$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A3FED87EFC7C11EF9988DB39C4F9AE02.roa File: A3FED87EFC7C11EF9988DB39C4F9AE02.roa (raw, json) Hash identifier: b9kFI2LP+2ffZX2yHsw0CgRPAE32uqdcH6V4JxpMSsg= Subject key identifier: 18:07:B3:DB:2A:59:D2:7E:57:CA:8B:CA:C8:7D:FD:9F:6C:E2:52:69 Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Certificate serial: 5FBB Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A3FED87EFC7C11EF9988DB39C4F9AE02.roa Signing time: Sun 09 Mar 2025 00:22:53 +0000 ROA not before: Sun 09 Mar 2025 00:22:53 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 133929 IP address blocks: 210.0.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 21:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24507 (0x5fbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Validity Not Before: Mar 9 00:22:53 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67ccdf5d-e018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:26:6f:fe:ba:cd:93:0c:9a:92:3d:8f:36:7b: ad:02:5a:3b:2d:8a:b7:39:e9:75:e6:f2:94:ea:d3: fb:eb:3f:e6:9e:0a:2e:eb:4a:7d:49:b6:5e:92:41: 40:31:bb:3c:fd:5a:a6:2b:4e:aa:84:5e:be:de:c5: cf:ec:2a:79:b8:4e:49:06:22:b8:ac:c0:6f:4e:08: 6a:d1:7f:30:1d:3d:18:03:c9:90:a2:e0:4d:2f:22: f0:ce:86:e6:5c:96:ad:f6:be:86:35:08:c4:c5:dd: b4:74:c4:f7:1a:35:3d:10:00:6d:42:e3:f3:5b:3b: 80:f2:84:c1:67:13:c2:28:13:c3:12:41:06:e7:50: b2:53:c0:56:de:71:10:4a:ee:ad:c2:00:34:88:69: 5e:35:06:97:3f:53:6f:45:46:a8:a9:81:49:d0:b1: cc:8c:09:ef:04:b2:d4:b8:b5:6e:26:45:09:9c:bc: 7d:fe:c1:c6:7b:e1:7f:fa:b7:d6:03:66:19:10:d5: ea:01:75:61:1a:43:92:4f:2a:a7:a3:d8:2e:73:27: 41:8e:a4:7a:65:ef:94:28:87:ce:b1:17:8a:c5:f3: 8f:7d:38:ce:8b:1b:fb:34:ec:69:b7:35:f9:fb:8e: 69:23:4b:71:67:3a:fb:ba:3a:f9:b8:cc:81:ed:cb: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:07:B3:DB:2A:59:D2:7E:57:CA:8B:CA:C8:7D:FD:9F:6C:E2:52:69 X509v3 Authority Key Identifier: keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A3FED87EFC7C11EF9988DB39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.0.225.0/24 Signature Algorithm: sha256WithRSAEncryption 47:2e:e3:b0:eb:95:66:57:f8:52:a0:95:e4:4f:c5:0b:3a:c1: 7b:03:71:02:e1:d7:f4:ac:52:a2:ed:52:ee:c2:09:66:60:f0: 3c:e9:f5:31:27:d7:5a:64:0a:15:e8:1d:06:e1:99:06:5a:20: 68:99:da:48:be:6e:64:f0:e0:12:12:16:5b:9f:0c:18:e8:b9: 04:6f:a9:fd:eb:88:ea:6c:5d:7c:b0:56:ed:48:2e:7f:39:1a: 06:30:4b:2e:80:95:1b:ee:9f:aa:31:27:ab:43:5a:bb:12:06: eb:67:1e:c2:b8:f0:7b:e4:9d:be:9f:5d:67:8e:f9:00:1e:9e: 7c:f9:00:bb:71:47:2b:0e:4d:bd:c1:88:e0:6b:5d:4d:ab:0a: 6a:13:ea:17:d3:b4:18:92:5c:12:00:7b:62:a3:72:4a:38:53: 2a:c6:32:b1:d2:c7:e3:de:be:a6:8b:d4:16:e0:01:51:52:52: a3:7b:89:f3:48:6a:be:06:72:39:e5:aa:41:4d:b9:38:e3:8a: d0:dc:05:a3:3f:c6:04:9d:62:55:03:bb:1f:be:89:00:89:f3: 8d:b1:28:25:96:05:a0:ea:82:c5:b9:e5:f0:a9:c1:fb:7a:41: 58:8f:b2:9c:fa:e1:f9:d8:ee:96:b3:e9:c8:4a:c0:44:74:c6: bd:c8:c3:18 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICX7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy RkVENDQ4NTcwHhcNMjUwMzA5MDAyMjUzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NjZGY1ZC1lMDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6iZv/rrNkwyakj2PNnutAlo7LYq3Oel15vKU6tP76z/mngou60p9SbZekkFA Mbs8/VqmK06qhF6+3sXP7Cp5uE5JBiK4rMBvTghq0X8wHT0YA8mQouBNLyLwzobm XJat9r6GNQjExd20dMT3GjU9EABtQuPzWzuA8oTBZxPCKBPDEkEG51CyU8BW3nEQ Su6twgA0iGleNQaXP1NvRUaoqYFJ0LHMjAnvBLLUuLVuJkUJnLx9/sHGe+F/+rfW A2YZENXqAXVhGkOSTyqno9gucydBjqR6Ze+UKIfOsReKxfOPfTjOixv7NOxptzX5 +45pI0txZzr7ujr5uMyB7ctj2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBgHs9sq WdJ+V8qLysh9/Z9s4lJpMB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1 QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEzMjMvMDg0RDg4RDQ5NUI3MTFFQUJCODI0RjFCQzRGOUFFMDIvQTNGRUQ4N0VG QzdDMTFFRjk5ODhEQjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADSAOEwDQYJKoZIhvcNAQELBQADggEBAEcu47DrlWZX+FKg leRPxQs6wXsDcQLh1/SsUqLtUu7CCWZg8Dzp9TEn11pkChXoHQbhmQZaIGiZ2ki+ bmTw4BISFlufDBjouQRvqf3riOpsXXywVu1ILn85GgYwSy6AlRvun6oxJ6tDWrsS ButnHsK48Hvknb6fXWeO+QAennz5ALtxRysOTb3BiOBrXU2rCmoT6hfTtBiSXBIA e2Kjcko4UyrGMrHSx+PevqaL1BbgAVFSUqN7ifNIar4GcjnlqkFNuTjjitDcBaM/ xgSdYlUDux++iQCJ842xKCWWBaDqgsW55fCpwft6QViPspz64fnY7paz6chKwER0 xr3Iwxg= -----END CERTIFICATE-----Generated at Sat Apr 26 13:39:11 2025 by rpki-client