$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/43E73F1824D011F0805C1741C4F9AE02.roa File: 43E73F1824D011F0805C1741C4F9AE02.roa (raw, json) Hash identifier: tNRSiapsZeWkhtpGA+SHpuAF0dORUNQbpmMkQLwDzaU= Subject key identifier: 33:A2:5D:43:C1:4F:EB:1A:68:74:44:8D:E5:C3:14:6D:7E:6D:61:C6 Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Certificate serial: 01D5 Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/43E73F1824D011F0805C1741C4F9AE02.roa Signing time: Tue 29 Apr 2025 08:02:16 +0000 ROA not before: Tue 29 Apr 2025 08:02:16 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 3144 IP address blocks: 2401:b60:3144::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Validity Not Before: Apr 29 08:02:16 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=68108788-279a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b7:8b:f2:e7:44:f2:56:37:cc:17:5f:ed:ad: b9:60:73:49:e2:f8:dd:80:37:9a:da:81:d5:04:4e: 40:ea:55:88:a8:8b:6e:18:42:a6:40:a5:5d:b1:c0: 8a:01:63:c5:d7:ef:54:1b:19:2f:06:27:9b:3c:42: 6b:45:57:d2:a1:67:bb:d5:25:8f:d9:30:1e:85:33: e8:6d:a6:0e:73:60:e2:c1:36:59:7d:5a:2f:46:ad: e4:67:c9:3a:65:b0:9c:2a:bd:88:4b:29:bc:49:8f: d1:1f:c3:24:e8:98:08:ef:c2:9c:59:b6:bf:f1:9b: eb:fe:7d:c9:92:39:9d:63:41:59:b6:a0:10:a7:7c: 2d:5a:3f:59:1c:fe:28:9e:2d:93:f5:ef:81:0b:3e: c7:f8:d1:15:31:97:97:10:47:80:b9:a3:aa:3e:91: 6b:7a:8c:b7:53:69:aa:86:2b:c3:01:97:7c:13:54: 28:63:81:5d:52:d5:9f:84:f0:38:7f:42:4a:03:f6: b9:54:23:5e:0b:cb:18:12:d1:ac:85:db:04:55:99: cf:7b:5c:c6:1e:ef:fd:2e:cc:3f:01:d0:07:e5:6f: e8:83:9f:cd:1a:cf:4d:80:39:96:44:94:34:84:c0: bd:85:5d:f6:e8:a2:7f:0d:29:a1:33:95:15:f7:a3: b9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A2:5D:43:C1:4F:EB:1A:68:74:44:8D:E5:C3:14:6D:7E:6D:61:C6 X509v3 Authority Key Identifier: keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/43E73F1824D011F0805C1741C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b60:3144::/48 Signature Algorithm: sha256WithRSAEncryption 39:40:ad:16:b5:5c:e0:92:7e:6d:78:d3:93:b3:80:4e:e6:8d: 5a:dd:ec:d9:8d:9b:b2:7e:89:2a:05:37:7e:09:7a:b7:23:71: 27:ce:8d:85:bb:00:fc:9a:15:6c:08:d0:57:d0:6b:9e:90:50: b3:80:7b:2a:e0:1a:47:06:27:29:22:a4:d2:2c:01:17:ee:37: 30:24:c9:0c:43:de:25:18:40:44:f2:e8:ee:3a:3a:eb:e5:4c: ee:09:73:c6:c6:3e:41:fd:83:78:07:b7:b5:6b:35:6b:cf:19: 28:bc:2d:8f:73:0d:46:6c:b2:ef:eb:b1:36:50:29:43:8d:0d: c7:30:15:38:19:6a:9b:2e:7f:3d:af:a8:c5:ce:7e:ce:b0:58: c5:da:bf:63:07:5f:56:d8:c2:1c:86:d9:89:51:f7:2d:d7:cb: 06:69:13:82:8c:68:9e:4c:e7:f4:42:9e:d8:e9:3a:8a:d7:05: 98:7f:ba:37:cc:0e:28:b4:aa:bc:49:3e:65:99:3f:c3:ab:8a: 6a:01:e6:15:32:75:55:9b:d5:9f:77:05:fe:6f:82:01:a2:2e: 32:d3:26:78:2d:e6:3b:43:b3:3d:cd:9a:49:ef:08:5e:bb:32: fa:97:01:df:71:ab:4a:b1:e9:c4:57:a6:79:95:dd:fd:96:58: 34:f8:99:65 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0 NTIzOUNDRjQwHhcNMjUwNDI5MDgwMjE2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEwODc4OC0yNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1beL8udE8lY3zBdf7a25YHNJ4vjdgDea2oHVBE5A6lWIqItuGEKmQKVdscCK AWPF1+9UGxkvBiebPEJrRVfSoWe71SWP2TAehTPobaYOc2DiwTZZfVovRq3kZ8k6 ZbCcKr2ISym8SY/RH8Mk6JgI78KcWba/8Zvr/n3JkjmdY0FZtqAQp3wtWj9ZHP4o ni2T9e+BCz7H+NEVMZeXEEeAuaOqPpFreoy3U2mqhivDAZd8E1QoY4FdUtWfhPA4 f0JKA/a5VCNeC8sYEtGshdsEVZnPe1zGHu/9Lsw/AdAH5W/og5/NGs9NgDmWRJQ0 hMC9hV326KJ/DSmhM5UV96O5vwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDOiXUPB T+saaHREjeXDFG1+bWHGMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvNDNFNzNGMTgy NEQwMTFGMDgwNUMxNzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAQtgMUQwDQYJKoZIhvcNAQELBQADggEBADlArRa1XOCS fm1405OzgE7mjVrd7NmNm7J+iSoFN34JercjcSfOjYW7APyaFWwI0FfQa56QULOA eyrgGkcGJykipNIsARfuNzAkyQxD3iUYQETy6O46OuvlTO4Jc8bGPkH9g3gHt7Vr NWvPGSi8LY9zDUZssu/rsTZQKUONDccwFTgZapsufz2vqMXOfs6wWMXav2MHX1bY whyG2YlR9y3XywZpE4KMaJ5M5/RCntjpOorXBZh/ujfMDii0qrxJPmWZP8OrimoB 5hUydVWb1Z93Bf5vggGiLjLTJngt5jtDsz3NmknvCF67MvqXAd9xq0qx6cRXpnmV 3f2WWDT4mWU= -----END CERTIFICATE-----Generated at Mon May 12 22:25:45 2025 by rpki-client