$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/B0ED72D2F14811EFA0005943C4F9AE02.roa File: B0ED72D2F14811EFA0005943C4F9AE02.roa (raw, json) Hash identifier: rw0dF7qV0JgWEH/S5vX2bOVSl/H5eRg/MQGJeC104us= Subject key identifier: D4:94:A0:23:F7:54:FC:8B:7F:AC:C2:74:8F:95:BA:BF:02:6E:65:37 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: F2 Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/B0ED72D2F14811EFA0005943C4F9AE02.roa Signing time: Sat 22 Feb 2025 19:07:55 +0000 ROA not before: Sat 22 Feb 2025 19:07:55 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152147 IP address blocks: 113.192.42.0/23 maxlen: 23 113.192.43.0/24 maxlen: 24 2001:df3:4240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5 Validity Not Before: Feb 22 19:07:55 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67ba208b-8aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:db:a8:10:2c:ae:00:a6:d7:f2:82:37:8c: bd:2a:fb:6e:09:a1:9e:5c:94:13:a2:ff:92:e2:6c: 91:ec:f7:f0:d3:01:9d:ce:e7:ee:a7:9c:0e:f9:80: da:14:bc:5d:6c:b8:13:0a:75:19:76:65:6a:1f:d4: ff:04:98:ea:1b:49:86:da:30:92:b6:64:47:86:d9: 9e:38:44:0e:1c:52:2c:83:3c:cd:41:32:57:cd:d1: d4:14:e9:d8:1b:b8:e3:dd:76:d9:78:9d:59:3c:24: 85:70:66:75:f2:20:ce:ec:ad:4b:1d:af:1e:82:42: 59:cd:94:8b:32:a9:ee:88:5c:d2:50:1e:a1:e1:c8: 19:2c:67:69:37:c5:d8:2d:92:79:d3:c0:ac:1b:15: 67:e1:42:ce:e7:8d:65:fb:ad:f3:4c:e2:5a:e9:be: 22:58:16:d1:c5:cb:f8:a5:76:32:d9:89:b0:43:24: f9:a8:21:39:84:fc:17:2f:1e:a1:fc:c7:46:73:de: e8:05:6b:68:91:40:1f:98:fa:08:1c:99:da:48:60: 03:e9:3d:69:a1:bd:fe:3e:c6:59:60:1c:27:c9:3f: b4:39:0d:ab:34:d8:56:3b:d1:14:84:7f:20:8a:98: 08:1f:82:e8:0f:df:d0:ca:11:3d:47:5c:cf:52:a3: 17:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:94:A0:23:F7:54:FC:8B:7F:AC:C2:74:8F:95:BA:BF:02:6E:65:37 X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/B0ED72D2F14811EFA0005943C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.192.42.0/23 IPv6: 2001:df3:4240::/48 Signature Algorithm: sha256WithRSAEncryption 85:7d:09:27:b0:31:7b:47:cb:c5:96:e2:b3:f0:9c:c6:8f:86: 5c:bd:a3:41:a3:54:bc:61:13:d7:f5:ef:03:b9:d6:b4:21:19: eb:23:82:f5:0f:da:fe:21:fc:4b:d3:fd:7f:2a:bb:d1:c0:55: b3:56:3b:e0:3b:f6:7d:5c:d2:03:61:81:1b:46:fa:85:30:72: c5:cb:30:9a:2e:75:7b:16:07:3f:23:d1:5f:f7:d5:97:6b:0f: ac:d1:b7:02:49:e0:27:df:85:c4:d7:ac:8f:72:da:d2:91:99: 3d:65:96:93:5c:71:3e:c7:21:c0:fa:a5:48:93:33:89:c2:0e: 88:0d:d0:37:2d:c2:91:4a:8a:0c:74:1f:38:98:76:68:ac:28: d5:b7:0a:ed:89:04:6f:04:8f:23:f4:40:e7:18:ac:90:a5:c7: aa:6c:49:7f:fe:06:ac:69:d5:fc:8d:ae:29:aa:4b:4b:ad:0f: 43:1c:f9:89:33:c8:84:6e:e8:02:4e:e9:72:57:58:7e:ec:07: 46:17:e3:15:57:d0:b8:e1:b4:76:37:1a:3c:06:88:67:f6:bb: 4d:25:e8:96:19:09:4e:1b:18:86:d7:3b:8a:ca:b0:02:c1:01: 1a:b3:db:84:8f:a6:af:93:47:02:f8:03:c2:11:e4:ac:d8:9f: 0a:d9:08:e4 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjUwMjIyMTkwNzU1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JhMjA4Yi04YWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyHbqBAsrgCm1/KCN4y9KvtuCaGeXJQTov+S4myR7Pfw0wGdzufup5wO+YDa FLxdbLgTCnUZdmVqH9T/BJjqG0mG2jCStmRHhtmeOEQOHFIsgzzNQTJXzdHUFOnY G7jj3XbZeJ1ZPCSFcGZ18iDO7K1LHa8egkJZzZSLMqnuiFzSUB6h4cgZLGdpN8XY LZJ508CsGxVn4ULO541l+63zTOJa6b4iWBbRxcv4pXYy2YmwQyT5qCE5hPwXLx6h /MdGc97oBWtokUAfmPoIHJnaSGAD6T1pob3+PsZZYBwnyT+0OQ2rNNhWO9EUhH8g ipgIH4LoD9/QyhE9R1zPUqMXdwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNSUoCP3 VPyLf6zCdI+Vur8CbmU3MB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzA5QzUvNzRCMTZDNzY5NTk5MTFFRUJBM0NCMjc1QzRGOUFFMDIvQjBFRDcyRDJG MTQ4MTFFRkEwMDA1OTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFxwCowDwQCAAIwCQMHACABDfNCQDANBgkqhkiG9w0BAQsF AAOCAQEAhX0JJ7Axe0fLxZbis/Ccxo+GXL2jQaNUvGET1/XvA7nWtCEZ6yOC9Q/a /iH8S9P9fyq70cBVs1Y74Dv2fVzSA2GBG0b6hTByxcswmi51exYHPyPRX/fVl2sP rNG3AkngJ9+FxNesj3La0pGZPWWWk1xxPschwPqlSJMzicIOiA3QNy3CkUqKDHQf OJh2aKwo1bcK7YkEbwSPI/RA5xiskKXHqmxJf/4GrGnV/I2uKapLS60PQxz5iTPI hG7oAk7pcldYfuwHRhfjFVfQuOG0djcaPAaIZ/a7TSXolhkJThsYhtc7isqwAsEB GrPbhI+mr5NHAvgDwhHkrNifCtkI5A== -----END CERTIFICATE-----Generated at Sat Apr 5 01:57:53 2025 by rpki-client