$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/1495D7EE854B11EAACB2FE39C4F9AE02.roa File: 1495D7EE854B11EAACB2FE39C4F9AE02.roa (raw, json) Hash identifier: 4kFdxqJRF+UtayrYr11Ti8tQHel/QxYA6eu1cTGYKjY= Subject key identifier: 4B:74:D4:6B:1E:F0:AA:78:48:74:B5:05:47:2E:9D:DD:7E:E2:B6:EC Certificate issuer: /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5 Certificate serial: 0B75 Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/1495D7EE854B11EAACB2FE39C4F9AE02.roa Signing time: Thu 12 Dec 2024 19:08:38 +0000 ROA not before: Thu 12 Dec 2024 19:08:38 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 23856 IP address blocks: 61.13.192.0/18 maxlen: 18 61.16.48.0/20 maxlen: 20 61.16.48.0/24 maxlen: 24 61.16.49.0/24 maxlen: 24 61.16.50.0/24 maxlen: 24 61.16.52.0/24 maxlen: 24 61.16.53.0/24 maxlen: 24 61.16.64.0/18 maxlen: 18 61.16.72.0/24 maxlen: 24 61.16.101.0/24 maxlen: 24 61.16.110.0/24 maxlen: 24 61.16.116.0/24 maxlen: 24 103.77.140.0/22 maxlen: 22 116.206.204.0/22 maxlen: 22 116.206.207.0/24 maxlen: 24 203.149.192.0/19 maxlen: 19 203.149.196.0/24 maxlen: 24 203.149.224.0/20 maxlen: 20 203.149.225.0/24 maxlen: 24 2407:9880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 18:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2933 (0xb75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91274A4 Validity Not Before: Dec 12 19:08:38 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=675b34b6-d6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:e5:56:b5:7e:15:36:af:72:dc:78:7b:64: 5b:8c:3f:c2:0c:70:e8:ba:9f:a1:79:4c:6a:77:72: 2b:9f:9e:8d:a2:e9:e8:e4:ac:b1:11:61:39:be:9e: c8:18:24:3e:db:c3:ee:dc:9f:5b:2e:61:e0:f4:70: c2:3e:62:9c:5d:12:c5:70:39:df:3a:fa:be:d1:78: 58:43:e9:21:62:77:ed:04:e7:46:ac:c1:a4:85:cb: 30:16:32:64:e6:78:f8:08:04:3e:d3:1f:4e:7a:d9: 6e:a7:c0:a2:ab:a9:3e:60:c3:ed:3c:51:c6:bf:80: 58:02:fb:9e:a0:86:15:45:6e:02:56:b7:b5:e2:9f: 84:55:72:a8:9d:a5:c9:5e:d8:71:73:66:a8:18:d3: ff:35:f8:d7:f8:b1:aa:9c:c9:c4:31:22:9a:b8:c2: 49:a7:5c:36:c1:84:23:a7:df:85:6c:af:80:5c:d5: d1:ea:b5:c4:4c:12:04:db:12:36:3c:ca:3f:d0:53: bb:65:41:01:a9:ba:8a:6d:0f:db:a8:33:a5:23:1a: be:8e:22:a7:5a:ed:37:76:67:13:d1:fb:07:10:79: 85:96:ba:34:a4:95:da:b1:d7:f9:b1:26:4b:6e:51: 7b:d8:69:54:61:cb:66:55:04:c7:03:9d:ff:80:d9: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:74:D4:6B:1E:F0:AA:78:48:74:B5:05:47:2E:9D:DD:7E:E2:B6:EC X509v3 Authority Key Identifier: keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/1495D7EE854B11EAACB2FE39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.13.192.0/18 61.16.48.0-61.16.127.255 103.77.140.0/22 116.206.204.0/22 203.149.192.0-203.149.239.255 IPv6: 2407:9880::/32 Signature Algorithm: sha256WithRSAEncryption 80:1c:ea:51:11:3a:34:e7:e0:b5:4e:e9:99:44:62:e1:97:e3: 98:34:13:ce:f3:e9:dc:51:54:a1:b0:be:23:88:49:4e:29:d8: 3e:8f:f3:6a:47:79:02:62:6a:00:ab:f8:83:a5:b1:c3:2a:51: b8:51:86:eb:f1:5c:d0:01:90:fa:7e:b8:7d:8f:37:8f:f4:3b: b1:37:8f:c5:36:d6:2b:1e:8d:44:53:de:03:7a:29:76:17:96: b5:00:d3:03:54:a7:df:eb:37:3c:6c:e5:41:98:77:b1:d1:4c: af:9d:80:7b:77:f9:f7:b5:28:7f:0c:15:18:f5:ef:f8:02:a9: 8f:80:98:83:ec:13:12:5f:e0:23:78:85:8d:49:d7:0f:e0:46: 9b:2f:b1:94:a8:95:63:80:09:d4:19:8a:17:5e:ea:7a:83:f8: fe:63:40:84:30:2c:0c:7e:d7:56:1d:96:41:a2:10:8c:bc:c8: f2:c7:08:73:1b:a0:68:67:4c:18:26:3f:79:37:e6:19:e5:9d: 93:77:66:f9:77:6c:14:5f:77:06:a5:72:02:9c:29:30:07:5a: 61:a2:ae:fa:58:9b:e6:b7:77:eb:e1:fe:41:78:4d:69:4d:82: f7:55:0e:3b:4e:4f:9a:c4:6d:d1:5c:e9:21:39:bf:a8:1f:e2: d8:0a:a7:92 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgICC3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc0QTQxMTAvBgNVBAUTKDU5NTY2NUZGODVFNEU0NzczNzFGNzU0MUY3MjA5REMy NDRFNjBDQTUwHhcNMjQxMjEyMTkwODM4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzViMzRiNi1kNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/3lVrV+FTavctx4e2RbjD/CDHDoup+heUxqd3Irn56Nouno5KyxEWE5vp7I GCQ+28Pu3J9bLmHg9HDCPmKcXRLFcDnfOvq+0XhYQ+khYnftBOdGrMGkhcswFjJk 5nj4CAQ+0x9Oetlup8Ciq6k+YMPtPFHGv4BYAvueoIYVRW4CVre14p+EVXKonaXJ Xthxc2aoGNP/NfjX+LGqnMnEMSKauMJJp1w2wYQjp9+FbK+AXNXR6rXETBIE2xI2 PMo/0FO7ZUEBqbqKbQ/bqDOlIxq+jiKnWu03dmcT0fsHEHmFlro0pJXasdf5sSZL blF72GlUYctmVQTHA53/gNkDawIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFEt01Gse 8Kp4SHS1BUcund1+4rbsMB8GA1UdIwQYMBaAFFlWZf+F5OR3Nx91QfcgncJE5gyl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzRBNC9EREJFNDIwQTMw RjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVIYzNIM1ZCOXlDZHdrVG1E S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dWWmxfNFhrNUhjM0gzVkI5eUNkd2tUbURLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc0QTQvRERCRTQyMEEzMEYwMTFFQTk4NTlBRTUzQzRGOUFFMDIvMTQ5NUQ3RUU4 NTRCMTFFQUFDQjJGRTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVgYIKwYBBQUHAQcBAf8E RzBFMDQEAgABMC4DBAY9DcAwDAMEBD0QMAMEBz0QAAMEAmdNjAMEAnTOzDAMAwQG y5XAAwQEy5XgMA0EAgACMAcDBQAkB5iAMA0GCSqGSIb3DQEBCwUAA4IBAQCAHOpR ETo05+C1TumZRGLhl+OYNBPO8+ncUVShsL4jiElOKdg+j/NqR3kCYmoAq/iDpbHD KlG4UYbr8VzQAZD6frh9jzeP9DuxN4/FNtYrHo1EU94Deil2F5a1ANMDVKff6zc8 bOVBmHex0UyvnYB7d/n3tSh/DBUY9e/4AqmPgJiD7BMSX+AjeIWNSdcP4EabL7GU qJVjgAnUGYoXXup6g/j+Y0CEMCwMftdWHZZBohCMvMjyxwhzG6BoZ0wYJj95N+YZ 5Z2Td2b5d2wUX3cGpXICnCkwB1phoq76WJvmt3fr4f5BeE1pTYL3VQ47Tk+axG3R XOkhOb+oH+LYCqeS -----END CERTIFICATE-----Generated at Mon Apr 7 01:44:59 2025 by rpki-client