$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/3EA78B421D0B11F08389C829C4F9AE02.roa File: 3EA78B421D0B11F08389C829C4F9AE02.roa (raw, json) Hash identifier: Zom0iTa1l4g+6GEwfgEYM14KGZ3hjzTabgrahTulsVY= Subject key identifier: BD:13:3B:14:58:F9:56:A2:98:EF:60:3E:15:B4:0D:02:65:40:E8:BA Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 0102 Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/3EA78B421D0B11F08389C829C4F9AE02.roa Signing time: Sat 19 Apr 2025 10:44:18 +0000 ROA not before: Sat 19 Apr 2025 10:44:18 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 151354 IP address blocks: 210.79.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Apr 19 10:44:18 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68037e82-f206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8e:0b:5b:be:32:55:88:35:f5:c9:e2:b2:01: 9c:ce:07:4c:23:86:81:f4:31:16:2e:ae:62:c1:15: a2:ef:49:b7:c7:10:54:4d:03:c7:8f:44:b9:2f:d2: 4f:eb:cb:ef:8b:fe:ef:30:ca:e1:cf:c7:c6:d7:78: 0f:56:1e:27:ba:a4:d1:ae:01:7f:12:c1:36:52:da: 02:54:4c:36:ef:c6:f5:a6:56:45:a5:e7:c8:e7:58: 16:f0:0c:e8:77:ad:4c:76:bb:3c:c1:e1:5f:2c:23: f1:ad:b3:a3:18:1e:aa:76:04:06:f0:cd:50:7d:86: 08:84:ac:d6:7c:66:8d:07:a1:da:f3:4b:70:cc:ba: f5:c7:ca:0a:62:b4:12:6a:01:0d:1d:d4:29:e9:f2: ee:6e:d1:25:2d:24:80:63:f3:a9:41:9f:ef:ea:21: c0:db:09:8a:50:ec:7b:56:56:8e:26:3b:92:af:cd: a7:be:65:b7:ef:4a:11:20:50:5a:9c:41:1e:e2:f2: 7b:fb:cb:aa:e0:91:7e:80:82:33:64:29:44:90:22: d2:2e:32:a9:27:f2:f6:cf:36:b9:91:98:bf:5c:1e: 01:6a:c6:b8:91:b1:d0:79:72:ad:64:6b:09:2b:e5: 9c:a0:ab:b1:32:db:19:6c:cb:fd:19:4a:65:53:7d: ac:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:13:3B:14:58:F9:56:A2:98:EF:60:3E:15:B4:0D:02:65:40:E8:BA X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/3EA78B421D0B11F08389C829C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.79.179.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:00:6a:37:8b:be:7e:70:4b:be:ee:0d:d7:c1:47:c7:0a:5f: 35:4f:6d:ff:19:c3:a8:12:a2:28:42:08:33:35:45:1e:54:4e: 2b:7b:7e:64:2a:1e:80:3c:0a:85:ca:fd:9e:b0:36:f0:34:4f: ab:20:c1:4a:5f:bc:d1:46:2a:ff:95:2b:37:0f:c1:c9:48:3e: 03:1f:7c:3e:e2:fc:d5:bd:61:e0:e9:a3:67:14:18:a1:76:13: 61:8b:6a:55:f0:fd:36:e4:3a:d9:b3:12:b9:e8:3b:95:4d:4c: 13:c7:30:55:7c:8f:97:17:ab:9a:ed:9e:95:b8:47:af:3d:82: 54:70:27:4d:3b:64:8e:3c:1d:3d:93:d4:a1:40:ea:3e:48:40: dd:b2:b7:67:fa:6e:f4:ae:75:e2:48:76:5a:02:5c:c1:f4:9c: 73:46:c5:bf:ef:a2:d5:81:52:28:f3:27:1f:9f:20:12:20:e8: a0:0b:b7:1f:8d:39:3b:d9:2c:dd:75:96:47:39:60:e9:ab:85: 10:2f:d5:c8:fa:1b:aa:ce:08:34:02:82:79:38:90:73:de:e2: 87:a4:80:be:f8:4b:72:83:4e:bd:ab:aa:b7:30:d1:28:0a:04: fd:e4:f5:c8:cc:1a:dd:93:81:08:ad:5b:0e:33:c9:2e:30:d2: 38:46:f1:d0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjUwNDE5MTA0NDE4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAzN2U4Mi1mMjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx44LW74yVYg19cnisgGczgdMI4aB9DEWLq5iwRWi70m3xxBUTQPHj0S5L9JP 68vvi/7vMMrhz8fG13gPVh4nuqTRrgF/EsE2UtoCVEw278b1plZFpefI51gW8Azo d61Mdrs8weFfLCPxrbOjGB6qdgQG8M1QfYYIhKzWfGaNB6Ha80twzLr1x8oKYrQS agENHdQp6fLubtElLSSAY/OpQZ/v6iHA2wmKUOx7VlaOJjuSr82nvmW370oRIFBa nEEe4vJ7+8uq4JF+gIIzZClEkCLSLjKpJ/L2zza5kZi/XB4Basa4kbHQeXKtZGsJ K+WcoKuxMtsZbMv9GUplU32sdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL0TOxRY +VaimO9gPhW0DQJlQOi6MB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzU0QTEvNzQwMkQ4RDg5QjYwMTFFRTg2RUUxRDEwQzRGOUFFMDIvM0VBNzhCNDIx RDBCMTFGMDgzODlDODI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADST7MwDQYJKoZIhvcNAQELBQADggEBAH8AajeLvn5wS77u DdfBR8cKXzVPbf8Zw6gSoihCCDM1RR5UTit7fmQqHoA8CoXK/Z6wNvA0T6sgwUpf vNFGKv+VKzcPwclIPgMffD7i/NW9YeDpo2cUGKF2E2GLalXw/TbkOtmzErnoO5VN TBPHMFV8j5cXq5rtnpW4R689glRwJ007ZI48HT2T1KFA6j5IQN2yt2f6bvSudeJI dloCXMH0nHNGxb/votWBUijzJx+fIBIg6KALtx+NOTvZLN11lkc5YOmrhRAv1cj6 G6rOCDQCgnk4kHPe4oekgL74S3KDTr2rqrcw0SgKBP3k9cjMGt2TgQitWw4zyS4w 0jhG8dA= -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:56 2025 by rpki-client