$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F3DDF814099A11EAB5891D5BC4F9AE02.roa File: F3DDF814099A11EAB5891D5BC4F9AE02.roa (raw, json) Hash identifier: gGFOwtHYVKtQUc8WJmjr//RYr4W1p4RPISOLlqprsos= Subject key identifier: 94:BD:98:60:F5:B8:4E:5B:66:C2:53:B6:9C:28:F8:08:1A:58:34:6C Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 0F8D Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F3DDF814099A11EAB5891D5BC4F9AE02.roa Signing time: Fri 28 Feb 2025 19:30:17 +0000 ROA not before: Fri 28 Feb 2025 19:30:17 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 397239 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3981 (0xf8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA Validity Not Before: Feb 28 19:30:17 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c20ec9-67ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fc:38:88:5d:8a:27:f8:c5:c6:6f:b9:33:a2: ee:a8:30:79:ec:bb:9a:04:83:12:5e:b0:f1:a1:91: 51:2c:99:84:55:d0:b7:64:5a:79:2b:a1:57:3b:9d: f1:8b:3e:53:63:c5:68:ed:62:6a:f5:3a:2b:cd:84: e2:e9:32:8e:d6:ae:8d:c6:b8:9f:33:db:a7:b2:f8: a6:78:9f:c1:e7:12:7d:ab:45:e8:af:c4:3b:73:82: 0b:ce:ab:6b:ba:40:cc:10:84:ee:b2:4d:db:87:3a: 25:f6:f9:81:0d:a6:ad:55:d2:44:96:bd:70:83:57: 6e:36:6a:7f:52:31:36:7f:8e:c3:46:20:a9:9d:bf: d9:3b:67:7d:7b:fe:a2:27:57:47:75:0a:3c:a8:44: 4c:27:c7:b1:c0:9c:16:dd:3d:2b:70:3b:82:cf:72: fe:30:d0:66:9e:8c:8a:ba:32:bd:07:50:65:ef:2a: c0:07:58:ba:b7:c4:eb:4d:85:f2:72:02:6e:88:2b: 11:ab:17:e8:58:75:af:f9:49:33:69:1d:c5:a9:0a: 8c:4b:df:95:da:01:11:14:a7:5d:22:e5:01:12:a5: b4:72:ed:66:57:2f:a5:be:c1:a7:dd:2c:6f:31:29: c3:e1:e5:8e:ad:49:a5:58:45:31:3f:35:12:03:7c: 7b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BD:98:60:F5:B8:4E:5B:66:C2:53:B6:9C:28:F8:08:1A:58:34:6C X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F3DDF814099A11EAB5891D5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 34:71:8c:cc:ba:d2:94:66:d8:ce:0a:38:5c:87:7c:c8:96:c3: 6f:04:b8:12:ce:1e:20:cd:83:a8:69:e4:7c:e2:a7:6b:5b:3f: 23:89:22:94:d2:8a:2c:af:72:10:1c:4a:34:8c:5d:46:0b:ad: 0a:24:e5:bc:05:f9:cb:3d:ff:f6:0d:35:74:6a:02:fc:0c:d7: a8:64:8f:8a:3b:fb:32:cc:21:30:0d:3a:b1:69:71:bb:18:43: c6:96:d3:fa:80:12:8b:0b:32:0a:0d:c2:f5:93:74:70:14:4b: 8a:75:bc:87:e0:fc:3f:64:0f:c1:fa:10:7f:bb:ee:3c:e5:77: 6b:08:fa:7f:83:e9:01:ce:ae:81:1c:b1:bc:44:d6:7c:35:1c: 24:ce:76:76:e9:cc:0a:c5:b1:0d:75:4e:1f:a9:cd:09:c3:bd: 46:0c:51:62:93:81:0a:01:69:ad:55:1a:94:60:a1:6b:a0:8d: 41:ff:2c:18:7f:dd:42:f9:95:d3:01:4b:a9:bb:f9:3d:45:a4: e1:cb:3e:ff:c2:cd:ed:c3:cd:61:84:89:2b:bc:63:69:52:cb: e8:3d:6e:bd:e9:81:de:5e:d3:fc:63:21:30:1a:62:74:16:56: 48:9a:87:0d:5b:4d:70:36:1f:16:66:3b:85:3f:f9:cc:2a:5d: f8:8d:45:ea -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICD40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjUwMjI4MTkzMDE3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyMGVjOS02N2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fw4iF2KJ/jFxm+5M6LuqDB57LuaBIMSXrDxoZFRLJmEVdC3ZFp5K6FXO53x iz5TY8Vo7WJq9TorzYTi6TKO1q6NxrifM9unsvimeJ/B5xJ9q0Xor8Q7c4ILzqtr ukDMEITusk3bhzol9vmBDaatVdJElr1wg1duNmp/UjE2f47DRiCpnb/ZO2d9e/6i J1dHdQo8qERMJ8exwJwW3T0rcDuCz3L+MNBmnoyKujK9B1Bl7yrAB1i6t8TrTYXy cgJuiCsRqxfoWHWv+UkzaR3FqQqMS9+V2gERFKddIuUBEqW0cu1mVy+lvsGn3Sxv MSnD4eWOrUmlWEUxPzUSA3x7kQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFJS9mGD1 uE5bZsJTtpwo+AgaWDRsMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvRjNEREY4MTQw OTlBMTFFQUI1ODkxRDVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMBoEAgABMBQwDAMEAngd/AMEAHgd/gMEAMsRSDAjBAIAAjAdMBIDBwAgAQ3N AAEDBwMgAQ3NAAADBwAgAQ3N3QUwDQYJKoZIhvcNAQELBQADggEBADRxjMy60pRm 2M4KOFyHfMiWw28EuBLOHiDNg6hp5Hzip2tbPyOJIpTSiiyvchAcSjSMXUYLrQok 5bwF+cs9//YNNXRqAvwM16hkj4o7+zLMITANOrFpcbsYQ8aW0/qAEosLMgoNwvWT dHAUS4p1vIfg/D9kD8H6EH+77jzld2sI+n+D6QHOroEcsbxE1nw1HCTOdnbpzArF sQ11Th+pzQnDvUYMUWKTgQoBaa1VGpRgoWugjUH/LBh/3UL5ldMBS6m7+T1FpOHL Pv/Cze3DzWGEiSu8Y2lSy+g9br3pgd5e0/xjITAaYnQWVkiahw1bTXA2HxZmO4U/ +cwqXfiNReo= -----END CERTIFICATE-----Generated at Sat Apr 5 05:57:30 2025 by rpki-client