$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/CDD43C182FFB11F099B57A7CC4F9AE02.roa File: CDD43C182FFB11F099B57A7CC4F9AE02.roa (raw, json) Hash identifier: oPt/hUSuzgl3vf6IekNSVwLM4HNHGT76iBnF/i7Fi6Q= Subject key identifier: DC:2A:73:EA:3B:BF:52:F7:39:E3:C4:22:79:43:E9:86:E5:D8:B2:D0 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: 80 Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/CDD43C182FFB11F099B57A7CC4F9AE02.roa Signing time: Tue 13 May 2025 13:11:38 +0000 ROA not before: Tue 13 May 2025 13:11:38 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138558 IP address blocks: 2001:df4:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 13:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: May 13 13:11:38 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6823450a-95c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e0:ed:c3:bf:bb:bb:ae:7f:36:7b:6e:b1:ce: b4:00:d2:de:e2:33:45:b7:15:bd:94:94:0b:e1:ff: e9:a0:29:eb:60:54:cb:e6:d3:b7:b1:aa:ed:35:c9: 55:f2:3a:07:fe:06:bc:8a:8b:b5:d8:ee:28:30:ad: 0a:1a:52:13:63:a5:2e:f1:63:55:52:71:4c:63:57: 93:4f:80:6b:b1:15:af:89:83:5e:19:80:ae:a0:ce: 34:66:17:00:da:3c:2c:b8:53:ac:4d:20:ef:37:22: e7:f3:0a:80:0f:a4:e1:4d:47:d3:44:6b:ae:72:69: 3d:73:d8:c9:88:87:36:6b:c6:ed:e5:9a:61:2d:c9: e7:c1:d4:87:88:a0:81:bc:6e:3d:97:dc:0a:91:35: 0d:84:b5:4e:d0:dd:da:72:75:47:0b:d2:2b:71:f3: 55:75:57:39:2a:81:03:47:b9:db:34:55:4a:25:09: 6d:dc:fc:78:8d:e5:cb:12:eb:5e:ed:a8:84:eb:f6: b8:06:53:b3:62:44:ed:e1:df:70:de:31:b7:97:09: 74:ff:4e:1f:83:e1:b1:49:85:01:de:83:d4:b0:ab: 0a:96:42:c0:81:5a:23:9b:f2:b0:72:07:e0:02:7d: 91:89:91:77:a0:ec:cb:ec:0d:4f:a8:b6:29:2b:ef: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2A:73:EA:3B:BF:52:F7:39:E3:C4:22:79:43:E9:86:E5:D8:B2:D0 X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/CDD43C182FFB11F099B57A7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:3440::/48 Signature Algorithm: sha256WithRSAEncryption cd:62:85:76:a1:70:a7:43:94:e1:19:d5:ca:9b:61:d6:92:bf: 5f:89:7f:d1:ac:cb:7d:76:e6:e1:28:89:8c:87:60:25:21:0f: f5:a9:dd:1a:8d:15:16:0f:6b:79:d8:fe:a2:07:ab:22:f9:92: 48:a2:a3:57:01:cc:4c:23:51:a5:92:d8:d7:1b:eb:6b:ac:17: c1:01:f0:bf:98:5e:1a:6a:77:cf:4f:d8:7e:58:c6:65:af:7d: 39:08:7d:d4:39:3d:55:f7:2d:b7:5e:7c:93:c3:48:df:2d:bf: d6:f3:2a:6b:fc:45:28:e6:71:3e:49:de:8f:b3:cf:c9:e5:fc: 33:84:d5:6d:23:a8:b0:34:5b:61:c4:d4:6d:6b:af:9c:f2:8a: 50:8a:fa:b6:00:cd:44:31:b5:c9:38:e0:6c:df:b4:af:a7:29: fc:17:36:d4:38:06:6c:8d:be:5e:01:b4:46:60:ed:4f:62:d8: bd:55:c1:76:dd:9c:be:08:9d:3d:5b:83:00:8d:fd:6d:c1:91: 77:01:eb:8e:f9:b8:57:ec:2e:d3:e0:f2:ed:ab:df:6c:15:bf: 04:0a:94:de:22:03:37:3e:3e:02:42:65:ff:20:bc:70:1d:e2: c1:28:5a:50:f0:2e:49:f5:1f:f6:54:72:35:54:ee:5c:e9:61: ba:22:49:cb -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjUwNTEzMTMxMTM4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIzNDUwYS05NWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+Dtw7+7u65/Nntusc60ANLe4jNFtxW9lJQL4f/poCnrYFTL5tO3sartNclV 8joH/ga8iou12O4oMK0KGlITY6Uu8WNVUnFMY1eTT4BrsRWviYNeGYCuoM40ZhcA 2jwsuFOsTSDvNyLn8wqAD6ThTUfTRGuucmk9c9jJiIc2a8bt5ZphLcnnwdSHiKCB vG49l9wKkTUNhLVO0N3acnVHC9IrcfNVdVc5KoEDR7nbNFVKJQlt3Px4jeXLEute 7aiE6/a4BlOzYkTt4d9w3jG3lwl0/04fg+GxSYUB3oPUsKsKlkLAgVojm/Kwcgfg An2RiZF3oOzL7A1PqLYpK+9EzwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNwqc+o7 v1L3OePEInlD6Ybl2LLQMB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5RDkvRjU2MDM3QTY2RjVDMTFFRjgzNUE3QjY2QzRGOUFFMDIvQ0RENDNDMTgy RkZCMTFGMDk5QjU3QTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30NEAwDQYJKoZIhvcNAQELBQADggEBAM1ihXahcKdD lOEZ1cqbYdaSv1+Jf9Gsy3125uEoiYyHYCUhD/Wp3RqNFRYPa3nY/qIHqyL5kkii o1cBzEwjUaWS2Ncb62usF8EB8L+YXhpqd89P2H5YxmWvfTkIfdQ5PVX3LbdefJPD SN8tv9bzKmv8RSjmcT5J3o+zz8nl/DOE1W0jqLA0W2HE1G1rr5zyilCK+rYAzUQx tck44GzftK+nKfwXNtQ4BmyNvl4BtEZg7U9i2L1VwXbdnL4InT1bgwCN/W3BkXcB 6475uFfsLtPg8u2r32wVvwQKlN4iAzc+PgJCZf8gvHAd4sEoWlDwLkn1H/ZUcjVU 7lzpYboiScs= -----END CERTIFICATE-----Generated at Wed May 14 19:28:16 2025 by rpki-client