$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/9C193BAC08C511EDBC862E48C4F9AE02.roa File: 9C193BAC08C511EDBC862E48C4F9AE02.roa (raw, json) Hash identifier: 896PbO0EonUimzXSLkBsI3knk6hd3BAHtAyqYKCmbBE= Subject key identifier: 2A:1B:D0:58:30:80:9A:78:CE:B5:D1:7B:40:6C:78:18:9D:F3:FB:0C Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 359A Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/9C193BAC08C511EDBC862E48C4F9AE02.roa Signing time: Thu 12 Dec 2024 14:30:34 +0000 ROA not before: Thu 12 Dec 2024 14:30:33 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137226 IP address blocks: 111.125.108.0/22 maxlen: 22 111.125.108.0/24 maxlen: 24 111.125.109.0/24 maxlen: 24 111.125.110.0/24 maxlen: 24 111.125.111.0/24 maxlen: 24 111.125.120.0/22 maxlen: 22 111.125.120.0/24 maxlen: 24 111.125.121.0/24 maxlen: 24 111.125.122.0/24 maxlen: 24 111.125.123.0/24 maxlen: 24 120.29.67.0/24 maxlen: 24 120.29.70.0/23 maxlen: 24 120.29.81.0/24 maxlen: 24 120.29.83.0/24 maxlen: 24 120.29.93.0/24 maxlen: 24 120.29.104.0/22 maxlen: 22 120.29.104.0/24 maxlen: 24 120.29.105.0/24 maxlen: 24 120.29.106.0/24 maxlen: 24 120.29.107.0/24 maxlen: 24 120.29.112.0/24 maxlen: 24 120.29.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13722 (0x359a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454 Validity Not Before: Dec 12 14:30:33 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=675af389-1643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:db:da:66:7b:6f:e7:27:af:dc:51:b2:67:0d: f6:e5:77:11:56:c2:b2:3c:43:b9:0b:68:dc:55:ea: ab:e1:13:f7:1d:65:fb:ea:41:aa:25:c7:1b:ef:2d: da:31:c8:dc:85:c7:40:8a:3c:69:ba:78:51:2d:9b: 59:ec:0b:e6:c7:0f:c7:c9:da:c1:01:3c:b0:f1:70: 18:fa:1d:8e:4a:29:d3:53:cc:05:e0:14:8f:ab:f7: 59:ff:71:3a:83:43:c3:fb:80:b2:eb:be:84:2b:13: d0:6a:48:3d:b8:20:56:76:62:f5:74:e2:1d:0e:ec: b2:7f:95:0f:8d:1a:9f:ba:11:49:a7:33:fb:5c:30: b9:81:36:e3:ea:07:b7:5d:c7:84:0e:a0:d0:a2:54: 2d:dc:b2:2e:7b:b0:7a:49:d3:3d:ab:ca:fd:04:8b: 61:62:a7:f3:69:b4:0d:57:40:fd:27:f7:8b:43:49: 68:ad:4b:48:df:a6:76:c0:de:db:67:37:00:ff:7d: 08:45:32:a3:90:d3:ce:39:cf:53:af:9f:03:5d:e1: 96:9c:61:25:d8:3a:fe:fc:de:a4:3b:6f:2f:57:51: e6:8a:88:dd:b3:2d:c6:5e:84:07:7d:3a:88:91:86: e9:4a:48:44:7b:91:bb:98:40:ae:6d:3e:f6:6c:55: d7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1B:D0:58:30:80:9A:78:CE:B5:D1:7B:40:6C:78:18:9D:F3:FB:0C X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/9C193BAC08C511EDBC862E48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.125.108.0/22 111.125.120.0/22 120.29.67.0/24 120.29.70.0/23 120.29.81.0/24 120.29.83.0/24 120.29.93.0/24 120.29.104.0/22 120.29.112.0/24 120.29.117.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:94:fe:7a:2a:44:40:81:d1:63:c0:8c:47:05:70:87:36:c3: 2e:5a:7c:c8:9d:f5:a3:9a:d9:46:ff:f3:e4:18:b2:42:50:ad: 6f:ab:98:d6:a5:54:8a:58:26:d8:08:80:af:e1:71:20:4f:f6: fd:05:4c:0b:75:9f:a0:4f:f5:cf:bc:27:60:a9:ae:5a:30:77: 65:86:12:58:40:2f:ab:4e:13:fe:e0:1b:ed:b2:c9:fc:d7:7b: e4:ed:e6:67:2d:fb:dc:5d:39:f3:3e:bb:a4:7a:42:9f:be:74: 1c:bb:ab:de:23:36:98:fe:6e:e9:05:ea:98:1d:22:66:c6:5c: f8:90:f4:ba:ac:c0:c3:a8:b1:03:55:31:a1:c6:79:a6:81:07: 20:e3:70:50:cc:1d:29:a7:4f:f9:79:a3:06:29:7a:1c:c1:42: 54:37:94:a6:97:6c:b0:a3:e1:48:51:e0:5b:b7:75:89:a9:c8: 30:de:0e:e4:a7:e3:b8:27:b0:88:fc:c6:f2:cf:2a:ac:a0:fd: 9b:21:11:fe:c9:aa:49:f8:e4:c1:af:b4:01:7e:62:40:db:16: 37:a6:c0:74:81:b4:ae:61:ca:e1:d5:cf:33:4f:58:e2:9b:73: f5:01:8d:b5:16:b4:02:57:d7:1a:84:23:d7:1c:e8:7f:63:63: a2:dc:f8:f9 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgICNZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjQxMjEyMTQzMDMzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzVhZjM4OS0xNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39vaZntv5yev3FGyZw325XcRVsKyPEO5C2jcVeqr4RP3HWX76kGqJccb7y3a McjchcdAijxpunhRLZtZ7Avmxw/HydrBATyw8XAY+h2OSinTU8wF4BSPq/dZ/3E6 g0PD+4Cy676EKxPQakg9uCBWdmL1dOIdDuyyf5UPjRqfuhFJpzP7XDC5gTbj6ge3 XceEDqDQolQt3LIue7B6SdM9q8r9BIthYqfzabQNV0D9J/eLQ0lorUtI36Z2wN7b ZzcA/30IRTKjkNPOOc9Tr58DXeGWnGEl2Dr+/N6kO28vV1Hmiojdsy3GXoQHfTqI kYbpSkhEe5G7mECubT72bFXXZQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFCob0Fgw gJp4zrXRe0BseBid8/sMMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvOUMxOTNCQUMw OEM1MTFFREJDODYyRTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVQYIKwYBBQUHAQcBAf8E RjBEMEIEAgABMDwDBAJvfWwDBAJvfXgDBAB4HUMDBAF4HUYDBAB4HVEDBAB4HVMD BAB4HV0DBAJ4HWgDBAB4HXADBAB4HXUwDQYJKoZIhvcNAQELBQADggEBAEyU/noq RECB0WPAjEcFcIc2wy5afMid9aOa2Ub/8+QYskJQrW+rmNalVIpYJtgIgK/hcSBP 9v0FTAt1n6BP9c+8J2Cprlowd2WGElhAL6tOE/7gG+2yyfzXe+Tt5mct+9xdOfM+ u6R6Qp++dBy7q94jNpj+bukF6pgdImbGXPiQ9LqswMOosQNVMaHGeaaBByDjcFDM HSmnT/l5owYpehzBQlQ3lKaXbLCj4UhR4Fu3dYmpyDDeDuSn47gnsIj8xvLPKqyg /ZshEf7Jqkn45MGvtAF+YkDbFjemwHSBtK5hyuHVzzNPWOKbc/UBjbUWtAJX1xqE I9cc6H9jY6Lc+Pk= -----END CERTIFICATE-----Generated at Sat Apr 5 02:07:48 2025 by rpki-client