$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/ACBFA1221CD111EFB2BDF412C4F9AE02.roa File: ACBFA1221CD111EFB2BDF412C4F9AE02.roa (raw, json) Hash identifier: ifFLN+8twN04B6jY6cx/b65AiJj/Z2yB7h3ev34IjTI= Subject key identifier: 88:09:CF:05:BC:6B:C3:FB:0E:7C:E4:92:78:17:BA:63:4C:9E:AB:DE Certificate issuer: /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8 Certificate serial: 026A Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/ACBFA1221CD111EFB2BDF412C4F9AE02.roa Signing time: Wed 05 Mar 2025 03:16:57 +0000 ROA not before: Wed 05 Mar 2025 03:16:57 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 7545 IP address blocks: 203.30.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 618 (0x26a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11D6, serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8 Validity Not Before: Mar 5 03:16:57 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c7c229-96c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:c1:49:0a:82:9f:24:41:60:fe:3b:54:07: 33:45:aa:62:ab:90:4a:c8:47:07:00:90:41:de:cc: 01:89:85:c4:8e:72:50:99:2c:03:a9:4f:be:e8:7e: ae:9a:16:3d:1c:a8:39:31:32:c0:8a:7e:91:79:19: 16:ed:31:e3:18:98:67:f1:d4:97:ec:99:e7:1f:f7: 40:2c:cf:b1:1d:69:20:c7:bf:4b:f9:28:6e:62:e0: 16:48:72:20:a7:b9:5b:f5:aa:11:09:05:75:66:08: 25:ed:72:1e:fa:aa:40:a5:fe:4c:69:2f:5b:f9:c5: 7e:c5:55:f6:cd:5c:a4:b1:6d:fb:ed:02:68:49:40: 3f:fd:78:35:40:46:4e:71:4f:f8:8a:75:5c:b3:00: 42:3a:f1:aa:51:4d:1b:ed:eb:de:0e:53:84:d8:f6: ea:21:b7:d5:3b:4b:0f:8e:50:04:92:d9:80:8e:8c: 0f:df:7a:2f:17:7a:25:bc:4b:08:a1:cb:cd:f0:7e: 80:c1:fb:4c:c7:6c:ff:96:81:b3:2a:7a:59:f3:d7: 4c:3a:3d:c2:60:62:37:43:18:20:de:52:51:3f:a2: 91:8d:1b:5a:2d:1b:79:6c:6f:da:ea:2f:bc:7a:71: 82:28:bd:48:a8:88:11:64:38:bc:29:27:0f:5a:b6: a8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:09:CF:05:BC:6B:C3:FB:0E:7C:E4:92:78:17:BA:63:4C:9E:AB:DE X509v3 Authority Key Identifier: keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/ACBFA1221CD111EFB2BDF412C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.30.193.0/24 Signature Algorithm: sha256WithRSAEncryption 73:f6:4e:1a:fc:9e:7d:da:8c:ff:19:6a:76:7c:fb:73:fe:09: 41:30:9e:5b:49:1b:4f:09:cf:de:11:43:ae:94:0d:7d:1f:0f: b1:6e:c3:b7:d4:89:8c:19:83:1d:4e:79:cf:ac:b2:ef:dc:68: eb:c2:0a:93:55:c9:b2:a6:45:15:2d:2e:91:1c:5a:98:c0:94: 70:78:ac:61:3d:e1:64:79:03:c1:6e:e9:f0:3f:da:9f:04:b2: ea:55:05:a9:b0:76:fd:5e:67:6f:b2:56:de:1c:d6:84:bc:65: 00:e2:36:96:50:fa:b1:38:58:42:3b:c0:b9:45:2a:e0:85:69: 21:34:43:46:9d:51:bb:e1:75:28:48:f3:d1:cc:f1:dd:d5:2e: 70:8e:36:2c:7a:d1:a6:09:bb:b8:61:7d:1a:b4:6c:af:e9:1c: cf:15:fc:a2:10:c1:d2:34:2f:0d:f2:54:db:94:11:5b:7c:d7: 31:b9:39:9d:49:b1:0b:3f:1b:c8:0c:5c:8c:fc:22:f1:ed:99: 8f:35:b0:1d:f1:e9:fb:5c:c1:32:17:e4:7a:c8:b0:88:4c:ee: d2:33:c1:02:bf:12:1b:39:ec:b0:60:21:55:db:aa:10:61:a7: 23:15:ac:82:97:22:f4:02:7f:6e:77:d1:28:b0:e4:d3:37:43: 24:0d:8a:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExRDYxMTAvBgNVBAUTKEMyODYxMDcyMkMxQkM4OUJFMzJCNEQ0QjhBMkNDMjFE RTY3MTdDQzgwHhcNMjUwMzA1MDMxNjU3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3YzIyOS05NmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPrBSQqCnyRBYP47VAczRapiq5BKyEcHAJBB3swBiYXEjnJQmSwDqU++6H6u mhY9HKg5MTLAin6ReRkW7THjGJhn8dSX7JnnH/dALM+xHWkgx79L+ShuYuAWSHIg p7lb9aoRCQV1Zggl7XIe+qpApf5MaS9b+cV+xVX2zVyksW377QJoSUA//Xg1QEZO cU/4inVcswBCOvGqUU0b7eveDlOE2PbqIbfVO0sPjlAEktmAjowP33ovF3olvEsI ocvN8H6AwftMx2z/loGzKnpZ89dMOj3CYGI3Qxgg3lJRP6KRjRtaLRt5bG/a6i+8 enGCKL1IqIgRZDi8KScPWrao/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIgJzwW8 a8P7DnzkkngXumNMnqveMB8GA1UdIwQYMBaAFMKGEHIsG8ib4ytNS4oswh3mcXzI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFENi83N0RFRkQzMjA2 MzkxMUVEODE4QzQwMTZDNEY5QUUwMi93b1lRY2l3YnlKdmpLMDFMaWl6Q0hlWnhm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvWVFjaXdieUp2akswMUxpaXpDSGVaeGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTExRDYvNzdERUZEMzIwNjM5MTFFRDgxOEM0MDE2QzRGOUFFMDIvQUNCRkExMjIx Q0QxMTFFRkIyQkRGNDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLHsEwDQYJKoZIhvcNAQELBQADggEBAHP2Thr8nn3ajP8Z anZ8+3P+CUEwnltJG08Jz94RQ66UDX0fD7Fuw7fUiYwZgx1Oec+ssu/caOvCCpNV ybKmRRUtLpEcWpjAlHB4rGE94WR5A8Fu6fA/2p8EsupVBamwdv1eZ2+yVt4c1oS8 ZQDiNpZQ+rE4WEI7wLlFKuCFaSE0Q0adUbvhdShI89HM8d3VLnCONix60aYJu7hh fRq0bK/pHM8V/KIQwdI0Lw3yVNuUEVt81zG5OZ1JsQs/G8gMXIz8IvHtmY81sB3x 6ftcwTIX5HrIsIhM7tIzwQK/Ehs57LBgIVXbqhBhpyMVrIKXIvQCf2530Siw5NM3 QyQNims= -----END CERTIFICATE-----Generated at Sat Apr 26 16:49:42 2025 by rpki-client