$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/310AEC7A5B7C11EDAAFAB831C4F9AE02.roa File: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: jsd4RyOm/zJtlT9wpjOAZ4fMoLnz14skobHmP1uXHl4= Subject key identifier: B5:64:E2:17:FF:8F:C0:86:7A:AB:74:22:AF:DB:FE:AE:1F:A4:90:D0 Certificate issuer: /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Certificate serial: 01E4 Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/310AEC7A5B7C11EDAAFAB831C4F9AE02.roa Signing time: Mon 31 Mar 2025 01:59:09 +0000 ROA not before: Mon 31 Mar 2025 01:59:09 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 45867 IP address blocks: 203.17.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Validity Not Before: Mar 31 01:59:09 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67e9f6ec-b314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:1e:46:39:d3:c0:89:1e:f5:7b:3b:75:9d: 13:7c:69:50:f5:62:67:f2:40:e5:40:e8:1e:03:f8: ab:9d:27:f6:fe:4e:7e:33:ac:7c:05:30:ec:a1:72: be:c8:cb:05:3a:53:9d:b1:1d:2f:6f:a9:8c:51:14: a3:a8:7e:e2:1c:a8:87:4c:14:f1:83:2f:b6:63:9b: 5e:0d:f6:6f:be:c5:b5:db:ee:2e:59:21:30:05:f9: c2:61:d9:5d:c8:b2:a7:35:64:8e:31:36:37:b5:68: bc:8b:9b:f6:fd:8d:f9:b0:f2:98:d5:9c:2a:62:2d: e7:e4:29:88:c5:1a:5c:07:09:11:36:7a:06:8e:65: ef:34:86:2e:2a:9f:8a:4f:28:f9:ff:f8:80:4e:16: 92:64:f6:00:4f:99:0a:23:d8:fc:e1:62:9d:5e:71: b6:f5:cc:f8:c6:81:5a:d9:74:35:85:df:ed:ca:1c: d0:c5:a5:49:b1:a8:1f:78:1f:66:10:0b:3c:48:0a: 70:38:94:7b:5f:1f:bd:d1:ab:6e:7b:66:ec:c2:df: 81:bc:6a:30:ef:9c:64:2d:4c:6b:3e:e3:9f:93:80: 9c:8f:26:79:68:cd:91:00:fc:27:20:51:a4:bc:7e: be:a8:ff:e4:b6:d8:1f:64:c6:07:95:f5:e7:e3:98: 00:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:64:E2:17:FF:8F:C0:86:7A:AB:74:22:AF:DB:FE:AE:1F:A4:90:D0 X509v3 Authority Key Identifier: keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/310AEC7A5B7C11EDAAFAB831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.17.185.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:d6:cf:b3:86:b3:97:26:df:13:17:70:1e:ff:66:c5:45:a2: c7:fd:83:0d:47:df:62:87:13:a3:8a:71:9c:c7:ac:18:d0:32: 92:cd:73:ce:1e:cd:57:be:09:ad:0d:d1:83:33:7d:98:e5:87: 1d:3e:d4:bd:a1:2e:00:74:d6:f8:b1:41:bf:21:44:f8:58:58: 94:40:e4:35:22:c7:3a:8f:6c:fe:44:65:ed:fd:cd:54:e6:dc: e9:7b:c3:a5:07:18:25:1e:a5:90:81:10:6d:ae:62:b4:04:ec: 9b:96:7c:26:b1:13:f3:f0:5d:f5:e9:98:bb:b9:6f:34:58:47: 77:90:08:12:ca:92:02:ea:0d:04:61:6b:bc:71:62:f0:85:b6: 8b:1e:f6:6d:5f:15:7e:cd:dd:30:3e:10:0e:9b:39:d3:ea:f2: d9:8b:a9:b6:4f:12:c3:49:a7:46:97:91:f8:12:eb:a0:da:1c: 1d:ab:23:2b:37:b2:4b:f3:aa:1a:8a:ea:fa:4d:06:6a:66:1f: ae:cd:6d:cf:a9:fa:34:b9:8d:b8:47:f3:fb:6f:b0:23:60:f9: fa:9b:d3:26:4f:ee:ee:78:12:8f:88:d9:2b:0d:89:92:59:41: ae:ba:7c:20:a4:89:01:c6:34:3d:f6:34:79:3e:44:d8:85:7a: 49:05:4a:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDU2N0Y5QUIyQjJDNzk2OTI2ODVDMDMwNTVBRjk2OUU2 MEI2NkI4MDAwHhcNMjUwMzMxMDE1OTA5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2U5ZjZlYy1iMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6EeRjnTwIke9Xs7dZ0TfGlQ9WJn8kDlQOgeA/irnSf2/k5+M6x8BTDsoXK+ yMsFOlOdsR0vb6mMURSjqH7iHKiHTBTxgy+2Y5teDfZvvsW12+4uWSEwBfnCYdld yLKnNWSOMTY3tWi8i5v2/Y35sPKY1ZwqYi3n5CmIxRpcBwkRNnoGjmXvNIYuKp+K Tyj5//iAThaSZPYAT5kKI9j84WKdXnG29cz4xoFa2XQ1hd/tyhzQxaVJsagfeB9m EAs8SApwOJR7Xx+90atue2bswt+BvGow75xkLUxrPuOfk4CcjyZ5aM2RAPwnIFGk vH6+qP/kttgfZMYHlfXn45gAdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLVk4hf/ j8CGeqt0Iq/b/q4fpJDQMB8GA1UdIwQYMBaAFFZ/mrKyx5aSaFwDBVr5aeYLZrgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9FMkRBODUxODQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxwSm9YQU1GV3ZscDVndG11 QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuLWFzckxIbHBKb1hBTUZXdmxwNWd0bXVBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRTJEQTg1MTg0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMzEwQUVDN0E1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLEbkwDQYJKoZIhvcNAQELBQADggEBAB/Wz7OGs5cm3xMX cB7/ZsVFosf9gw1H32KHE6OKcZzHrBjQMpLNc84ezVe+Ca0N0YMzfZjlhx0+1L2h LgB01vixQb8hRPhYWJRA5DUixzqPbP5EZe39zVTm3Ol7w6UHGCUepZCBEG2uYrQE 7JuWfCaxE/PwXfXpmLu5bzRYR3eQCBLKkgLqDQRha7xxYvCFtose9m1fFX7N3TA+ EA6bOdPq8tmLqbZPEsNJp0aXkfgS66DaHB2rIys3skvzqhqK6vpNBmpmH67Nbc+p +jS5jbhH8/tvsCNg+fqb0yZP7u54Eo+I2SsNiZJZQa66fCCkiQHGND32NHk+RNiF ekkFStg= -----END CERTIFICATE-----Generated at Sat Apr 26 08:07:55 2025 by rpki-client