$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9EA7B7D8A63911ED874E6630C4F9AE02.roa File: 9EA7B7D8A63911ED874E6630C4F9AE02.roa (raw, json) Hash identifier: 6o0EUZvJBerht1y6bzh1g89SRPPeQ5cLEU5AQhJzOAU= Subject key identifier: 91:74:9C:96:9F:B9:F2:CE:53:18:52:C7:49:58:1D:2F:26:BB:6F:AC Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Certificate serial: 0190 Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9EA7B7D8A63911ED874E6630C4F9AE02.roa Signing time: Sun 09 Feb 2025 02:45:01 +0000 ROA not before: Sun 09 Feb 2025 02:45:01 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 400496 IP address blocks: 203.23.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5240 Validity Not Before: Feb 9 02:45:01 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a816ad-a301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d8:35:0f:57:4f:0c:f4:a8:d2:b6:1c:6c:8e: 40:30:14:ff:66:39:cf:32:be:fe:65:53:c0:77:95: 5a:3a:48:ad:3d:a6:4f:15:57:07:d4:96:ee:59:a2: 50:ea:6a:67:3c:c4:c0:9c:c9:57:5a:2b:8f:d5:76: 7b:86:12:f2:1e:af:b6:77:76:dd:7d:e9:72:b4:3b: 60:c3:db:3c:1f:81:41:e2:2a:3c:8e:15:f7:dc:25: fe:50:ab:d7:2f:46:74:14:1c:68:db:96:c2:d1:d1: 4e:ff:63:37:eb:ed:b6:6e:90:67:87:ba:f7:1c:0c: 41:b3:ac:db:01:c8:08:06:47:76:43:25:fb:88:7d: e3:4c:67:02:f4:4e:ed:d8:8a:4e:1a:21:bc:fc:68: b6:55:3a:5d:a9:53:a6:0a:8f:d9:68:c7:64:77:dd: b2:f1:ab:4c:ea:14:82:33:6b:40:f8:92:ee:d2:44: 7b:a9:bd:b8:9f:f4:90:41:b9:96:17:bb:df:9a:4e: bb:b6:fc:00:7c:30:2f:91:a6:26:e4:c5:bf:0a:e6: 9b:e4:5f:6d:b9:42:64:df:02:e7:d7:51:0f:05:d0: 7a:aa:e5:de:80:d6:d1:08:15:40:ca:50:fb:22:42: e1:4e:bd:3e:8d:4d:ed:d0:e4:ef:95:e0:9a:90:9e: 6d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:74:9C:96:9F:B9:F2:CE:53:18:52:C7:49:58:1D:2F:26:BB:6F:AC X509v3 Authority Key Identifier: keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9EA7B7D8A63911ED874E6630C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.23.161.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:ac:61:5d:34:5e:cf:1c:f5:05:04:74:fd:70:2b:2f:36:4f: 35:5d:b8:cc:8e:26:dd:31:ff:f7:6b:d6:48:70:4b:c0:b4:2a: ad:6e:f1:9a:f9:e8:f2:73:01:32:e3:63:2d:e1:9a:c5:3e:9a: d4:89:8c:af:b4:ae:66:bc:01:6d:95:89:39:cb:d8:50:09:1e: 17:a8:ab:d7:ac:57:0e:79:99:1e:27:fe:be:37:4e:5e:8c:eb: 8b:12:58:b0:90:f9:74:f2:bf:e5:8a:8d:0f:5c:a0:3e:94:bb: 66:19:2e:c4:75:8b:fe:48:17:f9:85:4c:3b:ac:d3:9f:b3:0a: d3:91:f2:a5:4e:42:e1:97:7a:25:92:63:6e:d4:b7:ad:6b:ef: 56:11:a7:39:35:5b:c8:64:95:a4:35:ae:af:fc:bb:47:26:86: 72:aa:eb:13:ba:b8:57:d6:d1:8b:2e:3c:2c:a0:bc:53:7a:6d: d8:c3:49:70:88:1a:71:0e:31:c1:27:92:88:fb:8f:87:aa:04: c8:35:d3:a1:35:f6:0c:1f:8f:c3:4f:61:e1:a3:e5:e9:06:a0: e1:40:89:e3:9c:90:d2:0a:4a:3d:b6:79:16:b8:7b:7d:ee:2a: b4:b6:e3:5f:7a:3a:3a:21:85:17:4b:ef:b8:9f:78:5a:ae:a5: 65:6f:bc:3d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyNDAxMTAvBgNVBAUTKDVEODlGM0FBRjlCMTNBMDdBNUIyNjRGMkRFQkE2NEQ1 QzUwMDY1MUMwHhcNMjUwMjA5MDI0NTAxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E4MTZhZC1hMzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29g1D1dPDPSo0rYcbI5AMBT/ZjnPMr7+ZVPAd5VaOkitPaZPFVcH1JbuWaJQ 6mpnPMTAnMlXWiuP1XZ7hhLyHq+2d3bdfelytDtgw9s8H4FB4io8jhX33CX+UKvX L0Z0FBxo25bC0dFO/2M36+22bpBnh7r3HAxBs6zbAcgIBkd2QyX7iH3jTGcC9E7t 2IpOGiG8/Gi2VTpdqVOmCo/ZaMdkd92y8atM6hSCM2tA+JLu0kR7qb24n/SQQbmW F7vfmk67tvwAfDAvkaYm5MW/Cuab5F9tuUJk3wLn11EPBdB6quXegNbRCBVAylD7 IkLhTr0+jU3t0OTvleCakJ5tDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJF0nJaf ufLOUxhSx0lYHS8mu2+sMB8GA1UdIwQYMBaAFF2J86r5sToHpbJk8t66ZNXFAGUc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTI0MC8yN0RERTdEODlC N0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9nZWxzbVR5M3JwazFjVUFa UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hZbnpxdm14T2dlbHNtVHkzcnBrMWNVQVpSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUyNDAvMjdEREU3RDg5QjdEMTFFREIzQzMzRjVEQzRGOUFFMDIvOUVBN0I3RDhB NjM5MTFFRDg3NEU2NjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLF6EwDQYJKoZIhvcNAQELBQADggEBAB6sYV00Xs8c9QUE dP1wKy82TzVduMyOJt0x//dr1khwS8C0Kq1u8Zr56PJzATLjYy3hmsU+mtSJjK+0 rma8AW2ViTnL2FAJHheoq9esVw55mR4n/r43Tl6M64sSWLCQ+XTyv+WKjQ9coD6U u2YZLsR1i/5IF/mFTDus05+zCtOR8qVOQuGXeiWSY27Ut61r71YRpzk1W8hklaQ1 rq/8u0cmhnKq6xO6uFfW0YsuPCygvFN6bdjDSXCIGnEOMcEnkoj7j4eqBMg106E1 9gwfj8NPYeGj5ekGoOFAieOckNIKSj22eRa4e33uKrS24196OjohhRdL77ifeFqu pWVvvD0= -----END CERTIFICATE-----Generated at Sat Apr 5 07:18:36 2025 by rpki-client