$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/29F2A6202EF711F08A285219C4F9AE02.roa File: 29F2A6202EF711F08A285219C4F9AE02.roa (raw, json) Hash identifier: UkKPKDbs79xP57ZHa6k5ILf6dW2MqCjXbsvbl/lq8hg= Subject key identifier: CC:C2:36:17:8C:71:2B:8C:CF:51:FF:E8:D3:2B:A6:C0:66:36:21:EF Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 0292 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/29F2A6202EF711F08A285219C4F9AE02.roa Signing time: Mon 12 May 2025 06:05:54 +0000 ROA not before: Mon 12 May 2025 06:05:54 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 149981 IP address blocks: 2407:2440:21::/48 maxlen: 48 2407:2440:24::/48 maxlen: 48 2407:2440:26::/48 maxlen: 48 2407:2440:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 06:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: May 12 06:05:54 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=68218fc2-cec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:04:e0:9d:09:c9:d4:9a:69:19:16:fd:65:4d: 77:ee:86:a9:f3:28:a9:6d:60:00:43:0d:55:22:e8: e1:59:e8:52:65:65:79:64:b8:a4:38:ae:59:69:23: f7:28:43:b6:d6:aa:97:08:28:f3:bc:60:29:c5:40: 08:ed:61:b9:eb:b4:7c:82:3d:12:cd:64:88:9a:31: b5:17:55:29:f3:af:92:2d:67:ca:33:b0:14:52:8b: b4:63:b1:71:3d:1d:62:fd:1b:25:60:2b:4a:0b:e0: 9e:91:60:f7:24:4f:0a:9c:c1:4f:03:ef:45:9d:ef: a6:0f:92:22:6a:db:ae:18:e3:20:b7:c7:2c:e8:d9: fa:f8:31:ac:b7:b9:c5:1b:f2:56:e9:f9:6e:0a:0b: ff:97:ea:7d:ea:56:97:6c:7a:4c:7a:b5:2d:e4:dd: b4:42:ce:bc:f6:bb:55:a7:8a:7d:a4:04:19:17:b4: 04:6a:26:4d:74:14:e3:86:f6:f0:b4:91:c5:cc:4c: 4b:64:17:3b:d0:c4:94:12:2f:2d:a6:ea:8b:a6:44: f0:96:f7:6e:dd:5a:78:46:7b:4c:84:f0:b0:45:63: 4f:9a:f1:f1:39:53:07:05:a6:1a:7b:01:34:c2:bf: d9:c7:95:38:eb:07:99:87:96:9e:6c:de:a0:0d:97: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C2:36:17:8C:71:2B:8C:CF:51:FF:E8:D3:2B:A6:C0:66:36:21:EF X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/29F2A6202EF711F08A285219C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:2440:21::/48 2407:2440:24::/48 2407:2440:26::/48 2407:2440:29::/48 Signature Algorithm: sha256WithRSAEncryption 86:07:e9:e0:71:24:d7:ca:62:2f:53:de:99:57:61:06:80:65: af:11:7f:eb:e0:b7:d8:0b:db:90:f8:30:8d:ef:65:83:05:a2: 4f:88:39:0d:fe:3a:30:17:27:0f:ce:17:4e:ea:b6:57:29:10: 82:0f:b7:7b:a1:ea:e2:5e:c4:c8:a3:47:61:58:e9:ba:69:3c: be:ee:91:60:2d:b7:fa:3d:2f:d3:7d:00:e0:b1:fb:05:aa:f0: 88:0c:fd:76:5f:03:b8:de:d6:e5:9b:cf:9a:f5:54:75:22:a2: f2:ea:50:db:34:d7:74:82:32:0b:84:c9:7d:6d:1d:d2:7e:27: 5d:dd:92:71:b0:61:05:e4:1e:94:01:2e:64:4e:b8:09:a5:bf: 90:64:0c:66:d1:63:6c:69:13:93:38:da:61:dc:20:ee:17:e4: 27:db:54:25:9e:ef:27:d2:39:d4:60:77:92:08:62:15:e7:30: c7:5a:c6:13:d7:3a:ee:9d:20:59:99:fb:a2:0b:19:80:d2:67: 7b:09:a4:4e:bb:8a:a7:63:98:92:8e:dc:03:fc:99:d3:88:e6: 79:b1:ca:2c:88:e8:c0:24:c9:16:09:47:43:00:84:0b:5d:7d: b9:d2:30:2d:53:db:ce:f6:ae:e0:a1:0c:3e:e6:1a:a7:8d:df: de:f8:0f:fa -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwNTEyMDYwNTU0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIxOGZjMi1jZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwATgnQnJ1JppGRb9ZU137oap8yipbWAAQw1VIujhWehSZWV5ZLikOK5ZaSP3 KEO21qqXCCjzvGApxUAI7WG567R8gj0SzWSImjG1F1Up86+SLWfKM7AUUou0Y7Fx PR1i/RslYCtKC+CekWD3JE8KnMFPA+9Fne+mD5IiatuuGOMgt8cs6Nn6+DGst7nF G/JW6fluCgv/l+p96laXbHpMerUt5N20Qs689rtVp4p9pAQZF7QEaiZNdBTjhvbw tJHFzExLZBc70MSUEi8tpuqLpkTwlvdu3Vp4RntMhPCwRWNPmvHxOVMHBaYaewE0 wr/Zx5U46weZh5aebN6gDZcbxQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFMzCNheM cSuMz1H/6NMrpsBmNiHvMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIyQjgvM0Y0NENCQUUyRjREMTFFRDhGNUE2QTY0QzRGOUFFMDIvMjlGMkE2MjAy RUY3MTFGMDhBMjg1MjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgACMCQDBwAkByRAACEDBwAkByRAACQDBwAkByRAACYDBwAkByRAACkw DQYJKoZIhvcNAQELBQADggEBAIYH6eBxJNfKYi9T3plXYQaAZa8Rf+vgt9gL25D4 MI3vZYMFok+IOQ3+OjAXJw/OF07qtlcpEIIPt3uh6uJexMijR2FY6bppPL7ukWAt t/o9L9N9AOCx+wWq8IgM/XZfA7je1uWbz5r1VHUiovLqUNs013SCMguEyX1tHdJ+ J13dknGwYQXkHpQBLmROuAmlv5BkDGbRY2xpE5M42mHcIO4X5CfbVCWe7yfSOdRg d5IIYhXnMMdaxhPXOu6dIFmZ+6ILGYDSZ3sJpE67iqdjmJKO3AP8mdOI5nmxyiyI 6MAkyRYJR0MAhAtdfbnSMC1T2872ruChDD7mGqeN3974D/o= -----END CERTIFICATE-----Generated at Sat May 17 02:26:48 2025 by rpki-client