$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/3C2B0A98259911EFB9393E2EC4F9AE02.roa File: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (raw, json) Hash identifier: GUAKLioCiwQM0sEveusi3ixaoMT6G47CkUGC3S4J4Kc= Subject key identifier: 3F:98:3E:EA:64:E6:A8:D3:AD:42:1D:7D:C5:38:46:3C:3E:81:22:7F Certificate issuer: /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Certificate serial: DD Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/3C2B0A98259911EFB9393E2EC4F9AE02.roa Signing time: Tue 17 Dec 2024 03:57:35 +0000 ROA not before: Tue 17 Dec 2024 03:57:35 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 138346 IP address blocks: 115.84.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15AD Validity Not Before: Dec 17 03:57:35 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6760f6ae-8dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:28:f1:13:11:9f:cb:ef:f0:6a:27:ab:d7: 38:14:ff:8a:8c:86:4f:46:65:1e:1c:e4:95:1b:73: 74:b1:31:c6:12:a1:c7:fc:95:36:0a:57:3e:31:d4: ec:d4:e3:8c:02:f2:0e:61:3b:e1:a6:91:4c:2b:71: 35:4e:f8:45:f4:82:1a:1d:34:f1:9c:93:6f:c8:cb: 63:d0:10:f5:08:a4:ed:4c:e2:98:6c:15:29:06:c1: 93:b2:ab:48:a7:d8:95:fa:d2:f0:4d:70:b7:7d:b9: 3e:de:69:66:05:c7:04:99:80:a8:be:88:c1:3c:e0: 81:ae:d1:41:d5:eb:05:7b:4e:6f:27:7a:86:89:59: 55:30:89:a7:40:e3:d3:be:7d:07:42:d3:2b:51:ff: 73:b5:9c:28:de:ac:b8:cb:2f:0b:ae:68:ed:ae:5f: 9f:f9:61:fc:70:68:72:13:84:bf:b2:23:68:6b:2e: 49:3e:35:17:5f:16:f4:3b:ad:e9:0c:76:ad:81:3c: 2b:bd:af:a1:5b:92:ef:ce:ca:4e:63:bb:a5:d2:f0: 7b:c4:d7:a4:2d:43:8e:d3:ae:eb:e8:82:c6:07:d6: c9:eb:41:49:3d:1c:db:f4:a5:4b:04:91:11:81:9b: 5d:89:a4:ac:3d:50:7e:bf:95:39:63:99:43:60:75: 84:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:98:3E:EA:64:E6:A8:D3:AD:42:1D:7D:C5:38:46:3C:3E:81:22:7F X509v3 Authority Key Identifier: keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/3C2B0A98259911EFB9393E2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.84.168.0/24 Signature Algorithm: sha256WithRSAEncryption 25:1e:8b:0b:9a:45:87:44:46:b0:7e:e3:c1:58:d7:9d:09:e5: b1:20:d3:b5:ca:f1:be:1b:b5:32:1e:34:f0:00:df:d2:b8:e3: 09:9f:bc:a4:f8:87:f3:b6:47:83:8a:1b:73:fa:5d:6d:60:58: 33:df:73:cd:c4:27:5d:e1:9f:38:d9:68:c0:14:e5:35:a0:57: 8c:14:fb:c2:87:ae:39:05:38:3d:b4:5e:50:f6:4e:62:79:8f: 25:c4:d5:d6:66:d0:db:84:ef:72:0c:5a:15:f8:73:3b:8d:07: f8:e3:c7:07:09:e4:d5:c5:db:0c:f7:da:bd:0e:27:14:d7:4c: 11:d2:47:f9:e2:50:e3:34:41:64:b1:d9:8e:8f:8a:ed:67:83: d5:5c:35:72:03:ec:ac:23:ea:49:bd:9e:f6:d6:6b:33:e2:73: b2:0c:ec:8e:1c:2f:35:0b:bf:61:a5:42:45:cf:20:04:c8:f2: 65:c0:d0:20:dc:ef:8b:0a:ac:62:48:df:1b:97:11:d3:42:b0: a4:76:ee:96:36:58:84:98:9f:29:52:fa:0c:89:dd:92:e0:17: f9:38:0f:31:e0:7c:c6:76:24:3b:2e:d6:61:06:27:33:17:e8: 4b:d2:e5:19:ec:56:a4:1e:8d:9a:c1:fc:91:20:8c:88:6a:7e: aa:82:2b:67 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1QUQxMTAvBgNVBAUTKDdGMzUyQTc2OTU2RDc3MDJGQzc3QUY2MEZDQzEyOUU2 MUZEQkVBMzIwHhcNMjQxMjE3MDM1NzM1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYwZjZhZS04ZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRwo8RMRn8vv8Gonq9c4FP+KjIZPRmUeHOSVG3N0sTHGEqHH/JU2Clc+MdTs 1OOMAvIOYTvhppFMK3E1TvhF9IIaHTTxnJNvyMtj0BD1CKTtTOKYbBUpBsGTsqtI p9iV+tLwTXC3fbk+3mlmBccEmYCovojBPOCBrtFB1esFe05vJ3qGiVlVMImnQOPT vn0HQtMrUf9ztZwo3qy4yy8Lrmjtrl+f+WH8cGhyE4S/siNoay5JPjUXXxb0O63p DHatgTwrva+hW5LvzspOY7ul0vB7xNekLUOO067r6ILGB9bJ60FJPRzb9KVLBJER gZtdiaSsPVB+v5U5Y5lDYHWEwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD+YPupk 5qjTrUIdfcU4Rjw+gSJ/MB8GA1UdIwQYMBaAFH81KnaVbXcC/HevYPzBKeYf2+oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVBRC9COEI5MUM0NjdF MTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3TDhkNjlnX01FcDVoX2I2 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z6VXFkcFZ0ZHdMOGQ2OWdfTUVwNWhfYjZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE1QUQvQjhCOTFDNDY3RTEyMTFFRTlDQjExRjNFQzRGOUFFMDIvM0MyQjBBOTgy NTk5MTFFRkI5MzkzRTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABzVKgwDQYJKoZIhvcNAQELBQADggEBACUeiwuaRYdERrB+ 48FY150J5bEg07XK8b4btTIeNPAA39K44wmfvKT4h/O2R4OKG3P6XW1gWDPfc83E J13hnzjZaMAU5TWgV4wU+8KHrjkFOD20XlD2TmJ5jyXE1dZm0NuE73IMWhX4czuN B/jjxwcJ5NXF2wz32r0OJxTXTBHSR/niUOM0QWSx2Y6Piu1ng9VcNXID7Kwj6km9 nvbWazPic7IM7I4cLzULv2GlQkXPIATI8mXA0CDc74sKrGJI3xuXEdNCsKR27pY2 WISYnylS+gyJ3ZLgF/k4DzHgfMZ2JDsu1mEGJzMX6EvS5RnsVqQejZrB/JEgjIhq fqqCK2c= -----END CERTIFICATE-----Generated at Mon Apr 7 00:09:53 2025 by rpki-client