$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/8C79CFC6A6FD11EAA1B00744C4F9AE02.roa File: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (raw, json) Hash identifier: ZhKJiPvJVpmKkzL+YkNpWQyHnorv+gyb0AmGgaJqcWs= Subject key identifier: 86:7D:D2:CC:88:E3:A1:7A:F0:F8:6F:AC:F8:43:11:1A:49:2C:AA:C4 Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Certificate serial: 08E1 Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/8C79CFC6A6FD11EAA1B00744C4F9AE02.roa Signing time: Thu 16 Jan 2025 20:19:37 +0000 ROA not before: Thu 16 Jan 2025 20:19:37 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 59268 IP address blocks: 113.212.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2273 (0x8e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D120D Validity Not Before: Jan 16 20:19:37 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=678969d9-1b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ff:31:8e:d7:37:52:3d:0e:c4:63:26:3f:c1: f3:d6:ff:6c:07:fa:cd:dc:4d:f9:5a:93:51:77:7b: 70:28:d8:87:a4:f0:87:75:75:28:2d:b1:42:45:e5: 07:5f:89:26:32:2e:30:23:38:8d:3e:8a:3b:8c:5a: 7e:50:4e:ce:f7:01:d8:80:e2:82:37:91:0d:cb:d1: 87:b8:11:77:8c:da:b6:9b:6d:f5:76:5c:94:ed:da: 69:a2:7a:74:74:7c:f4:ed:53:5b:0b:fb:be:0f:91: ca:81:41:3f:85:23:fd:3f:ce:db:43:90:95:7d:24: 97:84:14:7a:c8:5f:e3:91:29:4e:02:ed:0f:f2:23: 67:0e:7d:a8:ea:56:29:9d:f7:fa:cd:41:03:c3:0f: 24:ef:c6:8f:ba:db:0a:5c:f1:12:f4:77:00:07:f5: 25:65:fa:25:74:16:e6:7a:17:15:4c:f1:eb:d6:23: 63:6b:b3:3c:fb:11:c4:ea:5a:e3:ec:ce:fd:52:95: 24:06:9f:35:67:cb:80:9c:17:08:a1:53:d3:85:b1: 7d:06:af:ca:1d:07:6b:5a:86:76:02:62:3c:bf:af: 3f:78:66:76:af:df:95:14:51:cc:d0:28:66:95:a1: b4:e1:66:8e:4d:8a:95:9c:e8:bc:0e:53:20:ab:57: 56:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7D:D2:CC:88:E3:A1:7A:F0:F8:6F:AC:F8:43:11:1A:49:2C:AA:C4 X509v3 Authority Key Identifier: keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/8C79CFC6A6FD11EAA1B00744C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.212.179.0/24 Signature Algorithm: sha256WithRSAEncryption 39:2c:dd:63:b0:a8:cb:ca:93:ca:29:01:fa:16:86:56:0f:94: 92:4b:0c:23:d7:eb:15:27:80:bd:4b:4a:c1:36:c0:b9:c4:c4: 5c:d9:22:aa:85:5e:29:8e:7b:cb:81:52:3f:9c:5b:6c:b8:f4: 92:28:ae:6d:d7:99:29:a5:ce:42:df:0d:f2:7b:7d:9f:38:ff: c9:66:f2:a0:0f:b8:36:9d:26:a8:7f:8f:48:8f:80:d4:29:e8: 83:fa:af:b4:02:88:67:6f:76:4d:c1:77:24:b2:d3:39:e4:ad: 8b:4e:f9:87:1c:9f:72:28:9b:32:ef:37:4b:a5:87:28:f8:3b: 30:1f:89:a4:fb:af:2d:5b:22:6b:1b:ac:e6:39:c7:a3:56:69: bd:76:fa:25:c3:85:e9:5f:d7:2c:3c:ef:80:4e:fa:59:5d:d3: 66:d9:2a:79:e3:d7:ac:72:3c:ca:23:fa:1c:52:3c:6f:fe:8d: 56:66:43:f6:cc:bc:43:3c:18:61:d7:22:3e:52:47:b0:ed:a6: c2:bb:96:02:e3:8f:50:19:09:4c:e4:2b:81:d2:af:60:e0:f7: e5:6f:1f:d2:4b:b6:9d:89:e1:1e:71:05:5d:4e:ac:2c:32:2e: 63:b1:91:78:22:c4:0e:e7:84:eb:ae:48:96:6f:8a:01:f2:b1: 9c:a4:46:6d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2NUVGOEJFMDY4 ODA2ODEwOUMwHhcNMjUwMTE2MjAxOTM3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg5NjlkOS0xYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4P8xjtc3Uj0OxGMmP8Hz1v9sB/rN3E35WpNRd3twKNiHpPCHdXUoLbFCReUH X4kmMi4wIziNPoo7jFp+UE7O9wHYgOKCN5ENy9GHuBF3jNq2m231dlyU7dpponp0 dHz07VNbC/u+D5HKgUE/hSP9P87bQ5CVfSSXhBR6yF/jkSlOAu0P8iNnDn2o6lYp nff6zUEDww8k78aPutsKXPES9HcAB/UlZfoldBbmehcVTPHr1iNja7M8+xHE6lrj 7M79UpUkBp81Z8uAnBcIoVPThbF9Bq/KHQdrWoZ2AmI8v68/eGZ2r9+VFFHM0Chm laG04WaOTYqVnOi8DlMgq1dWGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIZ90syI 46F68PhvrPhDERpJLKrEMB8GA1UdIwQYMBaAFLaFjOiZEV8sVhx2Ze+L4GiAaBCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwRC81MUU4MEU5OEE2 RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5eFdISFpsNzR2Z2FJQm9F SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RvV002SmtSWHl4V0hIWmw3NHZnYUlCb0VKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDEyMEQvNTFFODBFOThBNkUxMTFFQTgwNDI0MTZBQzRGOUFFMDIvOEM3OUNGQzZB NkZEMTFFQUExQjAwNzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABx1LMwDQYJKoZIhvcNAQELBQADggEBADks3WOwqMvKk8op AfoWhlYPlJJLDCPX6xUngL1LSsE2wLnExFzZIqqFXimOe8uBUj+cW2y49JIorm3X mSmlzkLfDfJ7fZ84/8lm8qAPuDadJqh/j0iPgNQp6IP6r7QCiGdvdk3BdySy0znk rYtO+Yccn3IomzLvN0ulhyj4OzAfiaT7ry1bImsbrOY5x6NWab12+iXDhelf1yw8 74BO+lld02bZKnnj16xyPMoj+hxSPG/+jVZmQ/bMvEM8GGHXIj5SR7DtpsK7lgLj j1AZCUzkK4HSr2Dg9+VvH9JLtp2J4R5xBV1OrCwyLmOxkXgixA7nhOuuSJZvigHy sZykRm0= -----END CERTIFICATE-----Generated at Sat Apr 5 05:55:15 2025 by rpki-client