$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/28111E50700B11EFAE32B25FC4F9AE02.roa File: 28111E50700B11EFAE32B25FC4F9AE02.roa (raw, json) Hash identifier: XXuJm46uHpZHmYItl9dfHPQ08cNfNbo1TOpvDvMppfQ= Subject key identifier: F1:A6:C9:38:6D:3E:9D:49:C1:6E:BE:BB:2D:06:66:39:DC:AA:35:2A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4A40 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/28111E50700B11EFAE32B25FC4F9AE02.roa Signing time: Sun 23 Mar 2025 07:27:01 +0000 ROA not before: Sun 23 Mar 2025 07:27:01 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 23899 IP address blocks: 117.122.120.0/22 maxlen: 24 2001:dc8:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19008 (0x4a40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Mar 23 07:27:01 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67dfb7c4-7cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:60:a6:da:8b:6a:72:10:bb:06:22:fe:a5:05: 49:8f:82:e0:c0:01:b4:2d:77:9f:00:48:4d:45:97: 59:79:d4:76:32:79:ca:ba:c0:ee:ac:6a:0e:40:ad: 93:69:9e:89:d2:cf:e2:0a:90:61:1c:a0:51:19:8e: 58:66:28:69:90:9a:8b:85:3e:24:7b:53:2c:56:2c: 80:75:d9:e4:8e:fd:32:33:61:47:10:7d:7b:d8:36: 67:4b:12:0f:eb:67:15:4c:8b:7a:52:d4:42:22:63: 03:c8:6f:76:65:17:0a:f2:93:9c:8a:5e:a4:5e:ec: 03:9b:d7:81:84:56:5f:c3:b3:e9:9d:0d:2c:e3:a4: 66:a9:5a:a5:e6:2d:88:c8:b0:17:b5:b4:69:a5:da: 76:46:67:61:4a:d4:cd:fa:f4:6e:9d:58:b7:e7:7e: 6e:7c:72:b0:fc:50:72:26:dc:06:93:1f:da:76:bb: ae:09:f1:5f:05:df:e5:24:f4:86:0a:51:cc:a6:71: f8:54:57:6a:33:73:2a:94:f1:f6:36:f3:2e:fc:5b: 0f:50:20:e9:7f:36:43:76:6b:56:b3:95:5c:f9:27: c0:6a:62:21:d3:ae:65:21:31:93:a5:b0:3d:60:07: 9b:e1:ae:10:24:20:a5:10:80:f1:dc:f4:e3:b2:41: cc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A6:C9:38:6D:3E:9D:49:C1:6E:BE:BB:2D:06:66:39:DC:AA:35:2A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/28111E50700B11EFAE32B25FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.122.120.0/22 IPv6: 2001:dc8:2000::/48 Signature Algorithm: sha256WithRSAEncryption 59:b9:5e:44:70:c2:9d:e3:2f:72:03:8e:e4:b0:2f:bc:b6:f7: 8f:26:e9:78:ee:49:15:71:14:ae:ec:b7:72:d1:35:ca:64:45: 09:c4:57:51:b0:0f:87:87:7d:c5:23:76:5c:f2:6b:00:f9:bc: 31:42:68:97:43:d9:00:13:87:ad:f6:1c:d9:e9:91:10:9e:04: ec:a2:c5:52:d4:4f:77:d1:bf:44:b3:4f:74:70:d0:c3:bd:de: 24:dc:c9:a7:4a:ae:23:ab:68:e1:69:91:6c:78:d4:90:32:eb: 5f:3b:d4:db:11:03:cc:d9:08:64:61:10:fb:48:17:06:74:3c: b8:a9:4c:7a:d0:b2:0d:10:00:4e:45:91:0a:1c:15:4d:0d:17: b2:a0:04:50:4a:0f:46:1b:e2:21:da:4a:b9:52:54:8f:a6:7f: 4e:f9:7d:29:e7:f2:c5:78:40:df:a1:9b:3e:30:56:a0:6e:b8: e9:33:91:95:cf:51:76:eb:ca:4a:47:df:be:b7:2f:c7:8b:f8: 55:e8:2a:fb:93:d0:4c:a0:c5:75:1e:f0:ce:07:1a:16:6b:02: ab:1d:9c:73:a9:b9:1a:1f:15:4f:d6:85:a7:b7:66:b7:ef:d3: e0:a0:30:4e:ed:ed:47:2f:1d:3c:e5:c5:ec:93:47:1a:d1:a1: e8:48:7a:4a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICSkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwMzIzMDcyNzAxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RmYjdjNC03Y2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA72Cm2otqchC7BiL+pQVJj4LgwAG0LXefAEhNRZdZedR2MnnKusDurGoOQK2T aZ6J0s/iCpBhHKBRGY5YZihpkJqLhT4ke1MsViyAddnkjv0yM2FHEH172DZnSxIP 62cVTIt6UtRCImMDyG92ZRcK8pOcil6kXuwDm9eBhFZfw7PpnQ0s46RmqVql5i2I yLAXtbRppdp2RmdhStTN+vRunVi3535ufHKw/FByJtwGkx/adruuCfFfBd/lJPSG ClHMpnH4VFdqM3MqlPH2NvMu/FsPUCDpfzZDdmtWs5Vc+SfAamIh065lITGTpbA9 YAeb4a4QJCClEIDx3PTjskHM4QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPGmyTht Pp1JwW6+uy0GZjncqjUqMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMjgxMTFFNTA3 MDBCMTFFRkFFMzJCMjVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJ1engwDwQCAAIwCQMHACABDcggADANBgkqhkiG9w0BAQsF AAOCAQEAWbleRHDCneMvcgOO5LAvvLb3jybpeO5JFXEUruy3ctE1ymRFCcRXUbAP h4d9xSN2XPJrAPm8MUJol0PZABOHrfYc2emREJ4E7KLFUtRPd9G/RLNPdHDQw73e JNzJp0quI6to4WmRbHjUkDLrXzvU2xEDzNkIZGEQ+0gXBnQ8uKlMetCyDRAATkWR ChwVTQ0XsqAEUEoPRhviIdpKuVJUj6Z/Tvl9KefyxXhA36GbPjBWoG646TORlc9R duvKSkffvrcvx4v4Vegq+5PQTKDFdR7wzgcaFmsCqx2cc6m5Gh8VT9aFp7dmt+/T 4KAwTu3tRy8dPOXF7JNHGtGh6Eh6Sg== -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:43 2025 by rpki-client