$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/2110795ED38E11EDADA86381C4F9AE02.roa File: 2110795ED38E11EDADA86381C4F9AE02.roa (raw, json) Hash identifier: 3scFbI2eqJmRXNfrH/g1NhiMJkdzFzRzL2hCN9j3R/w= Subject key identifier: CA:02:90:40:D5:07:2C:A9:6D:7A:AD:1C:21:8D:E4:BA:3E:22:D4:AE Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221 Certificate serial: 0424 Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/2110795ED38E11EDADA86381C4F9AE02.roa Signing time: Sun 11 Aug 2024 00:51:58 +0000 ROA not before: Sun 11 Aug 2024 00:51:58 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 38224 IP address blocks: 112.109.96.0/19 maxlen: 24 114.31.224.0/20 maxlen: 20 114.31.224.0/23 maxlen: 23 114.31.226.0/23 maxlen: 23 114.31.228.0/23 maxlen: 23 114.31.230.0/23 maxlen: 23 119.252.144.0/20 maxlen: 20 119.252.144.0/21 maxlen: 21 119.252.144.0/24 maxlen: 24 119.252.145.0/24 maxlen: 24 119.252.147.0/24 maxlen: 24 119.252.148.0/24 maxlen: 24 119.252.152.0/24 maxlen: 24 119.252.153.0/24 maxlen: 24 119.252.154.0/23 maxlen: 24 119.252.156.0/22 maxlen: 22 119.252.156.0/24 maxlen: 24 119.252.159.0/24 maxlen: 24 202.137.232.0/21 maxlen: 21 202.137.234.0/24 maxlen: 24 2405:e200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1060 (0x424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D025A, serialNumber=734090EFC37983FD175BE02F4949668A21437221 Validity Not Before: Aug 11 00:51:58 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66b80b2e-f32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:bf:41:ad:ab:da:9a:ba:da:46:7f:72:5c: 6b:7a:6d:29:17:ef:d3:8d:8c:9b:6b:ac:e6:0f:29: 05:a6:e1:63:2b:17:61:eb:24:2d:db:ac:78:d7:d5: ae:8c:89:d4:14:c2:80:7b:d0:2a:ab:81:8c:a7:de: b4:fc:4c:76:0c:1c:43:f7:b1:ff:07:27:2a:95:c6: 54:a6:da:20:26:86:c8:02:41:f6:57:bf:fd:c0:8c: a7:a1:b7:96:93:59:39:14:72:87:40:79:94:5b:8f: ed:26:21:e2:52:c5:2e:9f:a8:cb:d3:da:df:9d:08: c6:2e:9c:59:83:d5:18:c2:59:92:a6:cd:26:1a:c7: e3:51:cb:f1:f8:36:57:bf:bf:2d:1b:77:b8:12:f3: 27:58:1b:b4:4e:a6:91:65:6d:2a:0c:ce:c3:4e:c9: 89:3a:0b:11:a4:4a:82:4a:87:cb:6b:dd:34:86:41: 4d:7e:44:24:d2:66:38:e5:97:20:a8:19:89:42:f0: 77:19:63:c3:c3:95:8c:f4:77:2c:c2:93:2f:eb:31: 8c:c9:99:56:2e:1e:16:10:46:c2:84:17:99:51:ba: 6f:6f:37:4d:8b:ca:8a:37:9b:0e:95:40:fe:98:e7: b7:a1:b8:6c:c7:0e:41:27:68:e0:91:42:ad:57:2f: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:02:90:40:D5:07:2C:A9:6D:7A:AD:1C:21:8D:E4:BA:3E:22:D4:AE X509v3 Authority Key Identifier: keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/2110795ED38E11EDADA86381C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.109.96.0/19 114.31.224.0/20 119.252.144.0/20 202.137.232.0/21 IPv6: 2405:e200::/32 Signature Algorithm: sha256WithRSAEncryption d1:61:74:6d:4b:7d:d8:f4:da:83:2d:d7:38:39:cc:35:66:f6: c2:67:e9:02:50:f8:26:4f:bc:ae:ad:b3:a5:28:6a:bf:c5:eb: c0:5a:ba:52:a8:98:6c:d2:dc:98:52:57:b0:08:34:40:42:fe: b5:99:52:a5:0b:ce:a1:18:6a:e4:20:bf:32:86:04:bf:de:6d: 50:8b:b3:94:74:9a:7a:9f:51:81:87:d5:8d:40:ad:50:ed:ee: 04:1b:e8:97:c3:d0:7e:54:77:2b:1b:d2:44:0f:60:62:fb:a7: d7:c5:31:d0:1d:23:3f:23:49:57:bd:5a:c0:2a:5d:07:3e:0b: 1c:cc:47:2c:d7:e8:71:c5:ee:0a:1a:65:a4:be:98:c3:1d:f3: 04:f6:5d:10:df:93:b2:d5:8f:d8:3a:03:02:9d:a6:5d:a4:d5: 52:2a:28:bd:f4:39:cd:48:d1:31:fb:83:75:be:77:e3:d7:6c: 6e:0e:42:b0:d4:ae:0a:62:eb:61:55:c3:1d:f7:2e:6b:fd:89: 99:66:fb:3e:37:5e:66:28:f8:d2:63:8a:93:62:e0:c8:f0:d6: d7:9d:c5:c9:a5:30:2f:9a:1e:f6:59:a0:6b:cb:f0:31:32:38: 64:3f:83:ee:89:d4:97:90:6e:44:73:91:8c:ae:df:74:89:69: 0a:20:5a:ad -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICBCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB MjE0MzcyMjEwHhcNMjQwODExMDA1MTU4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI4MGIyZS1mMzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4K/Qa2r2pq62kZ/clxrem0pF+/TjYyba6zmDykFpuFjKxdh6yQt26x419Wu jInUFMKAe9Aqq4GMp960/Ex2DBxD97H/BycqlcZUptogJobIAkH2V7/9wIynobeW k1k5FHKHQHmUW4/tJiHiUsUun6jL09rfnQjGLpxZg9UYwlmSps0mGsfjUcvx+DZX v78tG3e4EvMnWBu0TqaRZW0qDM7DTsmJOgsRpEqCSofLa900hkFNfkQk0mY45Zcg qBmJQvB3GWPDw5WM9HcswpMv6zGMyZlWLh4WEEbChBeZUbpvbzdNi8qKN5sOlUD+ mOe3obhsxw5BJ2jgkUKtVy95WQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFMoCkEDV ByypbXqtHCGN5Lo+ItSuMB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDAyNUEvRDVFRjFBOTAzMEFEMTFFQzk1QjE1RDE4QzRGOUFFMDIvMjExMDc5NUVE MzhFMTFFREFEQTg2MzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAVwbWADBARyH+ADBAR3/JADBAPKiegwDQQCAAIwBwMFACQF 4gAwDQYJKoZIhvcNAQELBQADggEBANFhdG1Lfdj02oMt1zg5zDVm9sJn6QJQ+CZP vK6ts6Uoar/F68BaulKomGzS3JhSV7AINEBC/rWZUqULzqEYauQgvzKGBL/ebVCL s5R0mnqfUYGH1Y1ArVDt7gQb6JfD0H5Udysb0kQPYGL7p9fFMdAdIz8jSVe9WsAq XQc+CxzMRyzX6HHF7goaZaS+mMMd8wT2XRDfk7LVj9g6AwKdpl2k1VIqKL30Oc1I 0TH7g3W+d+PXbG4OQrDUrgpi62FVwx33Lmv9iZlm+z43XmYo+NJjipNi4Mjw1ted xcmlMC+aHvZZoGvL8DEyOGQ/g+6J1JeQbkRzkYyu33SJaQogWq0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:17 2025 by rpki-client