFFQUEzRUJDNjUwQzRGOUFFMDIvRTZDMUYwMDAz QzdFMTFGMDhBODc0NDM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwIkAcXAIAAwDQYJKoZIhvcNAQELBQADggEBACgfCTd6K6Jb LwHqdM35cvJY1UTMk5aYlLj0l8yehdejXcfwYzchKfyg/Z+5AJPRHMHKzBTuvu4/ gHXQyQVI7bbMJ8bRFAVSBjD8V5BWP6mySty1qRS0n6GgKB01ZPAJWQ/TcwATBgTS Ow+pXcSkWAtq9T7hz+tcfMX36Rjgi6dgghs/eScn84uGaeyrjwG+B0NNFMpSS2dP 3ocmCFGBJg7Co0SwwRm6EN0zoGTwvOzN1egygyT61wPi3WMpSjgJ83FP13FpZAT1 qeMZn4wjlFV/Gq7J9m1DiQmsViDj271UtF/vrooI/bGMP4EAVOIOpGFo5bduvqhE lEwB9r1woKU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:37:14 2025 by rpki-client