$ rpki-client -vvf rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/4978358A70E011EF8CDC2330C4F9AE02.roa File: 4978358A70E011EF8CDC2330C4F9AE02.roa (raw, json) Hash identifier: uWOdhRYcncT/3w5J6lEkhO72ABKA151UX0ndXBDbx3E= Subject key identifier: 4D:05:F0:B9:DA:79:49:5A:BE:71:5D:9E:FC:CE:C9:ED:68:BC:A3:70 Certificate issuer: /CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB Certificate serial: 81 Authority key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/4978358A70E011EF8CDC2330C4F9AE02.roa Signing time: Tue 25 Mar 2025 06:13:08 +0000 ROA not before: Tue 25 Mar 2025 06:13:08 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136737 IP address blocks: 203.158.208.0/24 maxlen: 24 203.158.209.0/24 maxlen: 24 203.158.210.0/24 maxlen: 24 203.158.211.0/24 maxlen: 24 203.158.212.0/24 maxlen: 24 203.158.213.0/24 maxlen: 24 203.158.214.0/24 maxlen: 24 203.158.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91911EB Validity Not Before: Mar 25 06:13:08 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e24974-39cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:f6:c5:3f:89:0b:27:ec:2c:4c:ab:a7:16: 35:17:21:d0:ee:ed:14:04:4d:7a:9a:90:18:16:29: 44:69:7c:1f:46:d9:d2:77:6e:14:ed:c4:7b:ea:a4: 69:c6:c5:eb:ea:29:0d:21:cb:dd:24:19:f5:39:2d: 9c:d1:36:c8:d5:30:85:06:86:46:9d:c7:7c:b4:f1: 0c:23:7c:19:60:d5:31:57:ba:2c:79:0b:69:c6:c7: 4d:01:c9:41:a1:58:37:af:5b:e9:6d:ef:9e:49:ea: b7:7b:d8:ec:89:11:55:b3:85:98:4f:45:cd:a1:62: 07:b7:91:98:25:fa:a6:0f:af:1d:1f:f2:7d:8f:34: 42:17:74:ea:93:79:a8:c2:21:f5:b9:3f:ff:01:cf: 69:1c:96:d3:46:9a:fd:26:da:b2:4d:a1:71:6b:a6: 7e:ac:4e:d4:5e:c9:63:b2:20:99:d3:51:6a:4d:35: b7:e8:2b:51:2e:18:43:6b:bc:20:e8:23:df:59:1b: b3:ff:8c:48:b1:02:8e:c8:3f:ee:ef:6c:f4:b4:c2: 9c:9b:8e:a0:6e:bc:8f:17:90:40:1f:89:c2:f0:7a: 30:59:51:00:0d:9f:e8:d1:5c:c5:54:32:f0:b8:fc: 06:d2:7e:c3:01:4f:5c:7d:11:38:72:db:f0:14:a0: 6e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:05:F0:B9:DA:79:49:5A:BE:71:5D:9E:FC:CE:C9:ED:68:BC:A3:70 X509v3 Authority Key Identifier: keyid:BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/4978358A70E011EF8CDC2330C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.158.208.0/21 Signature Algorithm: sha256WithRSAEncryption 56:33:cc:b8:94:07:42:53:fe:ed:82:fe:bc:40:6d:ed:26:e0: 7e:9b:c3:17:13:1f:c2:c4:67:e6:91:a1:de:7a:4f:b0:d2:bc: 48:c9:99:a4:72:db:3a:c6:ea:a2:8c:a6:3a:3e:24:9a:64:26: db:a2:c1:8d:e3:cc:a8:f2:03:d4:9c:38:72:47:f1:61:2a:79: 91:6d:9e:2e:22:b5:72:2b:2a:93:21:01:de:24:97:d8:38:e1: 8d:c8:5f:4e:41:94:09:44:4f:46:1a:80:1e:15:26:c9:4d:a7: 45:93:8e:1d:e9:15:17:63:46:e7:3f:ca:5f:ab:ba:78:12:6b: 37:35:9b:e1:12:8f:67:53:6e:99:ef:19:40:90:56:17:fc:0a: 85:c3:93:11:ef:4a:e4:23:70:79:ed:6b:fa:c4:a9:9b:56:b1: c4:5a:5d:c0:84:e5:6b:e2:6f:02:e6:fd:5f:62:e5:b3:ba:f3: eb:db:e2:84:87:4f:61:ae:fc:2d:a3:8b:c7:af:c9:d4:19:ed: 00:52:aa:b5:42:e9:61:88:21:9d:fb:9b:4f:8f:46:2e:bf:f4: 65:bd:d3:90:4a:63:12:23:ff:73:2a:55:8a:eb:dd:ab:d0:2c: 9d:f1:07:a0:b1:34:05:a5:55:77:af:64:59:81:a9:59:f3:86: 0f:4d:7b:4c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTExRUIxMTAvBgNVBAUTKEJFM0Y4MTNCMjAyRkZCMEEzODJGNzM3OTY4RUUxNjY1 OThFMEU4QUIwHhcNMjUwMzI1MDYxMzA4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2UyNDk3NC0zOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwan2xT+JCyfsLEyrpxY1FyHQ7u0UBE16mpAYFilEaXwfRtnSd24U7cR76qRp xsXr6ikNIcvdJBn1OS2c0TbI1TCFBoZGncd8tPEMI3wZYNUxV7oseQtpxsdNAclB oVg3r1vpbe+eSeq3e9jsiRFVs4WYT0XNoWIHt5GYJfqmD68dH/J9jzRCF3Tqk3mo wiH1uT//Ac9pHJbTRpr9JtqyTaFxa6Z+rE7UXsljsiCZ01FqTTW36CtRLhhDa7wg 6CPfWRuz/4xIsQKOyD/u72z0tMKcm46gbryPF5BAH4nC8HowWVEADZ/o0VzFVDLw uPwG0n7DAU9cfRE4ctvwFKBuLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE0F8Lna eUlavnFdnvzOye1ovKNwMB8GA1UdIwQYMBaAFL4/gTsgL/sKOC9zeWjuFmWY4Oir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTFFQi9FREE5NzJCMjY5 QTIxMUVGQUUzQUIzNUFDNEY5QUUwMi92ai1CT3lBdi13bzRMM041YU80V1paamc2 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqLUJPeUF2LXdvNEwzTjVhTzRXWlpqZzZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTExRUIvRURBOTcyQjI2OUEyMTFFRkFFM0FCMzVBQzRGOUFFMDIvNDk3ODM1OEE3 MEUwMTFFRjhDREMyMzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPLntAwDQYJKoZIhvcNAQELBQADggEBAFYzzLiUB0JT/u2C /rxAbe0m4H6bwxcTH8LEZ+aRod56T7DSvEjJmaRy2zrG6qKMpjo+JJpkJtuiwY3j zKjyA9ScOHJH8WEqeZFtni4itXIrKpMhAd4kl9g44Y3IX05BlAlET0YagB4VJslN p0WTjh3pFRdjRuc/yl+rungSazc1m+ESj2dTbpnvGUCQVhf8CoXDkxHvSuQjcHnt a/rEqZtWscRaXcCE5WvibwLm/V9i5bO68+vb4oSHT2Gu/C2ji8evydQZ7QBSqrVC 6WGIIZ37m0+PRi6/9GW905BKYxIj/3MqVYrr3avQLJ3xB6CxNAWlVXevZFmBqVnz hg9Ne0w= -----END CERTIFICATE-----Generated at Tue Apr 8 19:17:03 2025 by rpki-client