$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/465DA74CEE4C11EFBBD5275FC4F9AE02.roa File: 465DA74CEE4C11EFBBD5275FC4F9AE02.roa (raw, json) Hash identifier: SPPv4eq5g0hLSyvOMf5eiY3618RcXXiv7J3/H4BO4L4= Subject key identifier: 2E:E6:13:1C:DD:4C:02:15:30:4A:2F:4D:F0:91:70:C0:C8:FA:8B:AF Certificate issuer: /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377 Certificate serial: 16 Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/465DA74CEE4C11EFBBD5275FC4F9AE02.roa Signing time: Tue 18 Feb 2025 23:01:24 +0000 ROA not before: Tue 18 Feb 2025 23:01:24 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 139077 IP address blocks: 121.200.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D41AC Validity Not Before: Feb 18 23:01:24 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67b51144-414c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b5:bb:72:34:b0:b0:ba:24:bb:90:c0:be:f5: a6:03:c0:fa:fb:6c:e2:db:44:dd:9b:f3:9f:3a:df: 79:bc:9e:ba:36:5b:77:4b:06:1f:1c:15:1b:bb:29: 96:5c:e7:74:a4:db:3f:dd:2d:1b:c4:91:7b:93:a2: 3b:14:bc:a2:09:3a:ee:7d:6e:40:db:2c:ed:4b:0a: 10:d7:63:9b:b7:0c:8c:f3:b5:85:38:a1:23:d5:fb: 57:79:00:63:97:16:5f:e3:ab:ee:d3:4c:61:7a:4d: 36:7b:4b:4b:59:d5:88:d8:b5:37:b8:c7:6a:aa:9f: 53:ba:db:48:2e:dd:65:cd:d1:5b:40:e3:58:4f:1e: f4:cf:9c:39:24:60:3a:e6:fb:f2:ff:df:67:92:ea: 84:03:43:21:b1:09:b9:38:08:80:7b:9b:31:b2:5f: 29:00:08:2c:6e:44:22:76:e9:c0:29:18:ba:ce:0e: 07:b8:9b:16:8c:65:d8:0e:e3:f0:60:f2:1c:dd:dc: 49:13:21:32:a6:1f:6e:55:34:c4:97:24:4c:38:a4: 1b:68:7a:be:f4:fd:89:63:75:85:6d:90:9f:a8:63: c4:32:cd:cb:fd:0f:84:76:fa:ba:5e:cd:a3:ee:df: 5e:ce:52:b5:53:57:08:be:73:88:27:e4:90:50:47: 95:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E6:13:1C:DD:4C:02:15:30:4A:2F:4D:F0:91:70:C0:C8:FA:8B:AF X509v3 Authority Key Identifier: keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/465DA74CEE4C11EFBBD5275FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.200.212.0/23 Signature Algorithm: sha256WithRSAEncryption 83:0b:0c:f3:1e:fb:07:b3:39:60:85:0b:01:b8:29:ad:ec:ef: 05:c9:4d:bf:ab:82:70:9c:9b:30:de:6e:be:06:54:2a:78:2f: 80:0f:b7:12:31:07:6a:ca:05:46:8b:29:fd:cb:46:03:07:c6: f9:72:e9:02:64:ab:39:0c:ee:33:50:f2:bd:9e:cf:f7:53:7f: 42:f0:a8:00:ad:a5:e7:0f:b6:1f:f9:c1:a2:0f:90:cb:26:e2: 24:5c:e7:97:79:f7:1f:98:b7:20:2b:e9:14:3e:38:c3:30:e6: c5:a2:7e:23:6f:0a:dc:7c:db:db:df:c4:ee:ee:ff:b3:be:71: b7:ab:b1:8d:97:8d:55:29:46:35:65:4e:78:80:5a:ad:95:de: 3e:c4:80:a0:e5:27:9d:bf:26:36:db:97:0f:73:f3:55:c8:5b: 1a:de:03:13:af:ba:01:8d:d3:96:ec:f9:47:eb:b0:31:01:f1: 58:28:98:50:53:24:f8:be:48:e5:19:cd:8a:da:2e:56:c1:d7: 5c:66:38:71:c7:fc:49:bf:d9:67:ad:7e:76:0c:da:92:0f:42: 07:32:b5:b2:b4:c4:df:1c:23:fd:2f:42:eb:2d:05:44:bc:bc: b1:cb:c7:fb:ca:83:b6:b7:78:42:bd:cf:d3:b4:18:d1:7d:19: 5f:0b:42:a0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDFBQzExMC8GA1UEBRMoQkY5ODY4OEU5OEIwMUU4NEQ3MzY2RjY3ODY0Q0U4RjNF QkJENDM3NzAeFw0yNTAyMTgyMzAxMjRaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YjUxMTQ0LTQxNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjtbtyNLCwuiS7kMC+9aYDwPr7bOLbRN2b858633m8nro2W3dLBh8cFRu7KZZc 53Sk2z/dLRvEkXuTojsUvKIJOu59bkDbLO1LChDXY5u3DIzztYU4oSPV+1d5AGOX Fl/jq+7TTGF6TTZ7S0tZ1YjYtTe4x2qqn1O620gu3WXN0VtA41hPHvTPnDkkYDrm +/L/32eS6oQDQyGxCbk4CIB7mzGyXykACCxuRCJ26cApGLrODge4mxaMZdgO4/Bg 8hzd3EkTITKmH25VNMSXJEw4pBtoer70/YljdYVtkJ+oY8Qyzcv9D4R2+rpezaPu 317OUrVTVwi+c4gn5JBQR5VDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQULuYTHN1M AhUwSi9N8JFwwMj6i68wHwYDVR0jBBgwFoAUv5hojpiwHoTXNm9nhkzo8+u9Q3cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MUFDLzI0NDVCQ0UyRTkz RjExRUY4REYxRTAzNUM0RjlBRTAyL3Y1aG9qcGl3SG9UWE5tOW5oa3pvOC11OVEz Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjVob2pwaXdIb1RYTm05bmhrem84LXU5UTNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDFBQy8yNDQ1QkNFMkU5M0YxMUVGOERGMUUwMzVDNEY5QUUwMi80NjVEQTc0Q0VF NEMxMUVGQkJENTI3NUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAXnI1DANBgkqhkiG9w0BAQsFAAOCAQEAgwsM8x77B7M5YIUL AbgprezvBclNv6uCcJybMN5uvgZUKngvgA+3EjEHasoFRosp/ctGAwfG+XLpAmSr OQzuM1DyvZ7P91N/QvCoAK2l5w+2H/nBog+QyybiJFznl3n3H5i3ICvpFD44wzDm xaJ+I28K3Hzb29/E7u7/s75xt6uxjZeNVSlGNWVOeIBarZXePsSAoOUnnb8mNtuX D3PzVchbGt4DE6+6AY3Tluz5R+uwMQHxWCiYUFMk+L5I5RnNitouVsHXXGY4ccf8 Sb/ZZ61+dgzakg9CBzK1srTE3xwj/S9C6y0FRLy8scvH+8qDtrd4Qr3P07QY0X0Z XwtCoA== -----END CERTIFICATE-----Generated at Sat Apr 5 01:54:59 2025 by rpki-client