$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F47B5B188C5611E792848B4AC4F9AE02.roa File: F47B5B188C5611E792848B4AC4F9AE02.roa (raw, json) Hash identifier: oci0lTgKFp7FiEncD15sU2Ngo6tK4eT2xuYmhT6iDlU= Subject key identifier: 22:3F:69:18:6E:52:EE:F7:2B:48:68:BB:8F:C9:FD:8A:5D:B9:A0:D3 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 2795 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F47B5B188C5611E792848B4AC4F9AE02.roa Signing time: Tue 08 Apr 2025 15:53:47 +0000 ROA not before: Tue 08 Apr 2025 15:53:47 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 24456 IP address blocks: 58.71.67.0/24 maxlen: 24 210.1.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10133 (0x2795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 8 15:53:47 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f5468b-beea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b1:1b:84:ce:db:0f:01:c7:0e:28:4f:11:2c: b6:65:33:fb:14:47:ba:ba:90:ab:33:be:14:6b:bd: d2:8c:54:3e:74:06:71:36:1c:4f:85:ea:e1:c2:bb: 02:5a:a6:aa:4b:5f:fd:b9:72:08:b2:cd:43:57:40: 6b:0f:45:67:21:42:aa:e4:4f:37:17:8e:a1:92:4b: 4a:ff:ce:af:6a:9a:da:c1:85:c8:35:11:17:ae:2e: 55:7b:95:b6:1c:89:32:0b:6e:82:e6:bb:cb:4a:0f: 3c:82:68:89:e1:18:7e:8a:a9:a8:72:bd:bc:6c:02: 6a:f8:03:ce:e5:56:8b:3c:57:71:f8:b3:aa:60:ab: af:49:c1:f9:28:d5:e4:8f:19:31:f2:72:21:e5:8e: fc:f3:54:4a:08:c9:da:be:90:05:9c:ca:28:21:e7: e0:04:f2:17:50:fc:37:eb:3b:ee:4b:2b:3d:2f:24: a4:7b:5f:9c:99:ff:14:eb:b8:00:6c:e4:d7:af:4b: ce:82:d9:ca:71:05:a4:c5:8b:e5:85:ca:d1:82:c9: dd:3f:ad:07:3e:4e:99:d4:db:84:2f:35:1b:33:f2: 88:a9:0f:33:7f:6a:7e:94:1b:44:7f:c5:10:a8:14: 27:8c:2e:9b:96:67:be:5b:05:7f:0e:12:5b:92:5c: 6b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3F:69:18:6E:52:EE:F7:2B:48:68:BB:8F:C9:FD:8A:5D:B9:A0:D3 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F47B5B188C5611E792848B4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.71.67.0/24 210.1.77.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:6a:7f:b4:9a:10:f3:b2:38:ec:a8:d2:73:b5:2e:5a:b3:1b: 3d:aa:d0:98:20:cb:49:8c:25:4c:28:2b:39:fd:a5:be:ed:bb: f8:bb:81:72:52:63:86:79:f6:b1:b6:6c:ef:95:3c:5b:bc:bb: 69:4c:26:a0:37:cc:14:ad:e3:3a:ad:26:67:30:1c:69:8b:b4: b4:bd:39:6a:0d:f7:6d:30:30:39:1c:53:e2:54:ef:b0:f8:15: 4d:93:84:6e:73:9d:d7:f0:a8:ef:76:b0:c1:7e:16:f8:78:76: 77:6b:32:37:fc:96:29:31:6d:1a:83:9f:0d:73:ad:44:30:4f: 9d:bb:20:d2:60:8e:26:32:fc:4e:2d:00:a9:90:4b:7f:2e:b5: 71:e4:1e:d7:cd:1f:98:dc:5c:9e:db:87:7c:63:67:86:47:0d: 35:99:8f:bc:9d:88:f3:3c:fe:c1:c6:22:40:96:cf:21:3f:52: 94:89:1a:d0:51:66:08:f8:b9:2e:c5:73:11:d6:7b:52:7f:53: bb:fe:c0:d4:7a:ab:bb:85:43:b5:d5:50:f9:d1:3e:88:3f:59: e6:40:01:ff:cf:93:be:30:83:08:e8:d8:fb:8e:e2:fe:1f:7e: 5d:4e:a1:c6:a9:3d:85:29:0f:3e:33:f0:cd:dd:33:c7:bf:be: 8f:a8:bd:a1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICJ5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUwNDA4MTU1MzQ3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y1NDY4Yi1iZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm7EbhM7bDwHHDihPESy2ZTP7FEe6upCrM74Ua73SjFQ+dAZxNhxPherhwrsC WqaqS1/9uXIIss1DV0BrD0VnIUKq5E83F46hkktK/86vaprawYXINREXri5Ve5W2 HIkyC26C5rvLSg88gmiJ4Rh+iqmocr28bAJq+APO5VaLPFdx+LOqYKuvScH5KNXk jxkx8nIh5Y7881RKCMnavpAFnMooIefgBPIXUPw36zvuSys9LySke1+cmf8U67gA bOTXr0vOgtnKcQWkxYvlhcrRgsndP60HPk6Z1NuELzUbM/KIqQ8zf2p+lBtEf8UQ qBQnjC6blme+WwV/DhJbklxrwwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCI/aRhu Uu73K0hou4/J/YpduaDTMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRjQ3QjVCMTg4 QzU2MTFFNzkyODQ4QjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAA6R0MDBADSAU0wDQYJKoZIhvcNAQELBQADggEBAF5qf7Sa EPOyOOyo0nO1LlqzGz2q0Jggy0mMJUwoKzn9pb7tu/i7gXJSY4Z59rG2bO+VPFu8 u2lMJqA3zBSt4zqtJmcwHGmLtLS9OWoN920wMDkcU+JU77D4FU2ThG5zndfwqO92 sMF+Fvh4dndrMjf8likxbRqDnw1zrUQwT527INJgjiYy/E4tAKmQS38utXHkHtfN H5jcXJ7bh3xjZ4ZHDTWZj7ydiPM8/sHGIkCWzyE/UpSJGtBRZgj4uS7FcxHWe1J/ U7v+wNR6q7uFQ7XVUPnRPog/WeZAAf/Pk74wgwjo2PuO4v4ffl1OocapPYUpDz4z 8M3dM8e/vo+ovaE= -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:58 2025 by rpki-client