$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/E17B507E25DF11F0B111A515C4F9AE02.roa File: E17B507E25DF11F0B111A515C4F9AE02.roa (raw, json) Hash identifier: hvgmafeqE7JpAOUh9MIGSNa3kJtd7cqjjE/RR/pff6g= Subject key identifier: BC:48:9D:44:FD:1B:43:9A:31:14:EF:37:4A:F2:D9:F8:E9:78:AD:DC Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Certificate serial: 01D7 Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/E17B507E25DF11F0B111A515C4F9AE02.roa Signing time: Wed 30 Apr 2025 16:26:34 +0000 ROA not before: Wed 30 Apr 2025 16:26:34 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 17433 IP address blocks: 2401:b60:e202::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Validity Not Before: Apr 30 16:26:34 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=68124f3a-845e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:67:01:c1:37:3e:66:d0:88:0e:de:52:f1: 09:5b:52:4f:4e:f4:71:fc:b2:89:6e:1a:ed:d0:4c: fd:53:e7:39:57:a4:0c:41:a5:8b:4b:5f:54:1d:20: a3:a0:23:e1:8e:e1:f1:01:00:8b:b8:9d:17:b2:09: 43:2d:8b:5e:94:22:cc:de:5e:9e:27:69:9d:0c:56: cb:f9:08:5c:4b:84:1f:b9:04:7b:b9:36:e2:e0:2d: 0c:bf:bf:a3:27:0f:d5:68:e3:6f:56:a0:67:91:aa: 48:a2:1e:a3:ab:b6:b1:52:a9:85:8d:56:38:bc:10: e6:5d:d5:c0:4b:92:bc:99:6d:49:82:e7:45:92:d1: 09:a0:1f:94:14:e1:d6:bb:9d:23:aa:0e:cf:a9:ad: c4:03:8e:db:29:4e:83:d5:d3:d0:07:6f:35:dc:c7: 36:12:de:68:8d:94:53:d8:86:d0:c9:17:48:88:8c: 2b:46:72:fa:89:c0:58:5b:4f:ef:6d:dc:ef:22:b8: 23:07:7f:77:b3:84:79:6a:99:12:af:50:8c:d9:8d: 36:b6:28:e6:7d:f5:1c:a9:76:8a:1e:b4:a8:91:97: 95:8e:07:7a:d5:d0:ee:27:0a:ff:77:8c:c6:23:5d: 52:4c:58:b8:d2:50:0e:9b:72:dd:9f:dd:0a:0d:c1: 25:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:48:9D:44:FD:1B:43:9A:31:14:EF:37:4A:F2:D9:F8:E9:78:AD:DC X509v3 Authority Key Identifier: keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/E17B507E25DF11F0B111A515C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b60:e202::/48 Signature Algorithm: sha256WithRSAEncryption 20:0b:3f:2b:82:57:96:1f:03:11:c2:a5:1c:bb:42:d8:f3:f4: 34:bf:68:47:4a:31:fa:58:3b:d2:2d:b8:da:92:91:f8:30:35: 99:ac:86:7b:6c:7f:40:3d:de:44:1a:17:af:08:cb:20:ea:fa: e7:51:57:7e:12:71:5c:ca:27:c1:40:83:be:ed:8b:d1:9c:8f: 6e:31:ca:8b:b2:c1:38:f4:53:e8:89:e4:eb:6b:2c:72:1e:9a: 5f:89:79:61:50:f8:5d:22:c5:34:82:b3:0a:36:9a:9d:ed:26: e7:0c:ee:3e:60:72:85:0e:32:0c:9f:95:aa:af:12:bd:44:69: 71:80:24:19:62:15:4f:08:6b:b5:42:2f:fe:e8:6c:21:ef:58: 7c:f7:15:39:36:63:4e:38:08:c1:b2:f0:f3:8a:86:1e:42:b3: b4:60:7f:97:dd:7f:9f:2f:7f:5a:d9:bf:58:17:7f:89:cd:85: 1a:e6:04:e2:7d:a5:0b:59:e6:68:4b:0a:0c:26:25:99:d7:25: cb:38:d6:1f:52:76:b9:ab:10:f8:13:ea:98:d1:b0:f6:dd:ba: 15:57:1c:fb:68:7b:96:8a:15:ec:e7:e9:ec:cd:6f:97:e8:aa: c3:4b:25:33:83:d8:3b:10:0d:d0:54:f1:ba:33:88:fc:7d:f0: ae:ef:99:04 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0 NTIzOUNDRjQwHhcNMjUwNDMwMTYyNjM0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNGYzYS04NDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbdnAcE3PmbQiA7eUvEJW1JPTvRx/LKJbhrt0Ez9U+c5V6QMQaWLS19UHSCj oCPhjuHxAQCLuJ0XsglDLYtelCLM3l6eJ2mdDFbL+QhcS4QfuQR7uTbi4C0Mv7+j Jw/VaONvVqBnkapIoh6jq7axUqmFjVY4vBDmXdXAS5K8mW1JgudFktEJoB+UFOHW u50jqg7Pqa3EA47bKU6D1dPQB2813Mc2Et5ojZRT2IbQyRdIiIwrRnL6icBYW0/v bdzvIrgjB393s4R5apkSr1CM2Y02tijmffUcqXaKHrSokZeVjgd61dDuJwr/d4zG I11STFi40lAOm3Ldn90KDcEl3QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLxInUT9 G0OaMRTvN0ry2fjpeK3cMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvRTE3QjUwN0Uy NURGMTFGMEIxMTFBNTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAQtg4gIwDQYJKoZIhvcNAQELBQADggEBACALPyuCV5Yf AxHCpRy7Qtjz9DS/aEdKMfpYO9ItuNqSkfgwNZmshntsf0A93kQaF68IyyDq+udR V34ScVzKJ8FAg77ti9Gcj24xyouywTj0U+iJ5OtrLHIeml+JeWFQ+F0ixTSCswo2 mp3tJucM7j5gcoUOMgyflaqvEr1EaXGAJBliFU8Ia7VCL/7obCHvWHz3FTk2Y044 CMGy8POKhh5Cs7Rgf5fdf58vf1rZv1gXf4nNhRrmBOJ9pQtZ5mhLCgwmJZnXJcs4 1h9SdrmrEPgT6pjRsPbduhVXHPtoe5aKFezn6ezNb5foqsNLJTOD2DsQDdBU8boz iPx98K7vmQQ= -----END CERTIFICATE-----Generated at Tue May 13 04:48:14 2025 by rpki-client