$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/2F734D2E860111EFB49EB20DC4F9AE02.roa File: 2F734D2E860111EFB49EB20DC4F9AE02.roa (raw, json) Hash identifier: lyH5OR1VxxfoorFwC9xWARZrZEWyPMAlZT0c6Gt7rg0= Subject key identifier: 76:5D:50:FA:BC:04:77:6B:B7:52:F4:E4:64:FC:32:71:A2:E6:60:CF Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: CF Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/2F734D2E860111EFB49EB20DC4F9AE02.roa Signing time: Thu 27 Mar 2025 05:12:13 +0000 ROA not before: Thu 27 Mar 2025 05:12:13 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152643 IP address blocks: 202.37.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31 Validity Not Before: Mar 27 05:12:13 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e4de2d-fa72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ed:92:1a:d0:93:91:98:05:6f:06:ce:cd:d8: 7b:01:4d:7f:ac:41:8c:78:fa:e8:12:88:71:47:2e: 14:17:b4:e0:43:30:fa:ed:1e:21:9f:5c:4e:be:57: 54:1d:91:0f:c2:2d:16:df:db:79:e6:1c:b0:c7:b2: 36:d1:90:fc:ce:29:ae:9f:d4:76:84:a4:8e:0c:94: 65:68:5c:e1:78:6f:c9:63:2c:f7:69:10:38:eb:57: cf:8c:b3:ae:7b:52:27:d9:6e:5c:c5:db:7e:00:06: 93:ab:48:36:dc:94:70:df:2c:10:d7:6f:08:ab:84: 79:2f:78:93:d9:e0:8f:a7:70:d1:85:5c:9d:b5:12: e4:ad:ff:fb:7f:ab:d0:cc:38:c0:74:9f:34:d8:2e: 0b:9a:fc:a1:cb:01:b3:ee:0a:e1:7d:6c:4c:50:eb: e4:49:b5:76:08:64:c6:99:1f:76:e7:b7:a7:e4:96: 36:19:18:fb:f1:65:17:b7:a5:a3:22:9b:15:6e:48: 1a:6c:46:94:6a:32:fe:d0:06:af:6d:69:0f:f6:f6: 5c:e4:f9:0a:ae:e3:f6:a1:67:e1:7d:8d:a9:dd:15: 8f:04:47:2f:b7:ca:8f:ad:fc:a3:f4:d2:f0:3c:69: 93:6b:75:0e:6b:90:a4:1b:69:38:19:99:f6:41:87: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5D:50:FA:BC:04:77:6B:B7:52:F4:E4:64:FC:32:71:A2:E6:60:CF X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/2F734D2E860111EFB49EB20DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.46.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:ff:48:29:8e:bd:b0:a4:f4:30:4a:ea:0f:c0:2a:32:95:02: dd:e9:91:53:36:65:5e:43:79:e9:10:60:56:34:d1:25:d1:41: 87:b6:1f:c5:48:2e:ac:e2:ff:e6:c9:22:d4:54:e9:ae:8f:1e: 6f:04:9f:5c:96:51:69:dd:b5:e2:de:2c:22:51:f4:4f:54:36: 92:07:0f:ea:fd:9d:7f:7e:57:ce:f2:74:ce:d0:24:8e:3d:16: 15:4d:19:be:21:d5:fc:8e:7a:7b:94:93:dc:14:d9:6d:22:0b: 04:29:8c:59:87:8f:f6:77:ed:18:df:11:81:45:25:ec:1c:d2: 63:f6:81:45:0e:91:33:29:35:76:f7:00:87:8b:39:10:bd:85: 73:c2:7b:7f:7d:00:02:5f:8e:89:9e:06:bb:90:52:28:99:a1: df:57:6e:a2:da:9b:79:14:b6:94:bd:34:22:e5:fb:43:94:72: 7f:aa:80:e4:f1:5e:a2:f7:35:61:ec:f3:54:09:bb:02:f7:65: a1:dd:51:f1:b3:4c:99:ba:fa:ac:cc:90:1e:9a:f4:ee:bb:f5: da:0b:48:ab:b9:c0:af:ab:32:1e:70:23:1f:47:8b:30:8c:1b: 75:8c:4f:fe:af:38:ed:46:85:e9:62:12:02:54:ac:91:19:43: d8:72:7f:8d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUwMzI3MDUxMjEzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0ZGUyZC1mYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1e2SGtCTkZgFbwbOzdh7AU1/rEGMeProEohxRy4UF7TgQzD67R4hn1xOvldU HZEPwi0W39t55hywx7I20ZD8zimun9R2hKSODJRlaFzheG/JYyz3aRA461fPjLOu e1In2W5cxdt+AAaTq0g23JRw3ywQ128Iq4R5L3iT2eCPp3DRhVydtRLkrf/7f6vQ zDjAdJ802C4LmvyhywGz7grhfWxMUOvkSbV2CGTGmR9257en5JY2GRj78WUXt6Wj IpsVbkgabEaUajL+0AavbWkP9vZc5PkKruP2oWfhfY2p3RWPBEcvt8qPrfyj9NLw PGmTa3UOa5CkG2k4GZn2QYcA5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHZdUPq8 BHdrt1L05GT8MnGi5mDPMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTFGMzEvQTBGNEUwRDBFMUJFMTFFRUIwNDVFQjI2QzRGOUFFMDIvMkY3MzREMkU4 NjAxMTFFRkI0OUVCMjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKJS4wDQYJKoZIhvcNAQELBQADggEBAB3/SCmOvbCk9DBK 6g/AKjKVAt3pkVM2ZV5DeekQYFY00SXRQYe2H8VILqzi/+bJItRU6a6PHm8En1yW UWndteLeLCJR9E9UNpIHD+r9nX9+V87ydM7QJI49FhVNGb4h1fyOenuUk9wU2W0i CwQpjFmHj/Z37RjfEYFFJewc0mP2gUUOkTMpNXb3AIeLORC9hXPCe399AAJfjome BruQUiiZod9XbqLam3kUtpS9NCLl+0OUcn+qgOTxXqL3NWHs81QJuwL3ZaHdUfGz TJm6+qzMkB6a9O679doLSKu5wK+rMh5wIx9HizCMG3WMT/6vOO1GheliEgJUrJEZ Q9hyf40= -----END CERTIFICATE-----Generated at Sat Apr 5 06:12:20 2025 by rpki-client