$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa File: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (raw, json) Hash identifier: aKDX+epsv+87CublFWvfDFPYgSLhuAtHebX+rfx7L+w= Subject key identifier: EF:D3:E4:36:E6:D2:8F:75:63:35:1D:EB:4E:2F:F3:4A:4A:3B:6F:35 Certificate issuer: /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Certificate serial: 04 Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa Signing time: Tue 11 Mar 2025 07:29:50 +0000 ROA not before: Tue 11 Mar 2025 07:29:50 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 18111 IP address blocks: 202.92.240.0/21 maxlen: 24 203.20.62.0/24 maxlen: 24 203.22.236.0/22 maxlen: 24 203.28.45.0/24 maxlen: 24 203.30.98.0/23 maxlen: 23 203.31.48.0/24 maxlen: 24 203.33.171.0/24 maxlen: 24 203.55.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2913 Validity Not Before: Mar 11 07:29:50 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67cfe66e-8ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:07:3f:b3:37:ff:38:d8:0e:58:34:a7:e6: 0b:8c:fb:d4:d9:5d:0c:a9:23:1f:91:ca:2f:e7:24: 25:e8:99:63:5f:1f:69:a9:d7:2c:c2:5c:e0:f9:24: e1:4c:92:3d:af:5f:15:fd:39:a7:48:1e:a5:5f:58: 43:7c:89:4a:95:be:10:40:a4:0e:a8:7f:91:aa:d6: 4f:92:a1:70:61:24:b0:6d:42:fd:d0:78:93:b9:eb: 37:9e:14:fb:bb:07:3f:20:dd:83:36:60:fb:8c:c4: ac:6d:8b:d9:3e:7e:33:7f:50:20:49:a4:11:19:b6: d8:a2:2d:3c:15:2e:ca:f8:be:29:0c:d6:32:f2:60: d4:f6:1a:88:97:00:e1:1e:40:31:b3:ac:e5:bb:ac: 9b:58:dd:8b:bf:79:e8:9e:b5:c3:86:57:e5:0f:5b: 5f:20:97:31:4f:7c:92:f6:32:7f:77:98:5a:cc:0e: ad:a8:5d:80:f5:12:bf:d8:4d:1e:08:38:82:28:09: 94:62:d2:c9:89:d1:ef:b2:54:6d:8a:d4:f4:ef:6a: 6b:dc:be:85:b0:a9:ee:d1:a1:a7:3b:74:84:5b:89: 5c:9d:56:3b:74:14:77:f3:65:48:2b:d2:20:0b:b1: 99:f8:c4:ff:36:1b:3a:52:a5:70:36:ec:64:ab:d9: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D3:E4:36:E6:D2:8F:75:63:35:1D:EB:4E:2F:F3:4A:4A:3B:6F:35 X509v3 Authority Key Identifier: keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.92.240.0/21 203.20.62.0/24 203.22.236.0/22 203.28.45.0/24 203.30.98.0/23 203.31.48.0/24 203.33.171.0/24 203.55.120.0/23 Signature Algorithm: sha256WithRSAEncryption 13:36:d8:7e:ee:e8:ed:e1:b6:6f:52:33:2f:a5:92:25:30:06: 02:6a:9b:5f:27:1a:4a:90:85:76:27:54:cb:03:49:21:d7:f7: 93:a4:f9:42:c3:a1:5b:fc:e4:cc:de:0c:0c:82:44:a1:de:a9: 3e:67:cc:a4:9c:e7:6b:06:8b:c8:00:32:93:a8:ab:0b:27:56: 19:73:e9:59:1b:ec:94:1e:8c:ef:4d:0e:5c:c8:fd:1b:ce:c8: 08:14:74:b4:eb:97:e2:dc:3c:39:6b:c0:03:85:c2:67:32:c1: bd:af:aa:b2:b3:d5:98:f7:5b:b9:d4:96:23:49:f2:01:7a:ec: 1c:fb:f0:08:3c:f5:07:e9:3a:85:3e:a7:aa:83:ba:03:71:4c: 73:67:67:ed:d4:61:57:3c:33:5d:55:bc:37:ce:13:1f:46:6b: 0f:cb:66:ce:c4:98:f6:55:83:d3:08:66:f4:8b:95:24:30:ab: 7a:76:dd:e4:41:14:e0:dd:0b:d9:23:39:e2:80:3c:82:2f:a9: c8:89:ad:c1:65:d7:68:7c:c4:58:89:d7:54:c6:4c:83:14:9e: 9e:14:62:b2:d4:0a:d7:68:59:6c:e6:50:9b:a6:43:b7:3a:93: 1c:3d:4a:15:76:cf:4f:ba:04:84:cc:d7:29:14:51:78:d0:c6: 7a:67:79:18 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MjkxMzExMC8GA1UEBRMoMzBERkNEQzg5MkU3M0VFMjU0NjQyODI3NDJFMjlDNTY3 RUEzQ0UwMzAeFw0yNTAzMTEwNzI5NTBaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Y2ZlNjZlLThlZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZzAc/szf/ONgOWDSn5guM+9TZXQypIx+Ryi/nJCXomWNfH2mp1yzCXOD5JOFM kj2vXxX9OadIHqVfWEN8iUqVvhBApA6of5Gq1k+SoXBhJLBtQv3QeJO56zeeFPu7 Bz8g3YM2YPuMxKxti9k+fjN/UCBJpBEZttiiLTwVLsr4vikM1jLyYNT2GoiXAOEe QDGzrOW7rJtY3Yu/eeietcOGV+UPW18glzFPfJL2Mn93mFrMDq2oXYD1Er/YTR4I OIIoCZRi0smJ0e+yVG2K1PTvamvcvoWwqe7Roac7dIRbiVydVjt0FHfzZUgr0iAL sZn4xP82GzpSpXA27GSr2bNvAgMBAAGjggK/MIICuzAdBgNVHQ4EFgQU79PkNubS j3VjNR3rTi/zSko7bzUwHwYDVR0jBBgwFoAUMN/NyJLnPuJUZCgnQuKcVn6jzgMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyOTEzLzhCNDNCNzM2RkU0 OTExRUZBNzM1QUQ2RkM0RjlBRTAyL01OX055SkxuUHVKVVpDZ25RdUtjVm42anpn TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTU5fTnlKTG5QdUpVWkNnblF1S2NWbjZqemdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjkxMy84QjQzQjczNkZFNDkxMUVGQTczNUFENkZDNEY5QUUwMi83MjczQkRBNEZF NEExMUVGOEEwRURENzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBJBggrBgEFBQcBBwEB/wQ6 MDgwNgQCAAEwMAMEA8pc8AMEAMsUPgMEAssW7AMEAMscLQMEAcseYgMEAMsfMAME AMshqwMEAcs3eDANBgkqhkiG9w0BAQsFAAOCAQEAEzbYfu7o7eG2b1IzL6WSJTAG AmqbXycaSpCFdidUywNJIdf3k6T5QsOhW/zkzN4MDIJEod6pPmfMpJznawaLyAAy k6irCydWGXPpWRvslB6M700OXMj9G87ICBR0tOuX4tw8OWvAA4XCZzLBva+qsrPV mPdbudSWI0nyAXrsHPvwCDz1B+k6hT6nqoO6A3FMc2dn7dRhVzwzXVW8N84TH0Zr D8tmzsSY9lWD0whm9IuVJDCrenbd5EEU4N0L2SM54oA8gi+pyImtwWXXaHzEWInX VMZMgxSenhRistQK12hZbOZQm6ZDtzqTHD1KFXbPT7oEhMzXKRRReNDGemd5GA== -----END CERTIFICATE-----Generated at Sat Apr 5 03:54:13 2025 by rpki-client