$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/84FDF6D0AABA11EABB84756CC4F9AE02.roa File: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (raw, json) Hash identifier: DfbRrZ2co3f9GeR9Q8AQK2kJs9OcFCrj3LQOWU/ZriY= Subject key identifier: B4:A2:8A:72:6B:04:82:EF:5F:64:CF:AB:98:13:14:54:A2:B5:F5:20 Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Certificate serial: 08BE Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/84FDF6D0AABA11EABB84756CC4F9AE02.roa Signing time: Mon 20 Jan 2025 20:19:54 +0000 ROA not before: Mon 20 Jan 2025 20:19:54 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 4858 IP address blocks: 203.90.24.0/22 maxlen: 22 203.90.29.0/24 maxlen: 24 2406:ca00:1::/48 maxlen: 48 2406:ca00:2::/48 maxlen: 48 2406:ca00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 20:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Validity Not Before: Jan 20 20:19:54 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=678eafea-a262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:09:60:e1:f0:18:37:23:55:0a:25:18:aa:5a: 7e:d2:b1:7c:ff:17:52:d4:3d:d5:40:22:90:8e:94: c7:c8:8f:13:83:2d:70:a2:f8:6f:85:87:00:09:1c: f0:3b:e4:e1:11:1f:8b:c6:07:6e:2e:73:85:f8:20: e3:4f:1d:70:8a:f6:09:07:f2:ee:28:14:70:21:f9: e2:85:e7:fa:1d:e6:e7:e1:7c:7f:12:d9:24:96:1a: c0:d8:52:65:c7:8d:ba:30:91:dc:21:48:87:f6:d9: b8:ee:40:79:68:dc:5f:4a:cc:91:55:e2:95:15:30: b5:60:77:e9:20:68:91:75:7b:ff:14:d6:2b:3f:13: d4:50:69:b4:0c:3a:c8:fc:1a:af:28:4a:60:a4:78: e9:c1:57:71:b5:36:d7:16:c8:eb:4f:df:80:67:16: e3:31:aa:61:4d:ef:a2:3b:d4:b3:3f:14:f4:6b:fc: 00:00:c3:86:d4:84:11:44:97:ed:54:51:43:09:5c: 22:70:46:4e:95:42:f3:36:dd:13:c6:e4:db:c2:5b: e9:d3:2f:25:55:ee:1a:cc:9a:9c:bb:6c:10:1e:c1: b9:cf:e6:33:f0:6f:2e:b5:d3:5d:37:22:7b:6b:83: ff:88:1f:37:a0:f2:96:6a:40:26:e5:82:ab:d6:90: 83:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A2:8A:72:6B:04:82:EF:5F:64:CF:AB:98:13:14:54:A2:B5:F5:20 X509v3 Authority Key Identifier: keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/84FDF6D0AABA11EABB84756CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.90.24.0/22 203.90.29.0/24 IPv6: 2406:ca00:1::-2406:ca00:3:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6f:38:42:d6:60:00:c8:ed:c2:21:f1:6c:ff:bd:4a:62:3c:86: bf:d4:29:1b:be:0b:80:d2:73:c9:9d:18:ab:c8:57:2d:be:da: 56:51:65:93:68:1e:f8:7e:1d:46:43:4a:00:57:5d:0b:2a:5f: ca:3f:3d:b0:c4:27:3e:60:09:86:7b:00:43:e4:45:4d:54:ef: 3c:3e:b8:d5:a4:d0:6f:e9:43:e4:3c:bb:76:68:47:f3:b4:98: 79:58:05:82:ca:a2:a6:0e:3f:38:40:76:54:ca:18:f2:99:fa: f6:d6:01:55:07:5a:67:c6:9f:cb:d0:36:89:af:11:00:4d:57: 4b:11:60:bc:cf:e8:ac:32:03:91:e6:29:0c:55:25:cf:83:e4: 3e:2a:ad:3a:d6:c2:0c:38:be:ca:fa:ed:fe:73:75:f9:34:75: 31:44:71:76:04:cb:44:06:f1:f2:42:ca:1b:21:03:94:93:c0: 6a:c8:5e:86:19:c0:f4:0b:dd:e6:db:8d:05:0c:f2:6e:2b:69: 9f:64:97:1c:93:e1:24:31:a7:86:e2:96:0a:fa:74:06:dd:12: 05:dc:f6:14:7e:ad:f1:ae:a9:54:ac:27:39:bc:07:82:a5:75: 22:f2:c6:14:32:64:a8:35:dc:00:dc:98:ed:63:1b:ed:70:94: 5f:a0:a4:65 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2RDYxMTAvBgNVBAUTKEFFMDBDMUEyQzAzNDJBNzE1MjgzNTQ0RUQ2NUI0NjE4 NjU4MkYyNkMwHhcNMjUwMTIwMjAxOTU0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhlYWZlYS1hMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Qlg4fAYNyNVCiUYqlp+0rF8/xdS1D3VQCKQjpTHyI8Tgy1wovhvhYcACRzw O+ThER+LxgduLnOF+CDjTx1wivYJB/LuKBRwIfnihef6Hebn4Xx/EtkklhrA2FJl x426MJHcIUiH9tm47kB5aNxfSsyRVeKVFTC1YHfpIGiRdXv/FNYrPxPUUGm0DDrI /BqvKEpgpHjpwVdxtTbXFsjrT9+AZxbjMaphTe+iO9SzPxT0a/wAAMOG1IQRRJft VFFDCVwicEZOlULzNt0TxuTbwlvp0y8lVe4azJqcu2wQHsG5z+Yz8G8utdNdNyJ7 a4P/iB83oPKWakAm5YKr1pCD0QIDAQABo4ICtzCCArMwHQYDVR0OBBYEFLSiinJr BILvX2TPq5gTFFSitfUgMB8GA1UdIwQYMBaAFK4AwaLANCpxUoNUTtZbRhhlgvJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjZENi85QTU2Q0MyRUFB QjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtuRlNnMVJPMWx0R0dHV0M4 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnREJvc0EwS25GU2cxUk8xbHRHR0dXQzhtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY2RDYvOUE1NkNDMkVBQUI5MTFFQTk0RDY4MTZCQzRGOUFFMDIvODRGREY2RDBB QUJBMTFFQUJCODQ3NTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMBIEAgABMAwDBALLWhgDBADLWh0wGgQCAAIwFDASAwcAJAbKAAABAwcCJAbK AAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBvOELWYADI7cIh8Wz/vUpiPIa/1CkbvguA 0nPJnRiryFctvtpWUWWTaB74fh1GQ0oAV10LKl/KPz2wxCc+YAmGewBD5EVNVO88 PrjVpNBv6UPkPLt2aEfztJh5WAWCyqKmDj84QHZUyhjymfr21gFVB1pnxp/L0DaJ rxEATVdLEWC8z+isMgOR5ikMVSXPg+Q+Kq061sIMOL7K+u3+c3X5NHUxRHF2BMtE BvHyQsobIQOUk8BqyF6GGcD0C93m240FDPJuK2mfZJcck+EkMaeG4pYK+nQG3RIF 3PYUfq3xrqlUrCc5vAeCpXUi8sYUMmSoNdwA3JjtYxvtcJRfoKRl -----END CERTIFICATE-----Generated at Sat Apr 12 13:24:55 2025 by rpki-client