$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/8DEEDC96E6B511EF9FEF6436C4F9AE02.roa File: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (raw, json) Hash identifier: 0Wp24a54v+z2yZzn7ZdVr/HDi0WffJnb8k/Q3oLm6hg= Subject key identifier: 9C:E4:04:E8:3A:12:D6:3F:BE:23:15:43:FF:43:6D:CB:B2:02:86:7D Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 053E Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/8DEEDC96E6B511EF9FEF6436C4F9AE02.roa Signing time: Sun 09 Feb 2025 07:14:52 +0000 ROA not before: Sun 09 Feb 2025 07:14:52 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 45271 IP address blocks: 1.38.209.0/24 maxlen: 24 1.38.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1342 (0x53e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Feb 9 07:14:52 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67a855eb-c509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:4c:5f:cb:36:ea:db:2e:5c:99:41:eb:bc: a4:4a:af:72:71:83:8b:fe:0a:48:b8:d5:73:0c:d4: 63:f0:a4:f5:5d:4f:32:6e:4a:61:a7:3a:1a:82:e6: cf:2e:35:1c:62:ad:35:ba:93:d9:f2:7b:76:d1:5e: bb:0e:52:e1:0c:48:77:54:8e:e2:c6:9c:3a:1b:dc: ac:78:b6:1d:40:d1:0d:f1:a3:0f:00:41:d6:24:f5: 13:a0:ac:77:d8:f4:86:ca:0c:cc:99:f3:20:d1:b8: 72:fb:1a:a9:a5:ac:5b:56:0f:9e:fe:f1:9c:b7:d9: 4e:ba:a6:69:81:17:79:b4:1a:34:2e:df:4f:8c:8a: b7:f4:4f:f1:8d:e6:71:31:f7:77:17:04:df:5c:d9: 1b:76:8f:7f:3f:34:bb:b8:1b:c7:b6:35:d7:47:f7: b9:55:58:bb:92:d4:de:d7:6d:5f:42:51:27:48:f3: 6a:16:f5:0f:19:bd:92:25:5b:d7:c3:5b:f5:40:76: 6f:13:7c:6f:e7:52:21:4a:50:8d:99:59:a9:f5:17: bc:32:3c:2a:b6:75:df:10:ce:30:33:58:28:8f:ad: fa:18:3c:04:97:97:23:36:a7:2b:cb:b3:00:00:07: c4:a6:83:aa:2d:eb:b8:4f:05:22:70:60:2e:cf:56: de:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E4:04:E8:3A:12:D6:3F:BE:23:15:43:FF:43:6D:CB:B2:02:86:7D X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/8DEEDC96E6B511EF9FEF6436C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.38.209.0-1.38.210.255 Signature Algorithm: sha256WithRSAEncryption 30:b7:4a:2c:80:d7:97:eb:1d:26:ad:c4:88:49:d6:b2:c9:2a: b3:1a:a7:ab:22:86:f5:2f:c9:b1:bb:69:fb:cc:9c:40:09:08: 23:0b:fe:e1:4d:5f:5e:2a:92:2d:81:03:b5:3f:a5:fb:ea:9b: 5e:a9:22:bf:0a:e2:9d:f7:09:fb:d3:95:98:6c:65:bd:8a:06: ad:36:43:11:0c:bf:b0:68:7e:18:e1:cd:e6:01:00:19:e6:97: d3:6a:1d:7a:ab:a5:2b:f8:f1:f7:3a:b5:53:a3:be:3a:c8:03: 2a:6a:f9:a7:22:1e:26:90:23:4a:15:64:da:a8:9b:3f:5f:43: 89:67:45:3a:40:d2:bb:1f:0e:32:ef:fc:10:6c:c0:b5:ca:9f: 88:ae:c2:75:51:3a:60:d9:f6:0e:d3:3c:19:17:37:dd:36:ba: a7:df:1d:fd:6e:ba:e1:ad:8a:0e:a5:af:6a:fe:a0:3d:46:e3: 24:93:03:72:26:bb:79:e3:56:87:f5:7b:e8:c0:59:79:d8:a5: a3:93:00:17:60:c8:18:c3:f3:34:bc:60:9c:69:ca:79:42:8d: f8:5b:16:d2:1f:62:9e:08:c7:90:29:8c:46:b5:b0:f1:1d:ce: 04:d3:07:f8:f4:90:bf:80:97:e1:b7:d3:5c:6b:24:90:ff:06: 2a:0b:6a:b8 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUwMjA5MDcxNDUyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E4NTVlYi1jNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoRMX8s26tsuXJlB67ykSq9ycYOL/gpIuNVzDNRj8KT1XU8ybkphpzoagubP LjUcYq01upPZ8nt20V67DlLhDEh3VI7ixpw6G9yseLYdQNEN8aMPAEHWJPUToKx3 2PSGygzMmfMg0bhy+xqppaxbVg+e/vGct9lOuqZpgRd5tBo0Lt9PjIq39E/xjeZx Mfd3FwTfXNkbdo9/PzS7uBvHtjXXR/e5VVi7ktTe121fQlEnSPNqFvUPGb2SJVvX w1v1QHZvE3xv51IhSlCNmVmp9Re8MjwqtnXfEM4wM1goj636GDwEl5cjNqcry7MA AAfEpoOqLeu4TwUicGAuz1benQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFJzkBOg6 EtY/viMVQ/9DbcuyAoZ9MB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvOERFRURDOTZF NkI1MTFFRjlGRUY2NDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAAEm0QMEAAEm0jANBgkqhkiG9w0BAQsFAAOCAQEAMLdK LIDXl+sdJq3EiEnWsskqsxqnqyKG9S/Jsbtp+8ycQAkIIwv+4U1fXiqSLYEDtT+l ++qbXqkivwrinfcJ+9OVmGxlvYoGrTZDEQy/sGh+GOHN5gEAGeaX02odequlK/jx 9zq1U6O+OsgDKmr5pyIeJpAjShVk2qibP19DiWdFOkDSux8OMu/8EGzAtcqfiK7C dVE6YNn2DtM8GRc33Ta6p98d/W664a2KDqWvav6gPUbjJJMDcia7eeNWh/V76MBZ edilo5MAF2DIGMPzNLxgnGnKeUKN+FsW0h9ingjHkCmMRrWw8R3OBNMH+PSQv4CX 4bfTXGskkP8GKgtquA== -----END CERTIFICATE-----Generated at Sun Apr 27 05:22:09 2025 by rpki-client