$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa File: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: 8BxigLcXRfHjVBQQ/jgBW++OCfhAQf3T5L8XSqY0uw8= Subject key identifier: 6F:41:2A:A4:4F:1A:F9:EB:80:4E:8F:1E:AD:46:34:DF:E8:0B:12:0F Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 022D Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa Signing time: Mon 31 Mar 2025 01:59:00 +0000 ROA not before: Mon 31 Mar 2025 01:59:00 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 132621 IP address blocks: 140.168.244.0/22 maxlen: 22 140.168.244.0/24 maxlen: 24 140.168.245.0/24 maxlen: 24 140.168.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Mar 31 01:59:00 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67e9f6e4-3d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:65:eb:0f:45:ab:53:d5:ba:82:9f:45:16:3b: a5:98:fd:28:74:4d:50:53:3e:1f:0d:8d:3e:82:ac: 4d:bb:0b:07:6e:18:a8:dd:59:00:54:0a:e1:fa:32: 70:4f:70:b5:78:c2:a5:8c:e6:6e:1b:22:53:54:4f: a7:c9:30:2e:ea:e2:47:36:7e:2b:11:19:4f:11:c4: 14:9b:57:36:ff:55:89:14:19:2a:0c:44:4e:eb:24: a8:b1:c9:3d:51:ab:a2:99:18:3f:1d:b3:43:a7:47: fe:de:f2:66:5c:a8:0f:df:2f:8f:af:44:36:14:6e: c1:c7:c1:52:89:5b:08:3a:f4:23:e2:ee:c2:18:72: 46:f9:4a:80:ed:92:cd:ac:37:bd:f9:f5:56:a6:35: 16:2b:4f:49:db:a4:0a:1c:0f:1f:26:6d:ae:9b:1b: a8:3f:fc:35:15:f0:a6:ae:a3:eb:38:dc:ca:9d:e0: ca:63:45:72:30:53:ad:6a:09:6e:3b:e2:00:1d:03: 9f:be:6d:c9:72:a9:25:f4:9e:f9:19:ff:0a:5f:10: df:9b:63:c8:cf:05:4a:2f:e9:c4:c0:28:bc:b4:f0: 57:96:2b:d6:90:fc:85:e6:dc:ea:52:30:8d:f4:ce: a6:39:30:e6:a1:13:22:c4:69:cb:b5:1c:33:a5:ad: 2e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:41:2A:A4:4F:1A:F9:EB:80:4E:8F:1E:AD:46:34:DF:E8:0B:12:0F X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.168.244.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:fd:b4:e1:ca:c8:72:35:63:d3:cc:45:77:51:1e:da:29:44: 9f:dd:48:37:46:fd:9c:19:de:0e:75:aa:c9:7e:7a:c2:86:4c: 42:5d:a6:6b:0b:fe:23:9a:96:42:84:fe:cb:d8:0d:69:7e:00: 26:ec:ee:bb:fa:46:74:65:0a:09:9b:2b:fe:f4:a4:3f:92:29: 1b:23:96:95:2f:2e:62:97:de:80:3c:19:d6:9e:2c:c5:f6:00: f4:f9:62:1b:0a:45:f5:8a:72:1a:f5:be:53:1b:1d:5a:70:e6: 0a:0e:24:86:06:26:45:c4:b7:3a:a8:36:c1:79:0b:0e:e3:9f: 94:7e:80:d2:63:7e:85:07:57:19:e4:f3:98:db:a0:46:5e:c5: ba:62:68:a7:d9:97:74:b2:d7:97:f2:bb:07:96:d1:5d:5d:39: af:d2:85:6f:ff:27:21:ea:d5:d5:32:19:7b:47:ea:96:14:d2: 26:e9:64:92:22:7a:64:f0:02:3b:cc:41:40:62:11:37:2b:6c: fa:89:65:b1:3b:4e:15:94:e2:33:01:e9:ae:5c:57:45:77:2a: 80:b5:4b:48:51:cd:3b:e2:32:8f:44:4c:59:a9:b7:ce:5a:85: 71:80:d2:69:1c:71:88:7e:34:29:cf:67:48:be:d7:85:09:62: 4c:f1:3e:1f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjUwMzMxMDE1OTAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2U5ZjZlNC0zZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2XrD0WrU9W6gp9FFjulmP0odE1QUz4fDY0+gqxNuwsHbhio3VkAVArh+jJw T3C1eMKljOZuGyJTVE+nyTAu6uJHNn4rERlPEcQUm1c2/1WJFBkqDERO6ySosck9 UauimRg/HbNDp0f+3vJmXKgP3y+Pr0Q2FG7Bx8FSiVsIOvQj4u7CGHJG+UqA7ZLN rDe9+fVWpjUWK09J26QKHA8fJm2umxuoP/w1FfCmrqPrONzKneDKY0VyMFOtaglu O+IAHQOfvm3Jcqkl9J75Gf8KXxDfm2PIzwVKL+nEwCi8tPBXlivWkPyF5tzqUjCN 9M6mOTDmoRMixGnLtRwzpa0uxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG9BKqRP GvnrgE6PHq1GNN/oCxIPMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMkREQTE2ODQ1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKMqPQwDQYJKoZIhvcNAQELBQADggEBAJv9tOHKyHI1Y9PM RXdRHtopRJ/dSDdG/ZwZ3g51qsl+esKGTEJdpmsL/iOalkKE/svYDWl+ACbs7rv6 RnRlCgmbK/70pD+SKRsjlpUvLmKX3oA8GdaeLMX2APT5YhsKRfWKchr1vlMbHVpw 5goOJIYGJkXEtzqoNsF5Cw7jn5R+gNJjfoUHVxnk85jboEZexbpiaKfZl3Sy15fy uweW0V1dOa/ShW//JyHq1dUyGXtH6pYU0ibpZJIiemTwAjvMQUBiETcrbPqJZbE7 ThWU4jMB6a5cV0V3KoC1S0hRzTviMo9ETFmpt85ahXGA0mkccYh+NCnPZ0i+14UJ YkzxPh8= -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:25 2025 by rpki-client