$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/BA4C0E94330911F08D233546C4F9AE02.roa File: BA4C0E94330911F08D233546C4F9AE02.roa (raw, json) Hash identifier: dP93uYFjOQGVmzTzM0xXMIjOeOKOZofW9HJX5/7YBks= Subject key identifier: FA:79:A9:06:5D:16:17:7B:31:43:CF:B3:82:68:E8:1D:EC:FC:0B:07 Certificate issuer: /CN=A914B462/serialNumber=B1A7B4E49FCF15F0C500B89C917F26647250F0AE Certificate serial: 03 Authority key identifier: B1:A7:B4:E4:9F:CF:15:F0:C5:00:B8:9C:91:7F:26:64:72:50:F0:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/BA4C0E94330911F08D233546C4F9AE02.roa Signing time: Sat 17 May 2025 10:28:52 +0000 ROA not before: Sat 17 May 2025 10:28:52 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 153894 IP address blocks: 2001:df5:8c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.crl rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B462, serialNumber=B1A7B4E49FCF15F0C500B89C917F26647250F0AE Validity Not Before: May 17 10:28:52 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=682864e4-0792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:7f:3f:75:11:82:7f:11:3d:97:3e:23:0e: a9:5a:16:f3:79:a9:78:6e:65:72:3c:eb:57:0e:74: ee:e5:f9:f0:3f:30:08:a4:05:56:64:f5:d5:4e:40: bc:5b:63:1e:da:4b:62:7e:bc:49:5f:a1:28:78:ee: bb:c2:09:a6:77:24:50:8c:59:2f:73:f5:df:bc:2b: b4:12:e8:ba:42:a2:1a:e4:d5:03:ad:61:a1:31:af: 5b:8e:57:4a:7e:90:90:59:50:c6:bf:2d:de:a2:d8: f8:5a:be:52:c7:29:1b:3c:79:15:8a:6c:3d:00:8a: af:e3:4b:02:31:3d:86:ed:a8:4d:17:3b:e7:c9:b6: 5b:8b:9f:4d:4d:5d:b5:ec:4b:0c:1b:7c:f1:a5:15: bb:52:66:ab:fc:90:dd:e7:be:07:d9:05:44:f5:7f: 1e:51:31:ef:1d:6c:00:aa:8e:a8:7c:6d:f1:0d:06: e7:a6:66:14:d3:06:f0:58:7e:98:61:02:51:c9:f8: 3d:d4:25:84:61:03:ce:57:27:bc:03:13:34:4f:68: 78:5a:c8:66:98:1c:de:87:03:24:db:f1:15:f9:ea: 6b:96:7a:c9:a7:19:2c:4a:19:da:3e:6b:eb:d0:f0: 6c:b5:03:72:d1:35:88:e7:e1:a3:14:71:9d:dd:99: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:79:A9:06:5D:16:17:7B:31:43:CF:B3:82:68:E8:1D:EC:FC:0B:07 X509v3 Authority Key Identifier: keyid:B1:A7:B4:E4:9F:CF:15:F0:C5:00:B8:9C:91:7F:26:64:72:50:F0:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/BA4C0E94330911F08D233546C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df5:8c40::/48 Signature Algorithm: sha256WithRSAEncryption 72:6a:33:49:41:25:b2:82:1c:21:8c:d6:52:a1:46:6a:ea:96: 53:1d:0d:02:c7:80:88:7d:1f:6c:90:47:9d:a6:2b:53:ef:22: 8a:61:d7:39:21:e1:7f:79:18:b0:28:73:43:a1:d0:c6:e7:01: f5:24:d6:46:11:fa:5b:db:b5:57:b6:39:f1:94:bb:72:02:16: 7c:56:f8:06:5b:41:a9:a3:85:99:2e:36:07:12:62:1e:3f:ff: db:62:30:1e:bd:9b:8d:cd:63:8b:29:40:f0:fa:ac:c8:f5:5e: 3b:91:36:74:ba:16:3e:78:f0:09:8f:f1:4b:e0:f5:80:5b:b9: 0d:30:da:8b:92:95:5e:79:b4:8b:ea:29:18:33:bc:f2:20:3f: 57:55:66:ff:f6:85:6b:9e:f7:43:ce:59:87:f8:63:aa:2f:e6: 30:97:ef:f5:3a:fa:75:2d:16:b0:05:1f:26:76:25:ee:71:63: cb:e9:55:e5:60:e7:05:b3:16:67:47:7f:43:56:09:ea:a3:d3: bc:e5:ac:2a:ae:65:fa:86:2e:db:f0:0b:75:98:27:4d:18:c0: 3f:d9:80:fb:81:7f:9f:62:d3:14:18:6c:77:18:5a:5b:9a:8b: ce:b8:62:8c:9d:5d:a3:d1:c4:9b:b1:fa:45:c3:b5:0a:17:a1: e1:90:fb:3f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ2MjExMC8GA1UEBRMoQjFBN0I0RTQ5RkNGMTVGMEM1MDBCODlDOTE3RjI2NjQ3 MjUwRjBBRTAeFw0yNTA1MTcxMDI4NTJaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4Mjg2NGU0LTA3OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl0X8/dRGCfxE9lz4jDqlaFvN5qXhuZXI861cOdO7l+fA/MAikBVZk9dVOQLxb Yx7aS2J+vElfoSh47rvCCaZ3JFCMWS9z9d+8K7QS6LpCohrk1QOtYaExr1uOV0p+ kJBZUMa/Ld6i2PhavlLHKRs8eRWKbD0Aiq/jSwIxPYbtqE0XO+fJtluLn01NXbXs SwwbfPGlFbtSZqv8kN3nvgfZBUT1fx5RMe8dbACqjqh8bfENBuemZhTTBvBYfphh AlHJ+D3UJYRhA85XJ7wDEzRPaHhayGaYHN6HAyTb8RX56muWesmnGSxKGdo+a+vQ 8Gy1A3LRNYjn4aMUcZ3dmbZjAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQU+nmpBl0W F3sxQ8+zgmjoHez8CwcwHwYDVR0jBBgwFoAUsae05J/PFfDFALickX8mZHJQ8K4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDYyL0FBQkU2RjYyMzJG RjExRjA4NTlCNUEyREM0RjlBRTAyL3NhZTA1Sl9QRmZERkFMaWNrWDhtWkhKUThL NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2FlMDVKX1BGZkRGQUxpY2tYOG1aSEpROEs0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2Mi9BQUJFNkY2MjMyRkYxMUYwODU5QjVBMkRDNEY5QUUwMi9CQTRDMEU5NDMz MDkxMUYwOEQyMzM1NDZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfWMQDANBgkqhkiG9w0BAQsFAAOCAQEAcmozSUElsoIc IYzWUqFGauqWUx0NAseAiH0fbJBHnaYrU+8iimHXOSHhf3kYsChzQ6HQxucB9STW RhH6W9u1V7Y58ZS7cgIWfFb4BltBqaOFmS42BxJiHj//22IwHr2bjc1jiylA8Pqs yPVeO5E2dLoWPnjwCY/xS+D1gFu5DTDai5KVXnm0i+opGDO88iA/V1Vm//aFa573 Q85Zh/hjqi/mMJfv9Tr6dS0WsAUfJnYl7nFjy+lV5WDnBbMWZ0d/Q1YJ6qPTvOWs Kq5l+oYu2/ALdZgnTRjAP9mA+4F/n2LTFBhsdxhaW5qLzrhijJ1do9HEm7H6RcO1 Cheh4ZD7Pw== -----END CERTIFICATE-----Generated at Mon Jun 30 12:38:15 2025 by rpki-client