$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3FD2B74A158511F0BCFDD12FC4F9AE02.roa File: 3FD2B74A158511F0BCFDD12FC4F9AE02.roa (raw, json) Hash identifier: 6il1Q7q2rGrUuvETIcI7+XZbw5O2/fQ7078wYa//93o= Subject key identifier: 48:88:BD:FF:06:6F:9A:D6:4E:A6:FA:EF:2D:02:D7:62:15:42:F4:01 Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 0764 Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3FD2B74A158511F0BCFDD12FC4F9AE02.roa Signing time: Wed 09 Apr 2025 20:57:29 +0000 ROA not before: Wed 09 Apr 2025 20:57:29 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 9889 IP address blocks: 123.100.64.0/18 maxlen: 24 124.198.192.0/18 maxlen: 20 202.89.32.0/19 maxlen: 19 203.89.160.0/19 maxlen: 19 203.89.176.0/24 maxlen: 24 203.89.177.0/24 maxlen: 24 2401:5c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 22:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1892 (0x764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Apr 9 20:57:29 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67f6df39-0636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e8:6f:5b:47:ff:3a:83:a2:f1:02:fb:99:bc: a0:49:0e:97:38:d2:1e:e6:e8:0c:29:ef:ca:8e:0c: 44:9b:ba:47:bf:35:5d:49:ba:76:37:d1:89:55:79: e0:2f:f6:11:c8:e5:e0:20:28:9e:35:a9:0a:95:4d: 81:2b:52:06:9d:22:6a:9f:12:1c:5d:93:6c:ec:b5: c1:17:42:ee:13:fa:a1:25:4d:79:aa:a5:f6:35:9b: 5a:8f:ac:01:ea:de:fe:58:07:9f:93:4f:5d:a4:b2: 4e:b7:e6:0c:d0:6f:51:a3:89:fc:ed:f9:62:0b:cb: 03:40:69:17:04:71:a3:b5:9b:a6:65:d2:40:e8:59: 20:a1:da:9a:08:c4:65:2a:e5:22:a4:e4:9f:c0:a6: 1e:34:61:be:7d:50:cd:35:f3:9c:96:cc:cc:9e:98: 60:72:f0:ec:68:53:c0:f2:48:a7:4b:d7:19:67:be: 6e:c5:56:fd:a1:b8:b5:b0:7b:75:ec:aa:d4:56:cb: 90:a6:bf:29:b7:d6:fc:54:62:2e:0c:e2:4e:5d:16: 3e:b4:c5:c1:f0:d1:cf:81:b5:8d:55:55:66:b5:d5: 5e:8f:8e:47:5b:0f:96:76:37:af:91:98:1d:e4:2d: 98:71:8c:4d:4f:24:b0:43:15:27:f7:75:76:6f:4f: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:88:BD:FF:06:6F:9A:D6:4E:A6:FA:EF:2D:02:D7:62:15:42:F4:01 X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3FD2B74A158511F0BCFDD12FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.100.64.0/18 124.198.192.0/18 202.89.32.0/19 203.89.160.0/19 IPv6: 2401:5c00::/32 Signature Algorithm: sha256WithRSAEncryption a1:84:6d:73:65:10:79:54:2a:39:55:b0:dc:e1:9f:98:03:4c: 68:a6:d6:b5:cf:e6:1f:df:d8:aa:6a:35:55:3d:0d:8c:7a:72: 79:db:ed:25:b6:75:85:25:f2:d7:91:eb:c5:d5:e4:84:8e:c5: 6a:25:1e:eb:00:96:f5:60:2f:17:e8:26:7e:d9:0d:bb:4e:44: e3:0a:45:e8:92:48:dd:21:33:2f:fb:ab:ce:07:b2:33:d6:b5: da:8a:e8:31:4c:53:1b:0f:e5:48:ee:bb:f6:8b:bf:19:07:75: 24:ed:85:40:fb:b6:df:de:23:f2:f0:aa:6c:b4:81:90:e9:ca: 74:86:7c:42:ff:34:06:48:fb:f9:b8:40:11:21:91:bd:dc:82: 66:11:df:31:b5:f5:80:eb:a2:35:b8:47:26:74:ea:75:b8:a5: d5:12:a6:ad:1b:b5:e7:73:52:bc:0b:b9:0e:a6:99:00:c7:8b: 42:8f:fd:fe:5e:8c:7f:3e:b1:13:7a:97:01:a5:4a:48:0f:c9: 51:2b:6b:50:1f:c4:46:ae:8e:e1:f2:26:f1:9e:55:4f:65:30: 53:11:21:35:9c:aa:98:8e:c5:02:53:9f:17:00:c7:bf:1b:eb: 5d:d1:4d:4a:cd:55:b4:d2:d2:11:d5:a7:a3:f1:b8:d3:92:ad: fb:d7:f2:86 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjUwNDA5MjA1NzI5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y2ZGYzOS0wNjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5OhvW0f/OoOi8QL7mbygSQ6XONIe5ugMKe/KjgxEm7pHvzVdSbp2N9GJVXng L/YRyOXgICieNakKlU2BK1IGnSJqnxIcXZNs7LXBF0LuE/qhJU15qqX2NZtaj6wB 6t7+WAefk09dpLJOt+YM0G9Ro4n87fliC8sDQGkXBHGjtZumZdJA6FkgodqaCMRl KuUipOSfwKYeNGG+fVDNNfOclszMnphgcvDsaFPA8kinS9cZZ75uxVb9obi1sHt1 7KrUVsuQpr8pt9b8VGIuDOJOXRY+tMXB8NHPgbWNVVVmtdVej45HWw+WdjevkZgd 5C2YcYxNTySwQxUn93V2b0/MXQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFEiIvf8G b5rWTqb67y0C12IVQvQBMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvM0ZEMkI3NEEx NTg1MTFGMEJDRkREMTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAZ7ZEADBAZ8xsADBAXKWSADBAXLWaAwDQQCAAIwBwMFACQB XAAwDQYJKoZIhvcNAQELBQADggEBAKGEbXNlEHlUKjlVsNzhn5gDTGim1rXP5h/f 2KpqNVU9DYx6cnnb7SW2dYUl8teR68XV5ISOxWolHusAlvVgLxfoJn7ZDbtOROMK ReiSSN0hMy/7q84HsjPWtdqK6DFMUxsP5Ujuu/aLvxkHdSTthUD7tt/eI/Lwqmy0 gZDpynSGfEL/NAZI+/m4QBEhkb3cgmYR3zG19YDrojW4RyZ06nW4pdUSpq0btedz UrwLuQ6mmQDHi0KP/f5ejH8+sRN6lwGlSkgPyVEra1AfxEaujuHyJvGeVU9lMFMR ITWcqpiOxQJTnxcAx78b613RTUrNVbTS0hHVp6PxuNOSrfvX8oY= -----END CERTIFICATE-----Generated at Sun Apr 13 05:38:47 2025 by rpki-client