$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/CCBF0CF6B55911EC9256FE19C4F9AE02.roa File: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (raw, json) Hash identifier: J9pnyjCXshJdQFSggqWmHXW0nySYEfDGHTCaX/EZOYk= Subject key identifier: 11:FB:86:E4:72:56:06:FC:78:B7:10:49:DB:83:56:CD:29:A5:D3:08 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 08BF Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/CCBF0CF6B55911EC9256FE19C4F9AE02.roa Signing time: Sun 22 Dec 2024 20:28:36 +0000 ROA not before: Sun 22 Dec 2024 20:28:36 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133934 IP address blocks: 101.234.128.0/18 maxlen: 24 111.125.160.0/20 maxlen: 24 114.111.128.0/20 maxlen: 24 114.111.144.0/20 maxlen: 24 122.100.0.0/21 maxlen: 24 122.100.8.0/21 maxlen: 24 2406:5800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2239 (0x8bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Dec 22 20:28:36 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67687674-1ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2c:29:dd:5b:91:84:9c:fe:c4:91:68:69:35: 1d:22:6f:d9:b4:b4:7f:cd:4a:b0:2e:0c:5f:7a:5e: c5:55:2f:57:fb:42:8e:a1:ef:fa:fd:ce:f5:e4:94: a5:cb:14:88:85:ad:bb:b5:2b:81:95:e3:90:38:82: 17:a9:fb:ef:fd:ba:87:9c:30:3d:b6:96:72:7d:86: 0c:4c:34:e8:93:44:ae:f4:7e:3a:e0:06:73:e3:52: a7:fd:f6:37:b8:e1:f1:9e:69:bc:bf:6c:89:6e:d5: 40:c0:ba:a4:1d:a0:d8:ed:b1:ff:08:7f:26:d8:ea: f9:47:1e:6b:d9:06:e3:dc:e4:32:1b:55:8f:0b:d9: 8a:ea:6b:fe:01:ff:ea:de:d2:62:4f:14:b2:31:4f: 51:86:c4:aa:ee:3a:28:d2:bf:92:a2:c0:c4:fc:38: 88:d8:c8:a8:38:b6:b3:57:14:de:3d:12:aa:f4:44: d0:9f:54:da:1c:5e:56:15:38:e4:e6:12:7c:4b:57: 86:2b:c5:1b:8c:1c:a2:79:51:d3:9b:31:97:3f:8c: dd:10:37:f8:d4:f4:ba:e9:a0:88:f0:f3:f9:49:35: 7c:13:5d:89:90:49:7f:55:a0:4f:bf:be:1f:fc:57: 44:b4:52:22:48:0f:36:46:aa:3b:aa:4d:50:37:e2: ce:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FB:86:E4:72:56:06:FC:78:B7:10:49:DB:83:56:CD:29:A5:D3:08 X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/CCBF0CF6B55911EC9256FE19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.234.128.0/18 111.125.160.0/20 114.111.128.0/19 122.100.0.0/20 IPv6: 2406:5800::/32 Signature Algorithm: sha256WithRSAEncryption 34:a8:05:82:22:03:cf:28:47:bc:87:8d:d8:9d:f4:50:86:6a: e4:dc:57:f9:6c:fb:ad:21:41:b1:ba:f9:30:1e:79:e5:92:20: 60:67:4d:1a:98:a8:33:2a:5d:91:10:5f:da:5c:a8:4c:10:14: 57:7e:c2:57:78:35:81:5d:93:b4:72:35:f3:2d:06:22:a3:e3: e8:4a:29:b9:01:f2:b0:fe:6b:5e:23:5d:98:6c:98:1f:c9:d3: 32:aa:f7:78:3e:17:0c:3c:bf:17:af:ee:57:e2:9b:23:6e:f0: e8:f7:24:cc:19:7b:0a:c2:9a:bd:34:85:34:ef:31:f7:0c:50: fc:59:0f:25:0e:62:c5:50:e7:83:98:21:2b:01:8a:9a:b5:53: 6e:e1:7a:97:ec:fd:1e:66:7d:b5:66:20:32:1b:f0:0d:bc:db: 67:fb:f1:ac:e5:72:64:d6:f5:71:fd:88:32:ba:1e:3c:0a:07: ec:a3:ed:fa:25:c2:f3:75:65:31:11:0b:b1:6f:96:bc:89:a5: 5e:f8:25:b8:97:38:63:29:82:a1:57:24:7c:e7:2d:aa:37:bf: 6f:2f:b8:bf:e8:fa:e0:47:5f:02:b0:36:3a:8a:7b:3b:65:0d: 9f:44:15:6c:32:5c:64:15:30:9a:d2:1f:c0:46:0c:53:a7:14: a7:f0:8d:a0 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjQxMjIyMjAyODM2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY4NzY3NC0xY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Swp3VuRhJz+xJFoaTUdIm/ZtLR/zUqwLgxfel7FVS9X+0KOoe/6/c715JSl yxSIha27tSuBleOQOIIXqfvv/bqHnDA9tpZyfYYMTDTok0Su9H464AZz41Kn/fY3 uOHxnmm8v2yJbtVAwLqkHaDY7bH/CH8m2Or5Rx5r2Qbj3OQyG1WPC9mK6mv+Af/q 3tJiTxSyMU9RhsSq7joo0r+SosDE/DiI2MioOLazVxTePRKq9ETQn1TaHF5WFTjk 5hJ8S1eGK8UbjByieVHTmzGXP4zdEDf41PS66aCI8PP5STV8E12JkEl/VaBPv74f /FdEtFIiSA82Rqo7qk1QN+LO7QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFBH7huRy Vgb8eLcQSduDVs0ppdMIMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU0NkUvMENENDFEQThCNzZBMTFFQTgxNEY1MDg0QzRGOUFFMDIvQ0NCRjBDRjZC NTU5MTFFQzkyNTZGRTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAZl6oADBARvfaADBAVyb4ADBAR6ZAAwDQQCAAIwBwMFACQG WAAwDQYJKoZIhvcNAQELBQADggEBADSoBYIiA88oR7yHjdid9FCGauTcV/ls+60h QbG6+TAeeeWSIGBnTRqYqDMqXZEQX9pcqEwQFFd+wld4NYFdk7RyNfMtBiKj4+hK KbkB8rD+a14jXZhsmB/J0zKq93g+Fww8vxev7lfimyNu8Oj3JMwZewrCmr00hTTv MfcMUPxZDyUOYsVQ54OYISsBipq1U27hepfs/R5mfbVmIDIb8A2822f78azlcmTW 9XH9iDK6HjwKB+yj7folwvN1ZTERC7FvlryJpV74JbiXOGMpgqFXJHznLao3v28v uL/o+uBHXwKwNjqKeztlDZ9EFWwyXGQVMJrSH8BGDFOnFKfwjaA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:24 2025 by rpki-client