$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/140A3D0CEECC11EF9AF7B312C4F9AE02.roa File: 140A3D0CEECC11EF9AF7B312C4F9AE02.roa (raw, json) Hash identifier: mOGEozE8R4x8rRVTsvKBqggv+wxu7IyDvHTix2RoBes= Subject key identifier: 7B:88:57:59:E1:AF:EC:86:6C:5F:B9:E2:89:78:15:A3:10:AD:14:1A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 49BC Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/140A3D0CEECC11EF9AF7B312C4F9AE02.roa Signing time: Wed 19 Feb 2025 14:16:15 +0000 ROA not before: Wed 19 Feb 2025 14:16:15 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131423 IP address blocks: 42.96.16.0/20 maxlen: 24 45.119.212.0/22 maxlen: 24 103.2.224.0/22 maxlen: 24 103.48.84.0/22 maxlen: 24 103.48.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18876 (0x49bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Feb 19 14:16:15 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67b5e7af-ad93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a1:9c:11:d6:f6:ea:e2:06:17:1b:8f:b6:ff: ba:df:be:14:98:78:ca:58:92:91:14:1f:13:65:40: 93:4d:71:f1:41:46:6c:7d:c7:97:0b:5c:71:c4:e0: 07:13:30:46:49:c8:b1:cb:88:52:37:85:02:92:41: f7:d8:f0:8d:0a:63:50:4e:eb:d5:dd:d3:2a:05:8d: c1:e7:e5:4d:2d:c4:4e:89:3b:21:44:05:bd:9e:6a: eb:14:26:39:13:18:d6:c7:ea:96:94:b3:96:2e:34: d7:0a:8e:4b:47:d2:63:d9:ed:23:73:af:cc:d1:09: 63:c0:8c:13:34:99:f3:5a:87:89:69:41:6f:08:b5: 8d:88:ef:3d:ae:e2:68:5d:25:6e:a2:8c:3b:fb:73: 8c:e6:ed:fc:20:61:47:d3:c1:6b:69:d9:81:a0:aa: fa:70:a2:05:a4:c5:61:49:44:49:24:ad:41:62:3f: a1:c3:42:f5:56:d9:b8:e9:0c:20:3d:5c:50:6b:c9: 0d:5b:1b:3a:20:07:74:3f:8b:05:82:e9:b1:8e:e1: 4b:f5:1e:bc:74:52:69:19:fc:17:5c:48:24:77:f1: 68:73:8b:bf:9f:d6:51:86:a0:b5:17:b6:66:13:2d: c5:30:d9:66:1e:3f:ab:29:44:f6:8a:7f:6d:62:5e: 32:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:88:57:59:E1:AF:EC:86:6C:5F:B9:E2:89:78:15:A3:10:AD:14:1A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/140A3D0CEECC11EF9AF7B312C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 42.96.16.0/20 45.119.212.0/22 103.2.224.0/22 103.48.84.0/22 103.48.192.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:6e:d2:35:73:26:07:e7:81:c6:40:e7:28:ed:41:7d:ef:98: 9d:fb:aa:e5:7e:7c:65:de:ff:46:e0:95:0b:53:c8:55:09:27: df:a9:94:09:4f:7d:cc:75:38:1c:ac:5c:bc:aa:3e:56:a3:ad: 4d:22:78:14:a7:c1:6c:84:bd:47:f0:9a:fa:ec:25:1d:4f:b0: c9:f8:32:0b:48:29:02:78:10:58:91:bd:db:93:e5:13:33:72: 7e:0c:10:48:d1:86:66:0d:26:ea:a5:20:c7:7f:d4:af:ef:02: 9b:eb:f0:a8:f6:e7:f4:5f:9f:2f:cc:8b:4b:c1:ce:34:cb:4c: 28:c8:ba:00:9d:50:3a:be:e0:91:db:22:87:b5:82:e1:f9:5e: 76:de:02:de:0c:f6:91:c9:b5:66:d3:cb:15:8f:f1:74:d5:42: 79:f0:1f:88:e1:1b:96:ed:91:35:40:50:75:b9:2b:d0:2e:f4: f8:90:16:8f:19:7c:49:dd:36:ee:73:e0:b5:1c:41:dd:51:a3: 89:78:fa:88:be:d8:07:11:d1:4c:2f:7a:12:d4:53:3c:3d:b6: e9:fb:51:2a:a2:da:0b:89:34:b0:20:00:ad:a6:45:66:cf:e6: 29:1f:8d:ea:0b:f9:d9:15:21:da:a1:21:8d:7f:b2:2e:fe:89: 9e:9b:60:81 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICSbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwMjE5MTQxNjE1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I1ZTdhZi1hZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKGcEdb26uIGFxuPtv+6374UmHjKWJKRFB8TZUCTTXHxQUZsfceXC1xxxOAH EzBGScixy4hSN4UCkkH32PCNCmNQTuvV3dMqBY3B5+VNLcROiTshRAW9nmrrFCY5 ExjWx+qWlLOWLjTXCo5LR9Jj2e0jc6/M0QljwIwTNJnzWoeJaUFvCLWNiO89ruJo XSVuoow7+3OM5u38IGFH08FradmBoKr6cKIFpMVhSURJJK1BYj+hw0L1Vtm46Qwg PVxQa8kNWxs6IAd0P4sFgumxjuFL9R68dFJpGfwXXEgkd/Foc4u/n9ZRhqC1F7Zm Ey3FMNlmHj+rKUT2in9tYl4yYQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHuIV1nh r+yGbF+54ol4FaMQrRQaMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTQwQTNEMENF RUNDMTFFRjlBRjdCMzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAQqYBADBAItd9QDBAJnAuADBAJnMFQDBAJnMMAwDQYJKoZI hvcNAQELBQADggEBAI9u0jVzJgfngcZA5yjtQX3vmJ37quV+fGXe/0bglQtTyFUJ J9+plAlPfcx1OBysXLyqPlajrU0ieBSnwWyEvUfwmvrsJR1PsMn4MgtIKQJ4EFiR vduT5RMzcn4MEEjRhmYNJuqlIMd/1K/vApvr8Kj25/Rfny/Mi0vBzjTLTCjIugCd UDq+4JHbIoe1guH5XnbeAt4M9pHJtWbTyxWP8XTVQnnwH4jhG5btkTVAUHW5K9Au 9PiQFo8ZfEndNu5z4LUcQd1Ro4l4+oi+2AcR0UwvehLUUzw9tun7USqi2guJNLAg AK2mRWbP5ikfjeoL+dkVIdqhIY1/si7+iZ6bYIE= -----END CERTIFICATE-----Generated at Sat Apr 5 14:35:52 2025 by rpki-client