$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/9095FC2CB2E811EBADBB3753C4F9AE02.roa File: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (raw, json) Hash identifier: h5dvfa3FRBYPtcjjdPkOqAVQA/qeLJ42SQi+kECAh1M= Subject key identifier: 0C:AA:8C:84:2A:9B:00:1C:F5:36:D3:67:82:79:36:03:35:D2:35:28 Certificate issuer: /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Certificate serial: 059B Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/9095FC2CB2E811EBADBB3753C4F9AE02.roa Signing time: Sat 14 Dec 2024 23:01:48 +0000 ROA not before: Sat 14 Dec 2024 23:01:48 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133847 IP address blocks: 72.35.248.0/22 maxlen: 24 74.114.48.0/22 maxlen: 24 135.84.232.0/21 maxlen: 24 146.88.152.0/21 maxlen: 24 159.117.132.0/22 maxlen: 24 159.117.136.0/21 maxlen: 24 159.117.201.0/24 maxlen: 24 159.117.223.0/24 maxlen: 24 165.84.232.0/21 maxlen: 24 208.66.232.0/21 maxlen: 24 208.71.212.0/22 maxlen: 24 208.81.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Validity Not Before: Dec 14 23:01:48 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675e0e5c-ac4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:80:46:3a:0d:8c:88:47:0e:73:a3:6d:a6: b1:0c:a5:a3:ff:56:7b:c5:cc:62:7b:8c:82:d9:98: ca:e6:20:19:c1:fd:66:ce:f4:ee:0d:3c:2e:9f:f1: 35:0d:24:2d:a7:e5:7a:96:cd:38:b3:2d:1d:80:28: 92:54:b2:50:d7:ea:77:a1:3f:47:93:f5:c5:a3:3f: 62:3e:f2:22:61:90:06:70:49:0e:42:b8:46:08:1d: e7:de:fa:e9:7d:ba:60:e5:02:36:88:60:b3:39:6e: 74:5d:93:1a:db:0e:20:22:88:ef:d1:be:4e:21:c4: 9d:0a:0c:83:dc:b7:27:ad:72:05:ca:0c:57:13:dc: ee:53:c5:ca:4d:be:63:d7:2c:e4:bb:ee:f7:48:fd: 2a:da:0f:e9:e7:98:8b:d7:dd:18:29:0b:59:54:f1: 34:37:07:c8:27:9b:60:b1:a9:be:16:f2:13:0f:6b: 93:a8:7c:44:22:e1:e2:0f:b7:52:83:52:6e:3b:8d: 93:8d:12:38:fb:19:b8:1f:c7:9a:c9:a5:01:3a:f2: 20:ba:26:f7:bf:b9:55:4c:9a:e2:60:4d:98:94:42: 12:04:9a:8f:3d:90:fe:9e:c3:e4:79:a0:69:fa:5f: 67:f3:f1:18:1b:03:ba:e6:48:79:34:c6:9d:60:9f: 04:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AA:8C:84:2A:9B:00:1C:F5:36:D3:67:82:79:36:03:35:D2:35:28 X509v3 Authority Key Identifier: keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/9095FC2CB2E811EBADBB3753C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 72.35.248.0/22 74.114.48.0/22 135.84.232.0/21 146.88.152.0/21 159.117.132.0-159.117.143.255 159.117.201.0/24 159.117.223.0/24 165.84.232.0/21 208.66.232.0/21 208.71.212.0/22 208.81.116.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:ee:ec:cf:b0:cf:9f:96:d6:c9:63:97:eb:b9:ab:0a:93:11: 49:5d:49:7e:6b:69:3b:c2:e7:58:bf:ba:5c:ac:69:90:65:f2: b4:23:a5:28:82:40:92:01:ab:2c:9d:c6:ab:1e:d4:10:da:76: 89:14:56:b9:e0:2b:b4:de:70:25:49:84:b6:98:7b:5f:32:04: 07:40:1c:88:56:33:aa:64:0a:38:1a:78:b8:b8:ec:3a:f2:e0: e7:f5:7f:bb:7a:0d:99:71:cf:ab:ba:bb:5b:fb:ef:58:28:84: 32:47:7f:3f:a3:2d:2e:b9:3b:4f:75:73:ac:3e:de:d7:5c:df: 45:6e:8e:f9:50:73:02:e7:86:dc:43:43:64:67:4c:14:6a:e9: 05:da:37:3b:75:ff:08:da:c2:62:a0:4c:53:c2:96:3a:29:46: a9:20:12:25:38:ab:2c:40:57:5b:d8:59:45:a9:15:f2:da:b7: 09:01:1f:b5:44:20:d0:1f:e1:10:61:47:83:8b:e4:ec:66:72: ba:18:aa:cd:7c:83:16:39:f0:94:9d:51:cd:93:75:8d:61:f1: cd:3f:be:9d:e1:da:40:63:54:62:9a:e5:b7:1d:3b:71:41:68: a5:0c:65:b9:60:37:21:06:28:66:39:ac:d4:c1:81:a5:9e:7a: c7:9f:3f:11 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKEIwOTEwQjA3Qzg2QjBGRkEzMDBBNTJBQzdDMzFGQ0I1 MkMwNTMyRDcwHhcNMjQxMjE0MjMwMTQ4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzVlMGU1Yy1hYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9mARjoNjIhHDnOjbaaxDKWj/1Z7xcxie4yC2ZjK5iAZwf1mzvTuDTwun/E1 DSQtp+V6ls04sy0dgCiSVLJQ1+p3oT9Hk/XFoz9iPvIiYZAGcEkOQrhGCB3n3vrp fbpg5QI2iGCzOW50XZMa2w4gIojv0b5OIcSdCgyD3LcnrXIFygxXE9zuU8XKTb5j 1yzku+73SP0q2g/p55iL190YKQtZVPE0NwfIJ5tgsam+FvITD2uTqHxEIuHiD7dS g1JuO42TjRI4+xm4H8eayaUBOvIguib3v7lVTJriYE2YlEISBJqPPZD+nsPkeaBp +l9n8/EYGwO65kh5NMadYJ8EzQIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFAyqjIQq mwAc9TbTZ4J5NgM10jUoMB8GA1UdIwQYMBaAFLCRCwfIaw/6MApSrHwx/LUsBTLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82MkQwM0U4Q0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRfb3dDbEtzZkRIOHRTd0ZN dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NKRUxCOGhyRF9vd0NsS3NmREg4dFN3Rk10Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjc3N0MvNjJEMDNFOENCMkRBMTFFQjhCMzg0QTYwQzRGOUFFMDIvOTA5NUZDMkNC MkU4MTFFQkFEQkIzNzUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYwYIKwYBBQUHAQcBAf8E VDBSMFAEAgABMEoDBAJII/gDBAJKcjADBAOHVOgDBAOSWJgwDAMEAp91hAMEBJ91 gAMEAJ91yQMEAJ913wMEA6VU6AMEA9BC6AMEAtBH1AMEAtBRdDANBgkqhkiG9w0B AQsFAAOCAQEAO+7sz7DPn5bWyWOX67mrCpMRSV1JfmtpO8LnWL+6XKxpkGXytCOl KIJAkgGrLJ3Gqx7UENp2iRRWueArtN5wJUmEtph7XzIEB0AciFYzqmQKOBp4uLjs OvLg5/V/u3oNmXHPq7q7W/vvWCiEMkd/P6MtLrk7T3VzrD7e11zfRW6O+VBzAueG 3ENDZGdMFGrpBdo3O3X/CNrCYqBMU8KWOilGqSASJTirLEBXW9hZRakV8tq3CQEf tUQg0B/hEGFHg4vk7GZyuhiqzXyDFjnwlJ1RzZN1jWHxzT++neHaQGNUYprltx07 cUFopQxluWA3IQYoZjms1MGBpZ56x58/EQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:51 2025 by rpki-client