$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F0ED627A721311EFA9D7CA3AC4F9AE02.roa File: F0ED627A721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: H5q2pQUgtf0hEh0OUExPdydjHC+Td4BJX7Yu7hohATo= Subject key identifier: A9:74:41:F3:4D:25:94:CF:2E:AC:95:CE:6E:8D:CF:5B:9A:AA:8F:7F Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: B5 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F0ED627A721311EFA9D7CA3AC4F9AE02.roa Signing time: Sat 21 Dec 2024 05:49:56 +0000 ROA not before: Sat 21 Dec 2024 05:49:56 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 141714 IP address blocks: 202.29.8.0/24 maxlen: 24 202.29.9.0/24 maxlen: 24 202.29.10.0/24 maxlen: 24 202.29.11.0/24 maxlen: 24 2001:3c8:2808::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2 Validity Not Before: Dec 21 05:49:56 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67665704-de49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d4:11:ad:72:14:00:8e:01:26:b2:bc:ff:76: 04:59:2c:31:ca:61:a3:45:9b:45:e3:93:7b:27:de: 4e:73:81:99:5b:ec:bb:67:5b:d1:d5:c5:cd:21:83: 67:22:2d:d4:51:9e:7d:71:a2:85:5e:6c:a4:e7:3b: e3:b9:e8:95:fd:f5:aa:7b:01:76:9d:89:fe:f8:d1: ee:3a:53:d0:ec:d4:d6:39:75:41:95:3d:da:cd:60: a8:ad:20:b8:17:47:ab:92:cd:35:3e:f9:1b:4c:87: a5:41:01:dc:46:32:2d:78:1f:e8:59:bd:49:89:aa: f5:56:aa:37:f2:6b:7a:1f:17:76:c7:25:8a:2e:2a: a4:d2:8a:bf:0a:2f:0d:f8:90:6b:a8:ca:02:7f:05: 41:9d:96:b2:6a:de:4c:f1:3a:11:c6:58:f4:3c:86: 4f:7a:6e:ee:ba:11:95:65:54:c7:9e:95:1f:8e:08: d8:00:13:7f:c1:82:46:d3:9d:d2:40:6e:0e:dc:c2: 49:c2:9e:f8:63:11:34:ad:0d:b6:bf:5b:95:54:e0: 4b:ef:80:91:19:9c:d5:2b:73:15:08:19:f6:d0:1a: 6e:63:9b:83:23:bb:c1:c9:a3:38:ae:11:3c:52:bf: bc:77:72:b1:f2:4b:7f:0d:dc:09:63:d3:34:93:8d: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:74:41:F3:4D:25:94:CF:2E:AC:95:CE:6E:8D:CF:5B:9A:AA:8F:7F X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F0ED627A721311EFA9D7CA3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.8.0/22 IPv6: 2001:3c8:2808::/48 Signature Algorithm: sha256WithRSAEncryption 5c:d6:21:73:b3:64:98:3c:53:0f:11:86:63:60:c0:5c:ff:07: 37:d3:d7:fb:43:4a:7b:48:55:ed:1d:b3:01:85:75:76:30:75: 83:53:b0:02:5d:b4:c2:a0:1d:4f:7b:09:5d:b0:1c:19:03:c6: 29:d3:bc:c9:17:75:f1:77:30:ac:d5:ba:a2:61:98:4c:4c:8a: 29:75:83:d0:04:d4:27:6f:f4:40:2c:53:41:37:c4:fc:8a:7c: 44:3d:1c:df:13:dd:d2:7d:ae:62:37:8c:fc:a5:65:b5:ef:1d: ef:0f:a1:5b:14:8d:e8:f6:c7:db:67:05:f9:b3:6a:c2:ad:3e: 9b:0b:c0:91:6d:ee:59:08:9e:20:6d:4d:45:82:ac:de:81:dd: 86:11:34:de:ad:57:31:64:71:2f:8d:88:3b:4c:55:c9:3f:b3: a1:cd:7e:64:62:2a:44:eb:b8:03:ac:6f:0a:ed:b8:01:fb:da: 17:c9:72:63:29:b0:fc:c5:35:4f:0b:6a:c6:32:a5:d9:5e:6e: b9:a0:3b:43:64:60:49:38:b3:f5:46:3e:6e:d8:1c:b9:3b:7a: 1f:9d:50:3e:88:91:e5:cf:1c:a1:15:95:31:08:02:a5:56:3f: ee:15:3d:a0:81:bb:2e:9b:48:c1:8f:d7:99:ad:7e:83:9a:3b: 16:ad:f2:c8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjQxMjIxMDU0OTU2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY2NTcwNC1kZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9tQRrXIUAI4BJrK8/3YEWSwxymGjRZtF45N7J95Oc4GZW+y7Z1vR1cXNIYNn Ii3UUZ59caKFXmyk5zvjueiV/fWqewF2nYn++NHuOlPQ7NTWOXVBlT3azWCorSC4 F0erks01PvkbTIelQQHcRjIteB/oWb1Jiar1Vqo38mt6Hxd2xyWKLiqk0oq/Ci8N +JBrqMoCfwVBnZayat5M8ToRxlj0PIZPem7uuhGVZVTHnpUfjgjYABN/wYJG053S QG4O3MJJwp74YxE0rQ22v1uVVOBL74CRGZzVK3MVCBn20BpuY5uDI7vByaM4rhE8 Ur+8d3Kx8kt/DdwJY9M0k40XiwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKl0QfNN JZTPLqyVzm6Nz1uaqo9/MB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjBFRDYyN0E3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBALKHQgwDwQCAAIwCQMHACABA8goCDANBgkqhkiG9w0BAQsF AAOCAQEAXNYhc7NkmDxTDxGGY2DAXP8HN9PX+0NKe0hV7R2zAYV1djB1g1OwAl20 wqAdT3sJXbAcGQPGKdO8yRd18XcwrNW6omGYTEyKKXWD0ATUJ2/0QCxTQTfE/Ip8 RD0c3xPd0n2uYjeM/KVlte8d7w+hWxSN6PbH22cF+bNqwq0+mwvAkW3uWQieIG1N RYKs3oHdhhE03q1XMWRxL42IO0xVyT+zoc1+ZGIqROu4A6xvCu24AfvaF8lyYymw /MU1TwtqxjKl2V5uuaA7Q2RgSTiz9UY+btgcuTt6H51QPoiR5c8coRWVMQgCpVY/ 7hU9oIG7LptIwY/Xma1+g5o7Fq3yyA== -----END CERTIFICATE-----Generated at Sat Apr 5 01:57:51 2025 by rpki-client