$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/62C9C1CEE03111EEBECE581EC4F9AE02.roa File: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (raw, json) Hash identifier: /HjqJb3HeVbYY01kD6wIaTbG/Ekr2hN/Y4VOZSnVUZ8= Subject key identifier: 62:32:33:B4:59:C7:40:36:A5:BA:2B:85:33:6C:07:E8:CB:60:CF:FD Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Certificate serial: 18C9 Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/62C9C1CEE03111EEBECE581EC4F9AE02.roa Signing time: Fri 04 Apr 2025 16:45:36 +0000 ROA not before: Fri 04 Apr 2025 16:45:36 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 147314 IP address blocks: 203.96.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6345 (0x18c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Validity Not Before: Apr 4 16:45:36 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f00caf-8052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:3d:b1:a5:45:dd:02:70:51:5a:e6:37:ab: c6:1e:80:cc:7d:61:73:4b:55:a9:41:1d:1e:8b:ea: ff:9e:b5:13:b7:bc:0f:d6:8e:64:6a:e7:fe:58:14: dc:3f:1f:f9:85:cf:d1:dd:f1:a9:ea:56:2c:71:28: a3:14:da:2d:e6:58:c8:84:72:46:ab:47:b0:89:64: 8f:01:d6:50:ae:6b:98:9e:db:70:8a:b3:e6:a7:0c: a6:51:0f:31:8f:16:b2:f8:86:f0:5f:98:01:3d:ee: 64:a1:3d:6d:2a:d3:98:8c:3a:cc:a7:0e:7b:b3:8e: 3a:8c:fb:25:02:6f:18:d1:bb:f3:1a:03:c9:41:9d: 6f:7b:a0:84:26:50:05:0f:c4:6a:b2:2d:5f:d4:b6: b8:87:84:43:af:02:26:d8:2f:bb:2f:d6:b9:c8:f6: 7e:df:f2:97:2b:ae:39:a6:05:8e:d0:71:01:4d:6f: 20:28:eb:4e:67:89:19:fc:1c:dc:0c:d7:13:4f:42: 10:02:56:26:60:d8:80:e9:3d:3d:15:1b:46:f9:5d: 34:33:6b:4a:05:d3:fb:d0:d8:93:65:73:87:91:b1: 8c:14:7a:33:2c:a1:9a:4c:d3:6f:45:8f:d7:ac:f2: e2:a0:04:70:d3:7d:94:15:32:7d:66:55:de:ed:38: 58:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:32:33:B4:59:C7:40:36:A5:BA:2B:85:33:6C:07:E8:CB:60:CF:FD X509v3 Authority Key Identifier: keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/62C9C1CEE03111EEBECE581EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.96.224.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:5e:b5:39:9f:57:17:bd:b4:5c:ad:00:43:47:f3:93:34:30: f9:d0:cd:3d:bb:55:17:3c:ba:64:d5:1a:35:93:a3:3b:e9:cf: 27:d7:cb:66:f1:da:30:21:0f:02:af:47:d3:99:85:92:15:f3: c3:8d:00:6d:88:17:6a:db:bd:08:a2:61:d7:2a:0c:be:a5:a8: 52:90:82:cf:b6:a2:bc:61:a5:eb:8c:c4:a4:0a:24:a3:69:6f: c1:b9:7b:5f:3e:58:8a:55:de:0c:9f:e2:0b:24:a5:34:dc:7d: d7:0f:2a:94:98:57:14:36:d0:fb:b0:d7:ba:04:64:a3:fb:80: 0a:af:bd:f0:d3:26:83:54:ad:a5:d5:38:d0:3d:1b:3f:d7:9d: 19:b3:af:d5:85:c9:f5:af:e8:43:6c:ac:5e:7a:e8:57:ff:43: b2:7d:17:f2:e2:24:0b:e4:5a:30:1e:81:b5:21:80:bc:c5:48: 68:e5:21:2a:b4:29:97:28:03:e7:21:81:53:4e:1c:1b:a9:96: 06:f7:27:db:31:db:11:08:2e:aa:68:b8:ce:22:39:14:b8:4f: 39:bb:6a:12:fd:9e:98:7b:39:61:c8:82:5e:b8:37:88:e8:43: 62:21:f9:bc:a2:b1:30:d9:02:72:a1:ba:37:e9:16:ec:aa:16: 9d:60:24:b4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCQTExMTAvBgNVBAUTKDQxNTQwNkVEODBCNEQ5MjdBNDc5QThCQTA0MjExNkFF MkQxMUExQTYwHhcNMjUwNDA0MTY0NTM2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwMGNhZi04MDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZw9saVF3QJwUVrmN6vGHoDMfWFzS1WpQR0ei+r/nrUTt7wP1o5kauf+WBTc Px/5hc/R3fGp6lYscSijFNot5ljIhHJGq0ewiWSPAdZQrmuYnttwirPmpwymUQ8x jxay+IbwX5gBPe5koT1tKtOYjDrMpw57s446jPslAm8Y0bvzGgPJQZ1ve6CEJlAF D8Rqsi1f1La4h4RDrwIm2C+7L9a5yPZ+3/KXK645pgWO0HEBTW8gKOtOZ4kZ/Bzc DNcTT0IQAlYmYNiA6T09FRtG+V00M2tKBdP70NiTZXOHkbGMFHozLKGaTNNvRY/X rPLioARw032UFTJ9ZlXe7ThYeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGIyM7RZ x0A2pborhTNsB+jLYM/9MB8GA1UdIwQYMBaAFEFUBu2AtNknpHmougQhFq4tEaGm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJBMS8yQUQ1MUY0Qzk5 MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJTZWtlYWk2QkNFV3JpMFJv YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWUUc3WUMwMlNla2VhaTZCQ0VXcmkwUm9hWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUZCQTEvMkFENTFGNEM5OTAzMTFFN0E1RTk1QzZGQzRGOUFFMDIvNjJDOUMxQ0VF MDMxMTFFRUJFQ0U1ODFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLYOAwDQYJKoZIhvcNAQELBQADggEBAJtetTmfVxe9tFyt AENH85M0MPnQzT27VRc8umTVGjWTozvpzyfXy2bx2jAhDwKvR9OZhZIV88ONAG2I F2rbvQiiYdcqDL6lqFKQgs+2orxhpeuMxKQKJKNpb8G5e18+WIpV3gyf4gskpTTc fdcPKpSYVxQ20Puw17oEZKP7gAqvvfDTJoNUraXVONA9Gz/XnRmzr9WFyfWv6ENs rF566Ff/Q7J9F/LiJAvkWjAegbUhgLzFSGjlISq0KZcoA+chgVNOHBuplgb3J9sx 2xEILqpouM4iORS4Tzm7ahL9nph7OWHIgl64N4joQ2Ih+byisTDZAnKhujfpFuyq Fp1gJLQ= -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:55 2025 by rpki-client