$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/624EED84E05611EF94B15084C4F9AE02.roa File: 624EED84E05611EF94B15084C4F9AE02.roa (raw, json) Hash identifier: 9e4pncNZ34MiHX43g5ImhaCBiJWYtaKufup08D6wHzU= Subject key identifier: CF:97:43:48:48:5C:6D:5C:51:90:84:32:85:DD:7C:EB:08:7D:3A:33 Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Certificate serial: E6 Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/624EED84E05611EF94B15084C4F9AE02.roa Signing time: Mon 03 Feb 2025 04:28:47 +0000 ROA not before: Mon 03 Feb 2025 04:28:47 +0000 ROA not after: Mon 02 Jun 2025 00:00:00 +0000 asID: 152139 IP address blocks: 210.87.70.0/23 maxlen: 23 210.87.70.0/24 maxlen: 24 210.87.71.0/24 maxlen: 24 2001:df3:3e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Validity Not Before: Feb 3 04:28:47 2025 GMT Not After : Jun 2 00:00:00 2025 GMT Subject: CN=67a045ff-89d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:26:ab:77:74:c1:4e:69:81:fc:43:2a:c2: fa:e9:ca:23:05:84:e5:16:bb:68:0c:92:0d:3f:72: 80:78:37:87:ff:67:bf:68:2b:f0:a8:eb:e6:b3:82: 52:54:31:72:d5:6b:b3:de:e3:ce:32:cf:5b:2a:34: fb:ab:8c:00:52:e7:a5:d4:9f:cb:07:db:4a:12:14: 98:e6:7c:22:cd:04:d7:2e:06:17:b8:47:58:b2:d2: b0:17:61:59:cb:f5:be:c5:27:fa:85:f5:56:3e:81: b0:bd:c5:61:06:fa:f0:86:61:f2:11:ef:ee:4a:55: 09:d2:62:7a:98:ff:3e:a2:28:1a:76:6a:a7:f1:01: 1f:3c:38:b3:5a:db:16:99:78:27:ad:c5:99:3a:d8: b3:0b:28:46:dc:67:bf:5a:db:56:17:15:ce:1f:a1: cb:4e:b6:c8:69:99:41:b9:b3:2c:40:bd:e0:e2:cf: 51:8b:af:01:36:44:b4:2d:fb:22:5c:b0:ab:a1:f6: 17:97:61:1f:fe:77:77:72:13:ee:78:cd:aa:cb:22: bb:17:b0:47:9e:70:9c:4d:c2:3f:12:4e:7d:11:9a: fd:7d:88:e7:54:29:55:da:97:81:4a:09:07:09:fa: 33:8c:42:e8:b8:46:f5:c2:6c:76:dd:80:7f:94:31: d5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:97:43:48:48:5C:6D:5C:51:90:84:32:85:DD:7C:EB:08:7D:3A:33 X509v3 Authority Key Identifier: keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/624EED84E05611EF94B15084C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.87.70.0/23 IPv6: 2001:df3:3e40::/48 Signature Algorithm: sha256WithRSAEncryption c3:6e:47:60:f9:eb:54:bc:74:9f:0f:7d:c4:e3:f3:8e:e7:ae: cb:53:5a:67:91:fa:b5:84:f7:66:9d:4a:52:59:ed:2d:dd:2e: 9a:fa:f5:4b:6e:bb:6c:9a:9e:65:e4:f1:2a:59:d7:b4:83:2a: 1d:38:0e:2e:4a:77:06:94:eb:74:31:f5:9e:00:1a:86:c0:c6: 03:6c:5b:cf:b2:00:f8:7d:10:e6:14:4d:5b:b0:05:f3:aa:62: f6:80:1b:11:49:b8:22:8d:f3:b6:a7:77:e2:4f:50:12:fa:f0: be:27:1f:84:c9:84:fc:44:40:07:4e:77:b5:f2:1a:e5:c6:92: d7:23:c7:3b:27:7e:ef:d1:dd:2a:95:d5:6e:18:68:7f:9a:2c: 69:67:4c:cf:98:c7:08:53:28:8c:0e:40:ae:c0:73:16:d3:79: 31:e7:ae:33:ef:74:fc:9f:6b:a8:d6:b9:01:93:15:d5:0e:6e: 28:0d:51:9c:40:75:18:02:06:7a:1c:de:b7:fe:25:b5:dd:19: 2f:44:d2:03:31:76:2b:32:a8:1f:51:ea:3c:bc:6b:39:a7:5e: 1e:dc:26:66:a5:2c:1a:a5:b8:ce:8c:89:cc:91:02:f5:8d:57: 56:2b:18:94:b8:01:8b:41:b4:98:0b:ad:34:cb:c5:2e:e8:f6: c5:85:39:18 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDY4QjNGRjE2NjU4OUM4NDQxQTQ0RkRDQTYxRjQyQjNB NjNBRTExMjkwHhcNMjUwMjAzMDQyODQ3WhcNMjUwNjAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EwNDVmZi04OWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvUmq3d0wU5pgfxDKsL66cojBYTlFrtoDJINP3KAeDeH/2e/aCvwqOvms4JS VDFy1Wuz3uPOMs9bKjT7q4wAUuel1J/LB9tKEhSY5nwizQTXLgYXuEdYstKwF2FZ y/W+xSf6hfVWPoGwvcVhBvrwhmHyEe/uSlUJ0mJ6mP8+oigadmqn8QEfPDizWtsW mXgnrcWZOtizCyhG3Ge/WttWFxXOH6HLTrbIaZlBubMsQL3g4s9Ri68BNkS0Lfsi XLCrofYXl2Ef/nd3chPueM2qyyK7F7BHnnCcTcI/Ek59EZr9fYjnVClV2peBSgkH CfozjELouEb1wmx23YB/lDHVBQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFM+XQ0hI XG1cUZCEMoXdfOsIfTozMB8GA1UdIwQYMBaAFGiz/xZlichEGkT9ymH0KzpjrhEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlFUWFSUDNLWWZRck9tT3VF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FMUF9GbVdKeUVRYVJQM0tZZlFyT21PdUVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTJDNUQvM0I5REQ0MTA5MkM0MTFFRUI1MjFCQjQ5QzRGOUFFMDIvNjI0RUVEODRF MDU2MTFFRjk0QjE1MDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHSV0YwDwQCAAIwCQMHACABDfM+QDANBgkqhkiG9w0BAQsF AAOCAQEAw25HYPnrVLx0nw99xOPzjueuy1NaZ5H6tYT3Zp1KUlntLd0umvr1S267 bJqeZeTxKlnXtIMqHTgOLkp3BpTrdDH1ngAahsDGA2xbz7IA+H0Q5hRNW7AF86pi 9oAbEUm4Io3ztqd34k9QEvrwvicfhMmE/ERAB053tfIa5caS1yPHOyd+79HdKpXV bhhof5osaWdMz5jHCFMojA5ArsBzFtN5MeeuM+90/J9rqNa5AZMV1Q5uKA1RnEB1 GAIGehzet/4ltd0ZL0TSAzF2KzKoH1HqPLxrOadeHtwmZqUsGqW4zoyJzJEC9Y1X VisYlLgBi0G0mAutNMvFLuj2xYU5GA== -----END CERTIFICATE-----Generated at Sun Apr 13 05:47:37 2025 by rpki-client