$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa File: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (raw, json) Hash identifier: v5aAOYFTKYQs9mswlL+k53rGpICa845yISkOLh9tIAI= Subject key identifier: 42:26:CF:83:BE:A9:97:DA:01:BE:3A:FF:00:2D:72:12:C4:93:92:C9 Certificate issuer: /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Certificate serial: 05 Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa Signing time: Tue 28 Jan 2025 09:47:54 +0000 ROA not before: Tue 28 Jan 2025 09:47:54 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 200195 IP address blocks: 45.123.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Validity Not Before: Jan 28 09:47:54 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6798a7ca-08ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:a4:96:32:b0:d3:4e:52:1d:d8:fd:ba:40: 17:d5:41:5a:d3:9a:8a:a7:2a:ef:12:88:1e:0c:aa: 93:6c:86:70:3a:8a:14:cb:0d:94:22:88:b5:a6:6c: 1b:0d:c1:67:07:b7:4b:9f:08:84:8a:d7:4e:8a:00: 82:76:71:a8:29:e0:f0:1c:10:e8:73:24:6d:32:08: b4:64:9a:76:97:ad:d6:d4:e3:7e:16:7e:44:12:10: 1b:2e:c7:62:85:5f:1e:3a:6e:e3:52:56:84:cf:2c: fc:a9:e2:d9:b4:de:a8:db:20:01:6a:23:71:39:3f: ee:9b:68:e5:76:ee:2c:84:3f:66:54:10:59:3b:26: ad:2f:be:c2:a9:c0:8d:a3:2b:44:98:f8:80:3e:93: 64:78:b8:d6:42:85:eb:0b:38:cc:a2:7d:04:60:e2: ad:e2:6d:f8:02:9c:cb:88:e0:e1:5c:2f:aa:38:b6: 22:69:4c:22:c5:fd:ae:e5:71:ec:4f:92:1b:0e:61: 41:5e:ee:68:7d:17:e8:01:f7:9f:23:3e:6e:4b:52: f9:2e:f8:25:a2:ec:60:f5:e9:82:81:f2:f3:8b:21: a8:82:eb:ad:91:fb:f1:6d:4b:ff:df:f0:a4:89:a5: 1c:29:78:94:55:a7:df:8e:5c:5e:fa:bf:8c:02:03: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:26:CF:83:BE:A9:97:DA:01:BE:3A:FF:00:2D:72:12:C4:93:92:C9 X509v3 Authority Key Identifier: keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.123.190.0/24 Signature Algorithm: sha256WithRSAEncryption 22:83:e2:3d:de:3e:55:7d:02:af:f1:5c:07:0d:3e:c1:a3:89: c1:e1:6d:20:f8:24:06:45:fa:8e:8d:e0:00:74:33:57:d4:4f: ef:9f:3b:14:30:41:ce:99:eb:67:f0:e7:69:fe:28:d6:9c:53: 87:a7:e0:54:72:1e:35:08:c0:34:e0:56:89:c2:78:3a:2c:23: b8:18:77:64:f8:ad:1c:09:ad:11:ca:13:0a:4a:9a:db:bd:fc: 98:1a:f7:61:a7:b2:4d:af:e2:5b:96:64:85:dc:03:8b:a0:4a: 41:df:0e:bb:86:39:10:f2:8c:8b:11:7d:f0:15:82:31:cd:e9: 16:23:eb:dc:a2:89:cd:5f:10:d4:66:d2:b9:75:20:6f:eb:73: 6b:fa:85:4b:a4:d4:72:98:7a:5a:87:99:ae:21:44:d5:6c:04: 30:0f:e7:83:a6:a4:45:97:a0:70:a7:c4:bd:6e:b9:62:60:38: b9:54:97:bd:fb:62:75:67:90:f9:77:f8:61:79:d7:f7:5a:e2: 6e:08:41:a8:c5:55:0b:6f:e6:e4:6b:37:86:ea:85:29:6f:af: 59:ec:80:82:7f:e1:80:7e:61:f5:8a:1c:0d:6d:a6:35:ee:e8: 3b:4a:9d:7f:e0:91:ba:16:a0:88:bb:fe:ec:0e:67:eb:42:fa: f4:67:9f:f8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzRGQjExMC8GA1UEBRMoRkYyMEJDMzc5RDg5QTBEQjNCRTZGQ0YyOTBGQTNERDUy RUI3RkEyMDAeFw0yNTAxMjgwOTQ3NTRaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OThhN2NhLTA4YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6WaSWMrDTTlId2P26QBfVQVrTmoqnKu8SiB4MqpNshnA6ihTLDZQiiLWmbBsN wWcHt0ufCISK106KAIJ2cagp4PAcEOhzJG0yCLRkmnaXrdbU434WfkQSEBsux2KF Xx46buNSVoTPLPyp4tm03qjbIAFqI3E5P+6baOV27iyEP2ZUEFk7Jq0vvsKpwI2j K0SY+IA+k2R4uNZChesLOMyifQRg4q3ibfgCnMuI4OFcL6o4tiJpTCLF/a7lcexP khsOYUFe7mh9F+gB958jPm5LUvku+CWi7GD16YKB8vOLIaiC662R+/FtS//f8KSJ pRwpeJRVp9+OXF76v4wCA1hnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQibPg76p l9oBvjr/AC1yEsSTkskwHwYDVR0jBBgwFoAU/yC8N52JoNs75vzykPo91S63+iAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDNEZCLzA5OEZFMkU4RENE QzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05zNzV2enlrUG85MVM2My1p QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3lDOE41MkpvTnM3NXZ6eWtQbzkxUzYzLWlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzRGQi8wOThGRTJFOERDREMxMUVGOEUyOTE4NDRDNEY5QUUwMi9GMjBCRDRERURE NUMxMUVGQUE4MEJCMUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAC17vjANBgkqhkiG9w0BAQsFAAOCAQEAIoPiPd4+VX0Cr/Fc Bw0+waOJweFtIPgkBkX6jo3gAHQzV9RP7587FDBBzpnrZ/Dnaf4o1pxTh6fgVHIe NQjANOBWicJ4OiwjuBh3ZPitHAmtEcoTCkqa2738mBr3YaeyTa/iW5ZkhdwDi6BK Qd8Ou4Y5EPKMixF98BWCMc3pFiPr3KKJzV8Q1GbSuXUgb+tza/qFS6TUcph6WoeZ riFE1WwEMA/ng6akRZegcKfEvW65YmA4uVSXvftidWeQ+Xf4YXnX91ribghBqMVV C2/m5Gs3huqFKW+vWeyAgn/hgH5h9YocDW2mNe7oO0qdf+CRuhagiLv+7A5n60L6 9Gef+A== -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:21 2025 by rpki-client