$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/631EEAE20DED11F0A4926B42C4F9AE02.roa File: 631EEAE20DED11F0A4926B42C4F9AE02.roa (raw, json) Hash identifier: YTweLtniCPxayyKW65zU5/6Nz2suUtdLjG51CEQiW/s= Subject key identifier: 64:48:EC:E9:4F:BC:E6:42:D7:F4:BF:55:C8:27:42:2B:05:DF:D2:AD Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 0938 Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/631EEAE20DED11F0A4926B42C4F9AE02.roa Signing time: Mon 31 Mar 2025 05:02:47 +0000 ROA not before: Mon 31 Mar 2025 05:02:47 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 149105 IP address blocks: 220.158.134.0/23 maxlen: 23 220.158.134.0/24 maxlen: 24 220.158.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2360 (0x938) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Mar 31 05:02:47 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ea21f7-9234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:b4:57:b2:f2:2e:08:58:94:ee:b0:67:0c: 94:b0:94:49:95:1a:57:22:ee:dd:16:2c:80:13:57: b3:bc:22:9f:f2:f2:3c:c7:73:e8:e2:06:21:44:8b: 54:27:d6:e8:a0:a1:fa:76:ec:fd:56:c6:9d:ce:5f: dd:a3:da:b8:7d:0d:2d:3a:7b:8a:95:57:71:fd:33: 98:ab:bf:1d:e9:eb:2f:b0:b2:38:54:ed:d8:24:00: 9e:15:c4:1d:06:67:47:15:e9:2a:85:9a:40:de:0c: 5b:00:3c:81:2a:3f:e0:59:a9:2b:c5:50:37:bf:c5: 19:99:51:56:b2:b2:f1:22:9e:61:87:50:8b:93:68: 4f:3b:48:ba:65:94:09:2c:37:c8:37:63:c5:f3:76: 55:80:6a:01:66:58:ea:cc:3b:0c:6c:bb:0a:19:fd: 9a:29:73:82:d4:b7:c2:df:13:04:4e:a3:1c:14:25: 6f:63:d5:5f:6e:c2:a6:5e:1b:9e:f5:b6:6d:1b:3a: e4:a7:dd:3b:67:56:e7:97:3b:27:62:38:a0:89:18: 6f:54:0f:e0:1e:dd:13:2b:47:7f:ce:a6:de:82:03: 6c:67:20:27:4d:b2:c3:38:cd:54:19:fc:5a:1a:9f: 58:73:69:79:fa:35:f4:7d:4d:db:cb:4d:3d:ef:65: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:48:EC:E9:4F:BC:E6:42:D7:F4:BF:55:C8:27:42:2B:05:DF:D2:AD X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/631EEAE20DED11F0A4926B42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.158.134.0/23 Signature Algorithm: sha256WithRSAEncryption 24:f5:3a:1b:14:b7:d2:36:8e:f3:49:75:2e:a4:86:c5:63:97: 23:b1:c6:df:79:8f:a7:43:c8:8c:5a:e7:2c:5b:65:b1:c1:b5: 16:94:c9:95:0b:f2:a0:49:b2:89:be:68:c8:db:d9:33:8d:e5: 16:a0:3a:86:25:77:0d:71:1f:ef:2b:67:07:c5:4a:91:95:fd: 60:0a:e8:ba:4e:c8:b8:17:e7:fa:62:7b:46:7f:8b:f1:e8:f7: 25:76:7d:37:1c:e3:cb:fc:e1:f3:05:87:c9:39:b5:0a:c4:d7: 44:2f:1e:aa:d1:c1:0f:4e:41:ee:5e:c0:42:a3:89:f5:54:af: c8:01:49:99:a8:33:49:9c:16:a5:95:9e:53:2f:0b:d2:de:2f: 7a:94:82:c8:58:57:c9:ac:2f:37:e6:49:19:07:46:ff:4f:47: ca:93:52:50:59:b0:8e:61:b4:3b:69:23:61:4d:7b:21:3b:62: 2b:70:d3:4d:67:0c:e7:80:41:fb:65:dc:d0:e7:8d:eb:6f:9f: f9:42:0c:31:fd:21:58:ec:ec:35:7e:5d:17:b4:5b:b3:ce:91: 48:72:c1:60:d3:72:30:00:8f:86:27:b1:31:36:a7:ae:a0:fb: 26:56:8d:33:15:77:2f:6e:a7:31:f8:ed:e5:42:c7:06:43:60: 00:bd:7c:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjUwMzMxMDUwMjQ3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhMjFmNy05MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyb+0V7LyLghYlO6wZwyUsJRJlRpXIu7dFiyAE1ezvCKf8vI8x3Po4gYhRItU J9booKH6duz9Vsadzl/do9q4fQ0tOnuKlVdx/TOYq78d6esvsLI4VO3YJACeFcQd BmdHFekqhZpA3gxbADyBKj/gWakrxVA3v8UZmVFWsrLxIp5hh1CLk2hPO0i6ZZQJ LDfIN2PF83ZVgGoBZljqzDsMbLsKGf2aKXOC1LfC3xMETqMcFCVvY9VfbsKmXhue 9bZtGzrkp907Z1bnlzsnYjigiRhvVA/gHt0TK0d/zqbeggNsZyAnTbLDOM1UGfxa Gp9Yc2l5+jX0fU3by00972X6mwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGRI7OlP vOZC1/S/VcgnQisF39KtMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU0ODYvODU2QTI0OUNBOTgyMTFFQTkzMkRFQzU0QzRGOUFFMDIvNjMxRUVBRTIw REVEMTFGMEE0OTI2QjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHcnoYwDQYJKoZIhvcNAQELBQADggEBACT1OhsUt9I2jvNJ dS6khsVjlyOxxt95j6dDyIxa5yxbZbHBtRaUyZUL8qBJsom+aMjb2TON5RagOoYl dw1xH+8rZwfFSpGV/WAK6LpOyLgX5/pie0Z/i/Ho9yV2fTcc48v84fMFh8k5tQrE 10QvHqrRwQ9OQe5ewEKjifVUr8gBSZmoM0mcFqWVnlMvC9LeL3qUgshYV8msLzfm SRkHRv9PR8qTUlBZsI5htDtpI2FNeyE7Yitw001nDOeAQftl3NDnjetvn/lCDDH9 IVjs7DV+XRe0W7POkUhywWDTcjAAj4YnsTE2p66g+yZWjTMVdy9upzH47eVCxwZD YAC9fGs= -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:32 2025 by rpki-client