$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa File: B2CE886C07B811F0992B401EC4F9AE02.roa (raw, json) Hash identifier: v2uKdBklLGgPKZ95vqK6iPzh7Ypg3tIQIKaQadoDdJ4= Subject key identifier: 98:AB:3D:AA:05:FD:00:0B:42:68:AD:4B:29:E7:E5:60:5E:33:19:A8 Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Certificate serial: 5FE3 Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa Signing time: Sun 23 Mar 2025 07:30:30 +0000 ROA not before: Sun 23 Mar 2025 07:30:30 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 198949 IP address blocks: 203.184.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24547 (0x5fe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1323 Validity Not Before: Mar 23 07:30:30 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67dfb896-bfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:64:54:d1:c3:4c:b3:48:62:41:c9:13:3e:9d: 99:50:ff:6b:9d:32:41:6f:e9:65:df:cc:8d:86:01: b4:a0:fc:7f:4d:1f:54:c4:2e:e4:de:98:00:2a:97: cd:44:89:08:4c:ad:47:ba:df:0e:da:a7:b8:4b:97: d8:bb:fd:7d:50:64:9a:35:10:45:b1:ee:7e:64:dd: 72:14:6c:87:24:4c:2d:89:0d:f6:de:ba:9c:91:34: 1b:55:5b:ac:db:d7:81:a4:69:7b:aa:cb:87:04:0d: c7:1c:1c:7b:8b:d7:26:14:a3:0b:13:45:b2:a3:70: 5c:fd:f4:2b:de:87:1d:aa:2e:71:a8:05:32:91:13: ba:4e:3e:e8:20:f9:9e:f5:a0:3b:99:34:32:96:9a: 7b:fa:4c:cd:1e:c0:37:db:fc:37:ec:bb:55:81:1d: e4:ca:68:6e:34:46:fe:0c:74:1d:59:9c:60:d0:1b: 80:08:a4:fd:f2:69:b0:47:4f:b4:8a:d6:07:eb:c0: 18:2c:98:2a:7e:f0:46:d1:b9:ad:40:e5:7e:c1:74: 00:f8:b5:84:3f:10:17:35:9a:f6:0f:b5:24:e1:57: 0f:e6:a1:a1:2a:0a:a3:5b:e4:f4:57:01:81:1c:94: 4d:de:b6:23:42:e7:fa:65:7d:e3:d0:e3:24:5d:10: 40:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AB:3D:AA:05:FD:00:0B:42:68:AD:4B:29:E7:E5:60:5E:33:19:A8 X509v3 Authority Key Identifier: keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.184.180.0/24 Signature Algorithm: sha256WithRSAEncryption 79:61:0d:b1:a1:2e:76:fc:7b:78:71:a9:73:ec:ef:09:dc:4f: 73:2d:08:00:51:e3:3a:f2:74:3c:39:2c:5e:77:92:a3:44:8e: 32:09:b6:1a:08:02:bd:c1:b0:47:0b:ef:31:e1:77:c7:1c:10: 74:76:af:f8:e8:c7:4e:ba:e9:ae:85:17:80:b3:80:67:74:84: ee:ff:14:e2:12:e6:99:99:c9:b6:8a:20:4b:aa:6b:44:b9:3a: fa:d1:ea:13:8d:dd:1f:02:aa:07:c7:33:a1:af:7e:90:a8:74: 5c:82:7c:19:cb:8f:b2:18:14:35:96:f8:cf:93:5b:22:8f:fc: a9:0e:0c:ab:d2:cd:cd:f4:2e:0a:c6:a9:1a:4a:0a:5e:5f:ec: 05:94:b6:e9:db:a2:01:f9:6a:47:1b:c5:a9:08:33:43:11:63: bc:b2:8e:2b:3a:5f:e2:a0:1a:ad:78:a6:59:4e:f4:1b:af:dc: 07:46:ea:15:a7:62:1c:8b:36:fa:f1:e0:23:53:8f:95:35:12: 92:16:e1:7d:1c:85:99:d8:4d:96:89:d7:47:29:b3:00:05:f1: a9:fc:b6:1a:e8:0a:28:1e:30:59:0f:72:f5:84:db:1f:ce:2c: b9:21:83:a6:d0:25:cc:7a:ad:15:e2:e5:93:9c:6a:36:2e:89: 67:6d:86:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICX+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy RkVENDQ4NTcwHhcNMjUwMzIzMDczMDMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RmYjg5Ni1iZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmRU0cNMs0hiQckTPp2ZUP9rnTJBb+ll38yNhgG0oPx/TR9UxC7k3pgAKpfN RIkITK1Hut8O2qe4S5fYu/19UGSaNRBFse5+ZN1yFGyHJEwtiQ323rqckTQbVVus 29eBpGl7qsuHBA3HHBx7i9cmFKMLE0Wyo3Bc/fQr3ocdqi5xqAUykRO6Tj7oIPme 9aA7mTQylpp7+kzNHsA32/w37LtVgR3kymhuNEb+DHQdWZxg0BuACKT98mmwR0+0 itYH68AYLJgqfvBG0bmtQOV+wXQA+LWEPxAXNZr2D7Uk4VcP5qGhKgqjW+T0VwGB HJRN3rYjQuf6ZX3j0OMkXRBA0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJirPaoF /QALQmitSynn5WBeMxmoMB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1 QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEzMjMvMDg0RDg4RDQ5NUI3MTFFQUJCODI0RjFCQzRGOUFFMDIvQjJDRTg4NkMw N0I4MTFGMDk5MkI0MDFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLuLQwDQYJKoZIhvcNAQELBQADggEBAHlhDbGhLnb8e3hx qXPs7wncT3MtCABR4zrydDw5LF53kqNEjjIJthoIAr3BsEcL7zHhd8ccEHR2r/jo x0666a6FF4CzgGd0hO7/FOIS5pmZybaKIEuqa0S5OvrR6hON3R8CqgfHM6GvfpCo dFyCfBnLj7IYFDWW+M+TWyKP/KkODKvSzc30LgrGqRpKCl5f7AWUtunbogH5akcb xakIM0MRY7yyjis6X+KgGq14pllO9Buv3AdG6hWnYhyLNvrx4CNTj5U1EpIW4X0c hZnYTZaJ10cpswAF8an8throCigeMFkPcvWE2x/OLLkhg6bQJcx6rRXi5ZOcajYu iWdthtk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:35:03 2025 by rpki-client