$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/E4A74BE6255211EB96B9B269C4F9AE02.roa File: E4A74BE6255211EB96B9B269C4F9AE02.roa (raw, json) Hash identifier: WXuqlnvJ/kQYgmajvkp6WqRXIhVjEPtrsEAuBi7s1vA= Subject key identifier: 9C:07:37:CE:C0:C6:B9:45:32:DC:53:53:1A:D2:1A:CE:F7:D7:B4:24 Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Certificate serial: 133D Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/E4A74BE6255211EB96B9B269C4F9AE02.roa Signing time: Tue 04 Mar 2025 17:44:58 +0000 ROA not before: Tue 04 Mar 2025 17:44:58 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136943 IP address blocks: 121.200.0.0/24 maxlen: 24 123.253.151.0/24 maxlen: 24 2403:5800:1::/48 maxlen: 48 2403:5800:3::/48 maxlen: 48 2403:5800:1900::/40 maxlen: 40 2403:5800:1900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4925 (0x133d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Validity Not Before: Mar 4 17:44:58 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c73c19-0bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:bb:be:fd:d4:4c:9f:73:7c:5d:6f:e0:03: eb:c9:00:2d:9d:f8:ce:47:64:5d:95:4b:b7:a7:e1: f6:7a:da:7c:0b:fb:fc:a8:d9:58:dc:25:b6:79:a0: 69:cf:d6:0d:7b:09:80:af:00:9c:c9:da:f3:90:4e: 62:71:24:46:f0:c1:52:0d:0d:25:8b:9a:ef:fa:ee: 13:0f:bf:61:e4:86:3e:32:9d:60:f2:5c:c0:af:0a: 69:9c:56:e8:be:d5:68:3a:4f:69:6a:62:81:b5:3c: 27:0f:bd:0c:5c:5d:da:12:c6:27:2f:c6:52:2c:85: 2d:f5:c5:8c:90:ea:f7:f0:4a:c5:6d:fc:51:c7:0f: 55:d8:d5:0c:30:04:27:44:25:10:0f:5b:93:30:a1: 39:56:8a:a3:73:64:c2:ab:3c:cd:4f:67:fe:ee:4c: 91:04:d2:ba:0d:45:38:70:2d:a3:a8:96:ee:44:39: 52:99:0d:b0:01:b3:12:6d:5a:e3:f4:0b:75:12:40: 3a:5b:7e:39:5e:74:a7:53:3b:b5:af:7a:8a:3c:01: 6e:ff:36:28:c9:eb:a7:99:00:0a:e4:cb:3a:62:ef: ed:7d:06:6e:10:b6:31:34:4f:e5:17:2b:d5:ff:b8: 30:0c:e0:82:d0:9b:47:62:18:b1:0f:37:8e:35:75: bb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:07:37:CE:C0:C6:B9:45:32:DC:53:53:1A:D2:1A:CE:F7:D7:B4:24 X509v3 Authority Key Identifier: keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/E4A74BE6255211EB96B9B269C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.200.0.0/24 123.253.151.0/24 IPv6: 2403:5800:1::/48 2403:5800:3::/48 2403:5800:1900::/40 Signature Algorithm: sha256WithRSAEncryption a1:0f:66:34:f3:ad:20:b6:d7:a5:1f:cf:c0:f5:89:90:0a:94: a8:05:0c:0e:04:59:d9:79:c1:34:88:87:69:12:77:36:e4:b1: 08:4f:0b:87:75:24:ec:6d:e4:ea:b2:41:e3:ae:89:b4:cf:7d: b2:9d:c3:4f:f1:b1:d2:6f:fe:33:37:6f:a7:3d:6d:cf:e1:d2: 97:c8:93:50:93:e0:77:7e:3b:8a:05:5e:3b:c0:1a:8e:a3:d1: cf:b2:b8:7d:e8:9e:2c:c9:39:8f:61:05:5d:e0:c7:e5:5c:e1: 21:e8:50:f8:71:6a:45:55:eb:33:f8:11:24:ef:13:79:33:03: f3:5e:e7:42:3b:5f:a3:c2:99:7a:9a:3e:85:31:18:d5:c3:e5: 5b:c4:bc:1e:b4:82:67:4a:31:b3:c5:02:98:48:d8:f6:3e:5c: 63:34:e4:71:39:6f:c7:5c:a0:6d:11:00:a0:83:78:f6:b7:a3: 2f:e7:8a:e7:cd:d3:c0:ce:45:29:42:82:24:cb:3e:86:3c:a6: 88:91:df:a1:9c:ae:6e:b7:aa:5a:f0:ed:12:19:97:1f:b5:9f: 72:18:55:57:75:25:d7:05:bf:47:26:91:4c:48:f9:b9:e0:93: 27:86:99:c6:46:a4:45:eb:a2:8b:96:07:fa:f8:d5:f3:e3:1a: 90:a3:4b:f9 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICEz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVCNkMwMjA0MDVB MjJDNjRCM0IwHhcNMjUwMzA0MTc0NDU4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3M2MxOS0wYmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCW7vv3UTJ9zfF1v4APryQAtnfjOR2RdlUu3p+H2etp8C/v8qNlY3CW2eaBp z9YNewmArwCcydrzkE5icSRG8MFSDQ0li5rv+u4TD79h5IY+Mp1g8lzArwppnFbo vtVoOk9pamKBtTwnD70MXF3aEsYnL8ZSLIUt9cWMkOr38ErFbfxRxw9V2NUMMAQn RCUQD1uTMKE5Voqjc2TCqzzNT2f+7kyRBNK6DUU4cC2jqJbuRDlSmQ2wAbMSbVrj 9At1EkA6W345XnSnUzu1r3qKPAFu/zYoyeunmQAK5Ms6Yu/tfQZuELYxNE/lFyvV /7gwDOCC0JtHYhixDzeONXW7fwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFJwHN87A xrlFMtxTUxrSGs7317QkMB8GA1UdIwQYMBaAFBxOnz+ABQWkC6FltsAgQFoixks7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9FODYxRkQzQUFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJhUUxvV1cyd0NCQVdpTEdT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFNmZQNEFGQmFRTG9XVzJ3Q0JBV2lMR1N6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjFGQTgvRTg2MUZEM0FBRkQ5MTFFOEIyRUQ0QzdGQzRGOUFFMDIvRTRBNzRCRTYy NTUyMTFFQjk2QjlCMjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MBIEAgABMAwDBAB5yAADBAB7/ZcwIAQCAAIwGgMHACQDWAAAAQMHACQDWAAA AwMGACQDWAAZMA0GCSqGSIb3DQEBCwUAA4IBAQChD2Y0860gttelH8/A9YmQCpSo BQwOBFnZecE0iIdpEnc25LEITwuHdSTsbeTqskHjrom0z32yncNP8bHSb/4zN2+n PW3P4dKXyJNQk+B3fjuKBV47wBqOo9HPsrh96J4syTmPYQVd4MflXOEh6FD4cWpF Vesz+BEk7xN5MwPzXudCO1+jwpl6mj6FMRjVw+VbxLwetIJnSjGzxQKYSNj2Plxj NORxOW/HXKBtEQCgg3j2t6Mv54rnzdPAzkUpQoIkyz6GPKaIkd+hnK5ut6pa8O0S GZcftZ9yGFVXdSXXBb9HJpFMSPm54JMnhpnGRqRF66KLlgf6+NXz4xqQo0v5 -----END CERTIFICATE-----Generated at Sat Apr 26 08:02:10 2025 by rpki-client