$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C241C00E721511EF9D7B9F3DC4F9AE02.roa File: C241C00E721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: VxMYUPqk5nbidQmLhm6RQcl7b95HEGnRkNOWbR0z0Ag= Subject key identifier: 36:55:87:B9:9A:A1:00:70:A3:DF:14:CE:47:D0:0F:BF:08:D3:DC:36 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: AA Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C241C00E721511EF9D7B9F3DC4F9AE02.roa Signing time: Sat 21 Dec 2024 05:49:47 +0000 ROA not before: Sat 21 Dec 2024 05:49:47 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 137198 IP address blocks: 202.29.26.0/24 maxlen: 24 2001:3c8:1306::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2 Validity Not Before: Dec 21 05:49:47 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676656fa-2213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:f1:64:cc:db:7e:88:f2:61:d6:86:c9:79: 64:60:03:34:14:01:3b:f7:ad:d2:98:0e:60:ac:7f: d9:2f:43:34:55:d6:b4:35:56:ec:c4:2d:1c:e0:6d: 3c:a7:22:90:2e:f0:61:09:f9:6b:35:64:dd:f3:93: 46:4f:35:f0:a3:ac:4f:72:c7:48:84:d5:0e:8c:70: 11:f8:96:67:94:d2:85:85:60:b3:5f:d8:0a:70:94: 2a:2c:be:cb:21:de:80:70:a8:50:55:33:10:3f:34: 23:ca:50:f3:e4:21:3a:a2:b9:39:ea:b4:a0:74:d4: f7:af:83:cf:b6:31:0f:2e:ad:ee:ef:ce:8a:c7:88: f5:dc:06:84:9e:1e:99:e9:1c:57:09:21:2a:6b:41: a2:cd:a8:18:ef:09:2c:93:20:bd:88:13:10:81:e5: 49:25:1b:a7:f7:4c:cb:20:d0:3c:61:34:1a:7a:f4: 55:4e:c1:1a:8b:97:44:9c:c2:9f:d6:6e:73:e0:ad: 2f:93:13:1d:f8:f2:8e:38:81:9c:7b:6f:7f:76:24: 42:44:a6:d5:a3:8e:21:04:5e:e0:00:3d:8e:b7:35: ae:a2:63:62:43:61:a8:52:d0:93:cb:ed:04:5b:66: 8d:4e:08:cc:36:0f:db:82:96:ca:76:87:9a:58:0d: ae:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:55:87:B9:9A:A1:00:70:A3:DF:14:CE:47:D0:0F:BF:08:D3:DC:36 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C241C00E721511EF9D7B9F3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.26.0/24 IPv6: 2001:3c8:1306::/48 Signature Algorithm: sha256WithRSAEncryption ab:10:5a:d5:41:36:47:4b:fe:bc:78:15:1e:2c:dc:1a:e5:55: 50:b0:ac:ad:df:56:25:4f:27:99:5a:78:9b:e3:34:93:20:9a: d2:59:f6:0a:7d:e7:d1:45:fe:03:86:d4:fc:6c:70:27:8d:59: fb:42:88:5b:12:de:d9:5f:4c:44:5d:cf:a4:45:fe:01:41:92: 6d:b8:36:4d:b0:87:77:4f:39:03:80:b7:64:e7:19:30:ff:6e: 70:a0:78:3f:07:2b:45:28:bd:d4:02:29:48:c3:f9:c0:d7:f0: 67:ba:ca:a8:c1:6d:03:2e:1e:92:4e:d5:96:ee:72:13:14:85: 37:f6:f7:a5:7b:58:e1:d0:e8:46:cb:4b:e1:f3:c9:d3:4d:c1: 44:7f:af:e1:2a:46:73:fb:56:df:ec:9d:95:1f:b2:5a:01:3b: 80:f8:90:21:d4:ee:e2:b4:c5:63:5f:2b:2b:34:b9:db:82:90: 2f:9e:0d:70:38:1f:55:1e:ed:cf:c4:c7:c4:7b:46:4b:bb:40: 74:97:7e:87:f6:12:d2:08:41:cf:c9:d3:87:12:91:8c:87:e3: de:71:a6:d7:d5:d1:8d:a4:75:db:e0:4c:5f:cd:75:dc:46:98: cb:c7:07:40:de:86:96:59:ae:0c:d5:78:01:2a:3a:b8:12:d8: 94:5c:1f:ef -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjQxMjIxMDU0OTQ3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY2NTZmYS0yMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZ/xZMzbfojyYdaGyXlkYAM0FAE7963SmA5grH/ZL0M0Vda0NVbsxC0c4G08 pyKQLvBhCflrNWTd85NGTzXwo6xPcsdIhNUOjHAR+JZnlNKFhWCzX9gKcJQqLL7L Id6AcKhQVTMQPzQjylDz5CE6ork56rSgdNT3r4PPtjEPLq3u786Kx4j13AaEnh6Z 6RxXCSEqa0GizagY7wkskyC9iBMQgeVJJRun90zLINA8YTQaevRVTsEai5dEnMKf 1m5z4K0vkxMd+PKOOIGce29/diRCRKbVo44hBF7gAD2OtzWuomNiQ2GoUtCTy+0E W2aNTgjMNg/bgpbKdoeaWA2udQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDZVh7ma oQBwo98UzkfQD78I09w2MB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvQzI0MUMwMEU3 MjE1MTFFRjlEN0I5RjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKHRowDwQCAAIwCQMHACABA8gTBjANBgkqhkiG9w0BAQsF AAOCAQEAqxBa1UE2R0v+vHgVHizcGuVVULCsrd9WJU8nmVp4m+M0kyCa0ln2Cn3n 0UX+A4bU/GxwJ41Z+0KIWxLe2V9MRF3PpEX+AUGSbbg2TbCHd085A4C3ZOcZMP9u cKB4PwcrRSi91AIpSMP5wNfwZ7rKqMFtAy4ekk7Vlu5yExSFN/b3pXtY4dDoRstL 4fPJ003BRH+v4SpGc/tW3+ydlR+yWgE7gPiQIdTu4rTFY18rKzS524KQL54NcDgf VR7tz8THxHtGS7tAdJd+h/YS0ghBz8nThxKRjIfj3nGm19XRjaR12+BMX8113EaY y8cHQN6GllmuDNV4ASo6uBLYlFwf7w== -----END CERTIFICATE-----Generated at Sat Apr 5 02:07:53 2025 by rpki-client