$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/79D30C40BABE11EB825A5D09C4F9AE02.roa File: 79D30C40BABE11EB825A5D09C4F9AE02.roa (raw, json) Hash identifier: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw= Subject key identifier: A0:8A:2A:78:A2:4E:E7:C7:46:EC:95:EF:45:A4:A8:28:83:78:08:37 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 06EB Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/79D30C40BABE11EB825A5D09C4F9AE02.roa Signing time: Wed 29 Jan 2025 08:35:48 +0000 ROA not before: Wed 29 Jan 2025 08:35:48 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 32787 IP address blocks: 166.81.2.0/24 maxlen: 24 166.81.62.0/24 maxlen: 24 166.81.63.0/24 maxlen: 24 166.81.83.0/24 maxlen: 24 166.81.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B Validity Not Before: Jan 29 08:35:48 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6799e864-3e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2f:92:82:99:54:a3:77:36:05:33:eb:4d:91: 43:da:a2:5b:fa:5b:34:dc:7b:60:b1:20:37:d9:fc: 9c:93:aa:96:35:df:de:06:8a:b6:46:a7:84:9b:5d: 96:79:80:43:56:43:70:5c:14:a1:bd:89:5c:77:8d: d7:b2:ef:93:ba:44:eb:b4:f6:52:cd:96:30:f8:09: 3d:5c:b5:f5:b7:f9:a4:fa:87:b2:fd:00:a8:84:f9: 78:0c:83:d9:05:4f:74:ba:56:28:88:f3:98:6a:ce: d0:06:5d:5c:0c:dd:ab:bb:5d:d5:1e:7b:c9:bf:f6: 5a:5b:f2:cb:17:1d:74:17:e3:07:87:07:77:e8:3e: c0:ad:47:1c:9c:bc:79:de:80:af:2f:a4:5f:36:5f: d9:5d:03:6b:82:68:e3:55:ea:df:56:16:5b:70:fc: d5:66:4c:24:22:eb:33:7c:66:93:ff:f8:a0:18:16: 49:07:d9:fa:05:39:59:5c:2e:a5:f8:55:d0:ef:63: 4c:47:c9:f7:46:3b:a2:c9:eb:ef:06:b8:c3:86:46: 2d:7c:29:5b:61:17:f2:78:b6:13:ef:f3:44:51:e5: d6:ca:41:dc:15:7e:3c:0c:fc:a3:e5:50:31:72:65: ea:de:77:b9:49:79:f4:98:fc:af:ae:a0:a7:dd:4b: 9d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8A:2A:78:A2:4E:E7:C7:46:EC:95:EF:45:A4:A8:28:83:78:08:37 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/79D30C40BABE11EB825A5D09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 166.81.2.0/24 166.81.62.0/23 166.81.83.0-166.81.84.255 Signature Algorithm: sha256WithRSAEncryption 37:ce:e5:d1:e8:a1:d6:31:71:13:ef:2f:e9:74:e8:31:4a:d2: b2:cb:58:a9:f9:ec:90:6f:db:a8:ab:1e:e1:e1:29:e2:43:49: a4:4f:48:d5:e3:9d:d7:fa:c1:8e:fc:fe:84:5e:c7:37:5b:46: e4:ae:5b:33:5a:aa:c2:57:3f:6f:53:9d:e1:60:a5:9c:46:f3: 7d:2d:23:b9:c2:d8:7a:63:78:f6:9e:3b:9a:8d:f5:94:d0:9a: 61:c1:64:1f:fb:20:69:b4:85:6b:fa:02:63:8b:ec:71:87:bd: c5:05:d4:13:a9:b6:d1:26:69:80:d4:fb:81:31:da:a1:e3:72: 51:94:5c:d7:94:3a:54:74:de:fd:14:75:d1:2f:e8:2d:0e:5b: 66:e8:83:43:e2:08:ed:64:25:bc:86:49:1d:3e:f5:d1:4c:53: c7:3f:33:b1:30:65:fd:56:e9:b2:82:8e:40:2b:c8:4d:9e:59: ed:40:9e:72:b1:fa:11:db:a6:6f:0c:6b:b8:ee:92:c1:1b:26: bd:bc:17:74:4d:f1:24:d4:ce:25:dc:ac:2f:41:6c:3d:7e:ab: 9d:36:e5:e5:96:6c:6d:dd:ec:a7:9c:15:03:d3:22:a5:07:7f: 4d:4b:41:03:33:7f:7d:fe:b5:4a:d5:63:bd:12:99:24:32:bb: 7e:da:0d:66 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUwMTI5MDgzNTQ4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5ZTg2NC0zZTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAni+SgplUo3c2BTPrTZFD2qJb+ls03HtgsSA32fyck6qWNd/eBoq2RqeEm12W eYBDVkNwXBShvYlcd43Xsu+TukTrtPZSzZYw+Ak9XLX1t/mk+oey/QCohPl4DIPZ BU90ulYoiPOYas7QBl1cDN2ru13VHnvJv/ZaW/LLFx10F+MHhwd36D7ArUccnLx5 3oCvL6RfNl/ZXQNrgmjjVerfVhZbcPzVZkwkIuszfGaT//igGBZJB9n6BTlZXC6l +FXQ72NMR8n3RjuiyevvBrjDhkYtfClbYRfyeLYT7/NEUeXWykHcFX48DPyj5VAx cmXq3ne5SXn0mPyvrqCn3UudCwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFKCKKnii TufHRuyV70WkqCiDeAg3MB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMzMUIvRDBFQ0NENDg4OTNEMTFFQjkxNkRGMDIyQzRGOUFFMDIvNzlEMzBDNDBC QUJFMTFFQjgyNUE1RDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBACmUQIDBAGmUT4wDAMEAKZRUwMEAKZRVDANBgkqhkiG9w0B AQsFAAOCAQEAN87l0eih1jFxE+8v6XToMUrSsstYqfnskG/bqKse4eEp4kNJpE9I 1eOd1/rBjvz+hF7HN1tG5K5bM1qqwlc/b1Od4WClnEbzfS0jucLYemN49p47mo31 lNCaYcFkH/sgabSFa/oCY4vscYe9xQXUE6m20SZpgNT7gTHaoeNyUZRc15Q6VHTe /RR10S/oLQ5bZuiDQ+II7WQlvIZJHT710UxTxz8zsTBl/VbpsoKOQCvITZ5Z7UCe crH6EdumbwxruO6SwRsmvbwXdE3xJNTOJdysL0FsPX6rnTbl5ZZsbd3sp5wVA9Mi pQd/TUtBAzN/ff61StVjvRKZJDK7ftoNZg== -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:56 2025 by rpki-client