$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa File: AEEA3AE45BF611E984E25E54C4F9AE02.roa (raw, json) Hash identifier: 8E9asmBCPDP2vspF6SfkqxDFa3zUOjR86wRCRSbANb0= Subject key identifier: 62:13:1E:5E:13:C8:4E:3C:7F:B3:B8:95:4A:66:BA:66:F3:D0:62:79 Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 25E2 Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa Signing time: Thu 12 Dec 2024 02:15:41 +0000 ROA not before: Thu 12 Dec 2024 02:15:41 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 17724 IP address blocks: 111.84.12.0/24 maxlen: 24 111.84.16.0/24 maxlen: 24 111.84.20.0/24 maxlen: 24 111.84.52.0/23 maxlen: 24 111.84.54.0/23 maxlen: 24 111.84.178.0/23 maxlen: 24 111.84.180.0/23 maxlen: 24 202.91.16.0/23 maxlen: 24 202.91.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9698 (0x25e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136 Validity Not Before: Dec 12 02:15:41 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=675a474c-4f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:02:93:34:5b:ae:2d:04:c3:ef:5f:d2:03: 4a:66:90:6b:16:11:b1:3f:d8:b9:04:0a:a5:2b:5e: 42:6e:09:cd:63:02:91:c2:31:31:a9:b2:97:d8:a2: ae:b9:04:d9:63:59:f8:82:3d:e5:45:d7:a5:fb:00: 13:e2:b2:ee:6e:a5:3b:58:9e:0c:56:b1:f7:23:73: 91:19:3c:80:b4:f2:1e:55:44:6f:bd:15:79:0d:e4: cd:47:dd:4c:54:d1:b2:70:41:6d:c5:91:ae:72:a3: be:95:42:ba:5f:bd:9b:2a:e5:b5:09:14:da:87:82: 76:ba:ac:d5:43:3c:ca:50:09:6b:5a:f5:54:8a:74: 28:e4:70:78:39:34:84:0f:71:ed:78:b0:a9:06:6f: ae:8c:9c:62:4e:b3:3a:43:8e:1f:e2:b3:a1:31:45: 29:48:62:bf:51:2d:15:dc:79:a5:c2:3f:bc:a3:67: 7d:ca:f5:58:4d:d8:7b:ac:71:57:02:e4:62:89:c4: 2d:99:f6:06:b1:b1:a7:c8:7e:bb:8e:c5:76:ef:81: 9d:b6:57:9c:4f:fb:05:1d:5a:2d:db:3a:7b:16:c9: 31:32:ed:4e:4c:85:06:0d:cf:b4:1a:38:11:16:b4: 5f:01:e2:43:2f:3c:42:16:9b:45:48:5e:c3:85:22: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:13:1E:5E:13:C8:4E:3C:7F:B3:B8:95:4A:66:BA:66:F3:D0:62:79 X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.84.12.0/24 111.84.16.0/24 111.84.20.0/24 111.84.52.0/22 111.84.178.0-111.84.181.255 202.91.16.0/23 202.91.20.0/22 Signature Algorithm: sha256WithRSAEncryption 97:b1:25:bf:b4:e1:d6:75:ed:4d:16:d1:8e:60:96:01:1d:50: 7c:20:d4:b4:1b:24:26:89:6a:9a:ad:28:01:42:41:7f:fa:7d: b5:c7:46:11:2b:c0:55:55:71:21:be:d0:5b:c9:04:45:fa:ec: 9a:c7:8e:e2:16:2e:75:d8:b2:2b:a2:d7:38:0f:29:35:b4:53: 7b:f0:b0:7a:70:79:5e:83:f1:26:60:c3:2e:58:cd:2a:1a:ce: 02:e5:cf:cf:60:d1:05:d4:e5:80:d3:ba:16:85:92:f2:ca:fe: 23:dc:8f:63:f2:8c:11:e1:2e:df:bb:45:5e:bd:2f:ee:b2:6c: 7e:8d:e7:50:b8:69:6d:78:73:87:f2:55:74:c2:42:f2:a4:8b: c8:37:41:63:eb:4b:67:71:ab:e0:3c:64:75:fe:01:a6:b8:89: d1:1c:e1:60:56:27:2a:1b:28:45:c9:19:8f:31:8d:e0:16:22: fd:7f:1d:2a:3b:54:bb:be:0e:e5:ac:9f:17:20:86:84:9e:94: 33:3e:fb:65:24:5d:db:8c:7e:a3:da:c8:5f:1a:a8:10:4e:04: ad:cd:0c:5a:af:25:10:4e:67:92:33:93:6c:bb:2f:54:10:e3: 4f:fa:6d:d3:f0:08:e1:62:a3:81:97:2b:4a:da:c4:66:f3:86: 3b:18:12:27 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgICJeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjQxMjEyMDIxNTQxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzVhNDc0Yy00ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XwCkzRbri0Ew+9f0gNKZpBrFhGxP9i5BAqlK15CbgnNYwKRwjExqbKX2KKu uQTZY1n4gj3lRdel+wAT4rLubqU7WJ4MVrH3I3ORGTyAtPIeVURvvRV5DeTNR91M VNGycEFtxZGucqO+lUK6X72bKuW1CRTah4J2uqzVQzzKUAlrWvVUinQo5HB4OTSE D3HteLCpBm+ujJxiTrM6Q44f4rOhMUUpSGK/US0V3Hmlwj+8o2d9yvVYTdh7rHFX AuRiicQtmfYGsbGnyH67jsV274GdtlecT/sFHVot2zp7FskxMu1OTIUGDc+0GjgR FrRfAeJDLzxCFptFSF7DhSIaQQIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFGITHl4T yE48f7O4lUpmumbz0GJ5MB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvQUVFQTNBRTQ1 QkY2MTFFOTg0RTI1RTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E PDA6MDgEAgABMDIDBABvVAwDBABvVBADBABvVBQDBAJvVDQwDAMEAW9UsgMEAW9U tAMEAcpbEAMEAspbFDANBgkqhkiG9w0BAQsFAAOCAQEAl7Elv7Th1nXtTRbRjmCW AR1QfCDUtBskJolqmq0oAUJBf/p9tcdGESvAVVVxIb7QW8kERfrsmseO4hYuddiy K6LXOA8pNbRTe/CwenB5XoPxJmDDLljNKhrOAuXPz2DRBdTlgNO6FoWS8sr+I9yP Y/KMEeEu37tFXr0v7rJsfo3nULhpbXhzh/JVdMJC8qSLyDdBY+tLZ3Gr4Dxkdf4B priJ0RzhYFYnKhsoRckZjzGN4BYi/X8dKjtUu74O5ayfFyCGhJ6UMz77ZSRd24x+ o9rIXxqoEE4Erc0MWq8lEE5nkjOTbLsvVBDjT/pt0/AI4WKjgZcrStrEZvOGOxgS Jw== -----END CERTIFICATE-----Generated at Sat Apr 5 01:04:42 2025 by rpki-client