$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/585A89FE09B111EAB045B31EC4F9AE02.roa File: 585A89FE09B111EAB045B31EC4F9AE02.roa (raw, json) Hash identifier: EQhmpvzt8tPu0JkuvHMlwu2IJctW7a7QBQJVZSH/ehw= Subject key identifier: 89:A8:D8:0C:C9:08:21:58:C6:E9:CD:28:D3:60:66:21:4F:B1:03:1C Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 0F8E Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/585A89FE09B111EAB045B31EC4F9AE02.roa Signing time: Fri 28 Feb 2025 19:30:18 +0000 ROA not before: Fri 28 Feb 2025 19:30:18 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 397240 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3982 (0xf8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA Validity Not Before: Feb 28 19:30:18 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c20eca-9c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e5:f5:43:67:73:95:d7:22:90:4f:77:47:fb: ba:99:6e:9c:b9:b2:55:a2:d7:80:2d:52:00:0c:bc: 15:5b:57:a5:8e:d0:2f:30:fd:9d:62:56:13:45:e6: ff:f4:91:cc:cf:11:b7:bd:bb:72:ac:b2:3e:8f:63: 47:cb:1f:b6:2d:91:1d:cb:7b:56:bd:84:d0:5c:2b: bf:48:29:a3:d0:ab:5a:ff:76:73:4c:e2:90:0a:87: 10:99:a4:42:1d:6c:18:c4:83:21:28:48:99:9f:17: e3:76:54:14:5a:e1:d2:09:71:4d:29:90:bb:ad:f3: ee:bf:2e:2d:49:48:a2:23:d8:2d:2c:f0:20:f9:48: 98:90:b8:c6:a5:8a:e3:ef:21:4e:c9:a2:d0:9d:d0: de:4f:d4:e5:cc:78:43:ee:f0:7f:8b:32:08:69:7e: b3:11:dd:03:ea:ac:c8:b2:45:bf:2f:4d:9f:9f:4b: ca:9e:71:e2:e6:90:46:b9:d7:c5:8d:1d:44:0a:93: 65:75:d1:07:fd:6c:54:fd:f4:9f:55:c0:47:45:a8: 12:e5:3c:72:b6:da:49:d6:2c:7e:68:75:f5:70:51: 04:40:75:99:13:49:d4:ac:0a:72:9f:39:06:8f:bd: 0e:fb:3b:0c:65:49:ad:87:41:07:68:d7:12:e0:05: 86:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A8:D8:0C:C9:08:21:58:C6:E9:CD:28:D3:60:66:21:4F:B1:03:1C X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/585A89FE09B111EAB045B31EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption aa:e1:e7:b5:0f:45:49:9d:cc:60:76:3b:01:a1:de:c4:02:37: ce:11:ca:88:ac:ba:ce:af:13:85:e9:0f:b7:82:cb:38:d8:88: c5:6e:70:52:17:89:df:c9:29:b9:0e:16:37:e4:e4:5b:8b:c2: e6:79:84:a2:34:af:26:3e:d7:dc:4d:cc:d0:92:85:36:67:5b: bf:f3:f8:57:4f:21:ea:85:d7:ba:1b:db:4d:90:05:30:d0:85: 99:6c:1c:04:0b:5e:64:ca:e5:9b:37:55:fe:43:74:0c:e9:8d: 86:e8:40:9a:e0:16:ea:a4:92:d3:16:3a:bb:7e:2b:90:85:47: 21:99:dd:ea:ce:95:e8:8a:72:3b:01:78:2d:9f:5a:0c:18:65: 85:a7:b4:9e:5d:ef:71:55:e5:40:db:90:6e:75:81:20:c7:32: a4:f2:ce:5a:2e:a6:aa:6b:08:4c:4b:d5:2d:08:3d:b1:d8:64: 0a:50:16:4d:13:b5:eb:52:c5:8c:0a:50:9b:e9:7d:3a:aa:6f: 38:47:a4:b0:72:d4:17:a4:f1:34:ed:2b:f5:94:81:28:09:3e: 84:b5:d1:20:ad:fe:de:8c:02:89:17:ea:33:31:6d:c3:90:8d: d2:d7:cf:9b:10:ae:96:6f:07:3e:49:66:5d:dd:13:6b:e5:f4: e7:5a:f5:b8 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICD44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjUwMjI4MTkzMDE4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyMGVjYS05YzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+X1Q2dzldcikE93R/u6mW6cubJVoteALVIADLwVW1eljtAvMP2dYlYTReb/ 9JHMzxG3vbtyrLI+j2NHyx+2LZEdy3tWvYTQXCu/SCmj0Kta/3ZzTOKQCocQmaRC HWwYxIMhKEiZnxfjdlQUWuHSCXFNKZC7rfPuvy4tSUiiI9gtLPAg+UiYkLjGpYrj 7yFOyaLQndDeT9TlzHhD7vB/izIIaX6zEd0D6qzIskW/L02fn0vKnnHi5pBGudfF jR1ECpNlddEH/WxU/fSfVcBHRagS5TxyttpJ1ix+aHX1cFEEQHWZE0nUrApynzkG j70O+zsMZUmth0EHaNcS4AWG4QIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFImo2AzJ CCFYxunNKNNgZiFPsQMcMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvNTg1QTg5RkUw OUIxMTFFQUIwNDVCMzFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMBoEAgABMBQwDAMEAngd/AMEAHgd/gMEAMsRSDAjBAIAAjAdMBIDBwAgAQ3N AAEDBwMgAQ3NAAADBwAgAQ3N3QUwDQYJKoZIhvcNAQELBQADggEBAKrh57UPRUmd zGB2OwGh3sQCN84Ryoisus6vE4XpD7eCyzjYiMVucFIXid/JKbkOFjfk5FuLwuZ5 hKI0ryY+19xNzNCShTZnW7/z+FdPIeqF17ob202QBTDQhZlsHAQLXmTK5Zs3Vf5D dAzpjYboQJrgFuqkktMWOrt+K5CFRyGZ3erOleiKcjsBeC2fWgwYZYWntJ5d73FV 5UDbkG51gSDHMqTyzloupqprCExL1S0IPbHYZApQFk0TtetSxYwKUJvpfTqqbzhH pLBy1Bek8TTtK/WUgSgJPoS10SCt/t6MAokX6jMxbcOQjdLXz5sQrpZvBz5JZl3d E2vl9Oda9bg= -----END CERTIFICATE-----Generated at Sat Apr 5 06:02:18 2025 by rpki-client