$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/3C52563E781F11EE9787607FC4F9AE02.roa File: 3C52563E781F11EE9787607FC4F9AE02.roa (raw, json) Hash identifier: iGx2/OJLyjhg1Fasnl64EO8+YlI70PVJOH1c6PHse0Y= Subject key identifier: F6:7C:2A:C6:3F:BA:75:E6:BC:03:23:4E:7B:8E:D4:58:2A:3F:1B:01 Certificate issuer: /CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13 Certificate serial: 08C1 Authority key identifier: 1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/3C52563E781F11EE9787607FC4F9AE02.roa Signing time: Fri 28 Mar 2025 21:13:43 +0000 ROA not before: Fri 28 Mar 2025 21:13:43 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 26496 IP address blocks: 148.66.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0 Validity Not Before: Mar 28 21:13:43 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e71106-b10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5f:bd:7a:89:17:f4:3d:08:b0:4a:85:7b:e0: 52:2f:12:a0:7c:02:18:94:3b:3e:71:75:72:b0:33: 6d:e5:8c:b8:4f:8f:7b:fd:61:60:7d:81:00:0d:fd: 9b:5b:b5:d2:58:a0:0d:8a:29:fc:dc:ed:a3:e8:bc: ef:41:e4:f8:c2:cb:61:1d:62:d0:31:a1:b9:01:57: 84:2f:c6:82:1d:65:2b:cb:26:b9:32:2d:7b:38:2f: 13:47:80:b7:eb:0b:f5:42:ee:a9:6a:e4:12:de:2e: b7:bc:87:69:2b:60:fe:d1:97:53:0f:9d:7a:cd:d3: a9:a7:c1:e0:35:29:fd:46:3a:d0:81:29:59:84:9e: 79:55:51:da:ef:a8:04:5c:33:e6:a7:dc:de:5f:87: 98:83:55:d6:55:d4:71:82:cb:93:e3:9e:01:a9:f7: b2:ca:d9:00:55:85:5d:ae:3f:0f:14:49:9d:f0:81: 39:71:52:9a:07:2e:d5:23:8c:b7:06:e5:d9:20:5f: 1f:a4:89:f2:62:79:1b:0a:69:ba:0e:c2:03:a9:22: 8d:f5:80:ea:2a:5b:1d:14:a0:0f:5e:6d:da:05:91: db:ab:2a:38:2e:a7:7e:e1:bb:7b:61:72:1f:ca:e4: 07:21:17:bb:00:56:d8:a9:44:5e:fb:d7:b2:2e:99: 4a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7C:2A:C6:3F:BA:75:E6:BC:03:23:4E:7B:8E:D4:58:2A:3F:1B:01 X509v3 Authority Key Identifier: keyid:1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/3C52563E781F11EE9787607FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 148.66.128.0/19 Signature Algorithm: sha256WithRSAEncryption a6:ed:f0:b8:5b:da:b2:42:b3:9d:3f:6a:f9:6c:03:28:7d:8c: 8d:d3:46:38:37:82:2b:3f:25:a1:9c:ae:b4:90:eb:da:61:bd: 43:91:18:ec:39:d1:b9:c6:d5:1c:9a:62:73:bd:eb:80:87:75: ab:6b:83:09:80:50:e0:6a:bb:28:be:11:6c:bc:01:9e:2e:ee: bf:e8:da:34:9e:36:32:1f:d0:f9:45:09:a1:60:73:bc:c5:b6: d7:0a:0a:8e:8c:36:cf:08:0b:a5:f6:61:25:b7:07:57:fd:61: 83:67:1c:59:a0:57:a8:d1:77:d6:23:89:9a:9a:bb:cd:dd:07: 60:37:4c:4d:74:bb:49:b5:85:30:f7:86:21:64:73:e8:43:bd: 94:a1:02:64:f4:d7:d8:ba:c2:fb:a8:71:5e:82:57:b2:24:05: 73:77:a7:ac:4f:8d:17:d5:bb:01:d9:ea:74:1a:c6:48:9c:09: b3:ec:61:69:7e:27:ed:f9:f2:c6:8f:47:08:a5:06:ef:14:bb: 41:84:9b:de:85:1c:f1:3a:0c:a5:fd:62:c0:13:81:ef:23:21: ca:13:4c:3c:8a:17:2d:cc:bc:d6:fe:ca:fb:93:29:65:49:d5: 5a:be:81:75:53:b2:ca:4b:5a:0d:cf:26:25:cf:19:df:1c:94: ec:24:86:2b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKDFDQjRCRkQ5QzBBNzMyQkM4RjRBNjBDODY5NEM5MUY4 MzRDQUJDMTMwHhcNMjUwMzI4MjExMzQzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U3MTEwNi1iMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1V+9eokX9D0IsEqFe+BSLxKgfAIYlDs+cXVysDNt5Yy4T497/WFgfYEADf2b W7XSWKANiin83O2j6LzvQeT4wsthHWLQMaG5AVeEL8aCHWUryya5Mi17OC8TR4C3 6wv1Qu6pauQS3i63vIdpK2D+0ZdTD516zdOpp8HgNSn9RjrQgSlZhJ55VVHa76gE XDPmp9zeX4eYg1XWVdRxgsuT454BqfeyytkAVYVdrj8PFEmd8IE5cVKaBy7VI4y3 BuXZIF8fpInyYnkbCmm6DsIDqSKN9YDqKlsdFKAPXm3aBZHbqyo4Lqd+4bt7YXIf yuQHIRe7AFbYqURe+9eyLplKgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPZ8KsY/ unXmvAMjTnuO1FgqPxsBMB8GA1UdIwQYMBaAFBy0v9nApzK8j0pgyGlMkfg0yrwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wMzExNjMxMkFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1yeVBTbURJYVV5Ui1EVEt2 Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hMU18yY0NuTXJ5UFNtRElhVXlSLURUS3ZCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDgzRDAvMDMxMTYzMTJBRkJDMTFFQUE5NjFDQjg2QzRGOUFFMDIvM0M1MjU2M0U3 ODFGMTFFRTk3ODc2MDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAWUQoAwDQYJKoZIhvcNAQELBQADggEBAKbt8Lhb2rJCs50/ avlsAyh9jI3TRjg3gis/JaGcrrSQ69phvUORGOw50bnG1RyaYnO964CHdatrgwmA UOBquyi+EWy8AZ4u7r/o2jSeNjIf0PlFCaFgc7zFttcKCo6MNs8IC6X2YSW3B1f9 YYNnHFmgV6jRd9YjiZqau83dB2A3TE10u0m1hTD3hiFkc+hDvZShAmT019i6wvuo cV6CV7IkBXN3p6xPjRfVuwHZ6nQaxkicCbPsYWl+J+358saPRwilBu8Uu0GEm96F HPE6DKX9YsATge8jIcoTTDyKFy3MvNb+yvuTKWVJ1Vq+gXVTsspLWg3PJiXPGd8c lOwkhis= -----END CERTIFICATE-----Generated at Mon Apr 7 00:06:56 2025 by rpki-client