$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4CE75372B9DE11EEBC5B0D21C4F9AE02.roa File: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (raw, json) Hash identifier: yps3mcP7HEC1/XDzl5d78p6GLXVPbcsPt7pEv3x1HZA= Subject key identifier: 23:8A:00:32:43:0B:2B:A2:4A:7E:1A:82:C1:75:41:85:DB:5B:36:BE Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Certificate serial: 1DC3 Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4CE75372B9DE11EEBC5B0D21C4F9AE02.roa Signing time: Wed 18 Dec 2024 16:13:37 +0000 ROA not before: Wed 18 Dec 2024 16:13:37 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38639 IP address blocks: 163.138.224.0/19 maxlen: 19 163.138.241.0/24 maxlen: 24 163.138.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7619 (0x1dc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A Validity Not Before: Dec 18 16:13:37 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6762f4b1-7876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:cd:3e:6f:e6:a9:1b:ba:cf:62:c9:30:28: f9:4c:58:f4:af:c8:af:be:9e:23:b1:07:8f:26:79: 49:32:fa:19:d4:30:81:b3:a3:67:3e:79:4a:63:f8: 5f:68:a2:57:aa:8c:35:be:3d:7d:1e:7e:4a:77:24: 88:24:9f:8a:70:98:40:6a:72:e8:9a:0c:14:4e:97: f5:16:7c:80:e5:ab:5e:22:f0:93:31:e0:23:b9:f5: ab:1b:17:04:90:af:33:92:22:96:c3:24:b3:21:84: 19:f4:02:a5:e5:38:58:9d:aa:45:26:eb:7a:eb:19: 8e:3c:e2:d0:a2:ca:e8:34:d3:dc:33:3a:e8:63:bc: 1d:0b:ae:77:3c:0a:f6:91:97:eb:ac:61:30:36:ea: 22:f9:59:50:1d:71:6a:e1:0d:08:0f:8b:37:38:1a: 62:6b:e6:df:1a:b6:f7:81:68:61:4a:48:38:06:f8: 6c:05:91:d1:ea:08:94:22:ce:32:b0:e5:5e:c3:26: e5:03:ac:e3:ce:63:5c:9f:eb:0e:17:fe:8c:97:65: 43:1b:27:20:87:84:d5:a6:b0:6c:7c:ad:ff:7b:fe: 72:35:f0:89:83:ec:e6:a3:09:fb:fd:eb:49:a8:73: 99:5b:ed:04:20:9d:2a:e1:22:d3:d3:5b:ec:83:d4: bd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8A:00:32:43:0B:2B:A2:4A:7E:1A:82:C1:75:41:85:DB:5B:36:BE X509v3 Authority Key Identifier: keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4CE75372B9DE11EEBC5B0D21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.138.224.0/19 Signature Algorithm: sha256WithRSAEncryption 05:f2:8f:0a:03:6b:4e:ce:dc:38:d5:c7:c4:6c:ec:0a:5a:ec: 03:3e:b5:a8:bd:12:90:df:0b:7c:f8:46:b2:82:c4:8c:e6:9d: b3:02:f1:de:49:35:fc:ca:02:a0:d1:d8:21:85:e9:34:39:99: a8:25:6e:90:fb:c2:aa:4e:75:31:c2:4c:cb:f0:3b:17:be:cc: b9:f7:60:47:dc:c1:50:af:05:31:8a:75:59:30:29:79:8c:0b: 02:bb:cb:e3:56:1b:e6:f4:72:b9:db:bb:9d:4a:e5:ed:be:81: 6d:1f:5e:75:20:2c:8f:e0:29:af:45:b9:6f:e3:f0:67:e4:a9: d2:56:0a:c6:32:53:a8:2b:a2:bc:08:50:84:df:d5:46:44:ef: 60:8b:2f:62:21:58:e6:09:63:54:3a:48:8f:69:14:d1:ac:a9: e3:86:5d:cf:49:73:76:33:c8:bd:6d:f9:09:d0:ac:05:63:ee: 61:f7:a9:96:95:f9:14:c7:f5:a2:6b:06:09:43:68:47:0c:f7: 61:90:43:40:42:b8:eb:dd:28:9c:63:5d:74:12:07:5a:2f:a9: 92:9e:0c:a0:2a:97:4a:ad:f9:73:14:95:25:55:07:a6:aa:68: 32:28:de:c0:7b:7a:25:4c:8b:71:33:70:80:54:0f:20:83:f3: 1b:ab:41:28 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF RUFFQkYwRDQwHhcNMjQxMjE4MTYxMzM3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYyZjRiMS03ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtHNPm/mqRu6z2LJMCj5TFj0r8ivvp4jsQePJnlJMvoZ1DCBs6NnPnlKY/hf aKJXqow1vj19Hn5KdySIJJ+KcJhAanLomgwUTpf1FnyA5ateIvCTMeAjufWrGxcE kK8zkiKWwySzIYQZ9AKl5ThYnapFJut66xmOPOLQosroNNPcMzroY7wdC653PAr2 kZfrrGEwNuoi+VlQHXFq4Q0ID4s3OBpia+bfGrb3gWhhSkg4BvhsBZHR6giUIs4y sOVewyblA6zjzmNcn+sOF/6Ml2VDGycgh4TVprBsfK3/e/5yNfCJg+zmown7/etJ qHOZW+0EIJ0q4SLT01vsg9S9hwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCOKADJD CyuiSn4agsF1QYXbWza+MB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5 RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4 TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRCMUEvNURENDhBQjY4OUYyMTFFNjlFNUY2MzM5QzRGOUFFMDIvNENFNzUzNzJC OURFMTFFRUJDNUIwRDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAWjiuAwDQYJKoZIhvcNAQELBQADggEBAAXyjwoDa07O3DjV x8Rs7Apa7AM+tai9EpDfC3z4RrKCxIzmnbMC8d5JNfzKAqDR2CGF6TQ5maglbpD7 wqpOdTHCTMvwOxe+zLn3YEfcwVCvBTGKdVkwKXmMCwK7y+NWG+b0crnbu51K5e2+ gW0fXnUgLI/gKa9FuW/j8GfkqdJWCsYyU6grorwIUITf1UZE72CLL2IhWOYJY1Q6 SI9pFNGsqeOGXc9Jc3YzyL1t+QnQrAVj7mH3qZaV+RTH9aJrBglDaEcM92GQQ0BC uOvdKJxjXXQSB1ovqZKeDKAql0qt+XMUlSVVB6aqaDIo3sB7eiVMi3EzcIBUDyCD 8xurQSg= -----END CERTIFICATE-----Generated at Sat Apr 5 07:21:07 2025 by rpki-client