$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/D385E420314711EBA579873DC4F9AE02.roa File: D385E420314711EBA579873DC4F9AE02.roa (raw, json) Hash identifier: o1Hw/spcKOOb0VVRRR+YO5Yydeov4PBZjAAS3/6uAVI= Subject key identifier: A1:08:42:EC:28:16:31:BC:33:8A:3B:16:07:E9:38:4D:84:A6:FB:23 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 081D Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/D385E420314711EBA579873DC4F9AE02.roa Signing time: Sat 14 Dec 2024 18:07:12 +0000 ROA not before: Sat 14 Dec 2024 18:07:12 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138394 IP address blocks: 206.209.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Dec 14 18:07:12 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675dc950-f296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c0:a6:46:b4:e6:97:c9:0d:7f:86:2b:ce:be: c3:74:12:fe:54:b9:50:0f:8d:76:4c:85:85:5b:90: a3:57:87:87:b3:f7:66:6b:2d:28:53:1b:5e:6a:29: f2:8f:b0:c7:79:83:fc:a2:15:c2:14:2a:6c:46:50: e7:26:60:0c:13:a3:4a:f9:9b:66:64:4d:d6:2e:ef: 84:3e:75:f4:8d:ed:86:bc:8b:87:2a:d4:64:3a:08: 7f:ef:20:b9:77:e8:0c:99:ba:bf:ad:ac:f9:33:5c: 08:9f:6b:a9:2a:04:6a:4a:0b:24:55:19:08:56:a1: 9e:70:0b:74:22:0b:a0:71:71:cc:87:ff:51:79:51: ae:1d:fd:d6:de:7f:90:06:15:e6:a6:e2:27:f2:a6: 38:bc:4f:62:41:e2:cf:ea:4d:c8:d4:30:b0:3a:39: 96:5e:55:1a:03:7e:62:3c:56:d5:6c:bd:e1:ca:77: 0a:9f:23:07:f5:2e:a1:f1:f8:22:83:c6:1d:b4:4d: 82:1f:07:3d:e3:39:cf:86:3f:b5:a1:6c:ae:95:5b: f5:9d:16:9d:3e:68:ba:02:f1:c2:7a:09:4d:56:00: 73:2f:fa:1f:37:46:16:9e:0f:df:0a:ef:1f:dd:f6: d0:92:58:15:10:e3:fc:c4:88:b5:65:22:35:8b:ba: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:08:42:EC:28:16:31:BC:33:8A:3B:16:07:E9:38:4D:84:A6:FB:23 X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/D385E420314711EBA579873DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 206.209.77.0/24 Signature Algorithm: sha256WithRSAEncryption ad:14:eb:9f:bc:0d:85:01:6e:b7:8b:e5:28:d9:b1:82:ea:7a: a8:20:21:f7:7b:f6:ed:55:68:2c:45:23:80:49:b0:51:87:9d: 7c:ce:10:1d:85:dd:ed:10:53:3c:cf:88:41:50:7c:ae:b5:47: 12:88:07:19:43:df:12:88:41:9e:48:24:62:3a:80:65:3c:53: c3:90:11:68:2e:14:1d:f6:c1:13:a9:be:9c:d9:52:e9:a1:0d: 8b:10:f3:65:f0:84:10:eb:1a:a4:e2:79:7e:26:0f:04:68:9f: f8:c0:41:68:3b:d4:db:54:2b:10:ab:e0:05:d3:f0:35:ba:9c: 4a:e2:12:77:15:df:1b:22:66:97:16:ec:6b:a4:35:1f:6b:d9: 65:cc:57:da:1b:e9:ad:23:5a:ce:18:2f:4c:6f:b6:57:78:95: 57:7c:4b:28:e2:10:09:ca:e4:b5:0c:53:6d:75:7c:88:8d:bd: 14:62:e8:35:28:a0:19:fb:cc:3b:28:db:7a:22:9f:af:de:7a: 46:e1:2a:d4:57:8e:6c:24:8a:aa:ed:10:f3:f1:c1:d1:52:71: e8:3c:82:28:8b:e0:1b:01:51:1e:13:19:8d:47:70:8d:e0:72: 49:90:32:74:1b:d4:18:5a:52:c2:4c:85:7b:a4:50:bf:3d:55: 66:d6:1a:21 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjQxMjE0MTgwNzEyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzVkYzk1MC1mMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8sCmRrTml8kNf4Yrzr7DdBL+VLlQD412TIWFW5CjV4eHs/dmay0oUxteainy j7DHeYP8ohXCFCpsRlDnJmAME6NK+ZtmZE3WLu+EPnX0je2GvIuHKtRkOgh/7yC5 d+gMmbq/raz5M1wIn2upKgRqSgskVRkIVqGecAt0IgugcXHMh/9ReVGuHf3W3n+Q BhXmpuIn8qY4vE9iQeLP6k3I1DCwOjmWXlUaA35iPFbVbL3hyncKnyMH9S6h8fgi g8YdtE2CHwc94znPhj+1oWyulVv1nRadPmi6AvHCeglNVgBzL/ofN0YWng/fCu8f 3fbQklgVEOP8xIi1ZSI1i7pDvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKEIQuwo FjG8M4o7FgfpOE2EpvsjMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5QTYvRTRFREFDMThDQjFBMTFFQTg3Q0Q1NTQ0QzRGOUFFMDIvRDM4NUU0MjAz MTQ3MTFFQkE1Nzk4NzNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADO0U0wDQYJKoZIhvcNAQELBQADggEBAK0U65+8DYUBbreL 5SjZsYLqeqggIfd79u1VaCxFI4BJsFGHnXzOEB2F3e0QUzzPiEFQfK61RxKIBxlD 3xKIQZ5IJGI6gGU8U8OQEWguFB32wROpvpzZUumhDYsQ82XwhBDrGqTieX4mDwRo n/jAQWg71NtUKxCr4AXT8DW6nEriEncV3xsiZpcW7GukNR9r2WXMV9ob6a0jWs4Y L0xvtld4lVd8SyjiEAnK5LUMU211fIiNvRRi6DUooBn7zDso23oin6/eekbhKtRX jmwkiqrtEPPxwdFSceg8giiL4BsBUR4TGY1HcI3gckmQMnQb1BhaUsJMhXukUL89 VWbWGiE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:56 2025 by rpki-client