$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/0ACEF76441DC11ECBDB44C82C4F9AE02.roa File: 0ACEF76441DC11ECBDB44C82C4F9AE02.roa (raw, json) Hash identifier: yYpvf9p+wsM6J9X86nR8OoM5Locu4ULTbYADmSrh3ns= Subject key identifier: 45:E3:59:A2:F1:54:18:8E:5F:F0:BB:26:A2:30:C9:B1:E3:C2:74:D3 Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Certificate serial: 0799 Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/0ACEF76441DC11ECBDB44C82C4F9AE02.roa Signing time: Tue 04 Feb 2025 21:10:58 +0000 ROA not before: Tue 04 Feb 2025 21:10:58 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 55954 IP address blocks: 125.214.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1945 (0x799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91450A4 Validity Not Before: Feb 4 21:10:58 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a28262-0a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7c:c8:1a:63:b6:ea:2c:fc:ef:35:65:b8:9f: 6b:cc:f9:44:a1:bb:09:05:d7:9c:94:4d:a3:b0:fd: 45:b3:3c:c6:bf:81:a2:c0:3d:a6:1d:bd:d7:1e:13: 67:79:72:19:c4:0e:df:27:72:ea:24:7e:1e:82:fa: b1:37:04:0b:82:a3:3e:fb:1b:a0:69:be:31:e8:63: 63:ad:2c:40:07:a1:69:17:97:e9:ba:57:f0:72:c3: c8:f9:2d:ed:22:f5:05:c5:c2:86:19:16:2c:02:08: 0e:84:4f:fb:26:d3:0e:b7:6d:0a:38:0b:02:fe:c3: 7c:2a:37:3b:de:68:a5:ab:fd:56:43:f3:3b:2b:63: 7d:61:1e:ad:19:a2:6e:25:39:92:12:b2:c9:ac:26: e6:73:b4:87:98:ee:86:80:0b:4a:4e:f3:bb:6e:55: b0:9f:d6:85:f3:cb:86:e8:51:78:75:4c:bf:e0:b2: 5f:33:68:98:ad:a7:0b:54:ac:d2:6d:bf:ef:6b:0f: 70:08:e8:ff:62:86:17:dd:d7:2b:d2:92:72:1b:e9: cc:93:37:6c:72:c3:57:b7:23:d4:c9:e2:1d:78:b0: e5:70:1d:00:df:41:9f:6e:e7:99:49:0f:e0:cd:a5: ac:b0:a3:89:6b:4f:18:14:8b:52:04:16:85:a9:04: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E3:59:A2:F1:54:18:8E:5F:F0:BB:26:A2:30:C9:B1:E3:C2:74:D3 X509v3 Authority Key Identifier: keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/0ACEF76441DC11ECBDB44C82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.214.88.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:7f:af:83:4a:6a:b2:1f:0d:18:71:8f:6e:10:0c:3e:0a:de: 01:8c:a2:42:c3:0c:d3:ba:0c:5d:8d:ea:4d:b2:0c:00:02:6e: a9:09:58:3a:14:e4:dc:1d:92:b8:fb:d8:79:4f:35:14:55:88: de:ab:97:7d:8d:56:47:9b:34:03:a2:19:24:90:e7:8f:58:8f: 43:a1:e8:fd:45:f1:20:4b:38:85:0a:7f:b5:fb:62:17:7a:ad: 95:12:fc:43:3b:61:13:f3:6e:41:e1:1f:da:be:a8:df:44:b1: 84:64:65:98:4d:14:02:23:3d:c7:45:75:ad:94:98:52:cd:c3: b1:ca:f0:d8:77:b6:00:18:53:e1:1b:e0:8d:72:ff:95:bb:07: 19:ad:1a:62:d9:f9:8a:26:b0:69:c1:fa:1f:ef:28:aa:ef:a8: 13:16:15:93:a5:e2:a2:28:82:dd:32:fa:9b:da:4a:30:d4:e8: 9f:31:e8:d2:df:6b:b0:fb:1c:c8:86:7c:92:b3:80:67:65:7f: ce:7d:e4:e6:29:1b:17:c3:28:b3:e2:13:58:9d:15:f1:4b:01: 8f:3e:5f:62:af:51:6d:2d:b7:df:0d:c4:60:7f:47:d2:6d:bf: b5:e8:bf:ad:6f:f5:7c:34:5e:49:98:10:ab:18:8c:34:75:60: 1e:68:e6:09 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUwQTQxMTAvBgNVBAUTKDNEMUQ2QTMzMkFFQTRFQzUwMjAzN0EwOTA5RjRDQzE5 RDQyREIxOTgwHhcNMjUwMjA0MjExMDU4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyODI2Mi0wYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33zIGmO26iz87zVluJ9rzPlEobsJBdeclE2jsP1FszzGv4GiwD2mHb3XHhNn eXIZxA7fJ3LqJH4egvqxNwQLgqM++xugab4x6GNjrSxAB6FpF5fpulfwcsPI+S3t IvUFxcKGGRYsAggOhE/7JtMOt20KOAsC/sN8Kjc73milq/1WQ/M7K2N9YR6tGaJu JTmSErLJrCbmc7SHmO6GgAtKTvO7blWwn9aF88uG6FF4dUy/4LJfM2iYracLVKzS bb/vaw9wCOj/YoYX3dcr0pJyG+nMkzdscsNXtyPUyeIdeLDlcB0A30GfbueZSQ/g zaWssKOJa08YFItSBBaFqQSG3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEXjWaLx VBiOX/C7JqIwybHjwnTTMB8GA1UdIwQYMBaAFD0dajMq6k7FAgN6CQn0zBnULbGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTBBNC9ERDQ3MzY5ODBD MzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRzVUNBM29KQ2ZUTUdkUXRz WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSMXFNeXJxVHNVQ0Ezb0pDZlRNR2RRdHNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDUwQTQvREQ0NzM2OTgwQzM2MTFFQkE0RTQ5RTIxQzRGOUFFMDIvMEFDRUY3NjQ0 MURDMTFFQ0JEQjQ0QzgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAN91lgwDQYJKoZIhvcNAQELBQADggEBAF1/r4NKarIfDRhx j24QDD4K3gGMokLDDNO6DF2N6k2yDAACbqkJWDoU5Nwdkrj72HlPNRRViN6rl32N VkebNAOiGSSQ549Yj0Oh6P1F8SBLOIUKf7X7Yhd6rZUS/EM7YRPzbkHhH9q+qN9E sYRkZZhNFAIjPcdFda2UmFLNw7HK8Nh3tgAYU+Eb4I1y/5W7BxmtGmLZ+YomsGnB +h/vKKrvqBMWFZOl4qIogt0y+pvaSjDU6J8x6NLfa7D7HMiGfJKzgGdlf8595OYp GxfDKLPiE1idFfFLAY8+X2KvUW0tt98NxGB/R9Jtv7Xov61v9Xw0XkmYEKsYjDR1 YB5o5gk= -----END CERTIFICATE-----Generated at Sat Apr 5 02:07:55 2025 by rpki-client