$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/33FB0E48FD2211EFA419DA72C4F9AE02.roa File: 33FB0E48FD2211EFA419DA72C4F9AE02.roa (raw, json) Hash identifier: hGFJA7vbBE7czUFInCqw+SAQ5MusDF01ceEYN+8+xgQ= Subject key identifier: 1E:EF:DF:E6:48:89:06:50:9B:79:BD:1E:AC:92:96:C4:82:8D:72:BF Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Certificate serial: BF Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/33FB0E48FD2211EFA419DA72C4F9AE02.roa Signing time: Tue 11 Mar 2025 19:20:34 +0000 ROA not before: Tue 11 Mar 2025 19:20:34 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152726 IP address blocks: 202.50.113.0/24 maxlen: 24 2001:df3:bec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Validity Not Before: Mar 11 19:20:34 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=67d08d02-987c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:4b:e4:0b:75:2b:2d:07:98:c5:11:4c:b9: 12:e0:0e:46:57:97:4e:25:23:1a:dc:c4:87:32:1f: 1a:d0:25:34:0f:e6:3d:15:cd:66:c4:7c:3b:b4:05: d1:25:0c:40:00:7e:72:c3:be:41:29:35:6d:62:f1: 49:67:5e:02:07:00:f9:8c:43:5b:3f:55:bb:ff:e0: 1f:ac:c1:d6:7b:02:80:2a:a1:db:8a:70:f6:45:3f: 5b:68:30:2a:09:17:66:8c:d0:4f:1b:44:38:11:c9: d4:86:22:cd:d3:3b:9e:6e:3b:63:72:41:4f:1e:3b: a7:83:17:16:9b:cc:af:df:01:cd:29:be:28:d8:f7: 7e:f4:f6:df:78:94:94:b9:f4:89:7e:4d:89:86:ab: fe:9d:fd:44:d0:b0:9a:19:6e:9e:89:2b:fd:6b:45: 47:22:aa:e7:86:78:77:d0:5c:21:9e:76:4e:70:15: 1b:29:a8:d9:78:05:99:6e:e0:a7:2d:5b:d3:f5:7f: 6c:94:9b:9f:e2:40:b3:77:a3:6c:19:d9:32:ae:6e: 5e:4d:77:51:ae:9e:0f:97:76:c8:f0:5c:b0:19:61: 9a:9f:be:00:6c:d5:65:b9:c1:be:46:02:0d:46:22: 12:d4:70:4d:ec:34:dd:a5:13:42:a5:7d:02:9d:90: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EF:DF:E6:48:89:06:50:9B:79:BD:1E:AC:92:96:C4:82:8D:72:BF X509v3 Authority Key Identifier: keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/33FB0E48FD2211EFA419DA72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.50.113.0/24 IPv6: 2001:df3:bec0::/48 Signature Algorithm: sha256WithRSAEncryption 02:98:df:ab:19:f5:78:a0:3c:6e:c1:77:22:d6:05:0c:cb:d9: 4f:87:60:dd:50:36:9b:09:69:63:0b:15:e3:55:2e:e5:e2:25: 22:40:0c:22:f3:ac:f4:02:31:3e:0d:7a:57:29:97:b7:ae:d0: 61:08:08:3b:b2:ef:33:9a:46:05:15:79:0c:0d:7b:8b:a1:f3: 82:83:37:96:51:8c:a7:30:2c:a9:94:e6:0e:32:5f:a4:66:18: 2d:da:be:6f:bf:58:20:25:0a:d6:3f:ce:a7:50:60:62:70:3b: ea:15:95:36:f7:80:10:b0:9e:d6:b6:6b:46:e8:35:7c:d7:be: 6a:6b:23:2b:e6:61:fb:5b:bc:1b:b3:09:80:39:ae:0d:30:f6: ef:71:f1:2b:fd:3b:99:06:0c:59:97:ca:9e:a1:0c:82:6f:70: 8b:9b:06:bd:a0:1d:58:4d:77:53:34:ff:98:be:92:87:6b:49: fb:f8:ce:40:7c:76:85:8e:67:38:95:7d:ee:70:bb:f7:17:ec: 44:24:29:ae:cd:64:a2:2f:df:51:3d:e1:10:1c:ed:3d:7e:d0: 7c:37:95:5b:76:79:cc:6b:ae:f2:f8:64:53:ff:a3:55:25:24: f9:c2:c3:c1:1d:fe:8e:da:3f:c2:66:d8:86:93:3e:ea:8b:c9: 2f:4e:01:e8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKENFRTA3Qzg3MTRGMTkyNzgxMzlEMjM5NjA1MDQzRUND NkJEQkQzMjIwHhcNMjUwMzExMTkyMDM0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QwOGQwMi05ODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtG5L5At1Ky0HmMURTLkS4A5GV5dOJSMa3MSHMh8a0CU0D+Y9Fc1mxHw7tAXR JQxAAH5yw75BKTVtYvFJZ14CBwD5jENbP1W7/+AfrMHWewKAKqHbinD2RT9baDAq CRdmjNBPG0Q4EcnUhiLN0zuebjtjckFPHjungxcWm8yv3wHNKb4o2Pd+9PbfeJSU ufSJfk2Jhqv+nf1E0LCaGW6eiSv9a0VHIqrnhnh30FwhnnZOcBUbKajZeAWZbuCn LVvT9X9slJuf4kCzd6NsGdkyrm5eTXdRrp4Pl3bI8FywGWGan74AbNVlucG+RgIN RiIS1HBN7DTdpRNCpX0CnZDtrwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB7v3+ZI iQZQm3m9HqySlsSCjXK/MB8GA1UdIwQYMBaAFM7gfIcU8ZJ4E50jlgUEPsxr29Mi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi9GRTQ4QUJGNDA2 QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtuZ1RuU09XQlFRLXpHdmIw eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1QjhoeFR4a25nVG5TT1dCUVEtekd2YjB5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgwQzIvRkU0OEFCRjQwNkIyMTFFRkJDRTAzNDVDQzRGOUFFMDIvMzNGQjBFNDhG RDIyMTFFRkE0MTlEQTcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKMnEwDwQCAAIwCQMHACABDfO+wDANBgkqhkiG9w0BAQsF AAOCAQEAApjfqxn1eKA8bsF3ItYFDMvZT4dg3VA2mwlpYwsV41Uu5eIlIkAMIvOs 9AIxPg16VymXt67QYQgIO7LvM5pGBRV5DA17i6HzgoM3llGMpzAsqZTmDjJfpGYY Ldq+b79YICUK1j/Op1BgYnA76hWVNveAELCe1rZrRug1fNe+amsjK+Zh+1u8G7MJ gDmuDTD273HxK/07mQYMWZfKnqEMgm9wi5sGvaAdWE13UzT/mL6Sh2tJ+/jOQHx2 hY5nOJV97nC79xfsRCQprs1koi/fUT3hEBztPX7QfDeVW3Z5zGuu8vhkU/+jVSUk +cLDwR3+jto/wmbYhpM+6ovJL04B6A== -----END CERTIFICATE-----Generated at Sat Apr 12 22:26:42 2025 by rpki-client