$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/F7F2D20ABCE911EFB7786B63C4F9AE02.roa File: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (raw, json) Hash identifier: YDClsqxDW8aE74OivD5RPpVA+CxjmhxOOqfYIEgfLpM= Subject key identifier: 8B:CF:08:4D:72:7E:64:D0:98:A0:55:A0:3C:1F:2C:AE:3F:32:77:8C Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 078F Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/F7F2D20ABCE911EFB7786B63C4F9AE02.roa Signing time: Wed 18 Dec 2024 02:44:15 +0000 ROA not before: Wed 18 Dec 2024 02:44:15 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 132857 IP address blocks: 43.243.56.0/23 maxlen: 24 2407:2b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 20:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1935 (0x78f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6 Validity Not Before: Dec 18 02:44:15 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=676236fe-61f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:eb:22:a9:ea:d0:10:ae:69:6c:15:de:f9:d7: 0e:b5:93:ea:f4:32:a2:29:12:c3:a6:6a:d5:47:fa: 9b:7d:4f:5a:79:c2:9c:8c:c8:10:07:81:4e:78:60: 58:c9:58:6e:37:11:d2:3a:b6:7e:2d:8a:1e:28:05: d9:5b:d1:eb:76:46:19:f7:b5:e9:41:8a:ae:08:68: ee:d4:13:34:e6:b1:81:e1:1d:2e:ff:5d:7d:14:62: 1a:3e:de:e9:89:49:83:2f:5b:37:62:11:eb:59:43: 88:61:ea:1a:57:ae:3b:84:c5:56:17:26:d6:f6:a4: 9f:19:58:31:ec:5e:5d:f2:4e:a4:4a:af:45:91:6f: 40:b5:f8:01:2f:69:7b:ba:37:d0:b8:9e:65:a9:35: f0:d2:48:43:53:83:0a:11:7e:96:9c:4c:ab:2b:e4: 13:80:c2:24:07:57:26:74:5e:96:f7:ed:4d:97:4d: 86:3f:2c:ff:58:7d:d4:35:79:69:56:2d:d0:8d:b2: 88:a0:3f:bd:e1:07:66:6f:49:23:f7:39:2f:71:43: 9e:78:85:9a:57:0a:46:9f:d1:a2:11:1e:2b:fa:1e: 72:86:37:4f:8a:e5:84:95:cc:c1:f8:a0:ca:54:10: 1c:08:d4:fe:e6:cb:77:d1:83:86:69:eb:2e:ab:9f: 55:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CF:08:4D:72:7E:64:D0:98:A0:55:A0:3C:1F:2C:AE:3F:32:77:8C X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/F7F2D20ABCE911EFB7786B63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.56.0/23 IPv6: 2407:2b00::/32 Signature Algorithm: sha256WithRSAEncryption 94:a4:1f:67:47:6c:84:96:76:be:7e:ab:81:18:7a:1f:3c:04: 53:db:69:ef:eb:cc:b9:d6:b1:b5:e4:9e:da:da:57:50:ee:78: dc:e1:8c:1a:89:4b:58:bc:81:e9:1a:99:9e:88:88:ea:25:7c: 74:f0:b8:05:a0:34:2c:03:c5:31:f3:4d:fd:42:13:75:24:72: 8b:80:f3:48:f0:4b:6e:7e:48:6f:76:bb:73:25:71:08:a4:0c: cd:fb:39:81:0a:c0:96:4a:36:5e:70:49:f8:d0:1a:f4:44:dd: 9b:02:d0:d8:68:73:27:ec:47:be:17:c4:52:3c:70:9a:47:67: 18:aa:02:9e:13:ae:9b:03:a6:35:67:eb:dd:c6:ef:29:b5:11: 88:8b:de:fd:43:8e:ab:21:a4:7f:d3:27:d7:b6:76:6e:e9:c1: 54:0b:0a:9d:a3:20:57:5c:cc:d6:6c:1e:48:46:72:4d:b3:42: eb:3e:19:0b:2f:22:9e:4c:7f:86:f0:88:b6:6f:0c:6d:22:2d: 86:74:55:1a:ec:26:f6:a5:71:8b:e5:84:72:5e:c9:bb:35:9e: 55:b5:54:71:ec:92:9a:e8:88:40:0a:79:9e:2b:28:9a:74:90: f8:ef:e3:aa:9a:6e:16:16:57:c6:ed:ac:cf:e0:ac:2e:e7:d5: aa:8f:87:f6 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjQxMjE4MDI0NDE1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYyMzZmZS02MWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+siqerQEK5pbBXe+dcOtZPq9DKiKRLDpmrVR/qbfU9aecKcjMgQB4FOeGBY yVhuNxHSOrZ+LYoeKAXZW9HrdkYZ97XpQYquCGju1BM05rGB4R0u/119FGIaPt7p iUmDL1s3YhHrWUOIYeoaV647hMVWFybW9qSfGVgx7F5d8k6kSq9FkW9AtfgBL2l7 ujfQuJ5lqTXw0khDU4MKEX6WnEyrK+QTgMIkB1cmdF6W9+1Nl02GPyz/WH3UNXlp Vi3QjbKIoD+94Qdmb0kj9zkvcUOeeIWaVwpGn9GiER4r+h5yhjdPiuWElczB+KDK VBAcCNT+5st30YOGaesuq59VaQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIvPCE1y fmTQmKBVoDwfLK4/MneMMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYzQzYvNjMxQ0MxNjBGMzM4MTFFQUE2M0Q0MTU0QzRGOUFFMDIvRjdGMkQyMEFC Q0U5MTFFRkI3Nzg2QjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAEr8zgwDQQCAAIwBwMFACQHKwAwDQYJKoZIhvcNAQELBQAD ggEBAJSkH2dHbISWdr5+q4EYeh88BFPbae/rzLnWsbXkntraV1DueNzhjBqJS1i8 gekamZ6IiOolfHTwuAWgNCwDxTHzTf1CE3UkcouA80jwS25+SG92u3MlcQikDM37 OYEKwJZKNl5wSfjQGvRE3ZsC0NhocyfsR74XxFI8cJpHZxiqAp4TrpsDpjVn693G 7ym1EYiL3v1DjqshpH/TJ9e2dm7pwVQLCp2jIFdczNZsHkhGck2zQus+GQsvIp5M f4bwiLZvDG0iLYZ0VRrsJvalcYvlhHJeybs1nlW1VHHskproiEAKeZ4rKJp0kPjv 46qabhYWV8btrM/grC7n1aqPh/Y= -----END CERTIFICATE-----Generated at Wed Apr 9 03:26:26 2025 by rpki-client