$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/3949DB48056711F09B0C9329C4F9AE02.roa File: 3949DB48056711F09B0C9329C4F9AE02.roa (raw, json) Hash identifier: U4MBST0cKb6RFa7OBRmsAZWClvdETmVq86pgqwAZx3A= Subject key identifier: 46:F9:B4:77:4B:AD:17:BB:F9:E7:50:28:6A:84:60:12:3E:77:74:A0 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0EE5 Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/3949DB48056711F09B0C9329C4F9AE02.roa Signing time: Thu 20 Mar 2025 08:42:15 +0000 ROA not before: Thu 20 Mar 2025 08:42:15 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 800 IP address blocks: 125.252.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3813 (0xee5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Mar 20 08:42:15 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67dbd4e7-2548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:dc:7e:54:d4:44:8e:56:96:70:60:7b:2e: ec:2a:1c:61:c3:b6:62:55:ef:5b:67:6a:99:49:59: ff:7c:74:fb:2c:f2:66:55:f6:5b:80:ee:a7:50:3d: 19:02:60:4f:0e:31:74:16:76:22:8b:d3:40:49:6e: d5:15:39:4d:22:18:eb:28:4d:3e:69:36:69:78:77: df:68:29:7e:96:c8:2d:09:ab:3e:3d:27:8e:9e:19: 0c:33:d4:9d:16:59:a0:47:26:7d:4d:d4:0a:20:a6: 41:ba:d3:51:9e:12:4b:25:5c:2d:4a:c0:9b:f3:d1: 31:0b:3b:42:a0:a0:c7:c5:39:b5:b9:37:b3:6e:e6: cd:9e:c1:cc:65:d0:bd:41:50:e1:4f:26:d9:d2:64: f5:44:d1:c6:4b:89:bf:27:11:d8:bb:6a:bf:42:c5: 9c:ca:ba:57:ad:01:c8:25:f3:66:5f:4f:08:df:ad: e9:38:d0:0e:14:6f:20:5a:6e:9c:ca:b7:5b:90:e1: a9:44:a6:75:d8:8b:fd:c7:4e:81:cc:c1:73:4f:70: 4f:49:75:4f:10:2b:9a:0b:7c:ed:d7:c2:9a:eb:5f: 96:e0:3c:70:46:0f:5f:eb:0d:a0:be:cd:6e:23:c4: ea:5f:f1:a0:8a:cc:3a:1c:63:5d:ca:ab:d8:02:ad: a9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F9:B4:77:4B:AD:17:BB:F9:E7:50:28:6A:84:60:12:3E:77:74:A0 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/3949DB48056711F09B0C9329C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.252.79.0/24 Signature Algorithm: sha256WithRSAEncryption 75:cf:0f:7a:f6:3a:7f:a6:a7:b4:99:27:ee:2f:c9:dd:e7:8c: ad:38:58:bc:ee:f9:48:75:3d:89:1a:55:24:50:d0:f2:40:91: 0d:9b:1e:af:dd:16:6a:3e:b3:ef:ee:85:65:10:6b:21:87:fe: 85:fe:d9:d3:e7:03:87:a2:a6:21:8e:de:95:99:35:7e:6b:bb: eb:20:23:39:29:aa:a2:9f:4a:bf:f9:4e:83:9b:91:85:34:ed: 3c:e8:31:88:bb:6c:33:1e:97:6a:7f:1b:05:58:ce:6b:b8:91: 0d:67:95:e0:9a:20:87:58:79:c4:91:b7:e0:0c:9f:52:e9:6f: ab:0d:42:4b:3b:6d:58:9a:26:0c:bc:7d:b1:81:19:b7:d7:49: c8:ab:7d:82:f2:5d:ae:68:6c:65:80:ed:e0:57:ff:f4:11:ed: 88:9d:a5:eb:42:09:f5:5a:56:26:e0:50:a4:a3:0f:94:3b:bd: 81:c5:af:cd:03:f8:d5:ba:c6:84:c4:49:80:c6:fc:f6:5c:60: 22:f0:18:c3:b6:7a:b2:8a:35:00:2a:2c:20:04:f9:f0:cf:04: a3:a9:56:42:52:d8:8f:4d:fe:fb:d1:0e:92:d7:b1:5d:41:d7: e9:c2:1d:b7:fb:06:d7:c6:7d:2e:82:81:a4:01:18:e3:5b:9b: ce:ca:38:cd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjUwMzIwMDg0MjE1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RiZDRlNy0yNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+fcflTURI5WlnBgey7sKhxhw7ZiVe9bZ2qZSVn/fHT7LPJmVfZbgO6nUD0Z AmBPDjF0FnYii9NASW7VFTlNIhjrKE0+aTZpeHffaCl+lsgtCas+PSeOnhkMM9Sd FlmgRyZ9TdQKIKZButNRnhJLJVwtSsCb89ExCztCoKDHxTm1uTezbubNnsHMZdC9 QVDhTybZ0mT1RNHGS4m/JxHYu2q/QsWcyrpXrQHIJfNmX08I363pONAOFG8gWm6c yrdbkOGpRKZ12Iv9x06BzMFzT3BPSXVPECuaC3zt18Ka61+W4DxwRg9f6w2gvs1u I8TqX/Ggisw6HGNdyqvYAq2pcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEb5tHdL rRe7+edQKGqEYBI+d3SgMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvMzk0OURCNDgw NTY3MTFGMDlCMEM5MzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB9/E8wDQYJKoZIhvcNAQELBQADggEBAHXPD3r2On+mp7SZ J+4vyd3njK04WLzu+Uh1PYkaVSRQ0PJAkQ2bHq/dFmo+s+/uhWUQayGH/oX+2dPn A4eipiGO3pWZNX5ru+sgIzkpqqKfSr/5ToObkYU07TzoMYi7bDMel2p/GwVYzmu4 kQ1nleCaIIdYecSRt+AMn1Lpb6sNQks7bViaJgy8fbGBGbfXScirfYLyXa5obGWA 7eBX//QR7YidpetCCfVaVibgUKSjD5Q7vYHFr80D+NW6xoTESYDG/PZcYCLwGMO2 erKKNQAqLCAE+fDPBKOpVkJS2I9N/vvRDpLXsV1B1+nCHbf7BtfGfS6CgaQBGONb m87KOM0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:38 2025 by rpki-client