$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/EE83B18A7F7E11ED86E00936C4F9AE02.roa File: EE83B18A7F7E11ED86E00936C4F9AE02.roa (raw, json) Hash identifier: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ= Subject key identifier: 70:D3:1C:B5:60:FD:76:9D:78:C6:66:14:01:36:82:21:E7:94:6F:15 Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 01F5 Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/EE83B18A7F7E11ED86E00936C4F9AE02.roa Signing time: Tue 21 Jan 2025 01:35:46 +0000 ROA not before: Tue 21 Jan 2025 01:35:46 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139341 IP address blocks: 164.52.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2 Validity Not Before: Jan 21 01:35:46 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=678ef9f1-0d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:a6:fe:63:d0:74:21:fb:9b:5e:0e:c2:75: ea:9c:c2:49:a9:1b:a0:dd:16:ea:39:b0:7a:3c:30: 30:27:22:63:2f:da:a8:7d:0f:7d:09:3b:2b:af:28: 72:c1:e5:af:72:e3:09:6a:eb:bf:27:7a:58:20:2a: fc:c4:1f:87:1b:a7:35:78:0c:10:74:c8:a7:67:6e: 86:0c:c9:89:5a:d1:83:d9:e7:9d:0e:a1:13:06:49: 1f:ee:37:96:8e:a1:35:63:c9:70:e8:7a:91:a8:87: 4b:a0:00:5f:d1:98:7f:71:10:f8:70:63:03:51:8a: 59:26:d5:6a:8e:13:b6:55:8d:66:65:e7:7a:22:0f: 0f:5c:8f:2f:0c:27:70:8d:e7:18:dc:a7:a4:fe:78: 32:52:24:d5:6e:92:86:87:f0:77:c0:84:72:8b:b8: 49:10:2a:fb:b3:78:64:54:f1:50:f0:99:10:83:a1: 58:89:8e:e6:5a:af:2c:43:e5:ee:50:74:2e:6e:e3: ad:bc:93:cc:a6:2f:c8:9a:24:00:6e:bf:89:cc:c2: 9c:77:63:ac:a6:b7:3f:89:c7:44:b5:f2:b8:55:33: 80:0a:d5:17:c1:2a:84:67:fd:11:0f:96:e2:ba:43: 41:a2:81:55:51:5f:58:53:75:d8:33:90:b6:8d:a3: e1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D3:1C:B5:60:FD:76:9D:78:C6:66:14:01:36:82:21:E7:94:6F:15 X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/EE83B18A7F7E11ED86E00936C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.52.14.0/23 Signature Algorithm: sha256WithRSAEncryption d0:90:e1:43:82:e3:36:f7:55:2b:fa:ea:6b:29:7b:0b:57:37: 47:c3:4a:b7:07:5b:3b:66:6a:3b:24:a0:f3:ee:92:a1:1a:90: e1:8c:e8:4d:9d:b3:71:0f:a9:50:47:21:3b:8c:74:27:c6:7b: 22:18:fe:ae:a1:6e:06:63:d5:40:2c:b4:b0:ea:6c:2e:0f:31: ec:a6:6e:cb:80:9b:54:ac:d7:9c:db:fa:12:c5:c6:19:73:30: b7:68:46:1c:f8:94:09:20:e0:0d:88:4a:d7:a5:76:c5:06:dc: 5b:0e:13:74:ce:34:24:4c:dc:9a:89:c8:b8:6b:91:8b:77:92: ea:b9:59:fe:1c:0d:89:66:f9:6d:eb:53:85:46:0e:2e:fb:70: b6:06:4b:b7:4f:86:2d:76:28:fa:79:9c:c6:99:3f:3a:e9:0b: c2:b7:92:67:7d:7d:af:29:07:8d:45:af:3f:c7:e1:65:0b:57: a9:0d:ee:08:40:17:8f:92:d1:01:52:9b:bf:c4:29:a0:ca:1f: 58:ce:2d:56:21:04:29:1a:43:4d:38:a7:16:f7:a7:3b:ff:f6: 41:ac:db:ca:bd:84:ba:b0:7d:80:fc:0b:dd:d2:5b:c0:c2:34: 30:44:8f:1f:7a:b7:6b:0c:f5:c4:a9:a1:81:a4:33:8b:24:29: 4f:d7:6a:1b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjUwMTIxMDEzNTQ2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhlZjlmMS0wZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7Km/mPQdCH7m14OwnXqnMJJqRug3RbqObB6PDAwJyJjL9qofQ99CTsrryhy weWvcuMJauu/J3pYICr8xB+HG6c1eAwQdMinZ26GDMmJWtGD2eedDqETBkkf7jeW jqE1Y8lw6HqRqIdLoABf0Zh/cRD4cGMDUYpZJtVqjhO2VY1mZed6Ig8PXI8vDCdw jecY3Kek/ngyUiTVbpKGh/B3wIRyi7hJECr7s3hkVPFQ8JkQg6FYiY7mWq8sQ+Xu UHQubuOtvJPMpi/ImiQAbr+JzMKcd2Osprc/icdEtfK4VTOACtUXwSqEZ/0RD5bi ukNBooFVUV9YU3XYM5C2jaPh3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHDTHLVg /XadeMZmFAE2giHnlG8VMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMxQTIvRDQ3NkVENzYzNTcyMTFFREFFOTc3ODM5QzRGOUFFMDIvRUU4M0IxOEE3 RjdFMTFFRDg2RTAwOTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGkNA4wDQYJKoZIhvcNAQELBQADggEBANCQ4UOC4zb3VSv6 6mspewtXN0fDSrcHWztmajskoPPukqEakOGM6E2ds3EPqVBHITuMdCfGeyIY/q6h bgZj1UAstLDqbC4PMeymbsuAm1Ss15zb+hLFxhlzMLdoRhz4lAkg4A2ISteldsUG 3FsOE3TONCRM3JqJyLhrkYt3kuq5Wf4cDYlm+W3rU4VGDi77cLYGS7dPhi12KPp5 nMaZPzrpC8K3kmd9fa8pB41Frz/H4WULV6kN7ghAF4+S0QFSm7/EKaDKH1jOLVYh BCkaQ004pxb3pzv/9kGs28q9hLqwfYD8C93SW8DCNDBEjx96t2sM9cSpoYGkM4sk KU/Xahs= -----END CERTIFICATE-----Generated at Fri Apr 11 15:25:53 2025 by rpki-client