$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/3F69EB4C1D0B11F08389C829C4F9AE02.roa File: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (raw, json) Hash identifier: RZQLqgkDqewk5axvH6Oc8EUFZmGFnVcsr5Jv2NK8MAw= Subject key identifier: D9:F9:91:33:92:CA:F1:15:3C:1D:B4:B1:A4:13:FE:82:F1:E1:5A:5D Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 0103 Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/3F69EB4C1D0B11F08389C829C4F9AE02.roa Signing time: Sat 19 Apr 2025 10:44:19 +0000 ROA not before: Sat 19 Apr 2025 10:44:19 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152141 IP address blocks: 210.79.178.0/24 maxlen: 24 2001:df3:39c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Apr 19 10:44:19 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68037e83-b858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:e4:f9:06:e9:b2:9f:e2:1c:49:a2:b8:c5: 23:1d:57:71:81:c4:5f:68:f8:6b:be:00:b6:3a:87: 31:a6:2d:2b:a3:dd:7e:d5:38:a7:ab:5c:45:21:d5: b3:bb:f8:6d:2d:60:6a:8c:08:88:8c:53:72:1a:8b: 25:02:31:f7:f0:4e:a9:51:46:d0:53:1d:13:d6:e0: ff:1b:87:83:74:89:37:97:5f:8a:63:c7:16:00:1b: 82:9d:e1:45:f6:bc:34:7a:aa:1c:21:d9:ef:95:05: 9c:d9:d1:be:27:0f:33:e4:5c:d2:8f:13:47:f0:e1: 4a:f0:83:6e:ca:75:11:3f:f1:74:93:9f:13:67:01: 06:c5:bf:82:45:96:9b:3c:21:bf:0d:3f:6b:aa:6d: 9d:8c:93:42:4b:5a:ae:3f:54:c1:af:93:3b:2b:89: d0:3c:50:dd:46:df:f4:3d:c4:49:0f:40:e8:30:a2: e4:94:73:13:39:80:55:a9:38:3f:7e:ed:cc:9a:c3: 87:5d:18:39:2e:35:19:87:3d:93:c8:47:22:4f:60: 15:0b:35:ef:13:ce:eb:90:d9:e8:41:63:b7:1c:4d: 00:9a:60:4a:60:f7:96:ba:ca:82:31:5e:9a:32:d5: f3:38:fd:0e:1d:d8:7f:bd:98:f2:27:f2:8a:4f:ea: 03:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F9:91:33:92:CA:F1:15:3C:1D:B4:B1:A4:13:FE:82:F1:E1:5A:5D X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/3F69EB4C1D0B11F08389C829C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.79.178.0/24 IPv6: 2001:df3:39c0::/48 Signature Algorithm: sha256WithRSAEncryption 80:db:b6:a7:ec:af:91:d0:49:1f:f1:e1:be:44:86:d9:02:b5: 18:89:bf:29:db:5f:36:95:ee:40:f2:41:ba:83:4e:d4:4c:5b: 68:f6:38:23:b5:a1:35:58:22:d0:a6:f7:59:dd:20:29:47:4e: c4:77:51:df:29:ef:b8:77:5b:55:cf:db:c4:01:98:d2:46:6b: 83:d5:93:1a:f0:c4:64:29:33:2b:ad:16:01:a3:ff:81:24:4b: 7c:9c:09:52:df:5b:30:fc:bf:97:12:e1:5e:03:5c:ca:e4:25: de:0f:61:61:4e:10:11:d6:9d:08:e1:96:e2:1d:ee:5b:0c:f2: 0c:e1:21:f1:05:8a:5d:87:1c:e3:b5:2a:b9:94:e8:08:18:a7: 4a:2a:b9:8a:4d:51:3d:10:2d:d9:b5:f9:f2:8b:9d:15:df:ca: 3e:ad:3f:c1:bc:99:e3:92:49:21:37:91:d7:28:7a:d1:9e:ab: 47:85:75:1c:ea:38:42:11:a2:cb:77:60:14:d9:5b:90:70:62: 5e:4f:23:7d:36:29:2a:fc:b6:c6:be:33:5e:e9:76:d9:dc:8c: b7:ee:9f:ed:71:9f:e9:70:0e:cb:d6:5a:de:24:2a:a9:24:39: 5a:b2:bf:2b:0a:d2:cb:34:d9:13:fc:52:53:74:7b:36:c2:92: bc:0c:b5:c8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjUwNDE5MTA0NDE5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAzN2U4My1iODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTLk+Qbpsp/iHEmiuMUjHVdxgcRfaPhrvgC2Oocxpi0ro91+1Tinq1xFIdWz u/htLWBqjAiIjFNyGoslAjH38E6pUUbQUx0T1uD/G4eDdIk3l1+KY8cWABuCneFF 9rw0eqocIdnvlQWc2dG+Jw8z5FzSjxNH8OFK8INuynURP/F0k58TZwEGxb+CRZab PCG/DT9rqm2djJNCS1quP1TBr5M7K4nQPFDdRt/0PcRJD0DoMKLklHMTOYBVqTg/ fu3MmsOHXRg5LjUZhz2TyEciT2AVCzXvE87rkNnoQWO3HE0AmmBKYPeWusqCMV6a MtXzOP0OHdh/vZjyJ/KKT+oDVQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNn5kTOS yvEVPB20saQT/oLx4VpdMB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzU0QTEvNzQwMkQ4RDg5QjYwMTFFRTg2RUUxRDEwQzRGOUFFMDIvM0Y2OUVCNEMx RDBCMTFGMDgzODlDODI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADST7IwDwQCAAIwCQMHACABDfM5wDANBgkqhkiG9w0BAQsF AAOCAQEAgNu2p+yvkdBJH/HhvkSG2QK1GIm/KdtfNpXuQPJBuoNO1ExbaPY4I7Wh NVgi0Kb3Wd0gKUdOxHdR3ynvuHdbVc/bxAGY0kZrg9WTGvDEZCkzK60WAaP/gSRL fJwJUt9bMPy/lxLhXgNcyuQl3g9hYU4QEdadCOGW4h3uWwzyDOEh8QWKXYcc47Uq uZToCBinSiq5ik1RPRAt2bX58oudFd/KPq0/wbyZ45JJITeR1yh60Z6rR4V1HOo4 QhGiy3dgFNlbkHBiXk8jfTYpKvy2xr4zXul22dyMt+6f7XGf6XAOy9Za3iQqqSQ5 WrK/KwrSyzTZE/xSU3R7NsKSvAy1yA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:32 2025 by rpki-client