$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/3F9C6E6619B811EF8628ED1FC4F9AE02.roa File: 3F9C6E6619B811EF8628ED1FC4F9AE02.roa (raw, json) Hash identifier: W33rXxSlvsCWhMMJptogBjvzdgDQoYwJi+V5ipdn5y8= Subject key identifier: 17:23:1B:97:62:E3:DA:45:BC:B9:CB:9A:06:86:AC:E6:54:28:E0:C5 Certificate issuer: /CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E Certificate serial: 89 Authority key identifier: 41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/3F9C6E6619B811EF8628ED1FC4F9AE02.roa Signing time: Tue 21 Jan 2025 04:59:50 +0000 ROA not before: Tue 21 Jan 2025 04:59:50 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152647 IP address blocks: 202.61.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4475, serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E Validity Not Before: Jan 21 04:59:50 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=678f29c5-813e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:8e:09:8a:0e:27:81:fc:a2:50:3e:5d:91: 07:f8:d1:5c:5e:e3:de:ee:9c:8d:f5:ea:8f:39:5d: 1c:27:af:d6:cb:29:52:57:86:8f:cb:f6:d9:5d:9f: 44:52:e5:e0:4c:59:9a:b5:21:22:36:67:43:80:1e: c6:ff:21:9f:c0:fe:d8:df:39:71:44:5d:4d:c7:d5: 74:93:01:26:db:81:73:dc:1d:21:92:63:aa:d7:a3: 12:11:2a:fe:85:13:9d:13:82:53:fc:f6:a1:f1:36: 69:42:e3:33:41:ea:3d:f8:f2:6e:84:2f:fb:8e:5a: 0c:51:44:98:9f:90:8a:cb:25:45:1b:28:a8:de:f8: 0c:bc:1e:a0:e1:9a:fe:42:33:6e:3a:f9:40:03:8a: 16:b8:73:63:09:4e:6f:60:52:43:9b:ac:70:fd:70: 13:b4:ad:a8:2e:c7:f2:d1:7d:ea:75:ff:39:f0:8d: 3e:c6:86:a5:88:56:63:f0:5c:f3:90:00:88:ad:cc: f6:00:9c:cf:03:ce:49:e5:10:13:f5:19:04:3a:47: 58:46:bd:ab:b9:e3:3d:97:c3:32:c3:82:99:0a:4d: 03:29:b5:11:df:08:87:0a:87:a7:f9:64:4d:ae:ea: 64:35:bd:17:80:9d:4f:f9:c8:ee:bf:d8:7a:c3:da: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:23:1B:97:62:E3:DA:45:BC:B9:CB:9A:06:86:AC:E6:54:28:E0:C5 X509v3 Authority Key Identifier: keyid:41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/3F9C6E6619B811EF8628ED1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.61.112.0/23 Signature Algorithm: sha256WithRSAEncryption 27:98:f8:6a:b8:ae:f6:95:b2:b2:7c:ab:c8:27:a8:e9:b6:b8: 63:2f:66:aa:82:fb:62:38:f9:35:65:98:4b:4b:ba:b9:4f:6d: 59:4e:e7:d0:71:68:19:a0:29:ec:35:30:17:47:a4:69:ef:c7: c9:0b:7f:b6:c9:c1:f5:ae:7a:2e:b1:72:ef:97:37:d6:d4:e9: ae:fc:10:61:1b:e0:aa:54:94:4d:e0:9a:07:16:71:04:bc:1e: 8d:11:e9:85:43:99:b4:e3:f7:79:79:e5:f9:e1:b9:ef:cb:c2: a4:79:6d:b0:8b:24:ab:33:f1:95:60:93:d6:90:cd:20:cc:a6: 13:62:28:b0:ba:3d:a4:d3:70:51:6b:f5:0b:9e:b1:ca:3a:21: ff:43:d0:53:e7:18:b8:fd:50:24:f0:92:62:52:99:37:91:a9: 88:d7:03:58:79:1b:97:81:33:8c:0a:a3:b4:84:2d:de:98:7d: 8f:9e:1c:0f:d9:9f:e9:e8:06:7a:82:5e:9d:76:87:e3:8d:83: 12:5c:d5:b4:e2:a7:9b:38:0f:48:35:7a:35:77:58:51:23:b2: 01:e1:20:98:89:00:4d:62:4c:82:90:cd:8f:d9:6a:00:62:fa: 87:2e:f4:16:03:ce:1f:37:8e:5f:dd:a9:d6:a6:d2:6b:ec:a3: 30:f5:4c:dd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0NzUxMTAvBgNVBAUTKDQxMDQzREFDMTg5RTIyRkY3RjVBRUQ4MTA3QTMyMzJG NDE5MEFGM0UwHhcNMjUwMTIxMDQ1OTUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzhmMjljNS04MTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgyOCYoOJ4H8olA+XZEH+NFcXuPe7pyN9eqPOV0cJ6/WyylSV4aPy/bZXZ9E UuXgTFmatSEiNmdDgB7G/yGfwP7Y3zlxRF1Nx9V0kwEm24Fz3B0hkmOq16MSESr+ hROdE4JT/Pah8TZpQuMzQeo9+PJuhC/7jloMUUSYn5CKyyVFGyio3vgMvB6g4Zr+ QjNuOvlAA4oWuHNjCU5vYFJDm6xw/XATtK2oLsfy0X3qdf858I0+xoaliFZj8Fzz kACIrcz2AJzPA85J5RAT9RkEOkdYRr2rueM9l8Myw4KZCk0DKbUR3wiHCoen+WRN rupkNb0XgJ1P+cjuv9h6w9p1TQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBcjG5di 49pFvLnLmgaGrOZUKODFMB8GA1UdIwQYMBaAFEEEPawYniL/f1rtgQejIy9BkK8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ3NS84MzI0NzBEQzE4 Q0YxMUVGOEUzRjI0NTdDNEY5QUUwMi9RUVE5ckJpZUl2OV9XdTJCQjZNakwwR1Fy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRUTlyQmllSXY5X1d1MkJCNk1qTDBHUXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0NzUvODMyNDcwREMxOENGMTFFRjhFM0YyNDU3QzRGOUFFMDIvM0Y5QzZFNjYx OUI4MTFFRjg2MjhFRDFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKPXAwDQYJKoZIhvcNAQELBQADggEBACeY+Gq4rvaVsrJ8 q8gnqOm2uGMvZqqC+2I4+TVlmEtLurlPbVlO59BxaBmgKew1MBdHpGnvx8kLf7bJ wfWuei6xcu+XN9bU6a78EGEb4KpUlE3gmgcWcQS8Ho0R6YVDmbTj93l55fnhue/L wqR5bbCLJKsz8ZVgk9aQzSDMphNiKLC6PaTTcFFr9Quesco6If9D0FPnGLj9UCTw kmJSmTeRqYjXA1h5G5eBM4wKo7SELd6YfY+eHA/Zn+noBnqCXp12h+ONgxJc1bTi p5s4D0g1ejV3WFEjsgHhIJiJAE1iTIKQzY/ZagBi+ocu9BYDzh83jl/dqdam0mvs ozD1TN0= -----END CERTIFICATE-----Generated at Sun Apr 13 02:35:05 2025 by rpki-client