$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa File: F4BF2B68721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: IcyAmss/143UHKbZ0Dn9Y6khit0Sn0NFoa8rTRv9Ah0= Subject key identifier: 00:FA:60:4E:88:35:59:4E:AA:5B:DC:AF:C2:8E:C8:18:C2:86:0C:40 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: C6 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa Signing time: Sat 21 Dec 2024 05:50:15 +0000 ROA not before: Sat 21 Dec 2024 05:50:15 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38589 IP address blocks: 202.28.16.0/24 maxlen: 24 202.29.108.0/24 maxlen: 24 202.29.109.0/24 maxlen: 24 2001:3c8:1601::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2 Validity Not Before: Dec 21 05:50:15 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67665717-6f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:cb:9c:60:f3:b4:0c:b4:b4:39:06:9f:9e: 3c:c2:34:35:f7:1e:8e:d2:16:9c:54:cb:31:5a:e9: b6:5c:34:e7:cd:a8:37:d2:67:aa:c7:8e:ed:ae:7f: 9c:1e:72:2a:9c:79:e3:0b:fb:2b:98:af:46:b0:86: 75:0f:ab:39:a8:00:a1:b4:9c:19:a8:e1:2e:af:d2: 11:76:a0:7b:32:8f:9d:ed:93:81:9c:5c:27:24:6f: a6:a4:57:be:88:1a:0b:ac:11:29:84:dc:8d:28:e7: 79:7b:c2:44:1c:ad:29:37:36:30:08:27:81:fb:19: 31:6f:a0:a6:af:84:05:ad:ed:38:51:08:6d:d6:48: 35:5e:c2:25:59:e6:f3:5a:8b:1d:a6:0f:80:26:35: cb:6f:cd:94:5d:40:9d:4f:a6:88:fa:04:79:f1:24: f9:fd:e5:68:19:20:44:6b:57:3a:5e:39:ae:bd:d1: f6:c2:28:97:71:01:e0:81:cb:01:c0:65:8c:04:b8: 30:a7:a1:3b:61:1c:ff:42:9a:e5:66:c5:9f:dd:ac: 99:49:52:fa:a2:02:6d:2f:14:63:fe:5e:90:9e:24: 94:42:e4:be:1c:d5:28:53:c8:0f:aa:8f:da:e5:6c: c9:99:9f:35:a8:6d:3c:a8:40:53:5a:f4:1d:eb:e8: 2e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:60:4E:88:35:59:4E:AA:5B:DC:AF:C2:8E:C8:18:C2:86:0C:40 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.16.0/24 202.29.108.0/23 IPv6: 2001:3c8:1601::/48 Signature Algorithm: sha256WithRSAEncryption 1f:94:ef:6f:65:ee:e2:84:ed:8e:2a:0e:c1:7b:dc:d4:31:96: 3e:97:49:19:f6:39:d8:44:97:43:66:c3:bb:c3:c9:0a:9f:c6: 50:02:f8:c4:3e:24:c9:2d:73:80:d0:d1:80:99:a1:5c:ca:d3: 84:79:43:b0:35:cc:f7:4a:ae:a3:d0:11:e5:e9:59:e7:7b:fa: f7:5d:70:61:36:f6:24:e3:67:54:a3:89:01:ea:49:21:70:1f: 61:8f:f0:ab:51:f0:66:97:0e:4d:01:3a:06:9b:a8:01:00:01: ca:60:50:2d:a2:f2:c4:4d:9f:46:13:55:4b:0a:d6:c7:1e:b7: e0:61:6b:92:06:a1:5f:d7:58:13:3f:04:85:e0:f7:be:f1:2b: 0b:62:98:46:80:4f:19:3c:c8:71:2a:b7:4c:e7:e4:3d:5e:ce: 8c:4a:02:9d:b9:fb:cf:cd:e0:bc:29:49:ce:0f:4a:be:2d:d5: c0:03:a4:2a:9c:7f:59:65:e3:68:9f:70:e6:d2:5e:9d:8d:c2: 5e:f7:d2:08:6b:d5:f1:80:8d:d0:cc:be:ab:ce:6c:6d:d2:20: 08:2a:fb:c8:6c:50:bc:bf:01:8b:ec:34:9d:fa:49:ea:9d:5f: 3b:ba:0e:ab:5c:27:0c:6d:85:b0:24:3d:df:16:3c:dd:58:8a: bc:78:7f:f7 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjQxMjIxMDU1MDE1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY2NTcxNy02ZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUHLnGDztAy0tDkGn548wjQ19x6O0hacVMsxWum2XDTnzag30meqx47trn+c HnIqnHnjC/srmK9GsIZ1D6s5qAChtJwZqOEur9IRdqB7Mo+d7ZOBnFwnJG+mpFe+ iBoLrBEphNyNKOd5e8JEHK0pNzYwCCeB+xkxb6Cmr4QFre04UQht1kg1XsIlWebz Wosdpg+AJjXLb82UXUCdT6aI+gR58ST5/eVoGSBEa1c6XjmuvdH2wiiXcQHggcsB wGWMBLgwp6E7YRz/QprlZsWf3ayZSVL6ogJtLxRj/l6QniSUQuS+HNUoU8gPqo/a 5WzJmZ81qG08qEBTWvQd6+gupQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFAD6YE6I NVlOqlvcr8KOyBjChgxAMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjRCRjJCNjg3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBADKHBADBAHKHWwwDwQCAAIwCQMHACABA8gWATANBgkqhkiG 9w0BAQsFAAOCAQEAH5Tvb2Xu4oTtjioOwXvc1DGWPpdJGfY52ESXQ2bDu8PJCp/G UAL4xD4kyS1zgNDRgJmhXMrThHlDsDXM90quo9AR5elZ53v6911wYTb2JONnVKOJ AepJIXAfYY/wq1HwZpcOTQE6BpuoAQABymBQLaLyxE2fRhNVSwrWxx634GFrkgah X9dYEz8EheD3vvErC2KYRoBPGTzIcSq3TOfkPV7OjEoCnbn7z83gvClJzg9Kvi3V wAOkKpx/WWXjaJ9w5tJenY3CXvfSCGvV8YCN0My+q85sbdIgCCr7yGxQvL8Bi+w0 nfpJ6p1fO7oOq1wnDG2FsCQ93xY83ViKvHh/9w== -----END CERTIFICATE-----Generated at Sat Apr 5 02:03:13 2025 by rpki-client