$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/BB676D067C9B11EBB1A0BD0FC4F9AE02.roa File: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (raw, json) Hash identifier: EHblWN/sQZKLg9HDhv2zyoanKhtnruUlRN2jtd5a8fY= Subject key identifier: 98:26:0B:3E:5D:51:52:66:51:A1:1C:D8:A5:51:66:01:87:9B:F2:3E Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 1FD8 Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/BB676D067C9B11EBB1A0BD0FC4F9AE02.roa Signing time: Thu 06 Mar 2025 17:35:27 +0000 ROA not before: Thu 06 Mar 2025 17:35:27 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 4641 IP address blocks: 202.45.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8152 (0x1fd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6 Validity Not Before: Mar 6 17:35:27 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c9dcdf-2933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5f:2c:3b:51:f1:0a:34:5a:37:00:81:22:c7: 07:64:27:4c:08:67:ff:12:29:b1:5c:f4:ea:cd:3c: 84:98:d5:0b:2b:d2:93:64:e1:86:27:d6:da:48:e0: e3:84:00:c1:e7:10:02:5f:b8:e3:62:38:ff:81:3d: 70:a9:ed:0e:10:82:b4:18:23:d3:8a:5e:a0:cc:eb: 7b:81:67:cf:28:cd:08:a0:b3:47:a4:00:b1:52:32: 74:2b:92:8d:24:8a:8d:18:e3:ae:e5:63:4f:45:a4: a4:18:1e:ae:1c:09:99:7b:e0:70:0b:77:b4:42:ca: 99:fe:e4:83:99:98:cd:08:e1:e8:4a:1c:3d:6d:9c: 97:38:5a:34:97:d4:0d:68:fd:ec:d4:a4:13:c8:17: c4:d4:2c:e0:4b:9d:c7:e9:79:3e:64:7a:74:ab:fe: 5e:05:26:4a:d5:48:6e:0b:13:c9:f2:a0:d9:8a:90: 66:2e:d9:8d:08:78:a0:49:31:f9:ea:cf:f0:dc:bf: 77:ef:b8:7f:31:ee:6c:6c:b2:3a:c4:c6:f5:01:39: fe:47:84:51:d5:16:a4:23:ce:d0:1c:b9:b7:e9:51: 8f:d8:80:73:8c:91:e8:2f:bd:f0:c0:1b:94:f7:cd: 39:ab:3f:80:e6:e0:e1:bd:d4:1a:e7:36:b9:0e:05: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:26:0B:3E:5D:51:52:66:51:A1:1C:D8:A5:51:66:01:87:9B:F2:3E X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/BB676D067C9B11EBB1A0BD0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.45.191.0/24 Signature Algorithm: sha256WithRSAEncryption a8:77:84:a6:b8:48:67:77:f2:78:12:9f:50:bb:ac:c1:7b:8a: 84:4e:ce:46:73:e1:df:ba:d9:1f:59:0b:dd:3d:90:5a:cb:86: 7a:eb:fb:73:14:45:31:74:48:97:ca:1e:49:83:3a:03:b8:f1: b3:97:1f:18:ca:aa:dc:df:0d:48:13:c8:87:48:d6:42:72:e7: 1e:12:15:03:d2:03:76:6a:da:6e:f7:1e:e3:0c:24:d3:63:53: 0c:c8:f5:a5:c8:2c:31:e2:df:ac:0b:dc:5f:21:48:9b:16:7d: 2d:2c:d5:21:1a:33:a1:47:cd:7a:88:c5:83:64:47:d7:d6:1d: 87:22:e5:5a:e3:93:6d:77:63:4e:79:b8:1e:36:26:30:7e:bd: b7:c3:b2:e7:6e:9d:bc:6b:1c:5f:06:4b:3f:d3:be:c7:2d:29: 65:65:41:90:19:c6:d0:21:a8:a3:74:ca:01:70:1e:e5:04:58: a9:18:1c:6b:4a:75:d4:1f:ba:79:48:3f:ab:b7:f7:39:d5:bb: 71:05:74:da:2b:d8:b2:e6:7d:d3:e1:3d:d3:12:a0:8f:f2:7c: fa:f5:db:bb:34:c9:34:3b:39:10:1f:8e:3e:8c:60:9f:02:53: da:dd:c8:ba:fb:1f:97:18:52:f5:4a:3f:aa:5e:3e:3c:3c:47: 25:59:82:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICH9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjUwMzA2MTczNTI3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M5ZGNkZi0yOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1V8sO1HxCjRaNwCBIscHZCdMCGf/EimxXPTqzTyEmNULK9KTZOGGJ9baSODj hADB5xACX7jjYjj/gT1wqe0OEIK0GCPTil6gzOt7gWfPKM0IoLNHpACxUjJ0K5KN JIqNGOOu5WNPRaSkGB6uHAmZe+BwC3e0QsqZ/uSDmZjNCOHoShw9bZyXOFo0l9QN aP3s1KQTyBfE1CzgS53H6Xk+ZHp0q/5eBSZK1UhuCxPJ8qDZipBmLtmNCHigSTH5 6s/w3L9377h/Me5sbLI6xMb1ATn+R4RR1RakI87QHLm36VGP2IBzjJHoL73wwBuU 9805qz+A5uDhvdQa5za5DgWxCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJgmCz5d UVJmUaEc2KVRZgGHm/I+MB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTcyQjYvRjJCOUUwQTQxMzJBMTFFOUFFNzdBRDdCQzRGOUFFMDIvQkI2NzZEMDY3 QzlCMTFFQkIxQTBCRDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKLb8wDQYJKoZIhvcNAQELBQADggEBAKh3hKa4SGd38ngS n1C7rMF7ioROzkZz4d+62R9ZC909kFrLhnrr+3MURTF0SJfKHkmDOgO48bOXHxjK qtzfDUgTyIdI1kJy5x4SFQPSA3Zq2m73HuMMJNNjUwzI9aXILDHi36wL3F8hSJsW fS0s1SEaM6FHzXqIxYNkR9fWHYci5Vrjk213Y055uB42JjB+vbfDsudunbxrHF8G Sz/TvsctKWVlQZAZxtAhqKN0ygFwHuUEWKkYHGtKddQfunlIP6u39znVu3EFdNor 2LLmfdPhPdMSoI/yfPr127s0yTQ7ORAfjj6MYJ8CU9rdyLr7H5cYUvVKP6pePjw8 RyVZgg0= -----END CERTIFICATE-----Generated at Sat Apr 5 07:20:55 2025 by rpki-client