$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/9333456E2D7511F0AE6EEE7CC4F9AE02.roa File: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (raw, json) Hash identifier: 9HMzFEkbx1T0ynaVX6uHWObWXzc9PFPAUjEuMjKZdqU= Subject key identifier: B1:83:72:74:C7:49:A4:FE:EB:C7:B1:1C:B3:16:7E:B0:62:61:E4:94 Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: 01DD Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/9333456E2D7511F0AE6EEE7CC4F9AE02.roa Signing time: Sat 10 May 2025 08:05:45 +0000 ROA not before: Sat 10 May 2025 08:05:45 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 150440 IP address blocks: 2001:df1:9540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: May 10 08:05:45 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=681f08d9-c85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:27:34:74:84:fd:84:28:8c:98:77:68:00: da:1c:0b:4b:42:4c:64:f3:48:d6:a6:31:3d:22:96: 29:f4:91:8f:e9:7b:19:70:68:04:ab:eb:eb:47:de: 6c:94:51:d4:5a:f3:f7:3b:4c:7a:37:fe:bf:69:37: 3f:7c:8b:af:c9:d1:5a:78:ff:cd:05:b5:0f:a3:9f: 06:5d:41:55:d2:01:fd:80:31:b1:ba:bf:1f:cb:7d: e6:33:36:13:98:8b:35:4c:8a:30:25:80:43:b5:b3: 5d:3c:18:0a:03:23:0d:b6:74:d1:2e:93:e2:7d:1f: a0:22:e8:e1:b0:0d:e2:d7:66:fa:31:bd:2f:f6:29: 00:b2:b6:97:e6:5b:10:6e:68:fc:b2:e7:58:31:79: 3b:ae:07:aa:d4:b9:a5:c2:a8:3a:3c:fa:da:70:b3: 70:a8:40:8b:f4:1a:84:ef:33:92:39:01:49:3d:03: 1c:1c:58:ad:44:5b:bc:8b:70:b6:fc:0c:2d:bf:c5: f7:38:60:0c:d9:66:7e:02:39:88:a4:7f:ee:cb:f0: 5c:69:aa:a4:b1:62:be:16:0d:6c:b1:90:50:62:15: a7:68:72:de:52:8f:f0:b8:e9:be:23:0c:75:49:38: bd:e7:4d:dd:3c:0e:3c:de:81:b2:90:c1:bf:34:b9: c5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:83:72:74:C7:49:A4:FE:EB:C7:B1:1C:B3:16:7E:B0:62:61:E4:94 X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/9333456E2D7511F0AE6EEE7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:9540::/48 Signature Algorithm: sha256WithRSAEncryption 67:71:11:3d:38:4e:db:c5:1f:cc:25:53:ab:47:1c:cf:f5:78: c4:a7:59:23:18:64:93:19:fa:1a:33:21:5e:b6:fb:cd:7e:ed: 05:48:ad:15:69:c2:86:20:49:61:2e:e8:92:32:1e:5e:e1:58: 4d:f9:15:db:90:95:9f:1e:4f:85:51:2f:1d:18:ac:53:a2:7a: 57:fd:0a:f4:f5:ae:38:97:09:3f:c6:e2:4f:0c:d6:60:99:36: 91:13:27:f7:69:6e:8a:78:54:8e:cb:44:bd:f8:58:4d:1d:22: 8e:33:e6:15:9d:bf:16:6b:82:a8:d9:ba:e1:65:5b:4b:a1:09: 92:85:a4:73:b7:79:41:dc:b9:fd:42:6a:dd:b5:e7:16:11:c2: 9e:67:02:3d:4c:5d:2f:b9:2b:0b:c4:53:ab:70:b2:7c:3d:7f: f9:23:ad:c1:9f:b4:dc:ca:52:d5:87:4b:2d:35:e6:06:c7:50: b6:4a:c1:61:53:ed:3a:fa:14:09:05:0f:06:16:43:74:dc:d8: 04:54:1a:a9:bf:04:ab:4b:af:6e:e5:10:0d:13:5b:e1:e7:79: 8d:ed:15:23:66:b5:1a:ca:fb:cc:a3:2c:08:00:ce:8c:8d:8d: e8:7e:31:70:49:4a:6f:fd:1d:5c:07:a6:3c:5e:96:08:f9:f9: ed:30:86:06 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjUwNTEwMDgwNTQ1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmMDhkOS1jODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1snNHSE/YQojJh3aADaHAtLQkxk80jWpjE9IpYp9JGP6XsZcGgEq+vrR95s lFHUWvP3O0x6N/6/aTc/fIuvydFaeP/NBbUPo58GXUFV0gH9gDGxur8fy33mMzYT mIs1TIowJYBDtbNdPBgKAyMNtnTRLpPifR+gIujhsA3i12b6Mb0v9ikAsraX5lsQ bmj8sudYMXk7rgeq1Lmlwqg6PPracLNwqECL9BqE7zOSOQFJPQMcHFitRFu8i3C2 /Awtv8X3OGAM2WZ+AjmIpH/uy/BcaaqksWK+Fg1ssZBQYhWnaHLeUo/wuOm+Iwx1 STi9503dPA483oGykMG/NLnF7wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLGDcnTH SaT+68exHLMWfrBiYeSUMB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTVBQzgvQkE2RDI3RDQ2QzVEMTFFRDhDNUM2NDFDQzRGOUFFMDIvOTMzMzQ1NkUy RDc1MTFGMEFFNkVFRTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3xlUAwDQYJKoZIhvcNAQELBQADggEBAGdxET04TtvF H8wlU6tHHM/1eMSnWSMYZJMZ+hozIV62+81+7QVIrRVpwoYgSWEu6JIyHl7hWE35 FduQlZ8eT4VRLx0YrFOielf9CvT1rjiXCT/G4k8M1mCZNpETJ/dpbop4VI7LRL34 WE0dIo4z5hWdvxZrgqjZuuFlW0uhCZKFpHO3eUHcuf1Cat215xYRwp5nAj1MXS+5 KwvEU6twsnw9f/kjrcGftNzKUtWHSy015gbHULZKwWFT7Tr6FAkFDwYWQ3Tc2ARU Gqm/BKtLr27lEA0TW+HneY3tFSNmtRrK+8yjLAgAzoyNjeh+MXBJSm/9HVwHpjxe lgj5+e0whgY= -----END CERTIFICATE-----Generated at Tue May 13 20:39:27 2025 by rpki-client