$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/61883292ADA511EDB2C68947C4F9AE02.roa File: 61883292ADA511EDB2C68947C4F9AE02.roa (raw, json) Hash identifier: jVsOkESQWaLXR1oAo7YvVLXTH7CGZNa6Fnq6GGFvuF4= Subject key identifier: 3A:6A:B1:32:7F:80:BD:FB:E9:2A:A7:BB:13:7B:EE:C7:60:37:F2:6C Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Certificate serial: 0182 Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/61883292ADA511EDB2C68947C4F9AE02.roa Signing time: Tue 11 Feb 2025 03:05:50 +0000 ROA not before: Tue 11 Feb 2025 03:05:50 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133480 IP address blocks: 203.17.122.0/24 maxlen: 24 203.18.16.0/24 maxlen: 24 203.18.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B834D Validity Not Before: Feb 11 03:05:50 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67aabe8d-ae52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:12:d5:6f:8f:b6:0a:98:a5:b6:78:5a:5c: db:4b:73:11:d6:35:17:e3:c1:77:83:2c:8c:be:a0: dd:91:7c:73:f5:4f:53:da:83:cf:64:81:93:52:09: c8:bd:a0:d7:47:13:78:14:7e:ec:c4:88:56:02:47: 0a:14:a5:1f:36:03:02:0a:a1:96:40:06:df:d9:6d: ce:61:ea:db:a1:db:1c:5a:1a:63:5b:bc:3e:3d:38: 77:f9:33:68:b0:57:58:be:ca:b1:96:5f:ae:60:0c: 8c:5d:99:ba:67:4b:2a:6a:16:6e:bb:65:68:81:6d: cc:01:cc:f0:6b:d4:fa:64:3a:ef:34:70:03:b3:0e: 5f:53:b6:c3:38:f4:63:33:ec:7e:24:d0:a8:32:12: 21:64:57:70:20:42:b8:4b:09:96:89:6a:d8:44:85: da:00:90:00:08:90:3f:4e:a0:59:30:b7:18:ca:23: 40:42:56:0b:42:46:8f:b3:02:af:c8:8c:6b:c9:fc: b2:34:55:d5:ae:34:a4:e8:1c:2b:bb:02:f1:6e:70: b0:23:ce:52:2c:55:82:22:20:f7:7b:e1:7d:a2:67: 75:8f:26:2b:c6:01:61:da:1b:f0:0f:17:78:d7:e7: 8a:fc:24:d6:f4:3a:19:45:62:47:7a:05:b1:5e:5a: 4b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6A:B1:32:7F:80:BD:FB:E9:2A:A7:BB:13:7B:EE:C7:60:37:F2:6C X509v3 Authority Key Identifier: keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/61883292ADA511EDB2C68947C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.17.122.0/24 203.18.16.0/23 Signature Algorithm: sha256WithRSAEncryption c4:d8:d0:2a:ed:1a:33:81:d1:da:cd:34:eb:59:11:06:f0:46: 14:d8:32:78:fc:18:5c:c1:66:35:4c:e0:dd:6c:51:5e:64:09: 57:c8:6a:af:f8:8c:ce:64:02:e1:7b:80:5a:3d:a2:22:65:fd: 4f:fc:67:91:7c:d1:b7:1b:74:97:92:8c:13:53:33:ec:c4:f5: 9c:fa:47:67:5e:82:c2:f2:35:78:45:ef:49:74:1f:1b:90:7a: 35:68:9f:d6:9e:c9:6d:8e:36:4a:22:15:37:bd:1e:a3:c5:a8: ee:ae:6a:88:78:8f:4a:03:c3:66:1d:d4:19:3c:40:1e:32:8d: 2f:50:67:2a:4e:b0:66:17:93:25:53:df:b3:aa:57:0c:6c:67: 23:dc:a7:8b:e3:b2:3c:84:66:79:98:7d:dd:df:6b:35:86:87: 85:55:2f:11:19:d6:9f:9d:0c:87:e5:05:39:34:80:75:11:f6: f3:b1:99:a5:a9:74:5b:1c:d6:cc:db:b1:8f:f8:8c:96:9f:ff: 27:0d:6c:2a:8e:5a:85:68:23:60:10:75:15:96:de:95:3d:b1: ab:83:34:54:96:89:78:4f:40:d9:7a:f6:23:a8:40:63:3b:3c: ea:91:b0:34:40:62:2c:9b:9e:16:ed:4e:53:0c:cb:2d:68:9e: 62:67:e3:55 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE N0E4MzI5RDAwHhcNMjUwMjExMDMwNTUwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FhYmU4ZC1hZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0wS1W+PtgqYpbZ4WlzbS3MR1jUX48F3gyyMvqDdkXxz9U9T2oPPZIGTUgnI vaDXRxN4FH7sxIhWAkcKFKUfNgMCCqGWQAbf2W3OYerbodscWhpjW7w+PTh3+TNo sFdYvsqxll+uYAyMXZm6Z0sqahZuu2VogW3MAczwa9T6ZDrvNHADsw5fU7bDOPRj M+x+JNCoMhIhZFdwIEK4SwmWiWrYRIXaAJAACJA/TqBZMLcYyiNAQlYLQkaPswKv yIxryfyyNFXVrjSk6BwruwLxbnCwI85SLFWCIiD3e+F9omd1jyYrxgFh2hvwDxd4 1+eK/CTW9DoZRWJHegWxXlpLHwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDpqsTJ/ gL376SqnuxN77sdgN/JsMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgzNEQvM0EyQzUxOTZBREExMTFFREFCNkRGNDJEQzRGOUFFMDIvNjE4ODMyOTJB REE1MTFFREIyQzY4OTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADLEXoDBAHLEhAwDQYJKoZIhvcNAQELBQADggEBAMTY0Crt GjOB0drNNOtZEQbwRhTYMnj8GFzBZjVM4N1sUV5kCVfIaq/4jM5kAuF7gFo9oiJl /U/8Z5F80bcbdJeSjBNTM+zE9Zz6R2degsLyNXhF70l0HxuQejVon9aeyW2ONkoi FTe9HqPFqO6uaoh4j0oDw2Yd1Bk8QB4yjS9QZypOsGYXkyVT37OqVwxsZyPcp4vj sjyEZnmYfd3fazWGh4VVLxEZ1p+dDIflBTk0gHUR9vOxmaWpdFsc1szbsY/4jJaf /ycNbCqOWoVoI2AQdRWW3pU9sauDNFSWiXhPQNl69iOoQGM7POqRsDRAYiybnhbt TlMMyy1onmJn41U= -----END CERTIFICATE-----Generated at Sun Apr 6 02:33:59 2025 by rpki-client