$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7F8336CA721B11EF81654E68C4F9AE02.roa File: 7F8336CA721B11EF81654E68C4F9AE02.roa (raw, json) Hash identifier: DyOaPNRlv5RdCTxiTwA8s3t/CODUbRnL7J99p7z4Aeg= Subject key identifier: 6B:EE:EF:FB:50:6E:92:E1:0B:D6:E2:39:C5:1C:1A:F7:76:C6:ED:12 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: C4 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7F8336CA721B11EF81654E68C4F9AE02.roa Signing time: Sat 21 Dec 2024 05:50:13 +0000 ROA not before: Sat 21 Dec 2024 05:50:13 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38265 IP address blocks: 202.29.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2 Validity Not Before: Dec 21 05:50:13 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67665715-fa9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:d6:07:8c:c3:22:bf:44:3d:ca:96:90:22: 90:97:07:4f:21:4d:40:cd:6f:e4:45:d9:ae:d5:84: 71:74:cb:b5:21:20:37:b3:76:44:c0:9a:aa:42:23: 91:2d:a0:3e:4e:8b:25:d4:58:6a:04:1b:cb:07:26: 97:9d:b0:84:1b:16:cd:7c:61:5a:bf:36:19:93:92: 23:25:de:aa:ac:a6:14:29:8d:73:8f:3d:20:c5:b7: be:5f:7f:d8:aa:3f:58:b3:e7:0c:3d:80:9a:67:57: 3f:24:1f:49:de:76:22:aa:39:bd:33:4c:10:ec:58: 40:78:ea:02:db:a2:e3:27:1b:de:58:c3:97:83:46: cf:64:36:8d:8c:f5:14:09:ad:6d:db:75:36:7c:af: b5:bc:b9:71:4e:04:82:c8:2d:da:a7:3b:09:5e:d7: d7:65:ac:a6:bc:03:24:89:f7:b9:9d:f3:f5:5d:28: b5:69:22:72:62:d5:49:0e:87:68:11:e7:88:73:1c: 9a:cd:bc:d8:e4:10:80:59:a8:b8:e8:92:50:8e:ef: 0a:4d:33:57:cc:29:41:af:9c:90:37:d2:9b:fe:0c: 70:e9:fc:c8:14:cc:a5:08:a6:3d:b6:53:59:0f:26: fd:c0:a7:ec:9a:02:a6:ad:4a:c0:96:2f:c8:e3:3f: 25:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EE:EF:FB:50:6E:92:E1:0B:D6:E2:39:C5:1C:1A:F7:76:C6:ED:12 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7F8336CA721B11EF81654E68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.57.0/24 Signature Algorithm: sha256WithRSAEncryption 34:16:b9:80:91:18:cc:4d:87:bc:1e:16:5d:85:2c:b2:5b:2b: 78:f6:2b:cd:9b:00:6a:49:d5:88:de:0e:ad:7f:c8:1d:02:a7: dd:a6:e9:df:3b:d3:80:81:a5:f8:88:06:ad:28:b0:18:98:cd: f3:83:86:ce:c0:e0:b9:f7:77:a8:c3:8e:6b:7d:b3:3a:92:dc: 16:9d:16:74:d3:8d:d9:51:38:60:1d:5b:c3:58:db:20:1a:0d: fb:c8:63:6a:f2:ef:c0:bb:15:b9:8e:07:7d:70:e6:cf:d7:21: 0a:50:4d:9a:10:b4:53:fb:8d:1a:cc:99:fe:16:a6:5d:b5:1f: 89:69:1b:cd:0a:53:6c:ac:31:4a:f5:ee:ae:90:03:a8:36:b5: b6:b6:8d:9b:0c:17:2a:45:e3:e9:4d:00:01:21:6c:46:d0:f3: bb:3b:b1:7b:bd:8c:e3:da:97:54:21:86:7d:5b:d2:ff:ac:33: 1b:6f:78:98:c3:c5:8e:9b:43:63:21:a0:bb:54:73:a4:94:eb: ef:6a:fa:85:b8:4f:0d:b2:f9:6f:40:da:29:90:0b:7b:a1:59: b7:12:31:29:ef:87:83:17:b5:e8:d0:a0:cd:d5:0b:d0:2d:d7: 65:4c:e1:d2:ca:b6:bc:05:64:b7:2a:88:02:42:9c:0b:c5:a7: 3e:db:d6:9a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjQxMjIxMDU1MDEzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY2NTcxNS1mYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro/WB4zDIr9EPcqWkCKQlwdPIU1AzW/kRdmu1YRxdMu1ISA3s3ZEwJqqQiOR LaA+Tosl1FhqBBvLByaXnbCEGxbNfGFavzYZk5IjJd6qrKYUKY1zjz0gxbe+X3/Y qj9Ys+cMPYCaZ1c/JB9J3nYiqjm9M0wQ7FhAeOoC26LjJxveWMOXg0bPZDaNjPUU Ca1t23U2fK+1vLlxTgSCyC3apzsJXtfXZaymvAMkife5nfP1XSi1aSJyYtVJDodo EeeIcxyazbzY5BCAWai46JJQju8KTTNXzClBr5yQN9Kb/gxw6fzIFMylCKY9tlNZ Dyb9wKfsmgKmrUrAli/I4z8lkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGvu7/tQ bpLhC9biOcUcGvd2xu0SMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvN0Y4MzM2Q0E3 MjFCMTFFRjgxNjU0RTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKHTkwDQYJKoZIhvcNAQELBQADggEBADQWuYCRGMxNh7we Fl2FLLJbK3j2K82bAGpJ1YjeDq1/yB0Cp92m6d8704CBpfiIBq0osBiYzfODhs7A 4Ln3d6jDjmt9szqS3BadFnTTjdlROGAdW8NY2yAaDfvIY2ry78C7FbmOB31w5s/X IQpQTZoQtFP7jRrMmf4Wpl21H4lpG80KU2ysMUr17q6QA6g2tba2jZsMFypF4+lN AAEhbEbQ87s7sXu9jOPal1Qhhn1b0v+sMxtveJjDxY6bQ2MhoLtUc6SU6+9q+oW4 Tw2y+W9A2imQC3uhWbcSMSnvh4MXtejQoM3VC9At12VM4dLKtrwFZLcqiAJCnAvF pz7b1po= -----END CERTIFICATE-----Generated at Sat Apr 5 02:20:25 2025 by rpki-client