$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/2504266C1D1A11E8BDAD4F54C4F9AE02.roa File: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (raw, json) Hash identifier: Y4AICBsuBLbr1eccCbbUOeleXrW+auIswSTrvYqJTo0= Subject key identifier: EF:E1:83:9B:02:17:7D:87:61:E6:49:57:0F:E6:81:DD:36:2B:C1:E4 Certificate issuer: /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Certificate serial: 1AEC Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/2504266C1D1A11E8BDAD4F54C4F9AE02.roa Signing time: Mon 10 Feb 2025 16:33:55 +0000 ROA not before: Mon 10 Feb 2025 16:33:55 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 137478 IP address blocks: 202.144.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6892 (0x1aec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Validity Not Before: Feb 10 16:33:55 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67aa2a73-4072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cb:b6:5e:63:b9:9f:6f:30:6a:53:3f:3a:34: f4:37:b0:d9:20:da:c8:b7:76:75:ee:e6:13:d5:c1: f4:e9:b2:52:68:a2:63:e3:42:64:48:a3:0c:33:4f: 72:48:4b:41:83:4f:f6:4b:1b:58:07:e6:b6:92:b2: af:9e:87:82:28:a2:ff:cf:94:21:ab:b1:3c:40:41: 10:ac:20:a5:4b:73:8c:b4:14:78:1b:40:6d:02:67: fc:63:90:f8:ac:09:41:da:19:92:94:0d:1a:80:80: 4b:f0:bc:9b:db:02:ab:67:27:b9:31:0d:20:e6:83: cd:bd:99:fe:ff:95:1d:7e:1c:db:5d:f5:96:97:e8: 94:9f:7f:82:39:03:9b:8e:56:65:97:1d:2d:37:63: 3e:4b:6b:ff:06:61:dc:1a:4f:cd:3e:87:86:a4:2d: 6e:7d:23:77:8f:40:5e:5c:5d:69:07:09:b0:be:91: d5:55:a1:62:2c:f5:80:1b:15:b6:24:ca:10:02:93: 61:de:1b:25:31:8a:8f:8c:2e:23:a5:49:7d:bc:21: d1:76:40:3e:54:aa:35:96:3c:73:0b:0c:dc:8a:dc: 61:22:a1:71:70:96:85:67:53:a0:09:82:d1:1e:f5: 95:9f:54:ea:ed:9b:87:42:70:4b:5a:63:40:95:e9: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E1:83:9B:02:17:7D:87:61:E6:49:57:0F:E6:81:DD:36:2B:C1:E4 X509v3 Authority Key Identifier: keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/2504266C1D1A11E8BDAD4F54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.144.203.0/24 Signature Algorithm: sha256WithRSAEncryption 14:5c:41:bd:24:47:16:aa:72:87:b9:9b:aa:c8:bc:aa:a0:89: fe:67:bd:70:c2:6b:b3:9e:7b:f2:18:66:d8:9f:06:5a:3a:39: e1:bb:9c:cb:07:43:e0:b1:0c:31:bb:d6:3c:e3:ad:5d:39:04: 38:b6:92:ae:5c:9c:5f:16:74:cc:72:72:4d:53:64:ec:b7:ae: a3:f5:45:73:2b:24:07:be:01:3b:11:4a:5a:50:44:5d:ac:87: 46:7e:13:fb:c6:1e:80:a5:88:63:92:71:65:26:77:bf:f6:34: 6a:5f:25:db:fb:ba:a5:39:16:d8:43:eb:17:5f:f0:ec:a5:10: d7:c8:c9:14:a8:84:1e:39:e2:12:70:e7:8a:55:61:ee:fa:ba: 22:34:a0:a9:88:74:46:dd:03:ab:8e:b0:96:21:4a:46:8e:c9: 70:53:f6:9a:de:5a:bf:d7:fa:80:5d:67:73:56:a7:88:97:f5: 75:ac:88:46:3f:dd:e9:25:91:24:56:14:cf:2b:b4:18:56:4e: 03:d6:3c:86:f6:d5:e9:79:db:1c:f2:ab:45:37:a1:6c:88:f5: 6a:d2:79:6d:c4:7c:41:61:81:40:65:e6:2c:3c:b4:32:36:8a: 70:71:82:8d:77:08:35:14:67:64:2b:e0:f9:89:d4:e1:f1:7e: 89:9f:94:78 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwODMxMTAvBgNVBAUTKEI3QUE1MzczODMyMTRENjQ4RTYzM0JDQzQyMEQzQkQ2 ODYxNjc4RkQwHhcNMjUwMjEwMTYzMzU1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FhMmE3My00MDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA88u2XmO5n28walM/OjT0N7DZINrIt3Z17uYT1cH06bJSaKJj40JkSKMMM09y SEtBg0/2SxtYB+a2krKvnoeCKKL/z5Qhq7E8QEEQrCClS3OMtBR4G0BtAmf8Y5D4 rAlB2hmSlA0agIBL8Lyb2wKrZye5MQ0g5oPNvZn+/5UdfhzbXfWWl+iUn3+COQOb jlZllx0tN2M+S2v/BmHcGk/NPoeGpC1ufSN3j0BeXF1pBwmwvpHVVaFiLPWAGxW2 JMoQApNh3hslMYqPjC4jpUl9vCHRdkA+VKo1ljxzCwzcitxhIqFxcJaFZ1OgCYLR HvWVn1Tq7ZuHQnBLWmNAlelVBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO/hg5sC F32HYeZJVw/mgd02K8HkMB8GA1UdIwQYMBaAFLeqU3ODIU1kjmM7zEINO9aGFnj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA4My9BMENGMDU5QTJF NjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRXU09ZenZNUWcwNzFvWVdl UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q2cFRjNE1oVFdTT1l6dk1RZzA3MW9ZV2VQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMwODMvQTBDRjA1OUEyRTYwMTFFN0I3NDczRTcwQzRGOUFFMDIvMjUwNDI2NkMx RDFBMTFFOEJEQUQ0RjU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKkMswDQYJKoZIhvcNAQELBQADggEBABRcQb0kRxaqcoe5 m6rIvKqgif5nvXDCa7Oee/IYZtifBlo6OeG7nMsHQ+CxDDG71jzjrV05BDi2kq5c nF8WdMxyck1TZOy3rqP1RXMrJAe+ATsRSlpQRF2sh0Z+E/vGHoCliGOScWUmd7/2 NGpfJdv7uqU5FthD6xdf8OylENfIyRSohB454hJw54pVYe76uiI0oKmIdEbdA6uO sJYhSkaOyXBT9preWr/X+oBdZ3NWp4iX9XWsiEY/3eklkSRWFM8rtBhWTgPWPIb2 1el52xzyq0U3oWyI9WrSeW3EfEFhgUBl5iw8tDI2inBxgo13CDUUZ2Qr4PmJ1OHx fomflHg= -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:49 2025 by rpki-client