$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/09C2A1645A3511ED8F0A3087C4F9AE02.roa File: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (raw, json) Hash identifier: RiGNiFnNAoJRKUyYrUN1wLZV9I9idQnh7FmtgNq/Suc= Subject key identifier: 65:15:77:B6:89:EA:AE:1E:74:BF:D9:8E:87:58:2C:D9:06:61:12:2A Certificate issuer: /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD Certificate serial: 040D Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/09C2A1645A3511ED8F0A3087C4F9AE02.roa Signing time: Sat 01 Mar 2025 02:33:47 +0000 ROA not before: Sat 01 Mar 2025 02:33:47 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 9342 IP address blocks: 202.6.74.0/24 maxlen: 24 203.2.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1037 (0x40d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD Validity Not Before: Mar 1 02:33:47 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c2720b-b1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:cc:6b:a6:7e:51:c2:c1:e6:9c:02:08:fe: 11:c0:ac:ba:6f:dd:da:93:a7:5e:82:29:7b:bb:ab: d5:2f:86:db:18:95:6b:e4:46:7a:3d:b4:4f:3d:e4: 9a:f4:6c:b0:fa:c2:01:a4:31:22:46:08:dd:78:21: 2d:0a:50:fa:51:4c:39:02:fb:93:8c:d9:ce:79:59: d8:63:7b:1e:68:4d:f5:99:6a:1b:c3:2e:30:e2:5c: ae:0f:ca:68:72:3d:ae:95:24:99:72:ae:f9:fd:84: d9:e3:52:d6:1a:b5:d4:94:75:1f:4b:1a:48:91:89: f0:b5:06:3a:b2:9c:21:0d:47:17:b2:55:01:9a:f0: e9:1b:db:00:0c:fa:ce:5d:b9:2b:32:f8:11:e0:bd: c6:06:04:78:10:7b:7c:98:16:2f:5a:40:f6:43:5a: d9:48:9e:53:33:ce:35:f8:87:d1:02:ae:64:0b:1a: f6:20:e6:90:14:1e:76:73:a8:d5:18:df:4a:0f:db: 08:dc:b1:54:18:a7:84:15:87:7d:ff:00:31:70:6d: 1a:74:fd:04:eb:8e:19:b3:98:0a:f7:d8:f7:ae:89: 8a:8a:11:61:07:0f:32:b0:1a:94:dc:64:4e:06:2a: c2:be:22:1b:09:e5:d3:ea:fa:e2:52:64:99:6b:7b: 01:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:15:77:B6:89:EA:AE:1E:74:BF:D9:8E:87:58:2C:D9:06:61:12:2A X509v3 Authority Key Identifier: keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/09C2A1645A3511ED8F0A3087C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.6.74.0/24 203.2.218.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:23:96:a7:1d:20:ac:3a:d0:66:e2:ff:a2:ca:c7:62:23:53: fa:fe:4a:a6:17:b6:12:40:1e:b9:d8:05:be:27:ef:f9:0a:82: 19:a1:b7:77:e8:e7:2e:b2:59:61:da:7e:b1:2a:83:9e:4a:0f: f3:07:7b:4d:61:a5:4e:7c:d9:13:b6:16:f9:ec:14:3c:4b:47: 7a:5c:b4:de:a8:fb:8f:e7:9c:ed:cc:82:f3:1a:55:f4:99:6f: 9e:4e:5c:b8:10:2e:91:89:23:eb:5a:fb:db:2a:44:e7:6c:da: 60:4f:91:a5:5d:d4:e2:76:9d:64:cc:eb:f2:6c:59:e4:b3:0c: fe:b8:c4:c1:1b:95:b1:0b:9b:b8:b6:3b:3a:35:a8:1d:fe:f7: 66:93:b6:87:ed:ee:b8:40:c5:59:3e:e6:25:88:dc:d8:90:ac: fa:47:9f:0a:02:02:8f:9f:91:64:08:fb:7c:c9:3c:09:dd:00: 36:de:4a:7e:61:10:28:49:d5:49:2d:cc:54:34:95:03:5a:89: 75:7a:71:8a:04:1b:77:97:75:67:ef:86:50:c8:e1:a9:ea:b4: 6c:29:10:d0:5c:13:33:1a:b2:79:2d:de:11:05:ee:f2:8e:32: d0:3f:e0:13:9f:47:74:39:92:c6:41:fd:bd:3c:43:5c:03:d9: 81:9b:ae:cd -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjIxMTAvBgNVBAUTKDRDMDYzMTJEM0EwQjFDNjNGNTQ3RDRENjQ1N0M0Q0Q1 QUY3MTQzQ0QwHhcNMjUwMzAxMDIzMzQ3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyNzIwYi1iMWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyjMa6Z+UcLB5pwCCP4RwKy6b93ak6degil7u6vVL4bbGJVr5EZ6PbRPPeSa 9Gyw+sIBpDEiRgjdeCEtClD6UUw5AvuTjNnOeVnYY3seaE31mWobwy4w4lyuD8po cj2ulSSZcq75/YTZ41LWGrXUlHUfSxpIkYnwtQY6spwhDUcXslUBmvDpG9sADPrO XbkrMvgR4L3GBgR4EHt8mBYvWkD2Q1rZSJ5TM841+IfRAq5kCxr2IOaQFB52c6jV GN9KD9sI3LFUGKeEFYd9/wAxcG0adP0E644Zs5gK99j3romKihFhBw8ysBqU3GRO BirCviIbCeXT6vriUmSZa3sBSQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGUVd7aJ 6q4edL/ZjodYLNkGYRIqMB8GA1UdIwQYMBaAFEwGMS06Cxxj9UfU1kV8TNWvcUPN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9CNTA1NDY1MjVF RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9UQVl4TFRvTEhHUDFSOVRXUlh4TTFhOXhR ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBWXhMVG9MSEdQMVI5VFdSWHhNMWE5eFE4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBFRjIvQjUwNTQ2NTI1RUUyMTFFQ0FGQTY0QjQ0QzRGOUFFMDIvMDlDMkExNjQ1 QTM1MTFFRDhGMEEzMDg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKBkoDBADLAtowDQYJKoZIhvcNAQELBQADggEBAJ0jlqcd IKw60Gbi/6LKx2IjU/r+SqYXthJAHrnYBb4n7/kKghmht3fo5y6yWWHafrEqg55K D/MHe01hpU582RO2FvnsFDxLR3pctN6o+4/nnO3MgvMaVfSZb55OXLgQLpGJI+ta +9sqROds2mBPkaVd1OJ2nWTM6/JsWeSzDP64xMEblbELm7i2Ozo1qB3+92aTtoft 7rhAxVk+5iWI3NiQrPpHnwoCAo+fkWQI+3zJPAndADbeSn5hEChJ1UktzFQ0lQNa iXV6cYoEG3eXdWfvhlDI4anqtGwpENBcEzMasnkt3hEF7vKOMtA/4BOfR3Q5ksZB /b08Q1wD2YGbrs0= -----END CERTIFICATE-----Generated at Sat Apr 26 08:31:02 2025 by rpki-client