$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/909AA4DC567011EFA451BD7CC4F9AE02.roa File: 909AA4DC567011EFA451BD7CC4F9AE02.roa (raw, json) Hash identifier: eNA7hmO0iaDh6B8QriE+uJJoAJhe22m7Y0RORTwFmBQ= Subject key identifier: B1:A4:B5:4A:94:EA:B2:B1:3C:DD:E1:E5:37:61:FE:D2:8A:1C:A7:4B Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Certificate serial: 32C9 Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/909AA4DC567011EFA451BD7CC4F9AE02.roa Signing time: Fri 20 Dec 2024 15:51:58 +0000 ROA not before: Fri 20 Dec 2024 15:51:58 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 59211 IP address blocks: 116.251.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13001 (0x32c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF863 Validity Not Before: Dec 20 15:51:58 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6765929e-8666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:d6:af:68:f2:07:2a:6d:c5:d4:a7:47:6f: 84:cd:80:2b:3b:f8:09:37:14:60:be:03:b2:c7:ce: 85:c3:c0:6f:29:a4:19:3d:27:5a:23:5b:1d:62:ad: 53:d6:83:2b:ac:2e:56:16:99:21:44:4b:6b:49:e1: 44:dc:4d:d6:72:71:d0:0e:0b:36:64:55:83:2e:2c: 17:3e:e3:d5:20:23:b8:70:3c:c5:18:be:07:19:bc: a5:eb:40:36:38:83:1b:1f:4a:2e:82:8c:a1:cb:ad: 90:f7:db:51:66:a3:dd:8b:0c:62:24:83:36:2c:11: 09:70:01:97:26:34:9a:45:04:f5:1a:fb:d5:55:ea: b3:3d:3b:46:f4:70:56:07:8c:e2:dd:cb:2d:8b:d1: 04:76:c5:18:c4:9e:db:bb:f3:33:13:4b:35:ff:f7: 32:01:c1:53:fc:8a:65:c6:fd:9e:12:39:60:b6:1f: db:4f:2e:64:25:a1:bc:c0:12:9e:7d:a9:25:0f:9a: 7b:78:b7:49:f2:b0:51:ec:a6:ed:82:ca:d7:27:41: 3d:b2:e5:54:0e:8e:a6:bd:0d:fe:c2:e2:d4:e9:7b: 6d:85:a6:5e:3f:6f:1f:6f:27:50:ca:9e:f1:59:02: 8a:08:93:e0:2d:e3:6d:ce:68:d2:aa:08:d0:fa:9a: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A4:B5:4A:94:EA:B2:B1:3C:DD:E1:E5:37:61:FE:D2:8A:1C:A7:4B X509v3 Authority Key Identifier: keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/909AA4DC567011EFA451BD7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.251.216.0/21 Signature Algorithm: sha256WithRSAEncryption 71:45:d5:ae:20:1b:82:bd:c3:3e:7e:ce:a8:7e:b2:f4:99:a7: c8:a2:34:81:b5:3e:cc:a3:2b:1f:ed:2c:33:48:fc:e9:f7:a3: 89:5b:2a:3c:7e:65:26:6c:7c:01:33:6f:90:86:6f:22:8f:ec: 67:f4:c2:d8:3f:29:aa:b3:84:0f:89:91:dd:ab:bb:91:6b:29: 17:a0:d0:22:bd:38:78:de:2a:f8:84:5b:bd:5a:a7:47:b3:f2: 8a:58:67:62:91:19:34:f0:4f:3f:09:8b:5e:80:c6:f2:00:32: e1:c4:da:f3:07:b1:6e:c9:28:8d:27:ab:d8:26:de:43:5b:a1: 54:54:ae:9c:b0:42:02:92:eb:c1:46:78:2b:fe:6a:54:94:63: be:7b:61:01:ed:cb:40:8d:5c:6b:30:e6:2f:0f:bb:3e:ab:d3: 85:d7:39:0a:28:49:de:a2:ce:c4:f8:3e:14:7c:2e:5c:23:63: fa:a3:71:b0:34:36:54:df:21:1f:d7:a8:51:75:89:ce:06:bd: 4a:b9:08:ed:86:6c:36:c3:e2:e1:94:8b:a1:a4:af:a1:19:45: 9b:c1:ae:ca:a6:19:8e:f2:1c:b4:9e:36:fc:63:f6:4a:ba:d4: 27:be:4d:8c:d5:ae:4a:da:40:0c:45:ee:df:d6:54:92:8f:ae: 81:51:10:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICMskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG NUE2QjkzNDgwHhcNMjQxMjIwMTU1MTU4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY1OTI5ZS04NjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPzWr2jyByptxdSnR2+EzYArO/gJNxRgvgOyx86Fw8BvKaQZPSdaI1sdYq1T 1oMrrC5WFpkhREtrSeFE3E3WcnHQDgs2ZFWDLiwXPuPVICO4cDzFGL4HGbyl60A2 OIMbH0ougoyhy62Q99tRZqPdiwxiJIM2LBEJcAGXJjSaRQT1GvvVVeqzPTtG9HBW B4zi3csti9EEdsUYxJ7bu/MzE0s1//cyAcFT/Iplxv2eEjlgth/bTy5kJaG8wBKe faklD5p7eLdJ8rBR7KbtgsrXJ0E9suVUDo6mvQ3+wuLU6XtthaZeP28fbydQyp7x WQKKCJPgLeNtzmjSqgjQ+ppSawIDAQABo4IClTCCApEwHQYDVR0OBBYEFLGktUqU 6rKxPN3h5Tdh/tKKHKdLMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY4NjMvQkZFNTRBNjg4MTVCMTFFMjlCNThBNzNCMzI5MkI1RTgvOTA5QUE0REM1 NjcwMTFFRkE0NTFCRDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAN0+9gwDQYJKoZIhvcNAQELBQADggEBAHFF1a4gG4K9wz5+ zqh+svSZp8iiNIG1PsyjKx/tLDNI/On3o4lbKjx+ZSZsfAEzb5CGbyKP7Gf0wtg/ KaqzhA+Jkd2ru5FrKReg0CK9OHjeKviEW71ap0ez8opYZ2KRGTTwTz8Ji16AxvIA MuHE2vMHsW7JKI0nq9gm3kNboVRUrpywQgKS68FGeCv+alSUY757YQHty0CNXGsw 5i8Puz6r04XXOQooSd6izsT4PhR8LlwjY/qjcbA0NlTfIR/XqFF1ic4GvUq5CO2G bDbD4uGUi6Gkr6EZRZvBrsqmGY7yHLSeNvxj9kq61Ce+TYzVrkraQAxF7t/WVJKP roFREM8= -----END CERTIFICATE-----Generated at Sat Apr 5 03:58:08 2025 by rpki-client