$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/0A7E4D02D56B11EF8DC4E152C4F9AE02.roa File: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (raw, json) Hash identifier: yAY/Xp66VBMbd2Lc5/zcmj9DVNGz6j22BacFuet4uZ8= Subject key identifier: 09:5B:4C:3B:88:94:8D:4A:86:18:72:81:91:38:49:0F:D3:2C:29:78 Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B Certificate serial: 02EC Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/0A7E4D02D56B11EF8DC4E152C4F9AE02.roa Signing time: Sat 18 Jan 2025 07:08:38 +0000 ROA not before: Sat 18 Jan 2025 07:08:38 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153494 IP address blocks: 45.123.196.0/22 maxlen: 24 103.192.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B Validity Not Before: Jan 18 07:08:38 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=678b5376-066d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:1e:ba:da:d9:86:f6:bf:d6:3d:0a:66:c8: a9:de:20:da:89:43:4b:8f:df:b6:ca:32:af:4f:e6: 27:65:14:8c:1a:ab:15:00:26:8a:9a:ab:8b:4d:f1: 9c:12:6f:7c:a0:e2:98:e7:5d:8e:fe:01:27:98:1c: 7d:51:9b:45:9a:fd:7b:ac:81:5c:7f:d5:98:b5:dd: d7:3c:5a:5d:62:90:46:59:fd:85:dd:c5:49:6e:fb: 39:9f:3e:3e:5d:79:b4:8e:04:a6:02:41:ff:76:12: 5c:7c:22:f7:ea:6c:ff:c7:48:0c:dd:ba:a3:03:f6: f6:f8:96:10:ed:07:68:f6:ad:ec:bd:02:e3:a0:34: bd:5d:03:09:7b:62:c8:27:51:c5:7f:71:d5:53:29: 63:ec:ff:2a:53:89:42:a4:82:a6:e0:b9:28:43:4e: 1b:94:48:45:8e:3e:93:62:bf:1f:9a:98:ee:ca:57: 9b:f1:27:60:71:33:39:39:b4:9b:02:0a:45:17:f3: 0c:f4:92:f6:0e:61:5c:8b:3c:98:c4:be:1a:bf:8c: 8d:02:67:59:1e:74:4b:0d:81:f2:ae:ad:db:c7:db: 10:7f:0d:0e:46:64:b9:e9:03:bf:df:cb:1e:75:fe: c0:08:30:7f:6d:da:ad:13:f9:06:48:da:9b:d0:7d: d7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5B:4C:3B:88:94:8D:4A:86:18:72:81:91:38:49:0F:D3:2C:29:78 X509v3 Authority Key Identifier: keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/0A7E4D02D56B11EF8DC4E152C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.123.196.0/22 103.192.40.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:e8:86:96:76:ca:bb:98:13:a5:c2:36:22:95:91:83:f0:e0: 93:bd:3c:2c:1a:04:61:15:a3:37:43:fa:49:95:00:81:75:8c: ee:f3:1d:7b:d2:7e:1e:87:b3:91:ab:b8:6d:22:5e:bc:54:9d: 6f:3e:a0:5a:70:29:59:f8:25:db:c2:99:ff:a5:a5:00:17:6c: b5:73:f6:af:dd:0a:86:fa:18:8e:40:bd:8e:90:3f:9e:8a:04: 70:cb:f7:59:01:5e:b6:26:2d:1e:5c:0c:eb:16:57:6d:f6:49: f6:32:7b:f7:84:a0:ec:1c:c3:6f:34:a6:46:25:ce:55:8a:c5: ab:63:11:b7:75:96:b3:20:ea:87:a2:9c:db:b0:74:0b:5c:e6: a6:bf:14:f2:6e:d7:83:19:cb:47:95:ce:d7:bf:2f:88:23:a0: ed:b9:9c:7a:2b:00:14:d3:10:06:5d:e7:4f:2d:2e:40:b0:60: a4:3b:34:2d:d4:3b:a4:c8:5f:6a:74:8b:23:25:c8:be:86:8f: 5a:08:d0:91:54:e5:c7:21:37:3b:ee:34:39:1b:62:14:a4:31: 84:3a:52:25:b6:3d:95:af:56:30:59:78:e2:d4:e0:cd:df:58: 5b:6a:c0:29:96:9f:82:fb:dd:d0:48:20:5c:c7:6c:f4:17:d2: ac:ac:b5:e9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRjkxMTAvBgNVBAUTKDc0OTg4ODE4MTY1NTI0MjM3MkM0RTBBMTBFMDYzNzk5 Qjg3MERFMUIwHhcNMjUwMTE4MDcwODM4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhiNTM3Ni0wNjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+IeutrZhva/1j0KZsip3iDaiUNLj9+2yjKvT+YnZRSMGqsVACaKmquLTfGc Em98oOKY512O/gEnmBx9UZtFmv17rIFcf9WYtd3XPFpdYpBGWf2F3cVJbvs5nz4+ XXm0jgSmAkH/dhJcfCL36mz/x0gM3bqjA/b2+JYQ7Qdo9q3svQLjoDS9XQMJe2LI J1HFf3HVUylj7P8qU4lCpIKm4LkoQ04blEhFjj6TYr8fmpjuyleb8SdgcTM5ObSb AgpFF/MM9JL2DmFcizyYxL4av4yNAmdZHnRLDYHyrq3bx9sQfw0ORmS56QO/38se df7ACDB/bdqtE/kGSNqb0H3XzQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAlbTDuI lI1KhhhygZE4SQ/TLCl4MB8GA1UdIwQYMBaAFHSYiBgWVSQjcsTgoQ4GN5m4cN4b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNGOS8xQ0Y1OTc0NkM2 QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpDTnl4T0NoRGdZM21iaHcz aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKaUlHQlpWSkNOeXhPQ2hEZ1kzbWJodzNocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjczRjkvMUNGNTk3NDZDNkJGMTFFQzgzNjQ5NDIwQzRGOUFFMDIvMEE3RTREMDJE NTZCMTFFRjhEQzRFMTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIte8QDBAJnwCgwDQYJKoZIhvcNAQELBQADggEBAHrohpZ2 yruYE6XCNiKVkYPw4JO9PCwaBGEVozdD+kmVAIF1jO7zHXvSfh6Hs5GruG0iXrxU nW8+oFpwKVn4JdvCmf+lpQAXbLVz9q/dCob6GI5AvY6QP56KBHDL91kBXrYmLR5c DOsWV232SfYye/eEoOwcw280pkYlzlWKxatjEbd1lrMg6oeinNuwdAtc5qa/FPJu 14MZy0eVzte/L4gjoO25nHorABTTEAZd508tLkCwYKQ7NC3UO6TIX2p0iyMlyL6G j1oI0JFU5cchNzvuNDkbYhSkMYQ6UiW2PZWvVjBZeOLU4M3fWFtqwCmWn4L73dBI IFzHbPQX0qystek= -----END CERTIFICATE-----Generated at Sat Apr 26 14:16:19 2025 by rpki-client