$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/767655BE561A11E79F98831DC4F9AE02.roa File: 767655BE561A11E79F98831DC4F9AE02.roa (raw, json) Hash identifier: bf73yAvc50YmZ9DwhowT9EQ5/Cgl8VLGPJbD30MABw0= Subject key identifier: DC:18:9A:7F:3B:43:C6:A9:CB:8B:6B:8B:7A:8C:35:D9:B9:1F:E8:7C Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 25C7 Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/767655BE561A11E79F98831DC4F9AE02.roa Signing time: Wed 08 Jan 2025 16:02:40 +0000 ROA not before: Wed 08 Jan 2025 16:02:40 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 24389 IP address blocks: 119.30.32.0/20 maxlen: 24 123.108.240.0/21 maxlen: 24 202.56.4.0/22 maxlen: 24 2400:c600::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 15:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9671 (0x25c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Jan 8 16:02:40 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677ea1a0-2978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:6e:c8:5c:c0:22:ca:5d:9a:aa:8e:10:bc: 22:8a:5a:b8:5f:52:dd:c9:7d:50:7d:7b:df:23:6c: 91:77:ed:6e:1c:bc:32:1e:cd:63:39:b6:c4:bb:ff: fa:74:1a:4c:de:c3:3d:b3:39:6d:f5:a2:1c:5e:56: 9b:2b:9f:34:fb:72:e2:38:3f:7f:d5:60:5a:4c:c9: 3f:fd:69:92:2a:e8:12:e3:73:1f:b5:c0:aa:ae:03: 7a:e7:35:2e:4f:ab:42:63:bb:04:15:a3:75:f6:0f: 6b:45:07:f1:f9:0f:56:71:39:a1:7e:9a:ab:46:18: 0c:c5:66:69:d3:b0:9b:03:4a:65:a2:72:93:7b:67: b3:4e:5e:4c:cc:11:af:bd:99:a5:84:ce:b3:10:48: 72:91:79:3b:77:24:64:5b:64:33:51:67:8e:89:99: 8c:62:c0:b1:d8:5d:33:c8:33:c7:21:57:66:7b:94: 9e:f2:26:e1:92:fc:2c:d3:8a:34:9b:fa:81:d6:f0: d5:52:0b:3a:ac:5d:5b:c3:ab:22:27:9d:21:e5:44: d7:43:c8:89:36:5a:96:c6:cf:43:4c:0a:ba:c7:28: a1:28:a8:33:69:16:db:5f:5f:8f:ca:bd:89:0c:e3: 9c:a0:25:39:7f:41:d6:60:67:67:8c:dd:12:3f:8b: 55:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:18:9A:7F:3B:43:C6:A9:CB:8B:6B:8B:7A:8C:35:D9:B9:1F:E8:7C X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/767655BE561A11E79F98831DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.30.32.0/20 123.108.240.0/21 202.56.4.0/22 IPv6: 2400:c600::/32 Signature Algorithm: sha256WithRSAEncryption 38:1a:10:d6:27:a4:4c:f7:79:6a:55:55:1b:61:a4:23:0c:6a: 65:75:53:06:f7:ff:00:b6:6d:5c:87:88:d0:7a:9a:49:f7:7a: 8b:4c:4a:df:37:a5:0e:c1:f0:24:55:ef:d2:39:b8:ca:f8:59: 73:51:c5:41:88:e5:e0:df:2b:21:6c:9b:94:e1:37:fd:ce:83: 95:13:b4:75:94:17:75:21:2d:13:5e:05:16:ba:be:69:5f:38: 34:68:e2:a8:f2:b9:47:7e:b9:56:12:ad:5a:e3:ff:df:c1:69: 9d:28:dd:d4:1a:d8:fe:0d:e3:9e:4b:a3:5d:c7:36:c5:81:ae: 8c:03:74:b1:4f:83:38:d8:c7:5a:47:ab:a7:ed:2e:b2:b0:5f: d2:ff:6b:db:29:82:0a:22:46:56:02:58:f6:11:d1:4f:b1:0c: 49:0d:15:b7:09:87:f6:47:ad:de:3d:b5:be:22:c7:0b:b1:7c: ea:a5:94:83:a6:9b:be:7b:6c:9c:4a:41:d9:0e:2d:e2:b9:83: e0:71:02:c6:2b:bf:74:29:17:df:3e:6a:52:9c:7c:69:14:0e: 91:03:a1:58:6a:35:5f:dc:6a:b3:75:0c:3a:2c:44:cf:70:57: 3b:46:67:59:26:70:80:99:68:1c:b5:68:52:77:f0:58:03:f5: 2a:a6:c9:e3 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICJccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjUwMTA4MTYwMjQwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdlYTFhMC0yOTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuONuyFzAIspdmqqOELwiilq4X1LdyX1QfXvfI2yRd+1uHLwyHs1jObbEu//6 dBpM3sM9szlt9aIcXlabK580+3LiOD9/1WBaTMk//WmSKugS43MftcCqrgN65zUu T6tCY7sEFaN19g9rRQfx+Q9WcTmhfpqrRhgMxWZp07CbA0plonKTe2ezTl5MzBGv vZmlhM6zEEhykXk7dyRkW2QzUWeOiZmMYsCx2F0zyDPHIVdme5Se8ibhkvws04o0 m/qB1vDVUgs6rF1bw6siJ50h5UTXQ8iJNlqWxs9DTAq6xyihKKgzaRbbX1+Pyr2J DOOcoCU5f0HWYGdnjN0SP4tVTQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNwYmn87 Q8apy4tri3qMNdm5H+h8MB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzNBNzQvN0NCNEEwNTZGRDNBMTFFNDg2Rjg2NzVGQzRGOUFFMDIvNzY3NjU1QkU1 NjFBMTFFNzlGOTg4MzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAR3HiADBAN7bPADBALKOAQwDQQCAAIwBwMFACQAxgAwDQYJ KoZIhvcNAQELBQADggEBADgaENYnpEz3eWpVVRthpCMMamV1Uwb3/wC2bVyHiNB6 mkn3eotMSt83pQ7B8CRV79I5uMr4WXNRxUGI5eDfKyFsm5ThN/3Og5UTtHWUF3Uh LRNeBRa6vmlfODRo4qjyuUd+uVYSrVrj/9/BaZ0o3dQa2P4N455Lo13HNsWBrowD dLFPgzjYx1pHq6ftLrKwX9L/a9spggoiRlYCWPYR0U+xDEkNFbcJh/ZHrd49tb4i xwuxfOqllIOmm757bJxKQdkOLeK5g+BxAsYrv3QpF98+alKcfGkUDpEDoVhqNV/c arN1DDosRM9wVztGZ1kmcICZaBy1aFJ38FgD9SqmyeM= -----END CERTIFICATE-----Generated at Sun Apr 13 01:24:49 2025 by rpki-client