$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa File: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (raw, json) Hash identifier: egr/0pi0LBVzAfSriSf0oLVb0kHzcxRy+vyO59CHJ/Y= Subject key identifier: 3F:CD:82:52:21:A5:E4:0C:9D:9D:90:1B:B5:E5:11:05:96:47:BC:E7 Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 3093 Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa Signing time: Wed 30 Apr 2025 15:52:45 +0000 ROA not before: Wed 30 Apr 2025 15:52:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10103 IP address blocks: 2405:2000:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12435 (0x3093) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Apr 30 15:52:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6812474c-5cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:f9:20:90:bc:5b:1d:d1:64:8c:f4:fc:4d: 36:77:59:7c:e1:9e:41:3a:82:17:71:2d:68:95:ea: b0:22:69:5c:32:12:55:6e:76:f2:36:97:8e:73:10: 37:5a:a2:0c:6f:1c:ec:97:f1:34:25:ac:b6:5e:d0: 48:4b:02:c3:73:68:22:fa:ef:e1:5a:26:13:16:ae: 7c:c1:b7:de:9b:e7:d4:82:96:d6:d4:93:91:90:06: 36:c3:88:ec:d3:74:98:f2:46:91:b6:6b:91:2e:1c: 92:d4:cc:df:94:79:2f:a1:fb:fd:c0:e3:6d:7a:23: 74:fe:d8:6a:af:3f:e7:ec:1e:8b:55:2f:f2:55:5f: 8d:0c:9a:ef:aa:e7:ae:be:0e:c6:8c:eb:6d:5a:5e: 4d:a7:a8:2f:7c:c3:d7:f0:d6:90:14:d3:fc:4f:4f: ac:83:1a:01:bf:b2:e2:b0:55:ba:81:73:86:76:96: 98:84:01:cd:34:89:0d:b5:37:cf:71:2b:a5:a8:f8: 1a:23:2f:91:07:36:4e:aa:fd:ad:78:5c:5f:aa:f3: 23:fb:fa:ba:7f:b1:47:55:5c:2d:6f:b2:7e:71:db: 5a:b1:19:99:eb:c7:01:ca:cf:f9:04:db:b1:59:8e: 50:8d:67:d8:88:81:37:25:37:e5:ae:f6:ec:d4:eb: 1f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CD:82:52:21:A5:E4:0C:9D:9D:90:1B:B5:E5:11:05:96:47:BC:E7 X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:2000:1002::/48 Signature Algorithm: sha256WithRSAEncryption 7c:66:43:92:1a:35:e8:6f:2c:7f:2f:6f:20:5e:a4:e3:8f:e0: 7e:26:84:12:7a:40:e7:e4:e4:e6:86:70:68:3f:a8:04:57:65: 59:39:2c:b6:5c:f1:3c:f5:73:40:26:eb:83:80:21:c7:a0:93: 9e:28:c9:85:6d:8b:c7:87:52:18:d8:06:5f:ce:d3:14:24:d9: e0:42:0d:db:54:78:cb:0a:8b:c5:c9:95:04:b7:a8:c4:e0:34: cf:08:b7:85:ea:d7:a1:8d:aa:cb:b8:8e:5b:5f:c0:9f:e6:f8: fb:95:97:3a:4a:23:04:26:5a:a4:3f:6a:1a:d0:87:9a:bf:7a: ca:67:ca:8e:ef:b8:36:07:de:9a:d1:83:57:b7:bd:fe:33:02: 24:50:13:d9:80:d3:54:9e:39:d9:e1:7c:0f:9b:66:72:f7:c5: 29:d5:86:07:2e:58:c3:2d:f0:f7:c7:09:3d:3a:f3:b6:af:52: 19:2a:4c:84:7b:07:28:bd:4e:ec:e1:17:32:88:10:91:f0:4f: 14:a6:19:b2:00:ee:35:c9:61:e6:d4:c3:f9:08:69:dd:4d:dc: ec:bc:1e:6e:ee:e3:32:6a:79:20:70:b6:cd:78:f2:94:66:6a: 3f:9d:2f:56:db:ee:f9:ea:7f:c9:63:67:ba:81:14:6b:e5:53: 1b:cf:49:66 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICMJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjUwNDMwMTU1MjQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNDc0Yy01Y2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDr5IJC8Wx3RZIz0/E02d1l84Z5BOoIXcS1oleqwImlcMhJVbnbyNpeOcxA3 WqIMbxzsl/E0Jay2XtBISwLDc2gi+u/hWiYTFq58wbfem+fUgpbW1JORkAY2w4js 03SY8kaRtmuRLhyS1MzflHkvofv9wONteiN0/thqrz/n7B6LVS/yVV+NDJrvqueu vg7GjOttWl5Np6gvfMPX8NaQFNP8T0+sgxoBv7LisFW6gXOGdpaYhAHNNIkNtTfP cSulqPgaIy+RBzZOqv2teFxfqvMj+/q6f7FHVVwtb7J+cdtasRmZ68cBys/5BNux WY5QjWfYiIE3JTflrvbs1OsfrwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFD/NglIh peQMnZ2QG7XlEQWWR7znMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTU1QzgvOUNEM0U4RjZGRjU4MTFFMkJCNEIyRTNGNTkxMUVBMzIvNUI1ODQ4NUFC OURDMTFFRUE2QjJEQzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBSAAEAIwDQYJKoZIhvcNAQELBQADggEBAHxmQ5IaNehv LH8vbyBepOOP4H4mhBJ6QOfk5OaGcGg/qARXZVk5LLZc8Tz1c0Am64OAIcegk54o yYVti8eHUhjYBl/O0xQk2eBCDdtUeMsKi8XJlQS3qMTgNM8It4Xq16GNqsu4jltf wJ/m+PuVlzpKIwQmWqQ/ahrQh5q/espnyo7vuDYH3prRg1e3vf4zAiRQE9mA01Se OdnhfA+bZnL3xSnVhgcuWMMt8PfHCT0687avUhkqTIR7Byi9TuzhFzKIEJHwTxSm GbIA7jXJYebUw/kIad1N3Oy8Hm7u4zJqeSBwts148pRmaj+dL1bb7vnqf8ljZ7qB FGvlUxvPSWY= -----END CERTIFICATE-----Generated at Tue May 13 19:09:24 2025 by rpki-client