$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/77E7AC0E492611EDAF439D83C4F9AE02.roa File: 77E7AC0E492611EDAF439D83C4F9AE02.roa (raw, json) Hash identifier: zf9lfjVRzDBvijPsU/+tznrhofnaF/WZi0W6mRh1UBY= Subject key identifier: 8F:6A:A8:71:0A:9C:36:3A:A7:33:B9:BD:4B:9B:63:0E:C3:3A:13:CC Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 022E Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/77E7AC0E492611EDAF439D83C4F9AE02.roa Signing time: Mon 31 Mar 2025 01:59:01 +0000 ROA not before: Mon 31 Mar 2025 01:59:01 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 136140 IP address blocks: 140.168.240.0/24 maxlen: 24 140.168.241.0/24 maxlen: 24 140.168.242.0/24 maxlen: 24 140.168.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98 Validity Not Before: Mar 31 01:59:01 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67e9f6e5-5760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:55:6a:6e:e4:e7:8f:52:42:2f:fc:d0:f6: f5:23:e5:42:a0:89:0d:8f:a4:28:90:80:d6:3f:5d: 28:90:5d:26:c3:61:7e:0e:92:7b:3a:5c:27:d2:ab: 04:24:64:d9:ea:3c:a3:78:c1:90:a7:eb:63:bf:e4: 9a:a9:25:99:b5:8b:1d:08:46:05:af:70:1d:a5:f0: 48:84:ce:07:02:8f:37:0c:53:8d:9f:3a:91:88:bb: b3:bb:e2:47:9e:1b:a6:9f:37:c2:cb:fa:1f:dc:27: 2b:30:70:63:b8:5b:dc:23:5a:fa:5d:62:c6:c1:4f: 00:21:16:83:40:17:77:42:3d:48:90:c0:b0:be:64: b2:4d:96:34:43:a0:03:73:d9:33:9c:e3:4e:ee:2e: 01:a2:3c:2e:62:08:55:3d:ca:93:27:ac:a5:35:d6: 12:3b:6f:7b:45:f8:cd:0a:62:3f:bf:c7:cc:37:ae: 00:5a:39:5c:91:8c:87:16:62:4a:94:ec:b9:f6:e4: ab:ec:1b:1c:79:30:23:fc:82:d8:8a:25:7e:07:54: 79:cc:d3:e9:1b:b2:a1:69:18:cc:69:fe:3b:23:4b: 79:4a:d6:30:52:6b:14:6b:49:84:87:4d:ef:dd:ba: e3:b7:8c:ec:b3:a9:1e:c4:7c:09:2a:40:e8:bd:95: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6A:A8:71:0A:9C:36:3A:A7:33:B9:BD:4B:9B:63:0E:C3:3A:13:CC X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/77E7AC0E492611EDAF439D83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.168.240.0/22 Signature Algorithm: sha256WithRSAEncryption be:a2:45:11:e0:49:1a:6b:20:c0:53:75:72:9c:a6:df:35:68: e2:07:db:0b:75:c5:30:07:60:83:b3:20:75:7d:ae:ab:9d:61: fd:39:13:05:39:ca:fc:52:73:70:07:1d:bf:98:0a:63:40:08: 89:88:24:ce:0d:91:9c:d6:d2:15:3a:c2:e1:79:d8:ca:3b:6d: 67:f2:ef:4f:43:f0:bd:32:b1:e4:1c:52:d0:5c:8b:27:7d:9b: 4f:d6:34:a3:0f:83:04:d2:b1:2e:52:10:13:75:d4:48:e0:70: 6a:e5:b4:88:c8:85:df:2e:f0:89:98:68:40:b1:13:85:f6:ad: 88:d0:e3:78:33:98:f4:49:39:f6:41:6b:78:8b:1e:79:99:e0: 4e:8e:49:b3:a6:e3:04:59:42:b4:20:60:91:1a:7c:a9:e2:c7: 65:07:0e:c9:af:af:41:8e:cd:fb:48:75:2e:e9:da:ed:df:36: 37:0b:c9:e1:0d:f9:9e:f7:70:2c:bb:0b:a5:3f:ea:2c:e5:bd: 90:e1:2b:45:90:d5:eb:3e:de:dc:a0:aa:f2:eb:21:91:93:c3: 1b:d5:85:1c:d0:d4:c9:f9:4b:c3:99:ea:9e:35:cc:c5:14:f1: 56:78:3b:ef:c0:d3:85:2b:c9:f8:76:40:64:a5:0d:98:86:b0: 2d:4a:7a:ec -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjUwMzMxMDE1OTAxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2U5ZjZlNS01NzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZJVam7k549SQi/80Pb1I+VCoIkNj6QokIDWP10okF0mw2F+DpJ7Olwn0qsE JGTZ6jyjeMGQp+tjv+SaqSWZtYsdCEYFr3AdpfBIhM4HAo83DFONnzqRiLuzu+JH nhumnzfCy/of3CcrMHBjuFvcI1r6XWLGwU8AIRaDQBd3Qj1IkMCwvmSyTZY0Q6AD c9kznONO7i4BojwuYghVPcqTJ6ylNdYSO297RfjNCmI/v8fMN64AWjlckYyHFmJK lOy59uSr7BsceTAj/ILYiiV+B1R5zNPpG7KhaRjMaf47I0t5StYwUmsUa0mEh03v 3brjt4zss6kexHwJKkDovZXgBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI9qqHEK nDY6pzO5vUubYw7DOhPMMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvNzdFN0FDMEU0 OTI2MTFFREFGNDM5RDgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKMqPAwDQYJKoZIhvcNAQELBQADggEBAL6iRRHgSRprIMBT dXKcpt81aOIH2wt1xTAHYIOzIHV9rqudYf05EwU5yvxSc3AHHb+YCmNACImIJM4N kZzW0hU6wuF52Mo7bWfy709D8L0yseQcUtBciyd9m0/WNKMPgwTSsS5SEBN11Ejg cGrltIjIhd8u8ImYaECxE4X2rYjQ43gzmPRJOfZBa3iLHnmZ4E6OSbOm4wRZQrQg YJEafKnix2UHDsmvr0GOzftIdS7p2u3fNjcLyeEN+Z73cCy7C6U/6izlvZDhK0WQ 1es+3tygqvLrIZGTwxvVhRzQ1Mn5S8OZ6p41zMUU8VZ4O+/A04Uryfh2QGSlDZiG sC1Keuw= -----END CERTIFICATE-----Generated at Sun Apr 6 07:53:16 2025 by rpki-client