$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C4C5C94C721511EF9D7B9F3DC4F9AE02.roa File: C4C5C94C721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: JB3pWj/0G2F/gwxX1ZYwIzE2ZPHKCT6FGycG3s3c9Q0= Subject key identifier: 9A:D7:47:3E:FF:E4:31:16:CC:6F:71:2E:1C:BA:C4:B9:AA:14:91:D3 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: C8 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C4C5C94C721511EF9D7B9F3DC4F9AE02.roa Signing time: Sat 21 Dec 2024 05:50:18 +0000 ROA not before: Sat 21 Dec 2024 05:50:18 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 45847 IP address blocks: 202.29.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2 Validity Not Before: Dec 21 05:50:18 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67665719-e660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:98:54:6d:54:4d:e8:ab:f1:83:65:0e:09: b7:c7:66:5d:db:99:89:60:37:85:50:d8:00:b9:2c: fb:e8:a9:85:cf:28:f7:73:af:a0:a7:8e:68:fc:ea: 31:7d:20:ab:a9:e6:1b:3f:23:fa:3c:0b:99:d5:0e: db:97:9d:79:5f:06:d5:fd:45:6c:c8:7d:8d:3b:b8: 11:d5:01:3a:1c:05:27:58:70:25:fb:d0:b6:5a:ae: e4:94:04:72:12:e3:26:57:4c:5d:ed:74:85:20:d1: 74:92:b3:6c:d9:b2:9f:d0:44:b2:7f:3f:0b:f9:58: 65:45:7f:34:5a:cd:ae:98:f3:b2:d7:9a:e7:05:61: 16:72:dd:47:86:39:2c:1c:ab:09:bc:6c:ef:cb:d8: 55:3f:1b:29:de:2c:97:e1:c9:da:23:d2:65:0b:1c: dd:43:84:72:bc:a5:ce:d3:2a:e3:80:fa:4b:e9:25: 07:ff:21:49:22:09:40:8f:a8:80:e9:ad:85:24:20: 13:e1:96:25:e2:d4:30:35:a9:d6:33:e8:a6:3c:cf: d2:32:8f:cc:c7:45:9e:0b:71:79:1e:2e:21:49:8a: 13:42:5c:7e:21:a2:d6:3d:ef:90:c9:89:5d:67:1b: b6:c8:29:4d:a9:2d:6f:61:0a:ba:be:97:24:bb:d6: 1f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D7:47:3E:FF:E4:31:16:CC:6F:71:2E:1C:BA:C4:B9:AA:14:91:D3 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C4C5C94C721511EF9D7B9F3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.33.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:88:74:5b:15:94:76:7b:42:3c:43:ac:2a:a0:b6:eb:60:3d: c1:12:62:54:e6:d4:b4:53:6f:56:c5:d1:b7:07:27:43:80:ec: 9f:0b:9f:3b:ed:cd:68:a6:ca:d8:37:bf:f1:bc:08:9d:26:d5: 9d:81:ef:1c:40:22:ae:5a:c2:64:61:27:59:fd:6c:84:51:ef: cc:6d:d3:50:cc:b0:3c:37:1d:68:2f:b5:0c:a0:c1:d1:45:79: c1:68:ae:fa:4f:dc:d9:fc:1a:71:36:d8:7f:a9:25:1b:d9:94: 76:f9:4c:11:20:da:eb:fa:6d:25:ab:a2:5d:43:2d:57:a1:a1: b7:30:b9:36:3c:c0:b2:41:c2:f2:8b:db:42:52:25:1e:a9:f8: 6e:22:3b:d1:18:3f:c4:11:f2:50:6b:a7:0a:38:46:fe:3a:03: 3f:00:b7:1a:4c:0a:3a:2d:20:b8:bd:87:e2:d0:cf:17:6c:34: 48:30:88:1f:4f:7b:b6:86:ec:b4:c7:8a:e4:e2:d1:7b:85:55: fb:82:76:69:6c:58:77:3e:ca:91:b9:71:74:49:1c:b2:fe:24: 27:29:ba:f5:5c:0e:90:ae:31:ba:18:f5:18:76:c2:16:ca:d3: b2:3d:3b:6e:be:f0:0f:c7:62:87:a9:80:5f:10:bc:9a:12:da: 6c:70:a8:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjQxMjIxMDU1MDE4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY2NTcxOS1lNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY+YVG1UTeir8YNlDgm3x2Zd25mJYDeFUNgAuSz76KmFzyj3c6+gp45o/Oox fSCrqeYbPyP6PAuZ1Q7bl515XwbV/UVsyH2NO7gR1QE6HAUnWHAl+9C2Wq7klARy EuMmV0xd7XSFINF0krNs2bKf0ESyfz8L+VhlRX80Ws2umPOy15rnBWEWct1Hhjks HKsJvGzvy9hVPxsp3iyX4cnaI9JlCxzdQ4RyvKXO0yrjgPpL6SUH/yFJIglAj6iA 6a2FJCAT4ZYl4tQwNanWM+imPM/SMo/Mx0WeC3F5Hi4hSYoTQlx+IaLWPe+QyYld Zxu2yClNqS1vYQq6vpcku9YfIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJrXRz7/ 5DEWzG9xLhy6xLmqFJHTMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvQzRDNUM5NEM3 MjE1MTFFRjlEN0I5RjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKHSEwDQYJKoZIhvcNAQELBQADggEBAH6IdFsVlHZ7QjxD rCqgtutgPcESYlTm1LRTb1bF0bcHJ0OA7J8LnzvtzWimytg3v/G8CJ0m1Z2B7xxA Iq5awmRhJ1n9bIRR78xt01DMsDw3HWgvtQygwdFFecForvpP3Nn8GnE22H+pJRvZ lHb5TBEg2uv6bSWrol1DLVehobcwuTY8wLJBwvKL20JSJR6p+G4iO9EYP8QR8lBr pwo4Rv46Az8AtxpMCjotILi9h+LQzxdsNEgwiB9Pe7aG7LTHiuTi0XuFVfuCdmls WHc+ypG5cXRJHLL+JCcpuvVcDpCuMboY9Rh2whbK07I9O26+8A/HYoepgF8QvJoS 2mxwqB0= -----END CERTIFICATE-----Generated at Sat Apr 5 01:58:09 2025 by rpki-client