$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/1F8578820CD611EFAFFA4E63C4F9AE02.roa File: 1F8578820CD611EFAFFA4E63C4F9AE02.roa (raw, json) Hash identifier: 57MB5MLOBu0rlKWbYAUFlVy0tWIAfHRyTSUm9GeesCE= Subject key identifier: 3E:1B:31:04:9D:62:F0:EB:AC:1E:F4:F5:9D:43:1B:2B:FA:6F:33:10 Certificate issuer: /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F Certificate serial: EE Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/1F8578820CD611EFAFFA4E63C4F9AE02.roa Signing time: Tue 25 Feb 2025 06:40:29 +0000 ROA not before: Tue 25 Feb 2025 06:40:29 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 23979 IP address blocks: 203.84.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 04:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D176D Validity Not Before: Feb 25 06:40:29 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67bd65dd-a12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:57:51:1a:a9:da:16:75:66:53:e3:18:1e:8a: 5d:41:08:84:fe:97:33:44:f7:9b:ae:b1:93:17:ba: 9b:da:91:35:0c:3b:05:b4:be:a0:b6:85:85:d1:11: 53:21:15:87:fa:ce:ad:6f:81:03:b0:e3:a8:90:8f: e1:1d:d8:cc:ef:6e:98:d3:15:d7:8a:aa:79:65:e9: 99:de:f8:11:60:34:03:ce:4c:31:3e:7f:26:d6:da: e1:64:e0:4b:45:ea:eb:83:a1:e6:0e:1b:38:12:e1: 58:2c:39:94:d9:0e:72:bc:e9:14:f3:cf:f6:4a:db: 5c:ca:dd:15:dc:aa:08:fc:4a:b7:b4:f2:e8:9d:29: 8e:4e:e5:79:56:02:80:8d:f2:e3:7d:67:69:e8:2d: 43:e8:53:5c:6d:03:fc:94:60:6f:c7:2d:51:ce:44: 00:a9:ca:64:98:0f:6b:42:1f:7b:73:09:98:1c:c3: 18:68:be:ba:42:bc:dd:17:b0:e1:bf:ef:fd:f4:bb: dc:3d:30:14:3e:33:23:4e:9a:b6:2a:d8:1e:33:b1: 44:27:23:6c:9d:46:04:38:c8:28:bc:40:9a:8d:69: 0a:01:73:00:31:df:a4:89:96:9d:03:ad:34:8c:a9: a5:9d:44:50:a2:e8:8a:23:f2:21:2c:69:58:0d:c4: 8d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1B:31:04:9D:62:F0:EB:AC:1E:F4:F5:9D:43:1B:2B:FA:6F:33:10 X509v3 Authority Key Identifier: keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/1F8578820CD611EFAFFA4E63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.84.131.0/24 Signature Algorithm: sha256WithRSAEncryption 57:c8:2e:44:0b:50:d7:50:ad:c1:be:f6:c8:35:d8:68:bf:76: 34:76:07:bd:70:24:76:09:4a:22:08:dd:a8:1a:b1:43:e0:cb: 15:21:bc:40:ea:a0:6c:6a:41:85:fc:57:76:53:4e:0b:0a:5e: 0c:1c:e9:59:11:5c:3b:7b:09:77:f0:dd:99:da:41:36:40:67: 2e:45:56:b3:bb:5b:e2:36:73:33:97:1d:fa:53:fc:b5:c8:16: 33:08:ae:18:58:e4:22:ba:f6:05:39:08:2e:a9:c6:e3:b2:72: dc:12:0c:ad:9c:34:5b:15:1e:c7:2f:a8:58:d0:c9:9a:39:83: 8c:93:eb:c7:ec:7e:f6:ed:d2:bb:f3:33:28:9c:7e:85:7c:fa: bf:7d:2d:15:b0:a2:7e:99:2f:45:bd:72:62:c9:2e:9a:43:66: af:8f:6f:a3:6d:62:6f:07:ec:21:ca:38:68:11:6c:02:e2:00: da:01:87:d6:ab:1e:be:1c:a3:de:62:ee:ff:e2:94:de:87:a6: 28:92:42:61:d3:60:68:a6:e5:3b:c1:a6:f3:87:0b:b7:49:b2: 5f:a6:c3:2b:28:c6:27:ca:d1:74:05:20:26:f9:90:b6:e4:ff: 00:0b:d2:32:60:7f:02:55:b3:f3:7a:35:c5:c9:f0:f0:f9:ea: 32:5e:2b:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3NkQxMTAvBgNVBAUTKEFBMDE3OEVBNzg1MTFBMTVCMTQ3MEVCRkMwQzU3MjFB NzBFMjc2OUYwHhcNMjUwMjI1MDY0MDI5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JkNjVkZC1hMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnldRGqnaFnVmU+MYHopdQQiE/pczRPebrrGTF7qb2pE1DDsFtL6gtoWF0RFT IRWH+s6tb4EDsOOokI/hHdjM726Y0xXXiqp5ZemZ3vgRYDQDzkwxPn8m1trhZOBL Rerrg6HmDhs4EuFYLDmU2Q5yvOkU88/2Sttcyt0V3KoI/Eq3tPLonSmOTuV5VgKA jfLjfWdp6C1D6FNcbQP8lGBvxy1RzkQAqcpkmA9rQh97cwmYHMMYaL66QrzdF7Dh v+/99LvcPTAUPjMjTpq2KtgeM7FEJyNsnUYEOMgovECajWkKAXMAMd+kiZadA600 jKmlnURQouiKI/IhLGlYDcSNdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD4bMQSd YvDrrB709Z1DGyv6bzMQMB8GA1UdIwQYMBaAFKoBeOp4URoVsUcOv8DFchpw4naf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTc2RC9GMDJBMzVFOEE5 MTQxMUVFQjI3MTJEM0ZDNEY5QUUwMi9xZ0Y0Nm5oUkdoV3hSdzZfd01WeUduRGlk cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FnRjQ2bmhSR2hXeFJ3Nl93TVZ5R25EaWRwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE3NkQvRjAyQTM1RThBOTE0MTFFRUIyNzEyRDNGQzRGOUFFMDIvMUY4NTc4ODIw Q0Q2MTFFRkFGRkE0RTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLVIMwDQYJKoZIhvcNAQELBQADggEBAFfILkQLUNdQrcG+ 9sg12Gi/djR2B71wJHYJSiII3agasUPgyxUhvEDqoGxqQYX8V3ZTTgsKXgwc6VkR XDt7CXfw3ZnaQTZAZy5FVrO7W+I2czOXHfpT/LXIFjMIrhhY5CK69gU5CC6pxuOy ctwSDK2cNFsVHscvqFjQyZo5g4yT68fsfvbt0rvzMyicfoV8+r99LRWwon6ZL0W9 cmLJLppDZq+Pb6NtYm8H7CHKOGgRbALiANoBh9arHr4co95i7v/ilN6HpiiSQmHT YGim5TvBpvOHC7dJsl+mwysoxifK0XQFICb5kLbk/wAL0jJgfwJVs/N6NcXJ8PD5 6jJeKzE= -----END CERTIFICATE-----Generated at Fri Apr 11 20:12:11 2025 by rpki-client