$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/032B593EB1C511E9A4B3CE25C4F9AE02.roa File: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (raw, json) Hash identifier: f/BgI5BL/1PcY7ExwBK48s2FrmJ9kEJMRjBuMiCgse4= Subject key identifier: C0:79:7F:8E:08:66:85:D8:65:84:80:12:3A:21:3F:AB:45:EB:BF:8E Certificate issuer: /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61 Certificate serial: 0DC8 Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/032B593EB1C511E9A4B3CE25C4F9AE02.roa Signing time: Wed 12 Feb 2025 18:36:07 +0000 ROA not before: Wed 12 Feb 2025 18:36:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9216 IP address blocks: 122.144.32.0/19 maxlen: 24 202.154.192.0/19 maxlen: 24 203.135.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3528 (0xdc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A39 Validity Not Before: Feb 12 18:36:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67acea17-71cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:0d:f3:ee:6a:e0:ee:88:bf:5e:ff:9c:3e: 0f:18:28:ea:f4:8c:2c:7d:f3:98:c1:0f:1b:86:28: 50:8c:2e:6e:3d:ba:bb:21:4f:d5:12:d5:32:a3:9f: d3:34:75:ff:d1:1e:4b:01:0e:cd:71:fc:af:6f:09: 4c:7b:35:b5:24:c6:d4:2e:1f:4a:8b:f9:d8:36:ab: ae:47:c9:fc:e6:71:f0:97:4d:0d:13:28:4a:d4:30: 3c:fd:53:e8:5f:93:a7:c5:15:22:86:87:ed:f1:81: 28:b5:67:08:da:53:d3:9a:f5:1f:33:91:32:d6:1b: ef:3b:dc:45:c3:91:12:6c:ed:e2:ce:89:9f:4e:b8: db:c7:f6:b5:8e:7e:c4:43:d3:71:d8:ca:a7:5a:16: a7:df:9a:5d:1d:01:b3:9a:80:ce:c4:2e:8f:c1:b8: 0d:4f:99:89:6e:81:b8:cd:43:39:9d:73:4b:90:af: de:65:a7:cd:35:a0:49:3a:75:94:dd:8d:22:16:a8: 9b:3a:5f:a5:7f:f3:b0:06:a2:3d:94:82:a5:2d:db: 1f:58:02:24:41:19:07:13:9f:3d:29:14:e3:43:24: e2:ba:d9:a4:46:5f:af:7f:bd:25:0c:f0:45:53:a2: b6:b2:67:b1:f0:c3:0e:22:5d:4c:4f:9f:f2:8a:84: 44:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:79:7F:8E:08:66:85:D8:65:84:80:12:3A:21:3F:AB:45:EB:BF:8E X509v3 Authority Key Identifier: keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/032B593EB1C511E9A4B3CE25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.144.32.0/19 202.154.192.0/19 203.135.64.0/19 Signature Algorithm: sha256WithRSAEncryption d5:02:70:42:49:80:d3:a0:db:ac:74:37:73:5d:e3:51:f4:b2: 92:d4:d5:0c:fc:58:32:65:2c:50:b9:a6:f7:66:f2:1f:98:0e: 6e:3a:78:ae:1b:20:90:95:e8:e9:93:86:45:c8:14:b1:c4:ec: 7a:1f:a1:ba:eb:ec:25:ca:6f:94:4e:ae:dc:25:b0:83:3d:b4: f4:d6:de:29:c1:73:42:7a:0c:ca:f5:3c:5c:e3:42:9b:4e:bd: e6:76:38:14:ed:7b:8e:f3:3e:79:4f:49:a1:19:7e:a6:2c:01: a0:12:51:94:ca:f5:5e:ca:9e:c0:44:40:7b:1b:ca:27:cb:dd: b5:a5:86:ae:ae:8b:12:d9:4b:ba:5e:bc:69:11:0b:b9:ed:49: cf:48:22:cc:0f:0e:46:e3:d6:c0:0c:d3:1f:bc:db:ca:97:8f: 9b:22:0b:6e:00:12:60:82:a2:7f:e5:63:43:9e:74:7e:47:5c: da:34:89:46:79:b8:f6:f3:ef:51:f5:8d:26:de:7a:a8:75:05: ca:fd:a3:2f:9b:e2:c2:34:30:7f:1f:5f:79:6d:b2:73:45:8c: b0:bb:58:da:4a:b6:f3:bb:05:1a:da:84:ef:a9:37:fa:aa:38: 2a:dc:ba:58:9f:dd:36:8b:2f:84:da:db:c6:88:5d:3d:9f:16: 5d:20:70:6f -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZBMzkxMTAvBgNVBAUTKEU3QjQxQjNEMjU2RUM2QkQwQ0U3MTIxQjM3MERFNDc0 MUI4MzVFNjEwHhcNMjUwMjEyMTgzNjA3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FjZWExNy03MWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxoN8+5q4O6Iv17/nD4PGCjq9IwsffOYwQ8bhihQjC5uPbq7IU/VEtUyo5/T NHX/0R5LAQ7NcfyvbwlMezW1JMbULh9Ki/nYNquuR8n85nHwl00NEyhK1DA8/VPo X5OnxRUihoft8YEotWcI2lPTmvUfM5Ey1hvvO9xFw5ESbO3izomfTrjbx/a1jn7E Q9Nx2MqnWhan35pdHQGzmoDOxC6PwbgNT5mJboG4zUM5nXNLkK/eZafNNaBJOnWU 3Y0iFqibOl+lf/OwBqI9lIKlLdsfWAIkQRkHE589KRTjQyTiutmkRl+vf70lDPBF U6K2smex8MMOIl1MT5/yioRETQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMB5f44I ZoXYZYSAEjohP6tF67+OMB8GA1UdIwQYMBaAFOe0Gz0lbsa9DOcSGzcN5HQbg15h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzOS83MzBGMDBCMkIx QzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhyME01eEliTncza2RCdURY bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU3UWJQU1Z1eHIwTTV4SWJOdzNrZEJ1RFhtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZBMzkvNzMwRjAwQjJCMUM0MTFFOUJFQ0IxODI1QzRGOUFFMDIvMDMyQjU5M0VC MUM1MTFFOUE0QjNDRTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAV6kCADBAXKmsADBAXLh0AwDQYJKoZIhvcNAQELBQADggEB ANUCcEJJgNOg26x0N3Nd41H0spLU1Qz8WDJlLFC5pvdm8h+YDm46eK4bIJCV6OmT hkXIFLHE7Hofobrr7CXKb5ROrtwlsIM9tPTW3inBc0J6DMr1PFzjQptOveZ2OBTt e47zPnlPSaEZfqYsAaASUZTK9V7KnsBEQHsbyifL3bWlhq6uixLZS7pevGkRC7nt Sc9IIswPDkbj1sAM0x+828qXj5siC24AEmCCon/lY0OedH5HXNo0iUZ5uPbz71H1 jSbeeqh1Bcr9oy+b4sI0MH8fX3ltsnNFjLC7WNpKtvO7BRrahO+pN/qqOCrculif 3TaLL4Ta28aIXT2fFl0gcG8= -----END CERTIFICATE-----Generated at Sat Apr 5 07:19:32 2025 by rpki-client