$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/12032AE02EAC11EFB73C0767C4F9AE02.roa File: 12032AE02EAC11EFB73C0767C4F9AE02.roa (raw, json) Hash identifier: NplfmjfBvEPVo22TXfl7ysU80/2MVRwwQvZxXy7GRR8= Subject key identifier: B8:F1:3C:81:08:E2:16:25:9B:23:8F:9C:C2:34:55:D6:5E:2D:3F:70 Certificate issuer: /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76 Certificate serial: A4 Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/12032AE02EAC11EFB73C0767C4F9AE02.roa Signing time: Wed 09 Apr 2025 05:12:38 +0000 ROA not before: Wed 09 Apr 2025 05:12:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 15830 IP address blocks: 2401:9f20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6FF, serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76 Validity Not Before: Apr 9 05:12:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f601c5-d6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:dd:9c:86:93:91:f3:37:34:23:45:14:d8: 74:e9:cb:1e:4b:b5:68:fd:23:e8:73:5b:a2:22:bd: 79:7b:9b:6a:3a:f2:49:de:27:ca:3c:9b:f5:a8:ef: 7d:b7:28:1b:9b:1c:77:a4:f4:e8:24:6e:d9:6f:a0: 34:9c:5c:07:8c:2e:a3:7b:5b:dd:c2:65:68:91:20: 6f:87:b9:54:c9:78:c2:d5:4f:f4:b5:99:5a:2c:4f: d9:09:1b:23:63:c4:15:42:20:d5:70:c1:65:d5:5b: a1:cf:5f:1c:a3:a9:90:da:d6:84:ef:13:0e:80:89: d1:4a:0d:5e:2b:cc:b4:f5:26:8d:09:d2:d6:c5:22: 8a:89:f0:54:db:00:c5:21:bf:8d:f9:7c:1f:e8:ff: 58:ea:9b:7e:a8:49:00:16:c2:72:e8:15:bc:fd:54: 56:32:1d:50:99:fc:94:52:f6:8e:ba:48:2b:b7:b7: 85:04:53:cf:0e:3a:c6:6c:17:e7:3a:c5:ac:49:ec: 01:42:ce:b9:b6:d7:7b:90:de:c0:89:f4:1f:df:1d: fa:12:fe:83:78:f4:03:33:93:c0:3d:c7:a0:60:3c: f4:8a:7b:ed:cb:01:6a:c6:ae:75:28:fe:b3:fc:a4: a1:3c:19:77:16:00:f9:86:be:3f:02:4f:19:1c:38: 15:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F1:3C:81:08:E2:16:25:9B:23:8F:9C:C2:34:55:D6:5E:2D:3F:70 X509v3 Authority Key Identifier: keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/12032AE02EAC11EFB73C0767C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:9f20::/32 Signature Algorithm: sha256WithRSAEncryption a6:09:2e:03:26:0f:3f:a7:43:72:16:40:d9:17:6e:0b:da:4f: 61:a2:63:3a:92:99:52:c7:41:5f:e8:fe:3b:46:f3:97:55:38: a3:1d:22:17:da:96:73:de:f3:4d:44:ee:31:0a:e5:bf:cf:6d: 2d:78:cd:f7:6f:31:14:52:f5:78:28:ce:da:ed:ae:c6:0d:24: 5c:18:73:d6:b9:51:02:6a:99:dd:38:71:6a:89:9a:ad:14:ad: c7:3c:14:e4:db:4b:3f:fe:23:53:6c:56:2e:47:5c:16:ac:a6: 83:05:6f:8b:3c:da:49:c2:86:e4:26:eb:4d:0e:fe:e5:30:d5: 7b:d0:8a:72:64:44:0b:61:95:76:53:c9:8d:5f:5f:f8:71:b5: 7e:55:5e:28:b3:3a:ed:03:f5:bf:89:09:b1:3a:83:3b:e3:f9: 1d:5f:70:1e:f0:d4:da:3d:20:38:cb:b4:05:cc:67:90:6b:45: c9:ba:e3:92:6b:06:c3:4a:ba:3b:91:c3:6e:80:fd:3c:12:73: 20:c9:d5:1c:10:f6:67:5f:71:ab:d3:8e:c5:56:33:91:d8:dc: 65:7d:b7:2f:ee:ef:06:f3:33:9f:01:a7:d3:71:f4:2a:d6:9e: db:89:43:32:f0:a5:89:f4:41:1b:45:a7:43:3e:d0:fa:80:e5: bf:d8:96:22 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2RkYxMTAvBgNVBAUTKENBRTNEQjhBREVFN0ExNkFCNkNBNTM3RjIzNDdCMDIw NUJERjRGNzYwHhcNMjUwNDA5MDUxMjM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y2MDFjNS1kNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQPdnIaTkfM3NCNFFNh06cseS7Vo/SPoc1uiIr15e5tqOvJJ3ifKPJv1qO99 tygbmxx3pPToJG7Zb6A0nFwHjC6je1vdwmVokSBvh7lUyXjC1U/0tZlaLE/ZCRsj Y8QVQiDVcMFl1Vuhz18co6mQ2taE7xMOgInRSg1eK8y09SaNCdLWxSKKifBU2wDF Ib+N+Xwf6P9Y6pt+qEkAFsJy6BW8/VRWMh1QmfyUUvaOukgrt7eFBFPPDjrGbBfn OsWsSewBQs65ttd7kN7AifQf3x36Ev6DePQDM5PAPcegYDz0invtywFqxq51KP6z /KShPBl3FgD5hr4/Ak8ZHDgVKwIDAQABo4ICljCCApIwHQYDVR0OBBYEFLjxPIEI 4hYlmyOPnMI0VdZeLT9wMB8GA1UdIwQYMBaAFMrj24re56FqtspTfyNHsCBb3092 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTZGRi9EMjgxRTczMDJF MjkxMUVGQkFFRDZBMUFDNEY5QUUwMi95dVBiaXQ3bm9XcTJ5bE5fSTBld0lGdmZU M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1UGJpdDdub1dxMnlsTl9JMGV3SUZ2ZlQzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE2RkYvRDI4MUU3MzAyRTI5MTFFRkJBRUQ2QTFBQzRGOUFFMDIvMTIwMzJBRTAy RUFDMTFFRkI3M0MwNzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAZ8gMA0GCSqGSIb3DQEBCwUAA4IBAQCmCS4DJg8/p0Ny FkDZF24L2k9homM6kplSx0Ff6P47RvOXVTijHSIX2pZz3vNNRO4xCuW/z20teM33 bzEUUvV4KM7a7a7GDSRcGHPWuVECapndOHFqiZqtFK3HPBTk20s//iNTbFYuR1wW rKaDBW+LPNpJwobkJutNDv7lMNV70IpyZEQLYZV2U8mNX1/4cbV+VV4oszrtA/W/ iQmxOoM74/kdX3Ae8NTaPSA4y7QFzGeQa0XJuuOSawbDSro7kcNugP08EnMgydUc EPZnX3Gr047FVjOR2Nxlfbcv7u8G8zOfAafTcfQq1p7biUMy8KWJ9EEbRadDPtD6 gOW/2JYi -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:22 2025 by rpki-client on console.sobornost.net