$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/25ED44B41EE411EFA62B1335C4F9AE02.roa File: 25ED44B41EE411EFA62B1335C4F9AE02.roa (raw, json) Hash identifier: zb91MkoqcDkuzuZwD7VYBRLCNDf9oSeL0ikN94ozVn8= Subject key identifier: 27:D7:CC:1D:C5:D7:91:02:09:3A:AB:30:B8:25:E4:C1:57:AF:C2:CD Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Certificate serial: 9B Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/25ED44B41EE411EFA62B1335C4F9AE02.roa Signing time: Fri 29 Nov 2024 05:28:25 +0000 ROA not before: Fri 29 Nov 2024 05:28:25 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 202013 IP address blocks: 203.56.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 04:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Validity Not Before: Nov 29 05:28:25 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674950f9-f993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:87:7c:a9:ff:7f:44:7c:f8:0d:44:3e:ea: 32:37:01:19:b5:ef:cb:f4:8a:54:49:a2:6e:ef:13: 6b:d8:fe:90:82:ab:71:d2:14:81:d6:f3:ed:b1:23: 0d:71:90:6c:07:f5:0c:e2:43:e0:04:49:fe:ee:6b: 66:2f:0f:78:9a:aa:78:37:1c:a6:d0:39:96:7c:7e: 4e:15:a4:54:f0:eb:65:eb:c7:2c:87:02:c2:35:c8: 1e:61:74:68:bc:63:08:db:10:31:e0:be:f6:97:61: 72:b0:81:60:48:f1:50:57:46:5a:07:36:cd:32:c5: 05:f6:64:ee:88:66:62:9a:ba:6d:d1:9e:c5:ff:64: 58:69:2c:59:af:2f:be:c0:58:13:90:1d:80:8f:85: 29:1c:38:29:a4:aa:d4:2e:77:7b:3b:bf:4a:06:54: 6b:c6:7a:53:c5:dc:5f:f1:86:73:27:d4:a9:2d:4b: 1b:d7:1e:8f:66:da:8c:eb:be:d4:56:c5:02:98:24: 9c:d5:b1:bc:bb:0c:22:0d:42:cd:8f:85:af:69:00: c6:fd:a4:f2:94:de:70:90:f9:93:4e:15:e9:7b:bd: b4:4f:62:78:cf:bf:9e:50:fc:a1:b0:be:b4:71:a4: 8e:07:fc:f8:21:72:d5:5c:a1:6a:77:7f:b4:eb:29: c7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D7:CC:1D:C5:D7:91:02:09:3A:AB:30:B8:25:E4:C1:57:AF:C2:CD X509v3 Authority Key Identifier: keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/25ED44B41EE411EFA62B1335C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.56.81.0/24 Signature Algorithm: sha256WithRSAEncryption 99:5c:e5:d1:38:f5:5c:b4:e9:fe:5e:de:c1:95:e5:0b:8f:27: 94:d1:6b:59:9f:99:85:6e:09:eb:0d:88:de:72:b6:a6:4d:87: 15:e9:3c:ee:b7:83:68:5d:a6:23:8f:32:e4:92:95:78:f1:64: cb:b4:3e:06:24:e9:f3:79:ad:2f:34:e2:a4:c4:95:c1:ea:23: 19:5f:05:4b:f6:5d:c2:4d:7f:2c:94:f2:ed:84:1f:0b:91:e6: 75:9f:2e:bd:8c:49:60:18:cc:57:af:ac:cf:66:58:d4:ee:69: 33:15:f0:ac:81:0a:2a:b8:12:f3:4d:13:05:be:70:fa:22:93: 92:02:ca:01:06:80:58:5d:70:75:ac:58:43:c1:a4:78:d9:b3: 4b:19:3e:1c:ca:97:b9:95:ef:0f:66:60:5b:2c:cb:ce:17:9b: 59:76:07:62:14:17:d2:5d:2d:ee:36:ac:bf:e8:0e:bc:94:12: 38:99:5a:ca:7f:43:e3:88:5a:89:09:7f:f3:6c:ec:58:59:89: 77:ac:03:16:09:43:1d:52:66:92:5b:73:47:04:13:8c:c0:b3: 0a:53:f3:89:38:16:66:a5:3b:40:d8:02:e7:0b:31:75:91:6e: 1d:c0:02:0f:ca:4c:98:8b:b6:64:34:cc:42:1f:d6:bc:16:0e: 60:e3:ef:00 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3MTExMTAvBgNVBAUTKEU0MjlENDI5RTY2Qjc5N0IzRDhBMUNCRTI0OTE1NzdB REMzOEE0OEUwHhcNMjQxMTI5MDUyODI1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ5NTBmOS1mOTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9KHfKn/f0R8+A1EPuoyNwEZte/L9IpUSaJu7xNr2P6Qgqtx0hSB1vPtsSMN cZBsB/UM4kPgBEn+7mtmLw94mqp4Nxym0DmWfH5OFaRU8Otl68cshwLCNcgeYXRo vGMI2xAx4L72l2FysIFgSPFQV0ZaBzbNMsUF9mTuiGZimrpt0Z7F/2RYaSxZry++ wFgTkB2Aj4UpHDgppKrULnd7O79KBlRrxnpTxdxf8YZzJ9SpLUsb1x6PZtqM677U VsUCmCSc1bG8uwwiDULNj4WvaQDG/aTylN5wkPmTThXpe720T2J4z7+eUPyhsL60 caSOB/z4IXLVXKFqd3+06ynHLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCfXzB3F 15ECCTqrMLgl5MFXr8LNMB8GA1UdIwQYMBaAFOQp1Cnma3l7PYocviSRV3rcOKSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzcxMS9DN0QxQjA1NDFF RTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVYczlpaHktSkpGWGV0dzRw STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0M3MTEvQzdEMUIwNTQxRUUzMTFFRjkwRDIxMjM0QzRGOUFFMDIvMjVFRDQ0QjQx RUU0MTFFRkE2MkIxMzM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLOFEwDQYJKoZIhvcNAQELBQADggEBAJlc5dE49Vy06f5e 3sGV5QuPJ5TRa1mfmYVuCesNiN5ytqZNhxXpPO63g2hdpiOPMuSSlXjxZMu0PgYk 6fN5rS804qTElcHqIxlfBUv2XcJNfyyU8u2EHwuR5nWfLr2MSWAYzFevrM9mWNTu aTMV8KyBCiq4EvNNEwW+cPoik5ICygEGgFhdcHWsWEPBpHjZs0sZPhzKl7mV7w9m YFssy84Xm1l2B2IUF9JdLe42rL/oDryUEjiZWsp/Q+OIWokJf/Ns7FhZiXesAxYJ Qx1SZpJbc0cEE4zAswpT84k4FmalO0DYAucLMXWRbh3AAg/KTJiLtmQ0zEIf1rwW DmDj7wA= -----END CERTIFICATE-----Generated at Tue Apr 29 00:12:11 2025 by rpki-client