$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/3A542BE0BC7511EBBB084D27C4F9AE02.roa File: 3A542BE0BC7511EBBB084D27C4F9AE02.roa (raw, json) Hash identifier: h6cfh4R2DSVctuRgtsUmGsASm4gMo0dIEjDPej0xQNc= Subject key identifier: C1:CA:72:C3:D8:53:55:76:65:A6:A5:53:CD:08:EB:E1:81:58:5F:D3 Certificate issuer: /CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Certificate serial: 066D Authority key identifier: 3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/3A542BE0BC7511EBBB084D27C4F9AE02.roa Signing time: Mon 28 Apr 2025 23:03:18 +0000 ROA not before: Mon 28 Apr 2025 23:03:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44103 IP address blocks: 2001:df6:2480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCFC, serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Validity Not Before: Apr 28 23:03:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68100935-b708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:e8:3f:d9:2c:59:82:ee:90:8c:53:1d:8c: 75:1e:e2:87:12:24:74:73:48:7d:e6:eb:52:cc:ca: c9:fb:cb:98:9e:28:ec:3c:19:ba:32:b7:d1:a6:1c: ec:6d:2c:7d:2b:56:03:59:5f:e9:f0:ef:dd:7b:f9: de:2d:1b:46:99:b6:c8:4a:01:7f:c8:fb:36:3f:68: b4:04:89:e4:fa:92:54:53:fe:3f:d4:11:05:e3:51: 28:fd:38:7d:bc:56:7f:6d:73:40:5a:31:70:f7:16: a4:9e:4e:16:b5:ca:04:5f:c8:f3:48:e3:9d:59:85: 55:55:be:ce:83:b5:5a:2d:30:cb:a0:5b:29:c9:aa: dd:dc:ae:32:39:28:6a:ff:4c:1b:63:4d:c2:97:c2: ec:ec:ed:15:f4:7e:a4:b1:b9:f3:bc:cc:2a:bf:ef: 02:25:6e:c4:6c:1e:34:13:6c:30:c5:bc:62:b7:ce: 6c:d1:77:29:3c:20:02:6f:46:00:4b:19:74:07:47: 39:83:10:3a:b3:11:4e:f8:a6:e3:2b:79:de:40:5f: 0b:5b:36:7c:48:e4:dd:67:9d:07:1e:09:50:f3:ea: 95:72:b2:dc:51:fd:8c:06:9a:0e:4d:17:31:cc:aa: 63:75:64:8e:c1:79:6f:99:17:13:27:f2:cd:b4:92: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CA:72:C3:D8:53:55:76:65:A6:A5:53:CD:08:EB:E1:81:58:5F:D3 X509v3 Authority Key Identifier: keyid:3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/3A542BE0BC7511EBBB084D27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:2480::/48 Signature Algorithm: sha256WithRSAEncryption 3b:68:df:cb:dc:81:b3:b4:f9:b3:f8:12:31:27:82:ca:77:83: f7:14:68:25:f1:c0:e4:27:6c:1e:b9:e1:0a:a2:1d:30:d1:46: 07:a2:80:8a:b9:d6:ae:73:66:ab:1d:f4:03:d2:10:12:7d:3d: 72:7f:de:3b:38:af:7a:00:f3:12:6e:cd:00:e8:4e:7c:9d:be: 0c:4b:ec:0e:f1:2c:04:f3:11:c8:0f:f7:90:a7:64:a9:ec:6a: 98:34:30:12:18:73:62:22:dd:58:3b:61:80:46:14:5d:c1:99: d2:56:f6:4a:c4:78:da:94:56:45:03:43:b9:18:c9:a9:60:0d: 69:fc:cb:79:2c:2c:04:58:84:3b:02:46:f2:19:7c:94:e2:32: 67:c0:e2:ea:4b:83:b0:36:44:4e:48:f5:7a:d7:97:bf:05:d0: a2:fd:07:f2:e3:13:99:10:e4:be:73:2d:da:5f:20:b4:85:ea: 2f:e6:59:8b:94:fc:af:51:17:24:88:3d:bf:54:fe:d3:a0:cb: 1c:b6:b3:0f:9a:38:f4:d7:44:ca:9d:f0:13:d0:f2:cb:8a:ce: 43:05:15:27:b2:83:ff:04:94:47:c8:04:a6:fa:06:79:87:ed: a0:c0:7b:e9:ab:da:4b:13:c7:aa:7a:79:92:a4:59:48:e0:97: 55:50:7b:17 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDRkMxMTAvBgNVBAUTKDNEMjY1RTQwMTIzMTQzN0E5MTBFQzIxRkU0RUQ0RUUz QjEyNjlDOEQwHhcNMjUwNDI4MjMwMzE4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEwMDkzNS1iNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxfoP9ksWYLukIxTHYx1HuKHEiR0c0h95utSzMrJ+8uYnijsPBm6MrfRphzs bSx9K1YDWV/p8O/de/neLRtGmbbISgF/yPs2P2i0BInk+pJUU/4/1BEF41Eo/Th9 vFZ/bXNAWjFw9xaknk4WtcoEX8jzSOOdWYVVVb7Og7VaLTDLoFspyard3K4yOShq /0wbY03Cl8Ls7O0V9H6ksbnzvMwqv+8CJW7EbB40E2wwxbxit85s0XcpPCACb0YA Sxl0B0c5gxA6sxFO+KbjK3neQF8LWzZ8SOTdZ50HHglQ8+qVcrLcUf2MBpoOTRcx zKpjdWSOwXlvmRcTJ/LNtJI4HwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMHKcsPY U1V2ZaalU80I6+GBWF/TMB8GA1UdIwQYMBaAFD0mXkASMUN6kQ7CH+TtTuOxJpyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNGQy8wRUYzQjM4ODdE M0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEzcVJEc0lmNU8xTzQ3RW1u STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTWmVRQkl4UTNxUkRzSWY1TzFPNDdFbW5JMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZDRkMvMEVGM0IzODg3RDNFMTFFQjlFREY2ODdDQzRGOUFFMDIvM0E1NDJCRTBC Qzc1MTFFQkJCMDg0RDI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ32JIAwDQYJKoZIhvcNAQELBQADggEBADto38vcgbO0 +bP4EjEngsp3g/cUaCXxwOQnbB654QqiHTDRRgeigIq51q5zZqsd9APSEBJ9PXJ/ 3js4r3oA8xJuzQDoTnydvgxL7A7xLATzEcgP95CnZKnsapg0MBIYc2Ii3Vg7YYBG FF3BmdJW9krEeNqUVkUDQ7kYyalgDWn8y3ksLARYhDsCRvIZfJTiMmfA4upLg7A2 RE5I9XrXl78F0KL9B/LjE5kQ5L5zLdpfILSF6i/mWYuU/K9RFySIPb9U/tOgyxy2 sw+aOPTXRMqd8BPQ8suKzkMFFSeyg/8ElEfIBKb6BnmH7aDAe+mr2ksTx6p6eZKk WUjgl1VQexc= -----END CERTIFICATE-----Generated at Sun May 11 19:15:55 2025 by rpki-client