$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/99D4FC3212DC11EFB2470B7FC4F9AE02.roa File: 99D4FC3212DC11EFB2470B7FC4F9AE02.roa (raw, json) Hash identifier: E6NCI4JuiZoY4K+zXIld9/zlqD6qc3HulCUWdCEuTgY= Subject key identifier: F3:80:1B:53:EF:0E:66:93:06:F4:DE:E1:82:47:B6:28:AD:ED:98:0D Certificate issuer: /CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A Certificate serial: 018E Authority key identifier: 05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/99D4FC3212DC11EFB2470B7FC4F9AE02.roa Signing time: Fri 13 Dec 2024 02:35:57 +0000 ROA not before: Fri 13 Dec 2024 02:35:57 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139070 IP address blocks: 152.65.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF, serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A Validity Not Before: Dec 13 02:35:57 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675b9d8d-8355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:ef:73:c2:c4:38:c5:bb:3b:51:23:82:c6: ee:fa:f8:91:aa:a1:c5:b7:7a:38:36:31:a4:1f:93: 30:06:0e:68:e1:4a:88:b5:e6:f9:04:ea:3c:8d:97: 78:6d:44:0f:71:03:ff:82:18:b4:d8:01:44:1d:8a: f1:14:ef:03:c6:0c:cd:6f:af:27:80:76:e4:53:6e: 4e:88:86:cc:86:e4:18:ac:a8:76:f3:5f:a9:b3:57: 22:63:30:1f:d4:6f:0f:51:e3:05:0d:50:4d:11:51: 58:2b:2c:a9:01:81:3a:d7:a5:d4:ea:fd:27:26:62: d8:1f:03:e0:7a:c9:cf:fb:d5:22:7c:06:2a:f2:d7: b3:2b:1e:96:54:6c:ec:3d:fa:ad:42:d5:68:cb:b0: 25:f7:1d:39:6b:88:59:50:23:10:e0:f3:4d:2b:ef: f4:b3:71:4c:fb:75:5d:a8:ae:cd:09:86:1e:e2:80: 7d:52:30:3b:4f:af:4c:0f:3d:00:c4:5f:a9:8a:db: e6:50:48:14:95:6d:6f:e6:62:f6:73:2d:6d:30:69: 38:7d:4a:8d:31:7c:2f:61:b9:0f:87:bc:26:05:01: 46:72:12:f9:d2:27:54:4c:36:e1:4a:b4:cc:7f:94: 7c:3a:0e:a2:55:ba:c0:1b:cf:94:16:95:e1:7f:fb: 70:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:80:1B:53:EF:0E:66:93:06:F4:DE:E1:82:47:B6:28:AD:ED:98:0D X509v3 Authority Key Identifier: keyid:05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/99D4FC3212DC11EFB2470B7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.65.246.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:8e:48:80:9b:8b:20:23:16:3b:cc:18:4c:0f:ec:69:eb:6e: 16:78:4e:43:1b:b9:3f:1a:48:97:a8:0f:11:57:04:ac:7b:33: bf:a7:28:03:fc:44:91:c7:01:19:49:33:ac:3c:ea:59:05:d8: d7:18:49:20:10:b0:f8:64:15:6c:b6:60:53:2a:69:d1:a0:76: 06:86:eb:db:58:9d:1a:01:68:ad:a2:d4:89:9b:5e:75:cb:ec: de:c3:2a:20:9c:c2:2b:c9:db:25:d8:fd:d4:ff:d2:2f:c4:ee: 3c:3c:11:d3:3e:b5:b5:99:c2:3d:0b:79:49:e2:87:fa:19:b9: b2:54:2f:3b:ee:ce:35:8e:6f:37:b6:33:02:db:fc:f0:00:d3: e0:80:75:0c:ed:f6:5a:13:ea:11:1d:aa:98:e2:a2:4d:be:3b: 89:08:fe:06:b2:16:4b:9d:19:4e:a1:5a:b0:8f:1a:76:b4:6f: 1a:da:ae:29:1c:bd:47:3e:72:27:b1:b7:db:74:06:6b:5b:84: 60:43:af:bf:c8:8e:df:25:79:d6:9c:4a:8c:87:d3:c9:16:a0: 9c:0c:a9:c1:97:a3:4b:ef:56:58:1e:15:9a:35:b6:22:3d:93: 8b:d4:2f:8a:68:9f:1e:a8:a5:69:fd:37:2f:20:d5:17:23:c5: 21:bf:11:d1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDA1RDM2NTUwMERBNEIyQzAwMTg5RjNDNkNBNTk1MEUw MDc0QzdDNEEwHhcNMjQxMjEzMDIzNTU3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzViOWQ4ZC04MzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzHvc8LEOMW7O1Ejgsbu+viRqqHFt3o4NjGkH5MwBg5o4UqIteb5BOo8jZd4 bUQPcQP/ghi02AFEHYrxFO8DxgzNb68ngHbkU25OiIbMhuQYrKh281+ps1ciYzAf 1G8PUeMFDVBNEVFYKyypAYE616XU6v0nJmLYHwPgesnP+9UifAYq8tezKx6WVGzs PfqtQtVoy7Al9x05a4hZUCMQ4PNNK+/0s3FM+3VdqK7NCYYe4oB9UjA7T69MDz0A xF+pitvmUEgUlW1v5mL2cy1tMGk4fUqNMXwvYbkPh7wmBQFGchL50idUTDbhSrTM f5R8Og6iVbrAG8+UFpXhf/twEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPOAG1Pv DmaTBvTe4YJHtiit7ZgNMB8GA1UdIwQYMBaAFAXTZVANpLLAAYnzxspZUOAHTHxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9FQTY3QTk4QzdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9CZE5sVUEya3NzQUJpZlBHeWxsUTRBZE1m RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JkTmxVQTJrc3NBQmlmUEd5bGxRNEFkTWZFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzhFREYvRUE2N0E5OEM3QzU3MTFFREJGMjEzNzY3QzRGOUFFMDIvOTlENEZDMzIx MkRDMTFFRkIyNDcwQjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACYQfYwDQYJKoZIhvcNAQELBQADggEBAEqOSICbiyAjFjvM GEwP7GnrbhZ4TkMbuT8aSJeoDxFXBKx7M7+nKAP8RJHHARlJM6w86lkF2NcYSSAQ sPhkFWy2YFMqadGgdgaG69tYnRoBaK2i1ImbXnXL7N7DKiCcwivJ2yXY/dT/0i/E 7jw8EdM+tbWZwj0LeUnih/oZubJULzvuzjWObze2MwLb/PAA0+CAdQzt9loT6hEd qpjiok2+O4kI/gayFkudGU6hWrCPGna0bxrarikcvUc+ciext9t0BmtbhGBDr7/I jt8ledacSoyH08kWoJwMqcGXo0vvVlgeFZo1tiI9k4vUL4ponx6opWn9Ny8g1Rcj xSG/EdE= -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:41 2025 by rpki-client