$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa File: B86FBE4A2E3611EB84E66039C4F9AE02.roa (raw, json) Hash identifier: sLEtAwDgKICVdyB7EW9vv5iaJ4c0aSu+tPvZcmtVPKg= Subject key identifier: E9:BE:A9:E0:D6:EE:28:BF:83:C5:EA:F3:F8:B3:98:DB:AC:5A:A0:16 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0EB6 Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa Signing time: Tue 14 Jan 2025 18:16:18 +0000 ROA not before: Tue 14 Jan 2025 18:16:18 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 19905 IP address blocks: 210.57.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3766 (0xeb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Jan 14 18:16:18 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6786a9f2-e3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a5:cb:74:b4:6c:da:1c:e3:b2:51:32:32:ee: bf:01:25:38:52:3b:38:d3:cc:20:d9:19:c2:b9:c5: 8b:74:3f:40:00:26:42:bf:68:b1:c1:52:cd:ff:5d: 89:62:be:09:69:62:11:bf:21:72:e1:6a:13:f8:d6: dc:ca:e1:b7:df:23:9b:93:58:36:9a:fe:d8:76:83: ff:33:90:af:6f:76:1f:29:28:2f:64:ad:c2:8e:8d: 34:d5:7d:2e:6f:1c:a5:e4:69:9d:80:71:01:45:f1: 62:e0:a9:63:7a:6d:9e:05:07:6a:2f:42:29:f8:d2: 42:2a:bd:5b:d0:9d:9d:1a:2b:c8:51:2f:f0:13:f1: b1:ab:0a:e7:60:f9:68:62:8d:c6:59:15:98:5f:11: 3e:0b:00:86:10:62:d8:2d:19:99:79:6e:4c:2b:af: 9d:f4:e5:03:de:1f:3f:90:01:e1:9b:ac:14:9c:d7: 06:9f:83:ec:1a:85:8e:e4:65:d5:4e:96:dd:49:06: e2:0b:19:32:26:ae:ad:83:00:3f:97:36:4d:d3:5c: 2b:4a:f9:d5:33:ce:cb:1b:a2:bc:cf:8e:87:1d:1c: e8:ff:07:79:5e:83:6b:03:64:ef:39:35:19:18:ad: 6a:b0:0e:90:f7:14:0f:31:91:a5:72:fc:53:46:62: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BE:A9:E0:D6:EE:28:BF:83:C5:EA:F3:F8:B3:98:DB:AC:5A:A0:16 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.57.42.0/24 Signature Algorithm: sha256WithRSAEncryption 78:d1:a0:4b:82:04:a9:9e:ca:80:66:3c:93:20:ae:f2:fc:8a: a5:d7:6b:da:fe:70:66:4f:bd:46:f1:4b:9f:f8:eb:56:37:9d: 1c:2b:6b:7c:f7:22:20:8e:02:58:a9:69:a4:e0:94:b2:90:e3: d9:36:8f:ce:1c:ce:15:8e:40:a9:d1:3a:9e:3e:2a:8d:a4:99: 19:56:96:73:cb:64:a3:72:e1:62:8f:5e:bb:b0:73:9c:2f:d5: 63:aa:e6:38:83:d2:b5:d2:19:e0:75:0d:bf:e8:fc:fe:84:37: 28:9e:65:48:29:2a:8c:8f:75:40:f7:71:c0:ca:e3:dd:ca:33: 61:d4:fc:98:e8:35:f2:67:c4:9a:ae:f9:e3:ab:34:f9:62:db: ee:ee:e8:18:0b:f8:7f:ef:9d:94:41:4c:11:53:c8:9f:4f:1f: 96:ac:43:47:aa:85:a7:a2:d4:9c:9a:d3:b6:a6:91:7e:50:4a: 3f:1e:c2:6a:72:42:5f:da:91:c1:56:fd:04:37:b5:1e:04:30: a5:13:60:cb:9d:8a:8c:12:73:0d:e1:af:2a:41:df:ef:83:29: 17:2f:8a:d5:cc:6a:af:79:d4:ec:72:ae:89:f7:e2:f2:a0:d7: 4e:73:23:60:a3:b7:12:3b:3c:ef:75:62:c1:6b:2a:e4:13:db: f2:d4:f0:33 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjUwMTE0MTgxNjE4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg2YTlmMi1lM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlaXLdLRs2hzjslEyMu6/ASU4Ujs408wg2RnCucWLdD9AACZCv2ixwVLN/12J Yr4JaWIRvyFy4WoT+NbcyuG33yObk1g2mv7YdoP/M5Cvb3YfKSgvZK3Cjo001X0u bxyl5GmdgHEBRfFi4Kljem2eBQdqL0Ip+NJCKr1b0J2dGivIUS/wE/GxqwrnYPlo Yo3GWRWYXxE+CwCGEGLYLRmZeW5MK6+d9OUD3h8/kAHhm6wUnNcGn4PsGoWO5GXV TpbdSQbiCxkyJq6tgwA/lzZN01wrSvnVM87LG6K8z46HHRzo/wd5XoNrA2TvOTUZ GK1qsA6Q9xQPMZGlcvxTRmIyMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOm+qeDW 7ii/g8Xq8/izmNusWqAWMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvQjg2RkJFNEEy RTM2MTFFQjg0RTY2MDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADSOSowDQYJKoZIhvcNAQELBQADggEBAHjRoEuCBKmeyoBm PJMgrvL8iqXXa9r+cGZPvUbxS5/461Y3nRwra3z3IiCOAlipaaTglLKQ49k2j84c zhWOQKnROp4+Ko2kmRlWlnPLZKNy4WKPXruwc5wv1WOq5jiD0rXSGeB1Db/o/P6E NyieZUgpKoyPdUD3ccDK493KM2HU/JjoNfJnxJqu+eOrNPli2+7u6BgL+H/vnZRB TBFTyJ9PH5asQ0eqhaei1Jya07amkX5QSj8ewmpyQl/akcFW/QQ3tR4EMKUTYMud iowScw3hrypB3++DKRcvitXMaq951Oxyron34vKg105zI2CjtxI7PO91YsFrKuQT 2/LU8DM= -----END CERTIFICATE-----Generated at Sat Apr 26 12:26:41 2025 by rpki-client