$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/8FFA61D4B13D11EF9EFDE433C4F9AE02.roa File: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (raw, json) Hash identifier: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg= Subject key identifier: 59:DA:FE:B1:22:73:BB:2A:ED:07:A9:A0:4D:D8:01:F5:02:C8:32:29 Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: 1C Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/8FFA61D4B13D11EF9EFDE433C4F9AE02.roa Signing time: Tue 14 Jan 2025 03:28:08 +0000 ROA not before: Tue 14 Jan 2025 03:28:08 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9433 IP address blocks: 130.123.0.0/16 maxlen: 16 130.123.96.0/22 maxlen: 22 130.123.104.0/23 maxlen: 23 130.123.108.0/23 maxlen: 23 130.123.128.0/18 maxlen: 18 130.123.128.0/23 maxlen: 23 130.123.192.0/19 maxlen: 19 130.123.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: Jan 14 03:28:08 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6785d9c7-b0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:0e:eb:7b:95:23:7e:a3:2b:35:71:66:ee: cd:2b:76:d6:e2:2c:20:2f:6e:c1:32:3c:7f:63:49: f1:da:64:52:a1:3a:47:a4:ff:e3:25:17:25:da:f7: 51:1a:c7:58:ec:69:cb:d1:c1:2d:2b:94:50:a3:25: fa:60:e0:5f:68:d9:7e:08:a1:10:0c:2c:1c:32:ef: 0f:a3:9c:1a:7e:5d:82:81:16:79:9c:44:2e:d5:ec: e4:27:64:bd:e2:aa:e4:71:94:4f:59:eb:22:1e:81: 45:90:90:e1:11:83:71:59:77:90:65:cb:fb:7b:30: ff:47:57:60:c6:b5:d1:4f:c0:a0:3a:f5:e5:45:28: 6c:30:d3:71:14:4c:35:2a:c3:aa:93:5e:05:77:9c: 50:d7:a6:2c:bd:9f:06:c9:3d:d5:9d:e9:16:4d:e2: 81:72:c3:39:69:c9:98:d3:64:53:d6:2a:ea:9d:7c: 87:c5:86:28:57:4f:4f:15:4c:13:08:af:5b:65:0a: 30:17:74:4a:05:50:9d:86:ad:46:6d:01:6e:f7:22: ce:2c:62:85:d5:96:fc:a6:6f:d1:72:71:b0:8b:7e: 74:9a:c0:32:de:b0:72:e5:a0:c7:5b:73:ed:38:73: aa:81:a6:3b:58:94:8a:6b:00:fd:c6:18:5f:39:d0: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DA:FE:B1:22:73:BB:2A:ED:07:A9:A0:4D:D8:01:F5:02:C8:32:29 X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/8FFA61D4B13D11EF9EFDE433C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 130.123.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4e:66:e4:27:65:f0:fb:e8:99:82:cb:ee:3c:5f:d9:53:1f:dc: 12:20:c5:e0:4a:e5:78:ac:32:b7:69:32:59:6f:db:f5:ef:bb: 12:a6:75:a2:01:82:59:16:a0:6d:6c:5e:5a:21:1f:59:5d:e7: 45:89:61:35:d3:40:10:cd:92:4d:2a:59:71:6b:02:be:e8:b6: b8:6f:72:84:35:ae:80:e8:56:26:c0:8a:35:42:54:85:bd:f9: 74:3d:03:e6:cc:8b:6e:5a:e3:29:5b:d0:d2:46:5b:36:d7:3f: 9f:e8:4a:f2:ec:c7:98:94:17:cd:1c:6b:56:2c:fd:06:9f:45: a5:69:30:d6:67:81:58:d5:a9:9c:ae:b2:8a:ff:9e:ab:29:ac: b3:30:83:76:26:72:56:8e:65:70:d2:4e:c9:eb:09:19:bc:cc: 40:d0:de:ac:7b:6c:75:85:a2:91:ad:ff:b2:6f:f7:51:00:13: f5:64:02:6c:ce:ee:96:0e:7e:8f:e1:be:47:54:37:86:01:c1: 0a:ce:0b:83:5c:ff:eb:e1:11:6d:0e:d0:2b:ad:69:f7:58:e4: 31:0f:0c:12:66:fa:19:91:51:ad:9b:a0:c0:03:c8:b4:8b:24: a5:a9:87:83:e4:9b:53:5b:55:31:25:d4:3d:e1:22:27:3b:92: ee:b8:f6:97 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTRDNTg5Qjg5M0QyNzI4OUNGODQ2REYwNUFERkI1OTYw MzY0MjhGRDAeFw0yNTAxMTQwMzI4MDhaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ODVkOWM3LWIwYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRyg7re5UjfqMrNXFm7s0rdtbiLCAvbsEyPH9jSfHaZFKhOkek/+MlFyXa91Ea x1jsacvRwS0rlFCjJfpg4F9o2X4IoRAMLBwy7w+jnBp+XYKBFnmcRC7V7OQnZL3i quRxlE9Z6yIegUWQkOERg3FZd5Bly/t7MP9HV2DGtdFPwKA69eVFKGww03EUTDUq w6qTXgV3nFDXpiy9nwbJPdWd6RZN4oFywzlpyZjTZFPWKuqdfIfFhihXT08VTBMI r1tlCjAXdEoFUJ2GrUZtAW73Is4sYoXVlvymb9FycbCLfnSawDLesHLloMdbc+04 c6qBpjtYlIprAP3GGF850FJvAgMBAAGjggKUMIICkDAdBgNVHQ4EFgQUWdr+sSJz uyrtB6mgTdgB9QLIMikwHwYDVR0jBBgwFoAU5MWJuJPSconPhG3wWt+1lgNkKP0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0UxMkQxMDUyQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU1XSnVKUFNjb25QaEczd1d0LTFsZ05rS1AwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FMTJEMTA1MkIxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi84RkZBNjFENEIx M0QxMUVGOUVGREU0MzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQP MA0wCwQCAAEwBQMDAIJ7MA0GCSqGSIb3DQEBCwUAA4IBAQBOZuQnZfD76JmCy+48 X9lTH9wSIMXgSuV4rDK3aTJZb9v177sSpnWiAYJZFqBtbF5aIR9ZXedFiWE100AQ zZJNKllxawK+6La4b3KENa6A6FYmwIo1QlSFvfl0PQPmzItuWuMpW9DSRls21z+f 6Ery7MeYlBfNHGtWLP0Gn0WlaTDWZ4FY1amcrrKK/56rKayzMIN2JnJWjmVw0k7J 6wkZvMxA0N6se2x1haKRrf+yb/dRABP1ZAJszu6WDn6P4b5HVDeGAcEKzguDXP/r 4RFtDtArrWn3WOQxDwwSZvoZkVGtm6DAA8i0iySlqYeD5JtTW1UxJdQ94SInO5Lu uPaX -----END CERTIFICATE-----Generated at Tue Apr 15 16:36:20 2025 by rpki-client