$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/A874B08E072E11EA8A64DC59C4F9AE02.roa File: A874B08E072E11EA8A64DC59C4F9AE02.roa (raw, json) Hash identifier: /NgnAgAPTU8YL6mOcICZgZ2Lr7uSKAho8MEphHHaKa8= Subject key identifier: 46:06:FD:84:DF:AA:0B:26:20:C2:D3:FB:42:29:2B:5F:05:78:39:28 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 0F74 Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/A874B08E072E11EA8A64DC59C4F9AE02.roa Signing time: Fri 28 Feb 2025 19:29:45 +0000 ROA not before: Fri 28 Feb 2025 19:29:45 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 397213 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3956 (0xf74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA Validity Not Before: Feb 28 19:29:45 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c20ea9-1388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:81:4f:5d:26:6a:08:78:58:80:e4:3e:df: 42:18:2a:63:41:40:b4:14:d8:88:5d:e3:31:5d:3c: 51:68:79:24:cd:3e:e5:27:6d:c5:cb:d3:8b:37:8d: 1e:d8:c5:cb:33:16:2a:21:20:7f:bf:02:d8:84:57: b2:20:c4:44:51:fc:a4:fa:8d:34:21:5a:93:77:5e: 20:ba:c4:67:b4:95:56:63:45:18:ad:0a:c2:f4:c1: 06:f1:1d:2a:eb:e5:24:98:8b:c3:36:cc:11:bf:f1: 16:1e:85:d1:d4:bd:6e:47:d6:3e:6c:70:da:0f:bf: ac:b8:44:ee:53:4e:15:4f:cf:45:2f:24:75:30:fe: 41:4a:19:0e:d8:a9:c2:ae:28:1b:71:f2:a1:44:aa: b7:0c:0e:37:15:00:72:3c:d1:e5:49:3c:af:50:4b: 89:72:ec:d5:c4:a5:7a:6b:ec:bc:b1:0c:36:01:38: df:34:29:d1:a0:92:4f:ff:7c:2c:28:4c:d6:57:75: 10:3f:55:b6:1c:90:53:55:c3:6e:c8:42:c3:65:54: 03:45:45:0a:0a:7f:28:01:50:9c:37:fb:0d:57:57: 66:23:fb:b1:8e:40:2c:4f:05:2d:53:ab:48:e3:f0: 5f:8b:76:08:e9:dd:47:e2:89:ab:7f:8b:2a:b5:6b: 24:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:06:FD:84:DF:AA:0B:26:20:C2:D3:FB:42:29:2B:5F:05:78:39:28 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/A874B08E072E11EA8A64DC59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 98:ae:b8:db:5d:a3:12:6c:2d:8b:c2:96:92:c2:78:42:24:9c: a2:02:9f:1c:61:1c:a8:8c:e6:6d:f0:f5:91:24:02:c1:c1:e2: ee:93:b5:a6:22:ce:c5:01:5b:10:df:63:ca:7b:0e:70:87:b6: 3e:77:55:0f:21:d8:96:22:6b:f4:39:66:68:c8:b0:8a:75:54: 57:d7:b7:c7:25:7a:93:df:d6:7a:a7:f2:3a:46:eb:27:68:9e: 62:06:53:71:27:47:aa:7f:6c:2e:c0:08:9b:ea:34:a8:89:c3: ba:5c:e9:2f:da:ba:17:44:11:17:20:38:5a:bd:07:96:01:f6: 7a:5b:cd:44:1e:b0:c3:5d:72:13:b0:8d:87:bd:d8:27:5c:9a: 7d:83:f4:5b:bc:47:de:cf:91:79:ec:0b:72:45:5b:34:33:1c: 97:8a:d1:14:bf:d2:b8:f9:63:15:ab:5b:94:fb:00:77:7f:32: 6a:33:bc:9b:d2:5a:17:e9:44:3f:11:65:22:c8:88:a2:32:3d: 8c:d0:9f:b7:2d:d6:14:62:5d:05:b8:f4:ae:9c:03:35:1d:9b: 24:81:04:f5:7a:3c:d5:75:de:38:7a:d4:ba:3b:c7:66:f7:28: e3:83:01:ac:0a:a6:ed:17:e4:bc:cf:03:8d:ab:d3:f6:1b:e6: d9:c9:f4:76 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICD3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjUwMjI4MTkyOTQ1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyMGVhOS0xMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTeBT10magh4WIDkPt9CGCpjQUC0FNiIXeMxXTxRaHkkzT7lJ23Fy9OLN40e 2MXLMxYqISB/vwLYhFeyIMREUfyk+o00IVqTd14gusRntJVWY0UYrQrC9MEG8R0q 6+UkmIvDNswRv/EWHoXR1L1uR9Y+bHDaD7+suETuU04VT89FLyR1MP5BShkO2KnC rigbcfKhRKq3DA43FQByPNHlSTyvUEuJcuzVxKV6a+y8sQw2ATjfNCnRoJJP/3ws KEzWV3UQP1W2HJBTVcNuyELDZVQDRUUKCn8oAVCcN/sNV1dmI/uxjkAsTwUtU6tI 4/Bfi3YI6d1H4omrf4sqtWskAQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFEYG/YTf qgsmIMLT+0IpK18FeDkoMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvQTg3NEIwOEUw NzJFMTFFQThBNjREQzU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMBoEAgABMBQwDAMEAngd/AMEAHgd/gMEAMsRSDAjBAIAAjAdMBIDBwAgAQ3N AAEDBwMgAQ3NAAADBwAgAQ3N3QUwDQYJKoZIhvcNAQELBQADggEBAJiuuNtdoxJs LYvClpLCeEIknKICnxxhHKiM5m3w9ZEkAsHB4u6TtaYizsUBWxDfY8p7DnCHtj53 VQ8h2JYia/Q5ZmjIsIp1VFfXt8clepPf1nqn8jpG6ydonmIGU3EnR6p/bC7ACJvq NKiJw7pc6S/auhdEERcgOFq9B5YB9npbzUQesMNdchOwjYe92Cdcmn2D9Fu8R97P kXnsC3JFWzQzHJeK0RS/0rj5YxWrW5T7AHd/MmozvJvSWhfpRD8RZSLIiKIyPYzQ n7ct1hRiXQW49K6cAzUdmySBBPV6PNV13jh61Lo7x2b3KOODAawKpu0X5LzPA42r 0/Yb5tnJ9HY= -----END CERTIFICATE-----Generated at Sat Apr 5 03:24:44 2025 by rpki-client