$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/94FE3AB6D55011EF8A1E1855C4F9AE02.roa File: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (raw, json) Hash identifier: gYpqfZKhxCcGgy3HXhq4upY/4aTqMhzYgAIN8Unlk1w= Subject key identifier: 9F:E8:4E:90:9B:9F:5E:8E:65:62:F2:F1:26:0D:8C:21:08:F6:60:DB Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 02F1 Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/94FE3AB6D55011EF8A1E1855C4F9AE02.roa Signing time: Sat 18 Jan 2025 03:59:15 +0000 ROA not before: Sat 18 Jan 2025 03:59:15 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153494 IP address blocks: 43.249.76.0/22 maxlen: 24 103.40.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69 Validity Not Before: Jan 18 03:59:15 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=678b2712-4ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6a:06:21:76:27:4a:ea:a3:c5:75:0e:bb:b1: 5c:a6:7f:5f:00:8d:32:b4:55:8c:c6:dd:3d:08:af: f1:49:49:c9:4d:81:f3:9b:d4:02:de:21:67:a2:55: cb:48:f2:27:58:ed:e4:8d:21:d9:a2:25:d8:d5:7b: 40:c5:11:9c:d7:93:41:95:db:e9:52:c4:15:ca:a2: 63:6a:18:6e:28:49:fd:62:c1:84:ea:c1:cb:a4:5a: c6:4f:90:06:39:87:36:09:a0:59:8c:b6:43:db:7e: 63:19:34:27:1a:cb:d3:b7:cb:d4:2b:71:16:91:ab: 76:04:ad:ad:f5:b8:b7:dc:cf:c8:f6:e5:5b:ad:81: 72:ae:72:7d:10:52:fb:f2:6a:0f:88:ab:33:3b:4f: 3d:68:69:db:b7:3d:7b:36:d0:67:c2:5f:7e:a9:72: af:46:c6:64:a8:64:b6:c3:e9:2a:e0:b4:da:bc:11: 80:64:ea:08:d8:a3:54:20:2e:64:7d:16:d7:a5:c4: 22:7f:71:92:f1:86:3a:9e:c1:f3:91:99:67:cd:76: 8c:13:8e:53:b3:44:b9:b3:36:dc:df:86:6e:bc:70: a0:00:57:96:32:02:8a:d5:17:5d:c0:27:0e:ee:cc: 4a:92:55:08:1c:22:f1:13:b0:b9:fc:f5:17:5c:b3: df:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E8:4E:90:9B:9F:5E:8E:65:62:F2:F1:26:0D:8C:21:08:F6:60:DB X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/94FE3AB6D55011EF8A1E1855C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.76.0/22 103.40.152.0/22 Signature Algorithm: sha256WithRSAEncryption 38:53:bc:f8:9f:a8:05:3a:b9:ad:dd:1d:dc:9a:0f:68:06:a5: 01:4a:11:5a:92:fa:81:35:5c:82:29:7b:7e:9c:64:f4:ba:2d: 72:89:17:b7:25:89:0a:bd:67:6f:c5:58:b9:49:87:04:3b:5d: 88:39:5d:f6:f5:f3:f7:a1:ba:5d:57:ae:6c:c6:16:df:18:d8: 3c:b9:9f:4e:ba:10:92:5d:2c:ae:25:51:ad:fa:cd:34:1c:71: dc:84:6f:13:d7:34:68:01:c1:17:38:8a:b5:ab:9e:8d:d6:18: 6b:c1:7d:67:6c:52:b7:53:5b:ed:0a:7c:d7:31:12:1a:4f:a9: 5f:80:b8:52:0f:ed:c3:e5:b3:b3:49:26:99:21:f2:8e:57:f6: 23:7e:84:28:fb:cd:87:f7:32:7d:6b:fd:c2:6c:41:e8:f6:1f: 7d:fe:b5:ae:5c:fb:fd:09:59:1c:34:c0:21:32:af:fb:94:22: 57:67:18:83:ab:2a:3d:4a:cf:f9:42:04:30:60:85:63:01:8f: cf:d9:99:75:f4:02:55:65:1c:d3:0a:9a:2c:e0:95:86:20:10: a4:26:e7:8b:92:8e:f8:04:31:62:86:2e:06:c2:8b:65:55:0b: 6a:af:7a:76:1b:1a:5d:39:9b:af:05:4e:c0:48:65:13:9a:cc: 5a:eb:b7:58 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjUwMTE4MDM1OTE1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhiMjcxMi00YWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWoGIXYnSuqjxXUOu7Fcpn9fAI0ytFWMxt09CK/xSUnJTYHzm9QC3iFnolXL SPInWO3kjSHZoiXY1XtAxRGc15NBldvpUsQVyqJjahhuKEn9YsGE6sHLpFrGT5AG OYc2CaBZjLZD235jGTQnGsvTt8vUK3EWkat2BK2t9bi33M/I9uVbrYFyrnJ9EFL7 8moPiKszO089aGnbtz17NtBnwl9+qXKvRsZkqGS2w+kq4LTavBGAZOoI2KNUIC5k fRbXpcQif3GS8YY6nsHzkZlnzXaME45Ts0S5szbc34ZuvHCgAFeWMgKK1RddwCcO 7sxKklUIHCLxE7C5/PUXXLPfSwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJ/oTpCb n16OZWLy8SYNjCEI9mDbMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdBNjkvOEFGM0Q1QjJDNjAzMTFFQzhCMEQ1RDNEQzRGOUFFMDIvOTRGRTNBQjZE NTUwMTFFRjhBMUUxODU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+UwDBAJnKJgwDQYJKoZIhvcNAQELBQADggEBADhTvPif qAU6ua3dHdyaD2gGpQFKEVqS+oE1XIIpe36cZPS6LXKJF7cliQq9Z2/FWLlJhwQ7 XYg5Xfb18/ehul1XrmzGFt8Y2Dy5n066EJJdLK4lUa36zTQccdyEbxPXNGgBwRc4 irWrno3WGGvBfWdsUrdTW+0KfNcxEhpPqV+AuFIP7cPls7NJJpkh8o5X9iN+hCj7 zYf3Mn1r/cJsQej2H33+ta5c+/0JWRw0wCEyr/uUIldnGIOrKj1Kz/lCBDBghWMB j8/ZmXX0AlVlHNMKmizglYYgEKQm54uSjvgEMWKGLgbCi2VVC2qvenYbGl05m68F TsBIZROazFrrt1g= -----END CERTIFICATE-----Generated at Sat Apr 5 04:14:37 2025 by rpki-client