$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/9EEE3C44D94F11EF916BCF23C4F9AE02.roa File: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (raw, json) Hash identifier: JTgCQ/a/n5QlsjMCTHDArlAgGVjedlWxdAR2U4v5LnA= Subject key identifier: DB:F7:8C:AC:C6:5F:AA:93:67:5D:08:20:95:5E:5B:DE:D1:EA:62:51 Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83 Certificate serial: 0182 Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/9EEE3C44D94F11EF916BCF23C4F9AE02.roa Signing time: Thu 23 Jan 2025 06:02:26 +0000 ROA not before: Thu 23 Jan 2025 06:02:26 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 133320 IP address blocks: 45.118.9.0/24 maxlen: 24 2001:df6:a900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B59E5, serialNumber=E47BF70254532697D20D0D3110F625370D65FA83 Validity Not Before: Jan 23 06:02:26 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6791db72-1bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3a:ba:1a:e8:06:4a:90:bf:18:8a:92:e3:4a: a5:d7:bd:8e:e8:6f:c8:81:d5:4d:45:12:e0:90:16: b5:7b:57:87:2c:10:2a:2a:43:c5:39:c1:7b:18:ee: 82:5e:e9:c5:9c:8f:be:cd:69:96:94:9e:b0:2e:86: 2b:54:00:e5:18:3c:b0:af:07:01:16:de:f2:79:a9: 38:8b:c8:18:9c:09:60:30:5f:c0:73:97:b3:91:84: f3:e8:20:17:09:fc:c0:d9:2f:55:d9:b0:aa:63:a6: da:d3:a7:b5:41:90:32:04:5c:f2:03:f8:36:1d:7d: 0c:a3:e8:42:44:6b:3d:30:a8:dd:b2:9b:5c:c0:4b: fa:d7:5b:8e:84:8d:f3:60:cc:e0:17:7a:f3:36:2a: a6:94:4b:31:20:ec:55:1c:f2:46:26:35:2e:32:e9: f5:43:eb:ee:8b:2e:5d:25:5c:07:5b:41:09:76:42: a4:ea:96:da:67:bc:29:4b:3b:a1:fd:c8:58:df:fe: 61:c5:6f:59:4b:15:85:10:87:60:b6:80:8c:ab:00: 49:7f:b1:84:41:b7:bf:a4:06:1e:68:5e:a1:10:56: 75:a0:c4:f7:12:fb:05:80:07:e2:ea:cf:7b:f5:90: 54:1a:b9:e5:39:9f:4b:5a:c5:cd:7f:c4:85:74:5d: f5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F7:8C:AC:C6:5F:AA:93:67:5D:08:20:95:5E:5B:DE:D1:EA:62:51 X509v3 Authority Key Identifier: keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/9EEE3C44D94F11EF916BCF23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.9.0/24 IPv6: 2001:df6:a900::/48 Signature Algorithm: sha256WithRSAEncryption 07:ae:bc:37:d8:c1:65:dc:ca:68:e5:ab:b3:5a:bd:d5:82:03: 27:60:5f:76:19:61:13:52:46:cf:e4:43:74:07:a5:24:86:a6: 1e:ae:86:b9:59:d5:fc:ee:30:44:81:6f:f9:5c:02:ca:bd:a2: 4e:80:ac:17:f3:61:ce:56:2b:71:3a:ab:f8:ac:ad:c7:7a:83: 09:8f:69:86:43:be:86:19:ac:29:d7:4c:a8:95:c6:9a:f4:2a: 48:d0:58:4b:a3:b3:4b:79:58:81:49:bc:52:59:0e:38:82:ce: 1a:68:47:3d:c9:0f:69:f9:e4:93:a3:ac:96:af:f0:7b:b1:f9: 47:e4:64:32:4a:8b:86:72:f5:aa:b6:e3:75:1d:fa:82:37:3c: f3:68:85:e0:72:7e:12:ca:08:61:0a:37:9c:4b:0d:51:12:e2: ab:bf:13:31:4e:cc:fa:c5:9a:dc:0d:81:dd:82:bc:45:a6:6f: 24:1f:d3:9c:61:fa:0f:82:53:db:7a:e5:3b:df:21:12:a8:e2: b4:34:d7:bf:47:2e:64:77:9a:4e:88:2c:d8:a0:65:c0:10:8f: 82:48:bc:bb:54:53:01:dd:1e:9a:00:d0:42:91:25:21:46:28: e0:b0:93:da:41:5f:76:0d:7e:95:c8:c5:53:8f:bf:01:f6:d0: 0c:49:7b:f9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU5RTUxMTAvBgNVBAUTKEU0N0JGNzAyNTQ1MzI2OTdEMjBEMEQzMTEwRjYyNTM3 MEQ2NUZBODMwHhcNMjUwMTIzMDYwMjI2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkxZGI3Mi0xYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzq6GugGSpC/GIqS40ql172O6G/IgdVNRRLgkBa1e1eHLBAqKkPFOcF7GO6C XunFnI++zWmWlJ6wLoYrVADlGDywrwcBFt7yeak4i8gYnAlgMF/Ac5ezkYTz6CAX CfzA2S9V2bCqY6ba06e1QZAyBFzyA/g2HX0Mo+hCRGs9MKjdsptcwEv611uOhI3z YMzgF3rzNiqmlEsxIOxVHPJGJjUuMun1Q+vuiy5dJVwHW0EJdkKk6pbaZ7wpSzuh /chY3/5hxW9ZSxWFEIdgtoCMqwBJf7GEQbe/pAYeaF6hEFZ1oMT3EvsFgAfi6s97 9ZBUGrnlOZ9LWsXNf8SFdF31nwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNv3jKzG X6qTZ10IIJVeW97R6mJRMB8GA1UdIwQYMBaAFOR79wJUUyaX0g0NMRD2JTcNZfqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTlFNS9ERDlGMUY3QzND MDExMUVFOTFDQkUxNTdDNEY5QUUwMi81SHYzQWxSVEpwZlNEUTB4RVBZbE53MWwt b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIdjNBbFJUSnBmU0RRMHhFUFlsTncxbC1vTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU5RTUvREQ5RjFGN0MzQzAxMTFFRTkxQ0JFMTU3QzRGOUFFMDIvOUVFRTNDNDRE OTRGMTFFRjkxNkJDRjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAAtdgkwDwQCAAIwCQMHACABDfapADANBgkqhkiG9w0BAQsF AAOCAQEAB668N9jBZdzKaOWrs1q91YIDJ2BfdhlhE1JGz+RDdAelJIamHq6GuVnV /O4wRIFv+VwCyr2iToCsF/NhzlYrcTqr+Kytx3qDCY9phkO+hhmsKddMqJXGmvQq SNBYS6OzS3lYgUm8UlkOOILOGmhHPckPafnkk6Oslq/we7H5R+RkMkqLhnL1qrbj dR36gjc882iF4HJ+EsoIYQo3nEsNURLiq78TMU7M+sWa3A2B3YK8RaZvJB/TnGH6 D4JT23rlO98hEqjitDTXv0cuZHeaTogs2KBlwBCPgki8u1RTAd0emgDQQpElIUYo 4LCT2kFfdg1+lcjFU4+/AfbQDEl7+Q== -----END CERTIFICATE-----Generated at Sat Apr 26 07:58:23 2025 by rpki-client