$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/879C6CC6BC0A11EF8387A57BC4F9AE02.roa File: 879C6CC6BC0A11EF8387A57BC4F9AE02.roa (raw, json) Hash identifier: l7mr6es1TVOyo1wNw2j4HcRInXoNf33J5ylI6iVUMv8= Subject key identifier: 7D:2C:9E:05:35:02:90:05:60:F1:98:B1:A9:4C:C3:98:81:8D:48:C0 Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Certificate serial: 0A4F Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/879C6CC6BC0A11EF8387A57BC4F9AE02.roa Signing time: Tue 17 Dec 2024 00:04:48 +0000 ROA not before: Tue 17 Dec 2024 00:04:48 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 9229 IP address blocks: 202.174.130.0/24 maxlen: 24 202.174.155.0/24 maxlen: 24 202.174.156.0/24 maxlen: 24 202.174.157.0/24 maxlen: 24 202.174.159.0/24 maxlen: 24 203.88.80.0/24 maxlen: 24 203.88.81.0/24 maxlen: 24 203.88.82.0/24 maxlen: 24 203.88.86.0/24 maxlen: 24 203.88.87.0/24 maxlen: 24 203.88.88.0/24 maxlen: 24 203.88.89.0/24 maxlen: 24 203.88.90.0/24 maxlen: 24 203.88.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 19:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2639 (0xa4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E27 Validity Not Before: Dec 17 00:04:48 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6760c020-1b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:1d:e3:81:d5:a9:e1:c9:44:85:b0:c4:4d: d6:35:e8:db:bf:fd:ad:81:3c:5d:1e:13:5e:c5:4a: 0c:e9:17:7b:96:e1:92:c7:df:dc:a7:d8:c1:79:36: 84:0c:28:07:17:8e:5c:f9:f5:f6:08:47:7f:0a:b4: 02:7d:f2:5d:dd:91:9b:4d:c3:b5:a0:89:72:98:8c: e3:b5:73:99:2c:85:5d:59:20:ea:a2:df:2f:25:d9: dd:fb:57:94:fd:af:e8:a3:a0:b3:19:d5:dc:bf:0a: a6:17:4c:94:cf:f9:75:b8:e7:36:90:a7:e9:53:a1: a0:5a:ef:bf:80:ba:2a:36:a0:1a:a0:ee:3d:db:73: 8a:94:ae:04:13:31:b0:21:86:83:e7:fd:aa:a8:ff: f6:ae:56:f7:b8:39:18:3a:d8:22:ac:2c:c3:27:90: e7:2d:8f:d8:37:c8:87:db:bd:0e:84:8b:f8:21:cf: 28:54:cd:6d:63:ac:ed:8e:67:de:66:f1:02:5f:08: 30:02:94:2b:ae:18:4d:27:2f:96:5f:bb:46:c2:60: 51:ba:84:e9:7d:6e:4e:b9:16:3a:13:eb:87:65:eb: 61:5b:cb:dd:b4:02:73:da:ee:f4:93:fe:97:2b:31: e0:5f:f2:d5:a1:3f:44:58:ca:f7:1a:f8:bf:67:3e: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2C:9E:05:35:02:90:05:60:F1:98:B1:A9:4C:C3:98:81:8D:48:C0 X509v3 Authority Key Identifier: keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/879C6CC6BC0A11EF8387A57BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.174.130.0/24 202.174.155.0-202.174.157.255 202.174.159.0/24 203.88.80.0-203.88.82.255 203.88.86.0-203.88.90.255 203.88.95.0/24 Signature Algorithm: sha256WithRSAEncryption 05:1f:ff:45:16:4e:ba:b1:a5:c9:f9:26:7a:f4:e0:24:67:16: ec:16:97:eb:1c:ae:6b:60:98:51:58:fc:19:b3:30:f9:40:af: 99:0e:ba:93:29:5a:f1:e1:32:8e:c1:87:56:60:fb:1a:91:d1: da:7f:a5:28:6f:b7:5d:8c:e7:54:83:e4:ba:5e:d1:87:98:5f: c7:62:83:54:fb:5d:37:3c:c5:20:83:78:fd:1b:f6:02:c8:2e: b2:a0:79:c5:a3:36:5e:56:cf:3c:bb:57:57:2c:69:91:c0:09: 82:06:9a:95:e3:e0:d3:b1:84:c9:ae:6e:e0:ba:f5:e4:0a:54: af:66:1b:b4:d1:6c:7a:cf:94:f0:7f:67:e8:ee:7a:1e:74:3f: f9:10:33:82:7e:c7:3a:ae:70:44:23:e0:d5:d4:74:d1:8d:42: ff:c6:d1:26:97:0e:6a:ae:58:12:e7:1f:f2:44:1f:dd:ad:d1: c5:96:f3:04:96:64:c6:94:e5:ac:12:15:1e:02:4f:d2:20:2c: af:c4:d1:a1:c1:1e:1e:e8:83:91:de:a4:7b:47:62:86:94:96: b5:a6:69:f2:ac:ba:95:67:fa:7c:4d:75:be:bd:2f:82:36:61: 30:2d:4d:8a:3a:0d:47:0c:8a:df:e0:bc:6c:41:5d:3d:59:c8: 6c:c0:41:e9 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgICCk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMjcxMTAvBgNVBAUTKEEyNzJBQ0FGRThGQUE0RjJBOTcwMEE2RkMxMTQyNTkw OEM3NDNENEIwHhcNMjQxMjE3MDAwNDQ4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYwYzAyMC0xYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGUd44HVqeHJRIWwxE3WNejbv/2tgTxdHhNexUoM6Rd7luGSx9/cp9jBeTaE DCgHF45c+fX2CEd/CrQCffJd3ZGbTcO1oIlymIzjtXOZLIVdWSDqot8vJdnd+1eU /a/oo6CzGdXcvwqmF0yUz/l1uOc2kKfpU6GgWu+/gLoqNqAaoO4923OKlK4EEzGw IYaD5/2qqP/2rlb3uDkYOtgirCzDJ5DnLY/YN8iH270OhIv4Ic8oVM1tY6ztjmfe ZvECXwgwApQrrhhNJy+WX7tGwmBRuoTpfW5OuRY6E+uHZethW8vdtAJz2u70k/6X KzHgX/LVoT9EWMr3Gvi/Zz7ziQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFH0sngU1 ApAFYPGYsalMw5iBjUjAMB8GA1UdIwQYMBaAFKJyrK/o+qTyqXAKb8EUJZCMdD1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UyNy9GMzg4ODc2NjZG M0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQS3BjQXB2d1JRbGtJeDBQ VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29uS3NyLWo2cFBLcGNBcHZ3UlFsa0l4MFBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNFMjcvRjM4ODg3NjY2RjNBMTFFQTk4NDAxMzNEQzRGOUFFMDIvODc5QzZDQzZC QzBBMTFFRjgzODdBNTdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVQYIKwYBBQUHAQcBAf8E RjBEMEIEAgABMDwDBADKroIwDAMEAMqumwMEAcqunAMEAMqunzAMAwQEy1hQAwQA y1hSMAwDBAHLWFYDBADLWFoDBADLWF8wDQYJKoZIhvcNAQELBQADggEBAAUf/0UW Trqxpcn5Jnr04CRnFuwWl+scrmtgmFFY/BmzMPlAr5kOupMpWvHhMo7Bh1Zg+xqR 0dp/pShvt12M51SD5Lpe0YeYX8dig1T7XTc8xSCDeP0b9gLILrKgecWjNl5Wzzy7 V1csaZHACYIGmpXj4NOxhMmubuC69eQKVK9mG7TRbHrPlPB/Z+jueh50P/kQM4J+ xzqucEQj4NXUdNGNQv/G0SaXDmquWBLnH/JEH92t0cWW8wSWZMaU5awSFR4CT9Ig LK/E0aHBHh7og5HepHtHYoaUlrWmafKsupVn+nxNdb69L4I2YTAtTYo6DUcMit/g vGxBXT1ZyGzAQek= -----END CERTIFICATE-----Generated at Fri Apr 11 21:32:36 2025 by rpki-client