$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/A96F9914F1D811EFA3152963C4F9AE02.roa File: A96F9914F1D811EFA3152963C4F9AE02.roa (raw, json) Hash identifier: 9kzcr+Me7OnP5vJBlwCgM7entDT3m8eL5xohJDWx2Io= Subject key identifier: 8D:B3:5F:03:7E:DC:4F:89:A7:19:A7:3D:05:A0:D9:0D:C5:8E:72:2F Certificate issuer: /CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C Certificate serial: 0657 Authority key identifier: 0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/A96F9914F1D811EFA3152963C4F9AE02.roa Signing time: Sun 23 Feb 2025 11:23:53 +0000 ROA not before: Sun 23 Feb 2025 11:23:53 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139769 IP address blocks: 43.251.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1623 (0x657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6499 Validity Not Before: Feb 23 11:23:53 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67bb0549-0b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:20:09:7b:da:85:64:e9:0b:f0:a4:69:29:74: 11:b9:1d:cf:9c:ea:d7:79:e8:78:f7:a2:6c:2e:da: 02:92:af:c0:ca:a7:ba:ac:46:44:f5:8e:9f:01:19: 1e:b5:68:90:f1:f4:b1:16:2d:b7:12:08:66:8b:2c: 66:d2:6a:97:c4:b7:71:37:d5:c9:8c:14:76:28:ad: 29:72:86:8e:2c:37:2a:dc:35:e1:ae:c3:e3:b3:e9: 35:17:59:bb:e9:fa:4b:8c:30:ca:49:3b:7c:f6:be: 1a:11:9f:6a:1f:4b:9c:9c:b0:69:ee:45:95:75:c6: 80:b6:12:79:5e:92:a8:b9:26:cc:d2:8e:dc:39:b5: c9:d0:0f:36:1c:72:a9:fb:fd:f4:3b:4b:77:9c:a0: 8b:44:7c:d8:74:23:3a:ee:11:38:d4:c2:b4:40:cc: 2d:86:8c:cf:49:36:1e:ba:2f:c2:ee:8b:55:c7:86: fb:1f:83:ce:e1:ba:5a:f1:b6:4d:bd:2b:8b:b5:f4: d3:6e:65:9d:c3:b1:1d:33:4a:82:7b:34:ac:6c:54: 29:0d:f6:ed:f0:0e:a5:2a:5b:6f:6c:a5:13:76:82: 67:30:fb:93:ba:13:ad:86:97:56:e2:de:c0:bb:07: 8a:22:29:ed:f6:df:43:41:21:60:02:24:57:a7:aa: c7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B3:5F:03:7E:DC:4F:89:A7:19:A7:3D:05:A0:D9:0D:C5:8E:72:2F X509v3 Authority Key Identifier: keyid:0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/A96F9914F1D811EFA3152963C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.8.0/24 Signature Algorithm: sha256WithRSAEncryption 20:f8:c3:6b:1b:a3:dc:3d:3e:82:c4:0f:ee:17:72:d2:2b:c4: 30:22:c3:c6:23:0e:2d:28:39:83:43:5b:3d:00:7b:37:6c:25: 6b:52:a1:ab:b3:eb:6c:b9:49:c7:00:60:59:d5:c5:a5:77:c2: 41:ac:59:80:be:c1:b7:f4:f2:f6:9f:37:83:39:1a:1b:a5:63: b9:18:54:f3:55:fb:3a:7e:6a:e7:4e:84:7c:2e:61:7f:d3:83: c3:d2:b5:4d:fe:a6:f2:aa:55:44:b2:f0:22:2e:40:70:d1:4c: 2c:4a:91:40:29:b4:f2:5b:fc:50:87:39:24:7b:3d:b1:7a:6c: bc:b6:0d:4b:3b:3e:a3:ea:9b:78:ed:a9:58:3e:e9:32:00:55: 48:35:22:1f:8c:31:00:0f:00:6b:e5:64:d9:ca:d2:2a:74:de: 77:4c:63:81:c6:a9:0f:a1:f5:c3:43:61:f8:a1:c2:ac:1a:00: eb:72:6a:44:9a:42:a3:57:ef:06:a3:29:42:d6:8f:68:0e:b9: ba:74:de:0b:0b:ea:cd:d2:7a:90:94:76:af:0b:0e:ba:a5:ed: 15:25:5d:fd:8c:99:28:73:f9:c8:ba:94:a6:b1:84:3c:57:51: 90:8a:02:20:92:b0:4d:77:7a:12:01:c7:9f:1a:7f:a8:88:87: 77:6e:e3:28 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0OTkxMTAvBgNVBAUTKDBCREY1RDdCRjZDMEFEQzM2RjIzMDEyODM2RDhDMkRD MjQyNzkzM0MwHhcNMjUwMjIzMTEyMzUzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JiMDU0OS0wYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/SAJe9qFZOkL8KRpKXQRuR3PnOrXeeh496JsLtoCkq/Ayqe6rEZE9Y6fARke tWiQ8fSxFi23Eghmiyxm0mqXxLdxN9XJjBR2KK0pcoaOLDcq3DXhrsPjs+k1F1m7 6fpLjDDKSTt89r4aEZ9qH0ucnLBp7kWVdcaAthJ5XpKouSbM0o7cObXJ0A82HHKp +/30O0t3nKCLRHzYdCM67hE41MK0QMwthozPSTYeui/C7otVx4b7H4PO4bpa8bZN vSuLtfTTbmWdw7EdM0qCezSsbFQpDfbt8A6lKltvbKUTdoJnMPuTuhOthpdW4t7A uweKIint9t9DQSFgAiRXp6rHeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI2zXwN+ 3E+JpxmnPQWg2Q3FjnIvMB8GA1UdIwQYMBaAFAvfXXv2wK3DbyMBKDbYwtwkJ5M8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ5OS85RjgzNkM1Mjc4 MDkxMUVCQTE2QUUxNTZDNEY5QUUwMi9DOTlkZV9iQXJjTnZJd0VvTnRqQzNDUW5r encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5OWRlX2JBcmNOdkl3RW9OdGpDM0NRbmt6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDY0OTkvOUY4MzZDNTI3ODA5MTFFQkExNkFFMTU2QzRGOUFFMDIvQTk2Rjk5MTRG MUQ4MTFFRkEzMTUyOTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr+wgwDQYJKoZIhvcNAQELBQADggEBACD4w2sbo9w9PoLE D+4XctIrxDAiw8YjDi0oOYNDWz0AezdsJWtSoauz62y5SccAYFnVxaV3wkGsWYC+ wbf08vafN4M5GhulY7kYVPNV+zp+audOhHwuYX/Tg8PStU3+pvKqVUSy8CIuQHDR TCxKkUAptPJb/FCHOSR7PbF6bLy2DUs7PqPqm3jtqVg+6TIAVUg1Ih+MMQAPAGvl ZNnK0ip03ndMY4HGqQ+h9cNDYfihwqwaAOtyakSaQqNX7wajKULWj2gOubp03gsL 6s3SepCUdq8LDrql7RUlXf2MmShz+ci6lKaxhDxXUZCKAiCSsE13ehIBx58af6iI h3du4yg= -----END CERTIFICATE-----Generated at Sat Apr 5 02:17:55 2025 by rpki-client