$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/1960E628919111EE9A03A712C4F9AE02.roa File: 1960E628919111EE9A03A712C4F9AE02.roa (raw, json) Hash identifier: 9Znpr7cUcbnkoOK/tzYENSEz+mUbSse0tP+On0Rl+NI= Subject key identifier: 12:48:BC:F4:F6:70:2F:E5:27:E8:C9:45:B4:FA:18:F1:13:43:CD:7E Certificate issuer: /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E Certificate serial: BD Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/1960E628919111EE9A03A712C4F9AE02.roa Signing time: Tue 03 Dec 2024 04:38:39 +0000 ROA not before: Tue 03 Dec 2024 04:38:39 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 150172 IP address blocks: 210.79.174.0/24 maxlen: 24 210.79.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE620 Validity Not Before: Dec 3 04:38:39 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=674e8b4e-d280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:09:bb:6b:26:89:85:d9:93:35:7a:58:b3: 58:34:54:85:74:bd:5c:26:ae:37:a9:86:8c:08:36: 99:e0:4c:0f:15:53:b4:25:c8:be:86:bc:44:0f:a6: 66:e3:4d:fd:db:d4:2e:f9:1d:b5:a9:53:1f:56:7b: c5:ee:89:da:6f:e5:30:87:67:4e:b6:af:04:54:02: 35:17:98:2d:b4:d7:18:00:a6:36:91:9c:ad:11:9e: 92:76:45:ce:2f:05:99:79:6f:f9:d9:5e:c1:89:07: 3e:e5:f8:1f:90:08:7e:30:19:ab:f5:d5:8e:ed:c0: 93:72:80:f2:c6:e8:26:b6:7d:96:f8:55:ce:c9:db: 19:6d:b9:0e:d6:7c:4d:bc:d7:14:98:ee:e1:d3:9e: fc:f4:94:12:b6:c7:3e:2e:49:a4:c0:5c:a3:d1:ce: c6:b2:0f:da:5a:8a:64:75:9a:1a:1a:32:1d:7a:2b: fb:1b:3c:3b:cc:f0:5b:29:29:4b:76:5c:21:a9:dc: fa:61:10:28:06:c9:97:b9:93:41:71:95:e1:b1:5a: de:81:73:30:c9:f7:86:4c:03:7d:d4:12:2d:60:2c: 12:83:d3:25:c9:87:cf:87:33:77:6d:4d:80:20:5d: 4d:1d:d3:f2:e9:5e:eb:90:11:cf:e9:d8:86:6f:85: 03:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:48:BC:F4:F6:70:2F:E5:27:E8:C9:45:B4:FA:18:F1:13:43:CD:7E X509v3 Authority Key Identifier: keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/1960E628919111EE9A03A712C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.79.174.0/23 Signature Algorithm: sha256WithRSAEncryption 41:09:1e:ac:8d:c9:e0:73:e9:e1:cb:88:26:f9:e7:2d:0f:c1: 9d:14:c1:06:9e:a9:f9:9f:24:19:f0:25:c9:aa:4f:2d:05:0b: 18:43:be:95:ac:d1:06:6d:d5:b1:fb:90:16:cc:a9:c9:fc:af: 4a:23:44:f1:0d:b4:d1:82:c7:30:ff:8c:e9:6e:7e:b5:d1:7a: 90:98:0c:9b:4d:b2:91:fa:ae:a9:77:0f:aa:c7:f4:cd:53:b2: a5:37:df:71:e9:0e:d5:a5:8d:0c:52:f7:9c:67:71:7a:97:5e: 47:dc:b8:62:41:44:04:0d:d4:e8:28:0b:0a:61:d6:ca:e5:a4: 1d:53:d3:c5:63:a2:77:a9:73:63:19:94:7a:38:61:e3:5d:c6: 7f:9c:52:f3:16:ad:73:b5:7a:08:a7:3f:3d:af:4c:11:9d:59: a7:50:28:08:5d:0b:1c:ff:a7:a5:16:a2:25:db:9d:ee:01:18: 0d:6a:89:13:de:98:10:85:df:45:41:1f:4c:75:33:57:7a:25: 9b:ec:39:66:63:cb:b6:0e:38:b3:d4:50:c2:cc:2b:6b:b5:c3: 95:c5:87:14:77:db:ba:91:85:a5:bf:c6:42:92:75:4d:2b:23: 0e:74:63:64:a2:fd:8d:88:35:5e:7e:2a:46:bc:18:ab:60:2b: 1e:d8:8d:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2MjAxMTAvBgNVBAUTKEExNkMzRjg3MjQxQTgzRDFBQTU0ODBENDJBNzRGNEY3 RDFDRTVEMkUwHhcNMjQxMjAzMDQzODM5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlOGI0ZS1kMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoA0Ju2smiYXZkzV6WLNYNFSFdL1cJq43qYaMCDaZ4EwPFVO0Jci+hrxED6Zm 403929Qu+R21qVMfVnvF7onab+Uwh2dOtq8EVAI1F5gttNcYAKY2kZytEZ6SdkXO LwWZeW/52V7BiQc+5fgfkAh+MBmr9dWO7cCTcoDyxugmtn2W+FXOydsZbbkO1nxN vNcUmO7h05789JQStsc+LkmkwFyj0c7Gsg/aWopkdZoaGjIdeiv7Gzw7zPBbKSlL dlwhqdz6YRAoBsmXuZNBcZXhsVregXMwyfeGTAN91BItYCwSg9MlyYfPhzN3bU2A IF1NHdPy6V7rkBHP6diGb4UDGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBJIvPT2 cC/lJ+jJRbT6GPETQ81+MB8GA1UdIwQYMBaAFKFsP4ckGoPRqlSA1Cp09PfRzl0u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYyMC8zQUE1OUFEQzkx OTAxMUVFODdGRUUwMEJDNEY5QUUwMi9vV3dfaHlRYWc5R3FWSURVS25UMDk5SE9Y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Xd19oeVFhZzlHcVZJRFVLblQwOTlIT1hTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U2MjAvM0FBNTlBREM5MTkwMTFFRTg3RkVFMDBCQzRGOUFFMDIvMTk2MEU2Mjg5 MTkxMTFFRTlBMDNBNzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHST64wDQYJKoZIhvcNAQELBQADggEBAEEJHqyNyeBz6eHL iCb55y0PwZ0UwQaeqfmfJBnwJcmqTy0FCxhDvpWs0QZt1bH7kBbMqcn8r0ojRPEN tNGCxzD/jOlufrXRepCYDJtNspH6rql3D6rH9M1TsqU333HpDtWljQxS95xncXqX XkfcuGJBRAQN1OgoCwph1srlpB1T08Vjonepc2MZlHo4YeNdxn+cUvMWrXO1egin Pz2vTBGdWadQKAhdCxz/p6UWoiXbne4BGA1qiRPemBCF30VBH0x1M1d6JZvsOWZj y7YOOLPUUMLMK2u1w5XFhxR327qRhaW/xkKSdU0rIw50Y2Si/Y2INV5+Kka8GKtg Kx7YjV0= -----END CERTIFICATE-----Generated at Sat Apr 5 07:14:26 2025 by rpki-client