$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EF3B21E28C5611E792848B4AC4F9AE02.roa File: EF3B21E28C5611E792848B4AC4F9AE02.roa (raw, json) Hash identifier: NQJGHd1cKyBqpoHctaUyw3dvZ0KuQOPSMwntjDFcg1A= Subject key identifier: 47:1B:A6:70:D2:D3:B9:64:68:1D:2B:75:88:64:BD:C3:F7:AA:49:7A Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 277C Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EF3B21E28C5611E792848B4AC4F9AE02.roa Signing time: Tue 08 Apr 2025 15:53:23 +0000 ROA not before: Tue 08 Apr 2025 15:53:23 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 131180 IP address blocks: 210.213.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10108 (0x277c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 8 15:53:23 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f54673-469d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:21:39:25:cf:53:41:86:64:07:a3:3e:3a:a5: 11:c0:4c:09:53:6b:28:08:fa:84:bd:db:58:8b:18: 28:56:ae:5f:4a:75:71:c1:01:0b:55:d1:75:85:e7: e3:91:c8:e3:16:8d:06:89:33:89:f2:5d:d3:f0:63: 4f:c7:bb:4c:54:e6:93:5f:c7:fa:b2:94:0f:2a:d2: db:9e:de:60:cf:e6:52:a3:8f:50:f9:cb:69:4a:34: 3c:bd:0b:56:72:0f:69:7d:75:e6:db:c1:a5:a8:3f: c5:ca:05:ef:af:cf:38:03:f4:d5:37:b3:8d:a1:d8: 55:89:8d:50:4f:f6:d5:74:3c:5b:b9:8d:0b:78:4c: f3:2d:2c:2a:44:58:01:f7:8f:d4:fc:b0:29:7a:f1: 8b:cc:18:e1:ae:4e:50:6b:c6:25:90:dd:e2:2b:66: f0:88:4f:c1:7e:95:05:c2:5e:3e:6b:5d:29:10:1b: 24:fd:34:3f:0d:98:59:74:fa:22:0d:50:69:55:c4: 0f:2a:06:da:de:82:60:2b:21:29:32:9f:b6:f4:24: 7a:b3:ce:30:21:3b:a2:14:67:7b:1a:19:c8:90:f9: a3:61:4d:16:d8:b5:82:17:b7:90:dc:7e:08:3f:1c: e0:81:49:6c:d1:30:5f:dc:ae:08:32:63:c5:15:a8: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1B:A6:70:D2:D3:B9:64:68:1D:2B:75:88:64:BD:C3:F7:AA:49:7A X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EF3B21E28C5611E792848B4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.213.77.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:50:3f:bb:2a:f1:4a:7a:10:79:79:21:f6:4b:8c:17:a7:ac: fa:c0:06:35:f2:ad:8d:63:bb:14:fd:1c:3f:ad:44:c3:93:71: 33:2a:30:6f:55:4c:28:ab:b6:59:a8:4a:29:61:99:9d:b1:67: 9b:4f:08:ae:94:36:7b:2c:14:9f:3b:69:59:ae:92:52:9d:f3: 1d:5d:97:d3:a1:36:ad:97:21:0a:4c:f7:fe:50:08:c3:7f:17: 96:0e:b4:42:ff:40:0d:5f:3b:d4:51:8f:ca:15:9c:98:15:94: 83:fb:3f:41:38:79:2c:87:53:9e:1d:55:ea:b1:45:b4:fe:ee: cd:bb:a6:00:2a:35:f4:51:23:cf:51:01:89:48:47:2b:06:43: 45:31:bb:4a:c5:5e:b5:68:9b:ba:f6:ab:6d:5f:24:0a:75:6a: 21:27:a3:3b:ba:5d:fe:d4:54:30:3a:ea:66:40:b3:ae:bb:ef: cb:4e:c5:8a:ef:14:b1:71:04:22:36:8e:eb:fe:d9:25:c5:43: 6b:6b:6e:c4:14:ec:57:0a:15:9a:e6:39:99:af:e2:40:49:9b: 6f:aa:48:d8:bc:d1:3d:33:c5:60:f5:5f:b5:ae:f4:d2:29:20: a0:a2:a9:a2:42:77:cd:21:58:70:ab:20:eb:f7:2e:a4:92:32: 33:87:b0:ad -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJ3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUwNDA4MTU1MzIzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y1NDY3My00NjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSE5Jc9TQYZkB6M+OqURwEwJU2soCPqEvdtYixgoVq5fSnVxwQELVdF1hefj kcjjFo0GiTOJ8l3T8GNPx7tMVOaTX8f6spQPKtLbnt5gz+ZSo49Q+ctpSjQ8vQtW cg9pfXXm28GlqD/FygXvr884A/TVN7ONodhViY1QT/bVdDxbuY0LeEzzLSwqRFgB 94/U/LApevGLzBjhrk5Qa8YlkN3iK2bwiE/BfpUFwl4+a10pEBsk/TQ/DZhZdPoi DVBpVcQPKgba3oJgKyEpMp+29CR6s84wITuiFGd7GhnIkPmjYU0W2LWCF7eQ3H4I PxzggUls0TBf3K4IMmPFFagUSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEcbpnDS 07lkaB0rdYhkvcP3qkl6MB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRUYzQjIxRTI4 QzU2MTFFNzkyODQ4QjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADS1U0wDQYJKoZIhvcNAQELBQADggEBAF5QP7sq8Up6EHl5 IfZLjBenrPrABjXyrY1juxT9HD+tRMOTcTMqMG9VTCirtlmoSilhmZ2xZ5tPCK6U NnssFJ87aVmuklKd8x1dl9OhNq2XIQpM9/5QCMN/F5YOtEL/QA1fO9RRj8oVnJgV lIP7P0E4eSyHU54dVeqxRbT+7s27pgAqNfRRI89RAYlIRysGQ0Uxu0rFXrVom7r2 q21fJAp1aiEnozu6Xf7UVDA66mZAs66778tOxYrvFLFxBCI2juv+2SXFQ2trbsQU 7FcKFZrmOZmv4kBJm2+qSNi80T0zxWD1X7Wu9NIpIKCiqaJCd80hWHCrIOv3LqSS MjOHsK0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:58 2025 by rpki-client