$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/5A034FE6BD9011EF8EBE9D64C4F9AE02.roa File: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (raw, json) Hash identifier: M0Fcljsjjstipss7xqc7MHaM40CrhRfp+Ko6GKTS2eY= Subject key identifier: F8:19:C5:04:90:AE:73:19:45:C2:18:58:57:16:97:CF:5C:89:A0:C7 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 079C Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/5A034FE6BD9011EF8EBE9D64C4F9AE02.roa Signing time: Wed 18 Dec 2024 22:35:15 +0000 ROA not before: Wed 18 Dec 2024 22:35:15 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 45411 IP address blocks: 58.87.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1948 (0x79c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE Validity Not Before: Dec 18 22:35:15 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67634e23-4b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b0:1e:7f:e8:46:86:0c:66:dc:f6:3d:fe:b2: 96:c1:10:d3:e9:75:81:b8:39:bb:a5:ec:1f:82:60: 5e:47:4a:a5:70:8f:f3:65:6f:b6:f3:bb:9e:8a:f3: 06:0f:f2:22:20:66:ee:e0:74:34:35:41:de:c8:23: a3:1e:ab:3d:e7:a5:45:95:c6:5f:fe:e1:06:34:f7: 65:20:1c:ac:a2:bf:47:25:12:ce:dc:53:b1:89:a9: c6:3d:cc:f4:50:f9:e2:fb:86:23:03:3f:34:44:e0: 05:32:d8:70:ac:08:19:6f:0e:04:cc:3a:06:d9:23: a1:2b:5b:4d:fb:5c:65:9e:87:75:83:bc:76:d1:78: 0f:3f:45:dd:81:fe:a7:75:70:d7:bc:00:ae:87:93: bb:02:35:7d:b9:32:dd:dc:aa:28:e5:8f:3f:d0:44: cd:92:79:48:cc:dd:7c:bd:95:62:98:3c:3e:9f:67: 2a:56:8e:1b:14:38:75:c9:45:fb:cc:9f:e6:0f:c4: c5:19:d8:52:22:d8:df:07:b2:bf:b9:ff:b6:8a:b9: 0f:5d:1e:28:62:5a:a6:a4:db:d2:41:57:e9:7f:c0: ba:c1:da:4b:d6:a6:ce:8b:fa:0e:6f:1a:ea:b6:ca: 5c:8d:20:55:9d:08:b6:a2:f0:fe:e3:c8:39:24:e3: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:19:C5:04:90:AE:73:19:45:C2:18:58:57:16:97:CF:5C:89:A0:C7 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/5A034FE6BD9011EF8EBE9D64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.87.4.0/23 Signature Algorithm: sha256WithRSAEncryption ce:15:fe:14:e9:85:55:d4:73:b3:69:8e:7f:0d:67:2b:fc:c0: 1e:23:c5:b8:22:ec:a7:cc:70:87:10:92:ff:38:40:56:fd:7e: cd:22:cb:64:b9:7e:95:3a:a9:ea:d4:3e:93:a5:49:0f:86:9f: c4:fa:85:0c:55:2f:a2:a3:0b:01:c1:54:39:07:1c:1a:7c:0a: d2:32:8a:ad:31:7e:e3:8a:eb:12:4d:42:f9:de:c4:3f:98:57: e4:a1:a7:1f:43:60:88:1f:a8:48:4e:d5:69:d9:fa:39:17:1a: 78:ae:88:28:9c:b7:39:b2:b2:b0:55:69:e2:17:ad:8f:f3:a3: 34:5a:c3:d9:3f:e8:86:49:7c:a0:84:b3:96:88:5e:0b:23:53: 39:bb:8c:e2:fd:f6:5a:df:64:3e:42:2f:e4:fc:a8:3b:e3:e6: 40:34:1c:e6:dc:e1:a9:7f:b7:6c:c6:e1:45:e1:62:6a:09:39: fd:69:dc:13:59:34:39:d5:b5:08:49:ad:23:3f:60:e6:72:7b: 7e:c2:8e:36:67:ed:28:52:48:37:6c:cb:d4:eb:bd:c4:a4:4f: 41:93:ca:37:3f:64:1f:b2:16:b9:c8:0d:ae:3a:dd:db:35:2f: 42:f0:9b:be:b3:3f:12:75:a5:c4:ea:32:f2:ab:8a:82:f0:e8: e1:43:c8:b1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjQxMjE4MjIzNTE1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYzNGUyMy00YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rAef+hGhgxm3PY9/rKWwRDT6XWBuDm7pewfgmBeR0qlcI/zZW+287ueivMG D/IiIGbu4HQ0NUHeyCOjHqs956VFlcZf/uEGNPdlIBysor9HJRLO3FOxianGPcz0 UPni+4YjAz80ROAFMthwrAgZbw4EzDoG2SOhK1tN+1xlnod1g7x20XgPP0Xdgf6n dXDXvACuh5O7AjV9uTLd3Koo5Y8/0ETNknlIzN18vZVimDw+n2cqVo4bFDh1yUX7 zJ/mD8TFGdhSItjfB7K/uf+2irkPXR4oYlqmpNvSQVfpf8C6wdpL1qbOi/oObxrq tspcjSBVnQi2ovD+48g5JOMhCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPgZxQSQ rnMZRcIYWFcWl89ciaDHMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI0RkUvQ0Y0QTEwRUE4NUUxMTFFQkFGQjUxRTg0QzRGOUFFMDIvNUEwMzRGRTZC RDkwMTFFRjhFQkU5RDY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAE6VwQwDQYJKoZIhvcNAQELBQADggEBAM4V/hTphVXUc7Np jn8NZyv8wB4jxbgi7KfMcIcQkv84QFb9fs0iy2S5fpU6qerUPpOlSQ+Gn8T6hQxV L6KjCwHBVDkHHBp8CtIyiq0xfuOK6xJNQvnexD+YV+Shpx9DYIgfqEhO1WnZ+jkX GniuiCictzmysrBVaeIXrY/zozRaw9k/6IZJfKCEs5aIXgsjUzm7jOL99lrfZD5C L+T8qDvj5kA0HObc4al/t2zG4UXhYmoJOf1p3BNZNDnVtQhJrSM/YOZye37CjjZn 7ShSSDdsy9TrvcSkT0GTyjc/ZB+yFrnIDa463ds1L0Lwm76zPxJ1pcTqMvKrioLw 6OFDyLE= -----END CERTIFICATE-----Generated at Sat Apr 5 07:16:42 2025 by rpki-client