$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/95A226D0EF3C11E9A7190355C4F9AE02.roa File: 95A226D0EF3C11E9A7190355C4F9AE02.roa (raw, json) Hash identifier: TDZfCqe/A1h/UXKP3e80woGj06+CgzgdnSG8UtuTL5A= Subject key identifier: 3D:0C:12:F8:E0:FB:7F:42:B8:83:D3:63:89:28:F9:AC:C7:8F:72:24 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 1A0E Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/95A226D0EF3C11E9A7190355C4F9AE02.roa Signing time: Sat 30 Nov 2024 16:44:04 +0000 ROA not before: Sat 30 Nov 2024 16:44:04 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 55862 IP address blocks: 43.252.100.0/24 maxlen: 24 43.252.101.0/24 maxlen: 24 43.252.102.0/24 maxlen: 24 43.252.103.0/24 maxlen: 24 49.128.160.0/24 maxlen: 24 49.128.161.0/24 maxlen: 24 49.128.162.0/24 maxlen: 24 49.128.163.0/24 maxlen: 24 49.128.164.0/24 maxlen: 24 49.128.165.0/24 maxlen: 24 49.128.166.0/24 maxlen: 24 49.128.167.0/24 maxlen: 24 49.128.168.0/24 maxlen: 24 49.128.169.0/24 maxlen: 24 49.128.170.0/24 maxlen: 24 49.128.171.0/24 maxlen: 24 49.128.172.0/24 maxlen: 24 49.128.173.0/24 maxlen: 24 49.128.174.0/24 maxlen: 24 49.128.175.0/24 maxlen: 24 103.29.96.0/24 maxlen: 24 103.29.97.0/24 maxlen: 24 103.29.98.0/24 maxlen: 24 103.29.99.0/24 maxlen: 24 2401:8900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6670 (0x1a0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: Nov 30 16:44:04 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674b40d4-c2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:4c:c7:0f:04:7b:8d:a0:b5:39:60:a6:5a: 66:61:56:8f:61:81:b6:d9:bb:55:0d:61:5d:15:4b: 13:da:18:4b:32:44:d5:03:4d:09:fc:23:10:00:41: f5:79:2f:c8:c2:a3:98:21:c3:a2:0e:01:ba:23:d4: 27:82:f3:fe:0f:64:22:ba:e1:dd:38:b3:ff:6a:fd: c9:a9:dd:a4:f4:4d:51:99:e4:8e:02:98:24:38:48: f9:5c:5f:ef:3c:38:35:59:49:30:1c:15:a1:36:fb: 19:e8:f8:c2:47:a8:3b:0b:23:a0:c5:8e:66:0a:0f: 40:b1:93:2d:48:28:83:23:56:73:47:ba:fd:83:bf: fc:1c:1e:49:44:d2:9f:11:3b:c7:d4:85:6a:2e:d7: 84:cf:df:3f:eb:2a:c0:4b:8e:13:5f:2e:7e:89:18: 53:c3:8b:79:82:14:3e:47:58:39:11:c3:18:a6:cd: 5c:6a:65:04:83:10:f2:8d:a5:b3:9b:ec:6f:6a:9d: 77:77:4a:c2:cb:87:ad:33:26:9d:dd:2b:9f:cb:89: 1b:80:b2:69:cf:c3:88:c2:e4:d0:b1:ae:97:fe:c6: a2:af:6b:69:29:6a:8e:3f:8f:d8:f3:2e:c7:00:83: 77:ea:c5:22:26:ee:e0:dd:ad:0c:ac:a6:7f:e5:d7: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0C:12:F8:E0:FB:7F:42:B8:83:D3:63:89:28:F9:AC:C7:8F:72:24 X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/95A226D0EF3C11E9A7190355C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.100.0/22 49.128.160.0/20 103.29.96.0/22 IPv6: 2401:8900::/32 Signature Algorithm: sha256WithRSAEncryption 6f:03:21:68:18:92:13:20:be:7a:29:d4:4c:e3:a4:77:36:54: 4e:9a:21:e3:75:7f:df:2e:75:ec:f1:65:87:d6:45:35:74:f9: 49:09:0b:48:85:16:7b:e8:f9:07:ea:41:ad:9b:dd:8c:3a:12: ac:82:6b:7c:99:30:ff:08:d3:c4:19:57:d9:99:34:9c:5b:28: cd:fe:a4:cb:99:01:7a:83:65:51:82:99:f8:91:f2:2e:ac:82: 39:e3:c9:3d:6d:79:8f:ec:15:8e:cc:fe:b5:00:cf:c6:71:c0: 64:af:7f:0c:5c:3a:59:9a:eb:26:20:fd:ca:c0:c5:ec:15:c4: a7:59:21:50:4b:80:7e:6f:b0:1b:2f:fa:ed:a0:66:e8:39:9d: d1:77:1f:40:9d:2c:32:5d:42:98:24:76:0b:66:26:c9:a6:a9: 87:a5:92:40:77:4e:5f:f3:b1:68:6c:ac:04:9d:39:e5:d6:fa: de:a9:2f:be:d0:9a:ca:96:7e:f0:c2:82:e6:ea:9f:95:82:13: ee:05:f8:3f:85:79:1a:51:4e:04:25:10:bd:ad:8d:fa:61:81: b7:48:fc:d2:8b:c5:c2:81:90:34:af:20:34:02:b6:84:e8:6b: d1:da:b2:19:23:47:ab:df:8e:f1:68:1e:6e:07:b7:da:04:34: c9:f5:2f:b4 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICGg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjQxMTMwMTY0NDA0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRiNDBkNC1jMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIJMxw8Ee42gtTlgplpmYVaPYYG22btVDWFdFUsT2hhLMkTVA00J/CMQAEH1 eS/IwqOYIcOiDgG6I9QngvP+D2QiuuHdOLP/av3Jqd2k9E1RmeSOApgkOEj5XF/v PDg1WUkwHBWhNvsZ6PjCR6g7CyOgxY5mCg9AsZMtSCiDI1ZzR7r9g7/8HB5JRNKf ETvH1IVqLteEz98/6yrAS44TXy5+iRhTw4t5ghQ+R1g5EcMYps1camUEgxDyjaWz m+xvap13d0rCy4etMyad3Sufy4kbgLJpz8OIwuTQsa6X/sair2tpKWqOP4/Y8y7H AIN36sUiJu7g3a0MrKZ/5dcojQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFD0MEvjg +39CuIPTY4ko+azHj3IkMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkxNjEvNzBDQzI0ODYzRjhCMTFFN0E5RTY3MjQ0QzRGOUFFMDIvOTVBMjI2RDBF RjNDMTFFOUE3MTkwMzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr/GQDBAQxgKADBAJnHWAwDQQCAAIwBwMFACQBiQAwDQYJ KoZIhvcNAQELBQADggEBAG8DIWgYkhMgvnop1EzjpHc2VE6aIeN1f98udezxZYfW RTV0+UkJC0iFFnvo+QfqQa2b3Yw6EqyCa3yZMP8I08QZV9mZNJxbKM3+pMuZAXqD ZVGCmfiR8i6sgjnjyT1teY/sFY7M/rUAz8ZxwGSvfwxcOlma6yYg/crAxewVxKdZ IVBLgH5vsBsv+u2gZug5ndF3H0CdLDJdQpgkdgtmJsmmqYelkkB3Tl/zsWhsrASd OeXW+t6pL77QmsqWfvDCgubqn5WCE+4F+D+FeRpRTgQlEL2tjfphgbdI/NKLxcKB kDSvIDQCtoToa9HashkjR6vfjvFoHm4Ht9oENMn1L7Q= -----END CERTIFICATE-----Generated at Tue Apr 15 14:23:10 2025 by rpki-client