$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7D920C1AB0CD11E58B55FC73C4F9AE02.roa File: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (raw, json) Hash identifier: GEX+sNV+gjoBRlfbvjQXv3uXeYnL4cH1wK1KCC8jYpA= Subject key identifier: E2:2A:EE:43:F2:1A:1A:41:69:48:78:A7:8B:18:AF:5B:5A:54:C8:B9 Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 359F Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7D920C1AB0CD11E58B55FC73C4F9AE02.roa Signing time: Thu 12 Dec 2024 14:30:38 +0000 ROA not before: Thu 12 Dec 2024 14:30:38 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 24551 IP address blocks: 202.69.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13727 (0x359f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454 Validity Not Before: Dec 12 14:30:38 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=675af38e-66a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:b8:b2:5a:7b:a0:ce:26:dd:d6:0e:c7:9d: 21:e2:89:c9:7b:eb:62:86:c7:c9:45:de:e1:15:0b: c8:40:82:e1:23:4d:85:75:45:d5:49:84:a4:cf:96: 8d:46:af:c5:5e:5a:64:5a:61:13:e5:65:0c:0a:c4: 61:f0:f0:6c:8f:56:00:26:01:a0:1b:fe:82:81:b8: 9c:3a:76:8d:20:fa:4d:14:22:02:74:f3:fe:51:c6: 6e:b4:d8:f0:26:d6:7c:5a:fc:04:37:cb:f5:66:5a: bc:4c:ba:75:98:66:81:1b:a2:d0:aa:34:f9:e1:e1: 22:60:3b:ec:c5:9d:c2:3f:64:ff:d3:98:8e:66:e8: 67:90:88:73:3c:76:63:47:aa:df:be:cd:b8:63:f2: d5:b1:a8:4c:c2:58:92:92:52:7e:43:94:e1:a9:b9: ec:2f:5c:50:3b:78:44:06:38:6f:cf:99:08:e0:ee: 44:12:ac:64:ca:36:54:78:5d:91:23:13:64:b8:b4: 9a:08:08:28:bc:1c:ff:fb:2d:1b:c0:52:c0:2d:4b: 5c:9e:90:4a:6c:2b:ea:48:81:14:ca:1b:b2:7e:59: e1:f8:b8:9b:2c:a8:08:9d:d2:5b:76:af:47:2c:a0: 26:df:f7:13:7a:f3:e0:23:af:1d:77:03:b2:5a:03: 4e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2A:EE:43:F2:1A:1A:41:69:48:78:A7:8B:18:AF:5B:5A:54:C8:B9 X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7D920C1AB0CD11E58B55FC73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.69.163.0/24 Signature Algorithm: sha256WithRSAEncryption 43:65:60:21:51:82:c2:fa:31:36:47:34:d7:e3:28:94:b9:c4: dc:ef:21:68:3f:19:c3:0d:38:66:3c:00:da:56:39:60:de:10: cb:77:d1:25:59:d7:81:83:3c:9b:ad:36:09:e3:96:22:26:22: 60:e1:30:de:44:c0:dc:e8:ef:ea:3a:15:8a:39:7e:6b:a0:0f: 7a:b6:91:56:be:3f:bd:a0:02:a0:68:f0:a8:3a:be:36:51:31: d9:1f:7f:6f:f3:03:93:56:71:5c:ec:3a:09:30:c4:c1:2a:e5: f9:79:1f:36:1d:54:d6:0b:c9:f6:c1:2f:fb:da:5b:08:6f:e6: 4e:ba:a0:d0:59:47:2e:50:59:5b:b2:8d:20:9a:fc:6b:f4:60: 08:c2:f4:73:c8:2a:1f:d7:f3:21:aa:ee:eb:73:47:9a:6b:0e: a7:7e:0e:49:fb:ad:41:a1:98:92:fa:a4:5f:e0:88:31:f5:71: 86:a9:ae:c7:2d:c8:32:a9:73:13:c6:3c:c0:f3:2e:fa:61:11: d7:4f:91:41:7a:87:67:d4:56:3f:ae:5d:5c:20:64:b1:f2:e9: 5b:fe:14:36:ef:d9:94:5e:4e:65:94:3a:ab:6c:64:87:49:22: ec:63:4a:7d:c7:4e:24:ad:cc:a6:0e:80:64:12:06:c0:6f:9f: 70:cb:5d:7f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjQxMjEyMTQzMDM4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzVhZjM4ZS02NmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH+4slp7oM4m3dYOx50h4onJe+tihsfJRd7hFQvIQILhI02FdUXVSYSkz5aN Rq/FXlpkWmET5WUMCsRh8PBsj1YAJgGgG/6CgbicOnaNIPpNFCICdPP+UcZutNjw JtZ8WvwEN8v1Zlq8TLp1mGaBG6LQqjT54eEiYDvsxZ3CP2T/05iOZuhnkIhzPHZj R6rfvs24Y/LVsahMwliSklJ+Q5ThqbnsL1xQO3hEBjhvz5kI4O5EEqxkyjZUeF2R IxNkuLSaCAgovBz/+y0bwFLALUtcnpBKbCvqSIEUyhuyflnh+LibLKgIndJbdq9H LKAm3/cTevPgI68ddwOyWgNOXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOIq7kPy GhpBaUh4p4sYr1taVMi5MB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvN0Q5MjBDMUFC MENEMTFFNThCNTVGQzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKRaMwDQYJKoZIhvcNAQELBQADggEBAENlYCFRgsL6MTZH NNfjKJS5xNzvIWg/GcMNOGY8ANpWOWDeEMt30SVZ14GDPJutNgnjliImImDhMN5E wNzo7+o6FYo5fmugD3q2kVa+P72gAqBo8Kg6vjZRMdkff2/zA5NWcVzsOgkwxMEq 5fl5HzYdVNYLyfbBL/vaWwhv5k66oNBZRy5QWVuyjSCa/Gv0YAjC9HPIKh/X8yGq 7utzR5prDqd+Dkn7rUGhmJL6pF/giDH1cYaprsctyDKpcxPGPMDzLvphEddPkUF6 h2fUVj+uXVwgZLHy6Vv+FDbv2ZReTmWUOqtsZIdJIuxjSn3HTiStzKYOgGQSBsBv n3DLXX8= -----END CERTIFICATE-----Generated at Sat Apr 5 02:13:26 2025 by rpki-client