$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F1D9CD5E099A11EAB5891D5BC4F9AE02.roa File: F1D9CD5E099A11EAB5891D5BC4F9AE02.roa (raw, json) Hash identifier: a8AgtCob340nx8yuXL+f5RfLTroT5sWQn5L8IBvoNJc= Subject key identifier: 0E:98:EE:7A:07:C3:14:28:81:76:57:56:1D:C8:17:25:7E:B9:28:44 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 0F7F Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F1D9CD5E099A11EAB5891D5BC4F9AE02.roa Signing time: Fri 28 Feb 2025 19:29:57 +0000 ROA not before: Fri 28 Feb 2025 19:29:57 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 397225 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3967 (0xf7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Feb 28 19:29:57 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c20eb5-076a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:39:5f:bb:a8:7d:98:20:79:0f:8f:dd:3c: 05:ee:f9:0a:03:ab:f1:42:c2:38:a8:af:09:62:25: 51:34:51:a0:1a:08:9d:c1:f0:7f:39:84:ee:70:4c: 3d:aa:ca:f9:69:36:70:1f:ef:9a:34:85:69:65:97: 8c:21:a5:37:1e:b2:29:0c:62:b2:e3:94:0a:05:f5: eb:70:5c:70:3e:51:e0:0c:93:ba:7f:19:fb:a9:9f: 4c:88:9d:51:69:db:40:2b:1a:63:e2:a2:b5:4b:e3: b4:a9:38:c4:f1:56:e8:de:c4:e0:65:b2:31:db:b1: 9d:78:d5:ae:95:57:68:8b:6a:75:d4:03:5f:9a:a2: c9:4e:50:8d:49:0f:9c:f1:b2:88:05:b7:15:b2:a8: 9c:d2:98:16:9c:9d:87:54:13:c2:5e:d1:0f:a4:3d: ec:2b:ea:23:99:76:7c:70:5f:48:42:9f:4f:f9:e2: 66:3d:4c:76:b7:9c:fa:bc:f1:92:aa:8b:b6:00:58: 14:78:7c:65:e4:82:29:58:29:46:21:c5:c6:be:00: e9:c9:85:b9:f4:76:86:d9:bd:a1:e1:8a:0e:f3:5c: 1b:ee:eb:cf:14:83:a6:4d:c4:e5:e8:c7:36:1a:59: 10:c0:0c:30:01:ce:56:03:ac:61:e6:04:ae:94:10: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:98:EE:7A:07:C3:14:28:81:76:57:56:1D:C8:17:25:7E:B9:28:44 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F1D9CD5E099A11EAB5891D5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 1a:da:f5:b6:9a:1a:3b:1d:9a:34:da:f7:7b:ae:16:66:13:ef: ea:9a:ca:9a:f7:ed:aa:c6:01:8a:63:f2:9a:7f:8a:38:4c:39: c5:90:67:2d:45:cd:68:5f:5e:5b:e2:f6:4f:4d:aa:33:0b:a5: 81:29:bb:7d:72:e5:c7:ee:23:e8:fd:2d:06:e0:9c:73:29:ca: 35:31:52:6a:fa:14:b7:23:09:80:ee:dd:6f:ef:5d:a1:09:99: 89:76:6f:9c:57:69:85:f9:61:38:bf:6a:43:e0:11:d2:b7:b2: 8b:fa:e6:0a:dd:21:e7:77:0d:80:66:f6:e5:6b:33:a8:79:1b: 9c:45:12:8c:65:43:24:93:de:9f:38:ee:84:e0:c4:eb:4c:5c: b5:c2:fb:be:35:43:8a:a7:fb:40:68:00:fc:96:07:02:cc:9a: 90:c6:fc:d6:0b:79:d9:fd:08:f1:36:f0:d4:2f:29:47:ae:89: 02:96:06:20:7f:23:0f:8d:99:59:1d:a2:0b:a9:aa:79:1c:b4: 02:37:dd:d4:c3:7e:24:79:2c:47:c4:79:e6:80:7b:ce:d3:93: cf:8a:ac:33:e0:02:d7:34:ca:96:ec:23:1e:b9:fa:94:e3:69: 61:20:70:1c:cf:00:82:9d:93:65:e7:5f:85:48:4e:10:fd:0e: 10:29:41:f8 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICD38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjUwMjI4MTkyOTU3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyMGViNS0wNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaQ5X7uofZggeQ+P3TwF7vkKA6vxQsI4qK8JYiVRNFGgGgidwfB/OYTucEw9 qsr5aTZwH++aNIVpZZeMIaU3HrIpDGKy45QKBfXrcFxwPlHgDJO6fxn7qZ9MiJ1R adtAKxpj4qK1S+O0qTjE8Vbo3sTgZbIx27GdeNWulVdoi2p11ANfmqLJTlCNSQ+c 8bKIBbcVsqic0pgWnJ2HVBPCXtEPpD3sK+ojmXZ8cF9IQp9P+eJmPUx2t5z6vPGS qou2AFgUeHxl5IIpWClGIcXGvgDpyYW59HaG2b2h4YoO81wb7uvPFIOmTcTl6Mc2 GlkQwAwwAc5WA6xh5gSulBA9BQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFA6Y7noH wxQogXZXVh3IFyV+uShEMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvRjFEOUNENUUw OTlBMTFFQUI1ODkxRDVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMBoEAgABMBQwDAMEAngd/AMEAHgd/gMEAMsRSDAjBAIAAjAdMBIDBwAgAQ3N AAEDBwMgAQ3NAAADBwAgAQ3N3QUwDQYJKoZIhvcNAQELBQADggEBABra9baaGjsd mjTa93uuFmYT7+qaypr37arGAYpj8pp/ijhMOcWQZy1FzWhfXlvi9k9NqjMLpYEp u31y5cfuI+j9LQbgnHMpyjUxUmr6FLcjCYDu3W/vXaEJmYl2b5xXaYX5YTi/akPg EdK3sov65grdIed3DYBm9uVrM6h5G5xFEoxlQyST3p847oTgxOtMXLXC+741Q4qn +0BoAPyWBwLMmpDG/NYLedn9CPE28NQvKUeuiQKWBiB/Iw+NmVkdogupqnkctAI3 3dTDfiR5LEfEeeaAe87Tk8+KrDPgAtc0ypbsIx65+pTjaWEgcBzPAIKdk2XnX4VI ThD9DhApQfg= -----END CERTIFICATE-----Generated at Sat Apr 26 08:03:46 2025 by rpki-client