$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/87EFB95AC01811EF90CE8B0EC4F9AE02.roa File: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (raw, json) Hash identifier: qZJPfG2amv1YRehnUzdlHxLOWwvXz8+dMtqCKRYUJpM= Subject key identifier: 69:B1:5E:60:0E:25:E0:DE:6F:2C:DE:DC:96:F4:B0:C4:B4:27:F5:44 Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 34FB Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/87EFB95AC01811EF90CE8B0EC4F9AE02.roa Signing time: Wed 26 Mar 2025 14:50:55 +0000 ROA not before: Wed 26 Mar 2025 14:50:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38015 IP address blocks: 120.29.232.0/23 maxlen: 24 123.242.248.0/22 maxlen: 22 203.189.176.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 14:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13563 (0x34fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770 Validity Not Before: Mar 26 14:50:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67e4144e-da1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:4a:02:f1:39:d7:72:7e:16:97:e9:62:8c: 1b:e1:c1:18:c4:0a:a4:e1:e7:5a:14:34:7d:4b:f5: df:43:e4:a8:3c:59:ed:6b:7d:21:45:83:31:ea:86: 84:13:fe:ad:a9:47:f5:32:32:c2:08:ad:50:ae:a4: d2:db:4f:28:c5:d5:6b:c5:92:ca:9a:00:d2:69:f4: b2:f5:cf:7e:8e:d4:10:1b:0c:f1:0d:b2:10:74:37: 4a:b2:4e:13:b2:da:92:19:22:7a:b9:6c:bb:9d:4d: fe:37:a6:fc:2a:c5:64:9b:23:34:b3:7a:32:27:f6: 37:a7:da:57:92:dd:ec:6e:b2:5c:b4:29:fa:8b:bb: 9d:68:de:53:be:c9:58:77:86:3f:0e:ab:2b:f5:68: 79:97:31:56:74:e6:d6:ac:97:4b:bf:2f:cb:00:26: 32:06:83:6e:da:67:da:e1:70:da:4b:9a:48:ca:5f: 12:e0:56:6c:87:f4:88:66:06:5f:be:e3:0f:ba:bf: 2c:10:7f:8a:a5:b9:7c:02:d2:81:77:c1:14:3f:64: f0:cc:d2:12:f3:75:16:2e:cf:e4:17:10:45:9a:d8: 4a:00:a7:d5:52:36:d2:71:3e:bf:6f:9b:e7:95:3d: 47:cf:00:98:e3:a8:89:ab:96:28:78:ba:ce:4e:57: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B1:5E:60:0E:25:E0:DE:6F:2C:DE:DC:96:F4:B0:C4:B4:27:F5:44 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/87EFB95AC01811EF90CE8B0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.232.0/23 123.242.248.0/22 203.189.176.0/22 Signature Algorithm: sha256WithRSAEncryption 70:ad:30:50:fe:d3:cb:8a:43:66:80:c2:28:c9:74:3a:4a:2e: a3:e5:2e:51:3e:b3:02:a0:9c:25:c2:5b:8d:03:14:05:76:07: 52:ea:59:cb:db:7d:6e:07:37:7c:b4:e7:ca:57:3c:38:ac:3f: 96:08:fe:05:b4:ef:74:8f:9b:54:bf:cb:22:68:a6:78:53:2f: ef:79:cc:34:48:d6:c4:ba:f4:c7:d9:d7:ac:33:86:9d:69:76: b3:28:07:07:26:b4:30:53:82:5c:e2:d9:2d:41:6f:c6:af:83: 65:53:03:3b:31:6c:79:c0:52:74:2c:8d:b6:cd:cc:37:91:8c: ae:36:6c:c4:ff:0f:5d:2c:3e:d3:a9:62:78:a4:30:fa:81:b5: 41:c0:f7:2f:dd:67:fd:bd:51:b6:9e:e5:21:f9:9e:f1:fc:e7: f7:d1:9a:ce:04:67:fe:fb:2c:6a:82:05:f9:41:64:1b:23:7e: 3d:26:32:27:3e:e8:1c:07:17:fb:61:3b:4e:d2:2a:3f:08:55: 1b:a6:e6:a0:98:6f:dc:9e:dd:1b:ac:81:d5:6a:e4:8e:c6:43: 13:15:e3:69:96:d7:16:61:b3:d6:64:36:8e:27:01:db:89:ea: 22:7c:94:8a:1b:d8:ac:9c:0c:80:27:5f:74:16:82:ef:b5:c7: 46:24:00:b0 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjUwMzI2MTQ1MDU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0MTQ0ZS1kYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaBKAvE513J+FpfpYowb4cEYxAqk4edaFDR9S/XfQ+SoPFnta30hRYMx6oaE E/6tqUf1MjLCCK1QrqTS208oxdVrxZLKmgDSafSy9c9+jtQQGwzxDbIQdDdKsk4T stqSGSJ6uWy7nU3+N6b8KsVkmyM0s3oyJ/Y3p9pXkt3sbrJctCn6i7udaN5TvslY d4Y/Dqsr9Wh5lzFWdObWrJdLvy/LACYyBoNu2mfa4XDaS5pIyl8S4FZsh/SIZgZf vuMPur8sEH+Kpbl8AtKBd8EUP2TwzNIS83UWLs/kFxBFmthKAKfVUjbScT6/b5vn lT1HzwCY46iJq5YoeLrOTlcoEwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGmxXmAO JeDebyze3Jb0sMS0J/VEMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvODdFRkI5NUFD MDE4MTFFRjkwQ0U4QjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAF4HegDBAJ78vgDBALLvbAwDQYJKoZIhvcNAQELBQADggEB AHCtMFD+08uKQ2aAwijJdDpKLqPlLlE+swKgnCXCW40DFAV2B1LqWcvbfW4HN3y0 58pXPDisP5YI/gW073SPm1S/yyJopnhTL+95zDRI1sS69MfZ16wzhp1pdrMoBwcm tDBTglzi2S1Bb8avg2VTAzsxbHnAUnQsjbbNzDeRjK42bMT/D10sPtOpYnikMPqB tUHA9y/dZ/29Ubae5SH5nvH85/fRms4EZ/77LGqCBflBZBsjfj0mMic+6BwHF/th O07SKj8IVRum5qCYb9ye3RusgdVq5I7GQxMV42mW1xZhs9ZkNo4nAduJ6iJ8lIob 2KycDIAnX3QWgu+1x0YkALA= -----END CERTIFICATE-----Generated at Sat Apr 12 10:42:48 2025 by rpki-client