$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/02AEA6DA03B611EFB1528E73C4F9AE02.roa File: 02AEA6DA03B611EFB1528E73C4F9AE02.roa (raw, json) Hash identifier: YrepgVzlJ+pQMRCCranUtya7g8vg/YLgko+8Hwk0yvM= Subject key identifier: 4C:D7:1D:58:5A:2A:BF:11:24:AD:37:C0:6C:CD:D9:A1:B5:91:BA:F8 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 2755 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/02AEA6DA03B611EFB1528E73C4F9AE02.roa Signing time: Mon 02 Jun 2025 21:07:09 +0000 ROA not before: Mon 02 Jun 2025 21:07:09 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142127 IP address blocks: 223.29.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10069 (0x2755) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Jun 2 21:07:09 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683e127d-4e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7a:93:de:e6:f4:bd:b1:0a:8c:43:a7:fc:0e: 91:a9:72:62:ab:50:c6:be:80:ff:6c:80:e6:11:93: 01:fb:d1:97:1c:ec:60:15:f8:42:68:0e:fd:dd:29: b1:7a:ed:e7:80:1b:ed:42:f8:59:f6:73:ee:ee:0b: 14:d5:18:d2:2d:ff:c4:65:a1:f2:d9:76:c4:33:c1: 43:c6:42:94:14:60:52:6a:fa:26:d2:76:6a:02:32: a3:21:ef:7e:34:54:c6:a3:1a:24:2c:0b:08:77:8d: 38:19:fa:fd:f9:78:41:79:42:c6:27:2b:45:b8:a9: ac:8b:49:1d:ec:5c:93:40:cf:07:40:b3:fd:62:78: a4:27:99:16:1e:17:9a:5b:1c:e1:74:a7:63:3a:8d: 13:8d:da:bd:02:36:7e:f6:9f:69:66:d6:fc:c3:bb: b9:ed:c3:9f:12:dd:c1:66:d2:82:ed:a9:2c:c3:97: 35:2d:1b:6d:e6:d6:b0:4d:fc:bb:45:53:56:ed:b4: 03:50:b2:d7:8c:d7:5b:d6:21:97:23:0c:2b:f5:f9: 6e:c3:df:2e:05:85:5b:3a:2f:4e:1e:d6:1e:a5:6c: 28:53:1d:eb:78:47:fe:b6:fd:26:e2:c6:42:58:05: 4f:e5:ba:86:9e:48:b4:58:c1:32:41:77:c2:31:fc: ff:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D7:1D:58:5A:2A:BF:11:24:AD:37:C0:6C:CD:D9:A1:B5:91:BA:F8 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/02AEA6DA03B611EFB1528E73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.29.224.0/24 Signature Algorithm: sha256WithRSAEncryption b2:3a:7c:c3:13:dd:b3:1b:e8:23:4d:ac:64:17:75:2a:89:7b: 21:81:3a:65:92:48:53:7d:05:f2:3d:a2:fe:9a:a4:52:74:15: e6:4b:8e:60:ea:86:2a:ea:9c:1b:24:e2:16:9e:36:db:a2:18: f2:d1:44:46:8c:08:64:eb:d9:6f:cc:20:b2:c5:3f:f8:e7:07: 35:4f:27:d9:a5:1c:19:35:1a:11:b8:f2:2f:65:5d:90:55:fe: de:99:48:d7:af:ad:15:95:28:97:a0:e5:64:9c:a9:5a:13:53: 4f:b7:04:c9:44:fd:48:e1:b2:78:b5:60:77:95:b9:3a:24:2b: 77:68:96:40:d9:94:56:c2:7a:95:5c:4c:4e:fe:22:cf:f4:d0: 39:f3:db:f2:bc:89:74:e4:0c:f6:6f:b2:49:ff:8b:16:c3:a7: 3e:b1:39:5f:5a:51:d5:29:3f:c4:4c:06:16:e0:d0:55:78:34: 46:a8:a0:e3:7b:ae:64:06:13:fe:62:cf:e3:e6:69:6c:30:f4: 21:5b:4e:58:71:82:2d:db:17:78:d7:c7:e4:8c:89:ad:80:61: 86:d0:34:f5:7c:20:7f:0a:c8:75:0c:66:07:59:40:ee:c8:eb: 25:75:f0:ad:7c:3a:52:70:13:4b:9c:72:38:b9:0e:9d:4c:7d: 3b:8f:f2:ff -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJ1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwNjAyMjEwNzA5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlMTI3ZC00ZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nqT3ub0vbEKjEOn/A6RqXJiq1DGvoD/bIDmEZMB+9GXHOxgFfhCaA793Smx eu3ngBvtQvhZ9nPu7gsU1RjSLf/EZaHy2XbEM8FDxkKUFGBSavom0nZqAjKjIe9+ NFTGoxokLAsId404Gfr9+XhBeULGJytFuKmsi0kd7FyTQM8HQLP9YnikJ5kWHhea WxzhdKdjOo0Tjdq9AjZ+9p9pZtb8w7u57cOfEt3BZtKC7aksw5c1LRtt5tawTfy7 RVNW7bQDULLXjNdb1iGXIwwr9fluw98uBYVbOi9OHtYepWwoUx3reEf+tv0m4sZC WAVP5bqGnki0WMEyQXfCMfz/dwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEzXHVha Kr8RJK03wGzN2aG1kbr4MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMDJBRUE2REEw M0I2MTFFRkIxNTI4RTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADfHeAwDQYJKoZIhvcNAQELBQADggEBALI6fMMT3bMb6CNN rGQXdSqJeyGBOmWSSFN9BfI9ov6apFJ0FeZLjmDqhirqnBsk4haeNtuiGPLRREaM CGTr2W/MILLFP/jnBzVPJ9mlHBk1GhG48i9lXZBV/t6ZSNevrRWVKJeg5WScqVoT U0+3BMlE/Ujhsni1YHeVuTokK3dolkDZlFbCepVcTE7+Is/00Dnz2/K8iXTkDPZv skn/ixbDpz6xOV9aUdUpP8RMBhbg0FV4NEaooON7rmQGE/5iz+PmaWww9CFbTlhx gi3bF3jXx+SMia2AYYbQNPV8IH8KyHUMZgdZQO7I6yV18K18OlJwE0uccji5Dp1M fTuP8v8= -----END CERTIFICATE-----Generated at Mon Jun 16 08:32:52 2025 by rpki-client