$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/FB1F8158242A11ED9547B486C4F9AE02.roa File: FB1F8158242A11ED9547B486C4F9AE02.roa (raw, json) Hash identifier: F+DLJ1aQV5oLLpGFe5erh1ip1G2eNsPVMkZyfdufJjc= Subject key identifier: 77:40:83:E5:6E:68:41:B8:29:AD:80:6C:10:87:E9:0E:01:D3:53:94 Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 022B Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/FB1F8158242A11ED9547B486C4F9AE02.roa Signing time: Wed 09 Apr 2025 01:37:25 +0000 ROA not before: Wed 09 Apr 2025 01:37:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23859 IP address blocks: 129.94.0.0/16 maxlen: 16 131.236.0.0/16 maxlen: 16 149.171.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: Apr 9 01:37:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f5cf54-86ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:60:91:e6:8a:56:f7:bd:34:73:d1:1b:45: 30:bb:9d:6a:c0:f3:50:64:99:9a:51:23:dc:6c:be: 4b:89:e5:ef:82:ee:92:c6:51:38:20:d5:14:92:65: 92:ac:76:ea:7b:f5:a2:24:59:9f:a5:3d:74:08:a6: 2a:02:64:bc:71:f3:02:c7:4d:f3:3b:dd:f6:e5:a5: aa:8d:94:05:cb:4d:46:ac:6b:f5:d4:41:7e:76:63: 91:3d:03:6a:9e:0b:6c:b0:1e:bb:b3:67:3b:6c:11: b3:bb:e6:3a:85:7f:0e:f8:e6:6d:71:01:6f:05:bc: cc:43:d1:81:df:02:63:83:92:7b:b2:e8:c5:e6:3b: 09:4b:a8:c7:b1:a3:39:0a:44:07:38:c9:58:6f:95: 5e:d1:ce:93:ec:dc:a7:5c:09:43:77:04:ee:1c:c2: ea:77:73:a6:5b:6e:5b:6a:19:0f:c7:a1:09:b1:c9: 48:c1:a0:83:03:bc:ea:8b:81:fb:14:ca:fd:89:50: 4b:94:ab:3e:0e:e1:3d:91:1c:97:25:84:26:23:7d: 16:0d:cd:df:70:36:3f:d3:59:d8:1d:08:52:4d:6e: 45:c8:68:e6:5c:c2:0e:cf:9f:37:71:f1:bd:27:c3: d6:a8:6b:0c:af:7b:aa:45:41:4b:5c:64:c2:81:43: 07:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:40:83:E5:6E:68:41:B8:29:AD:80:6C:10:87:E9:0E:01:D3:53:94 X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/FB1F8158242A11ED9547B486C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 129.94.0.0/16 131.236.0.0/16 149.171.0.0/16 Signature Algorithm: sha256WithRSAEncryption 03:3a:17:4c:39:ab:e8:aa:75:56:29:b9:db:6c:5a:d6:42:2f: 79:66:c6:57:0d:a4:91:de:46:f6:ba:4a:8b:69:f2:1f:38:6f: 59:08:45:a0:d3:1b:c9:e0:0f:7c:30:c9:54:ef:bb:0a:1a:23: 3d:40:87:09:71:e7:15:5d:33:90:04:4e:35:3b:d7:d5:e2:e3: 70:2d:4d:e8:e3:f4:81:a7:ec:fd:c9:2e:7b:24:e9:b8:0e:9c: 7d:dd:f3:e6:ea:91:ba:2d:f7:37:13:64:11:0c:7b:19:b9:56: 7d:e2:47:2b:a9:0e:74:09:9e:81:47:96:4d:3f:6d:4c:4a:01: e4:88:bc:fc:8a:10:e4:be:3f:67:fb:ab:4d:93:eb:1e:01:50: 54:07:9d:2a:88:6e:ab:ae:9c:37:00:29:30:62:91:c6:be:c5: f3:94:81:94:8c:bd:f3:8b:8f:22:58:91:b1:42:59:1a:5b:94: 54:a9:97:a7:74:cd:55:4a:19:18:5e:40:98:b7:23:97:d6:19: 87:fb:d6:64:a1:a3:6e:7e:e3:5f:27:d5:9f:ff:5e:05:2b:35: cf:2a:c8:89:e5:d3:1b:61:c7:e1:2d:63:52:6a:d0:21:68:71: 48:d6:da:cf:0a:8e:f3:89:00:c5:2f:ab:84:cf:a7:b1:e8:7e: ac:b7:7c:27 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjUwNDA5MDEzNzI1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y1Y2Y1NC04NmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4RgkeaKVve9NHPRG0Uwu51qwPNQZJmaUSPcbL5LieXvgu6SxlE4INUUkmWS rHbqe/WiJFmfpT10CKYqAmS8cfMCx03zO9325aWqjZQFy01GrGv11EF+dmORPQNq ngtssB67s2c7bBGzu+Y6hX8O+OZtcQFvBbzMQ9GB3wJjg5J7sujF5jsJS6jHsaM5 CkQHOMlYb5Ve0c6T7NynXAlDdwTuHMLqd3OmW25bahkPx6EJsclIwaCDA7zqi4H7 FMr9iVBLlKs+DuE9kRyXJYQmI30WDc3fcDY/01nYHQhSTW5FyGjmXMIOz583cfG9 J8PWqGsMr3uqRUFLXGTCgUMHJQIDAQABo4ICnjCCApowHQYDVR0OBBYEFHdAg+Vu aEG4Ka2AbBCH6Q4B01OUMB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk1QUEvMTU2QkQ4OUUyNDI3MTFFREIzRUEzNDgwQzRGOUFFMDIvRkIxRjgxNTgy NDJBMTFFRDk1NDdCNDg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKAYIKwYBBQUHAQcBAf8E GTAXMBUEAgABMA8DAwCBXgMDAIPsAwMAlaswDQYJKoZIhvcNAQELBQADggEBAAM6 F0w5q+iqdVYpudtsWtZCL3lmxlcNpJHeRva6Sotp8h84b1kIRaDTG8ngD3wwyVTv uwoaIz1Ahwlx5xVdM5AETjU719Xi43AtTejj9IGn7P3JLnsk6bgOnH3d8+bqkbot 9zcTZBEMexm5Vn3iRyupDnQJnoFHlk0/bUxKAeSIvPyKEOS+P2f7q02T6x4BUFQH nSqIbquunDcAKTBikca+xfOUgZSMvfOLjyJYkbFCWRpblFSpl6d0zVVKGRheQJi3 I5fWGYf71mSho25+418n1Z//XgUrNc8qyInl0xthx+EtY1Jq0CFocUjW2s8KjvOJ AMUvq4TPp7Hofqy3fCc= -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:52 2025 by rpki-client