$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa File: DB120D6EC34A11EB9559E184C4F9AE02.roa (raw, json) Hash identifier: 5xpmMyySrXgvXThxY4s4oxrkg/HJvlh/5VD0HqrC+TE= Subject key identifier: 5F:AF:6F:3A:4D:5D:BC:1B:2E:1D:02:B4:AA:31:F1:EE:FB:4E:4E:87 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 0790 Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa Signing time: Tue 10 Dec 2024 22:51:38 +0000 ROA not before: Tue 10 Dec 2024 22:51:38 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 142143 IP address blocks: 202.83.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Dec 10 22:51:38 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6758c5f9-7c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a6:6f:f2:f2:2d:d2:a9:c1:70:8f:2a:a7:98: e2:0c:68:97:43:48:ef:bd:05:ef:20:2a:8f:d7:f8: 95:45:b4:df:91:46:d0:4e:dc:0d:d9:27:a5:e6:1d: 93:a2:e2:37:e5:2a:b8:88:07:ca:8d:c5:66:a2:ef: 1f:b1:ad:0a:0b:b4:bf:19:b1:d1:67:84:25:90:10: 3a:aa:dd:df:9a:d7:ed:52:48:8c:fa:b4:ad:50:96: be:ec:c2:8c:70:12:bb:84:d3:7d:ae:ff:dd:13:89: 0a:d9:e3:e0:ad:3d:29:31:2c:83:36:e4:ca:ef:b5: 70:1f:65:8b:93:a0:ba:c7:d4:a4:44:31:75:3b:94: 17:f6:0c:cf:03:5d:02:e6:68:86:c5:80:f6:f4:bd: 99:37:e2:23:dd:6b:2d:af:65:aa:72:9c:2f:d6:fb: 96:0a:64:58:e1:17:92:6f:57:c1:3d:07:9e:3c:7d: 5a:a3:74:59:40:61:f7:43:52:24:28:e3:3a:6b:7a: 80:b3:93:ed:ea:ee:a6:d9:8a:28:f4:8b:ab:f2:ed: 04:c9:38:5a:10:4f:0b:4f:16:3f:58:25:29:cd:e1: 08:46:76:c9:09:c2:40:3f:18:2a:c8:fd:04:0d:08: 4f:bc:a6:34:e4:25:a2:aa:a8:e9:7c:0c:88:5e:be: b7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AF:6F:3A:4D:5D:BC:1B:2E:1D:02:B4:AA:31:F1:EE:FB:4E:4E:87 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.83.77.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:aa:a2:14:32:53:c2:02:9c:4c:28:53:32:c3:9a:9e:c2:a8: 1e:0b:da:73:08:83:b9:3f:1a:6b:3b:36:e6:90:7a:c3:5f:aa: fc:66:53:12:46:cd:55:4e:11:f0:d6:28:51:f7:a2:1d:b6:50: 76:10:b5:c3:f7:f2:a1:81:cc:6d:fe:96:c0:61:92:f2:40:c3: 96:46:4d:5d:07:bf:c2:35:42:12:41:9e:95:84:11:00:e5:98: 3b:f3:24:3e:25:62:70:9e:b7:d6:52:d7:e1:a5:14:34:f0:e9: 8e:ee:1a:33:7d:c1:12:a1:d4:c4:56:27:c1:87:45:f8:39:d3: f5:4e:0d:0e:3b:21:b5:e5:26:b0:84:a3:2c:c5:31:68:82:95: e5:5c:e8:ee:bf:d1:ed:f6:eb:8d:a6:cd:6a:78:54:9e:06:8c: 5a:f6:ff:ff:68:f7:4b:ed:e3:6c:0f:fd:ce:28:38:b5:dd:30: 23:40:49:76:ba:02:3e:ca:0c:c9:ca:21:f2:68:b2:da:7c:fd: 59:20:97:db:68:18:58:40:80:d0:d6:76:b1:37:1c:eb:22:8e: a2:ea:0c:b3:ef:78:da:eb:76:e7:fe:89:4d:c4:6a:4c:89:07: 1a:bb:4d:9c:e4:60:94:34:2d:4a:f5:c2:e9:23:24:6e:f0:96: 18:78:60:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjQxMjEwMjI1MTM4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU4YzVmOS03YzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6aZv8vIt0qnBcI8qp5jiDGiXQ0jvvQXvICqP1/iVRbTfkUbQTtwN2Sel5h2T ouI35Sq4iAfKjcVmou8fsa0KC7S/GbHRZ4QlkBA6qt3fmtftUkiM+rStUJa+7MKM cBK7hNN9rv/dE4kK2ePgrT0pMSyDNuTK77VwH2WLk6C6x9SkRDF1O5QX9gzPA10C 5miGxYD29L2ZN+Ij3Wstr2Wqcpwv1vuWCmRY4ReSb1fBPQeePH1ao3RZQGH3Q1Ik KOM6a3qAs5Pt6u6m2Yoo9Iur8u0EyThaEE8LTxY/WCUpzeEIRnbJCcJAPxgqyP0E DQhPvKY05CWiqqjpfAyIXr63vwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF+vbzpN XbwbLh0CtKox8e77Tk6HMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI0RkUvQ0Y0QTEwRUE4NUUxMTFFQkFGQjUxRTg0QzRGOUFFMDIvREIxMjBENkVD MzRBMTFFQjk1NTlFMTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKU00wDQYJKoZIhvcNAQELBQADggEBACqqohQyU8ICnEwo UzLDmp7CqB4L2nMIg7k/Gms7NuaQesNfqvxmUxJGzVVOEfDWKFH3oh22UHYQtcP3 8qGBzG3+lsBhkvJAw5ZGTV0Hv8I1QhJBnpWEEQDlmDvzJD4lYnCet9ZS1+GlFDTw 6Y7uGjN9wRKh1MRWJ8GHRfg50/VODQ47IbXlJrCEoyzFMWiCleVc6O6/0e32642m zWp4VJ4GjFr2//9o90vt42wP/c4oOLXdMCNASXa6Aj7KDMnKIfJostp8/Vkgl9to GFhAgNDWdrE3HOsijqLqDLPveNrrduf+iU3EakyJBxq7TZzkYJQ0LUr1wukjJG7w lhh4YDk= -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:36 2025 by rpki-client