$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/13C972682B8011F09A62D245C4F9AE02.roa File: 13C972682B8011F09A62D245C4F9AE02.roa (raw, json) Hash identifier: a2k2kkecct4az0mOheVVqOWING4MkGl+Pvuv0azxsmk= Subject key identifier: B5:A8:1D:FF:CE:7F:87:C7:AC:15:1F:62:BE:75:12:AE:DD:56:80:90 Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 01CE Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/13C972682B8011F09A62D245C4F9AE02.roa Signing time: Wed 07 May 2025 20:15:54 +0000 ROA not before: Wed 07 May 2025 20:15:54 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 141780 IP address blocks: 2001:df6:3480::/47 maxlen: 47 2001:df6:3480::/48 maxlen: 48 2001:df6:3481::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Validity Not Before: May 7 20:15:54 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=681bbf79-b56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b3:46:30:c2:79:d5:64:8a:f8:d7:be:f4:a4: d0:9c:20:68:b4:8a:15:6b:89:36:54:e0:8d:1c:11: b5:0f:ab:b6:da:a0:a4:2d:25:04:8d:83:12:e8:44: eb:3c:5f:9e:00:5e:02:9c:34:cb:3a:6e:9c:7a:09: ad:58:b2:d9:8e:74:5a:9e:c9:b4:b6:d9:57:7a:99: 56:d9:17:8c:ad:99:e1:ee:d9:2a:fa:49:8d:38:cd: 16:10:d1:15:53:3b:19:04:f1:dc:89:2e:bd:1e:1c: be:31:cf:d8:7f:db:8c:5a:34:a7:fb:17:f0:6f:25: 90:3f:74:01:80:e1:0e:2e:87:76:3b:f7:db:0e:42: e8:39:fb:e6:44:e8:37:16:da:e4:f0:46:3d:36:b3: 67:e5:10:98:4a:39:64:07:09:20:76:90:ae:6d:89: 08:e8:05:e6:6f:7c:3e:cb:e2:77:67:83:88:32:6e: 46:62:2d:be:4a:fe:d9:ba:07:4a:f7:38:69:0f:69: 86:3e:8c:07:8d:ec:88:80:0a:d5:c6:4b:5b:cc:f5: 6c:70:03:1a:5c:9a:65:b7:e7:df:41:53:26:7b:ab: 9e:68:01:24:b2:a0:63:b3:1a:53:ec:24:0c:a3:ba: b9:31:54:1f:6e:4d:40:98:3d:06:f9:b8:c0:d7:3d: 39:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A8:1D:FF:CE:7F:87:C7:AC:15:1F:62:BE:75:12:AE:DD:56:80:90 X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/13C972682B8011F09A62D245C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:3480::/47 Signature Algorithm: sha256WithRSAEncryption 2d:a7:fb:a8:14:82:12:30:59:fb:af:76:e6:7b:b8:24:32:0d: d0:5e:c2:a1:e6:77:3d:ac:f8:f4:c2:6f:cc:a5:cd:9d:7b:71: 75:da:8c:b8:c7:37:e0:53:67:8d:58:75:59:93:a1:d4:6e:6b: 18:86:22:a7:c8:b2:31:38:09:38:0b:27:ee:c2:1b:e0:f9:1e: 17:66:cb:af:e7:a7:a7:07:fe:36:7d:a0:dc:8c:f1:28:51:7a: 3a:d7:c8:ed:a6:c5:88:ef:7c:d4:8d:37:76:4c:4f:12:8e:36: 22:f4:4a:b8:1f:5b:d3:c1:0d:0d:c8:bd:b2:d7:8a:7e:ff:7e: 70:91:d5:95:9f:62:58:ae:ad:57:d5:de:36:12:dc:f1:39:ae: af:45:8f:75:6a:99:4b:55:58:f3:02:56:7b:18:df:a2:7c:d9: f3:ce:b6:d5:65:ea:31:16:76:e3:32:11:7f:4a:2e:88:b0:07: 4a:20:d7:6b:bb:48:5a:d2:5f:02:9f:29:88:12:b6:70:7d:5e: 50:95:69:ed:ac:87:19:17:c3:bf:fa:e1:71:34:8a:32:b9:e0: 2d:1a:84:df:ea:81:74:93:52:0c:74:f6:b9:15:ed:6c:5f:03: 41:dc:19:31:b6:c8:53:89:af:9c:79:e1:65:f7:62:18:e3:b0: 59:b6:e8:39 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjUwNTA3MjAxNTU0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODFiYmY3OS1iNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkrNGMMJ51WSK+Ne+9KTQnCBotIoVa4k2VOCNHBG1D6u22qCkLSUEjYMS6ETr PF+eAF4CnDTLOm6cegmtWLLZjnRansm0ttlXeplW2ReMrZnh7tkq+kmNOM0WENEV UzsZBPHciS69Hhy+Mc/Yf9uMWjSn+xfwbyWQP3QBgOEOLod2O/fbDkLoOfvmROg3 Ftrk8EY9NrNn5RCYSjlkBwkgdpCubYkI6AXmb3w+y+J3Z4OIMm5GYi2+Sv7ZugdK 9zhpD2mGPowHjeyIgArVxktbzPVscAMaXJplt+ffQVMme6ueaAEksqBjsxpT7CQM o7q5MVQfbk1AmD0G+bjA1z058wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLWoHf/O f4fHrBUfYr51Eq7dVoCQMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE5QkMvQkUyQ0VGRjBCM0FBMTFFREFGMzE2MjNGQzRGOUFFMDIvMTNDOTcyNjgy QjgwMTFGMDlBNjJEMjQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEgAQ32NIAwDQYJKoZIhvcNAQELBQADggEBAC2n+6gUghIw WfuvduZ7uCQyDdBewqHmdz2s+PTCb8ylzZ17cXXajLjHN+BTZ41YdVmTodRuaxiG IqfIsjE4CTgLJ+7CG+D5Hhdmy6/np6cH/jZ9oNyM8ShRejrXyO2mxYjvfNSNN3ZM TxKONiL0SrgfW9PBDQ3IvbLXin7/fnCR1ZWfYliurVfV3jYS3PE5rq9Fj3VqmUtV WPMCVnsY36J82fPOttVl6jEWduMyEX9KLoiwB0og12u7SFrSXwKfKYgStnB9XlCV ae2shxkXw7/64XE0ijK54C0ahN/qgXSTUgx09rkV7WxfA0HcGTG2yFOJr5x54WX3 YhjjsFm26Dk= -----END CERTIFICATE-----Generated at Wed May 14 21:06:16 2025 by rpki-client