$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/E879EE7C144111EFB247B936C4F9AE02.roa File: E879EE7C144111EFB247B936C4F9AE02.roa (raw, json) Hash identifier: qwsK6I5KvMQVVTxqatHLY4Gc06wI8z6a8GKH4pqG5s4= Subject key identifier: 2F:4A:F8:8F:36:29:1B:7C:2F:85:40:F3:78:DA:6A:E6:BC:F8:E6:AB Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 02A9 Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/E879EE7C144111EFB247B936C4F9AE02.roa Signing time: Wed 12 Feb 2025 09:32:54 +0000 ROA not before: Wed 12 Feb 2025 09:32:54 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 134450 IP address blocks: 45.125.246.0/24 maxlen: 24 103.239.213.0/24 maxlen: 24 103.241.52.0/22 maxlen: 22 202.94.174.0/24 maxlen: 24 2402:bd80::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587 Validity Not Before: Feb 12 09:32:54 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67ac6ac5-0c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cd:0d:08:f2:ae:85:01:48:80:bc:d7:fe:97: 53:67:3e:56:fe:96:a8:25:7c:44:9a:ee:9b:0e:6e: d6:99:04:b4:54:80:c0:00:b6:b3:d7:71:35:b5:a7: 87:b2:f4:f4:0b:1a:85:aa:ff:f1:02:65:f3:b5:3e: 4c:dd:1c:24:aa:dd:24:70:c9:c8:8e:8c:bc:38:22: 24:5b:eb:ab:79:f8:4d:4b:59:e9:e0:cf:da:b3:3a: 1f:05:e2:2f:7f:20:76:c4:e9:fa:dd:48:a0:34:f0: 3a:ea:7f:c1:c1:e5:5a:d9:45:3f:fa:25:34:84:d9: e4:ca:39:6b:77:0b:9b:5f:83:d2:72:1b:e7:1b:80: 9e:75:74:3b:f5:84:db:67:38:1f:15:d4:97:68:39: 7a:6b:0b:3f:60:06:07:0b:29:e0:5c:6a:1e:4c:20: 3d:ba:79:f4:7f:dd:00:4b:4a:69:a2:c4:b7:ea:0c: 15:49:9a:09:ac:ac:b2:a4:d5:72:72:0c:39:a7:ad: 9b:f1:87:2c:f5:66:30:16:03:a8:26:f4:c8:3c:17: 78:d3:9d:0d:52:37:86:23:94:39:40:b6:eb:90:31: b2:2e:1a:09:3a:fa:30:69:21:55:9d:dc:f2:3d:40: ed:f6:5e:97:58:6f:7e:3c:07:59:23:42:94:a5:ab: c6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4A:F8:8F:36:29:1B:7C:2F:85:40:F3:78:DA:6A:E6:BC:F8:E6:AB X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/E879EE7C144111EFB247B936C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.125.246.0/24 103.239.213.0/24 103.241.52.0/22 202.94.174.0/24 IPv6: 2402:bd80::/30 Signature Algorithm: sha256WithRSAEncryption 10:77:95:91:ad:4d:a4:d6:98:b0:f8:e3:98:29:64:85:ac:ce: fd:e6:31:11:62:7c:42:5a:43:2a:8d:a1:31:5b:39:20:f5:91: a2:71:44:c4:8f:c3:99:80:0f:1f:5d:18:95:eb:05:42:b4:49: bb:67:d0:ad:13:67:0d:a8:c1:e1:2d:71:50:e6:e0:b2:22:a7: 9f:c1:eb:e6:1f:7a:a6:6d:ba:a6:aa:1e:4f:5a:d2:92:35:9a: b5:38:a1:7b:cc:52:da:09:7e:cb:13:54:6e:df:cf:92:88:fc: 3f:a5:26:d9:30:7e:9e:fb:b0:a6:bc:91:e3:66:27:30:42:73: a8:ae:0a:de:42:3c:9e:d7:b9:2b:f6:50:fe:ff:fc:00:91:51: f7:1a:1e:3f:99:1e:4e:21:85:7d:de:23:db:4c:03:06:a8:d3: 22:89:fb:98:cc:9f:09:20:4a:4f:ba:f9:ab:53:f5:dd:91:9e: 81:da:3d:3b:53:5c:2d:fc:46:c4:ed:b2:a6:cd:1f:9b:ec:fb: 7a:3f:57:9e:25:d1:39:4c:67:41:bd:6c:91:a6:bc:f4:2a:5f: 97:a1:33:30:c7:7a:bb:ef:0b:5f:fa:c8:5c:92:ca:08:b6:84: 56:f7:c0:14:d2:8a:ff:ae:cc:28:81:38:98:6b:3b:36:a3:c5: b6:6d:ba:b8 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjUwMjEyMDkzMjU0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FjNmFjNS0wYzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA580NCPKuhQFIgLzX/pdTZz5W/paoJXxEmu6bDm7WmQS0VIDAALaz13E1taeH svT0CxqFqv/xAmXztT5M3Rwkqt0kcMnIjoy8OCIkW+urefhNS1np4M/aszofBeIv fyB2xOn63UigNPA66n/BweVa2UU/+iU0hNnkyjlrdwubX4PSchvnG4CedXQ79YTb ZzgfFdSXaDl6aws/YAYHCyngXGoeTCA9unn0f90AS0pposS36gwVSZoJrKyypNVy cgw5p62b8Ycs9WYwFgOoJvTIPBd4050NUjeGI5Q5QLbrkDGyLhoJOvowaSFVndzy PUDt9l6XWG9+PAdZI0KUpavG2QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFC9K+I82 KRt8L4VA83jaaua8+OarMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvRTg3OUVFN0Mx NDQxMTFFRkIyNDdCOTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAAtffYDBABn79UDBAJn8TQDBADKXq4wDQQCAAIwBwMFAiQC vYAwDQYJKoZIhvcNAQELBQADggEBABB3lZGtTaTWmLD445gpZIWszv3mMRFifEJa QyqNoTFbOSD1kaJxRMSPw5mADx9dGJXrBUK0Sbtn0K0TZw2oweEtcVDm4LIip5/B 6+YfeqZtuqaqHk9a0pI1mrU4oXvMUtoJfssTVG7fz5KI/D+lJtkwfp77sKa8keNm JzBCc6iuCt5CPJ7XuSv2UP7//ACRUfcaHj+ZHk4hhX3eI9tMAwao0yKJ+5jMnwkg Sk+6+atT9d2RnoHaPTtTXC38RsTtsqbNH5vs+3o/V54l0TlMZ0G9bJGmvPQqX5eh MzDHervvC1/6yFySygi2hFb3wBTSiv+uzCiBOJhrOzajxbZturg= -----END CERTIFICATE-----Generated at Sat Apr 5 02:18:12 2025 by rpki-client