$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/756C3370F38611EFBF7CEF35C4F9AE02.roa File: 756C3370F38611EFBF7CEF35C4F9AE02.roa (raw, json) Hash identifier: du5SamzGoud2VmU4jSD3B3FaKaAiMGpYcMTILdk3Bb0= Subject key identifier: 88:F6:0F:FC:2A:B8:74:33:EA:AA:39:DE:2A:74:E1:E9:C1:B5:54:B9 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 21D6 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/756C3370F38611EFBF7CEF35C4F9AE02.roa Signing time: Tue 25 Feb 2025 14:40:29 +0000 ROA not before: Tue 25 Feb 2025 14:40:29 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 134712 IP address blocks: 220.158.204.0/22 maxlen: 22 220.158.204.0/24 maxlen: 24 220.158.205.0/24 maxlen: 24 220.158.206.0/24 maxlen: 24 220.158.207.0/24 maxlen: 24 2405:d340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8662 (0x21d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845 Validity Not Before: Feb 25 14:40:29 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67bdd65d-4dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:dd:37:f7:4e:a9:d0:02:57:17:20:d2:70: b7:db:58:a4:97:99:c2:80:c2:e1:51:7d:7f:63:d7: 48:3f:34:9e:e8:94:fb:27:78:f4:54:25:ad:d1:68: 2d:79:62:18:8c:75:6f:6e:f3:4c:96:e5:9f:d9:9f: a9:bb:b1:4c:c3:92:98:5a:10:3f:2d:9a:c3:57:63: 8d:ec:34:2a:ea:d6:6f:eb:26:77:c3:fa:67:13:f2: 01:1a:eb:3b:90:68:a4:69:8d:46:5d:6a:8f:f2:74: ca:c8:a2:d0:18:0e:a7:b1:7c:b3:89:ea:df:62:bb: 2a:21:fe:24:a1:72:d0:ce:08:59:73:8a:fa:6a:e8: 0b:32:07:23:8b:bd:ed:01:c5:91:39:7d:ea:0f:c3: 93:e3:3a:93:44:33:ff:3e:4b:fe:90:71:c1:4e:fb: d2:34:53:5c:ba:e0:6b:48:9e:37:87:89:8d:93:fd: a6:de:fb:9f:c7:c8:b3:82:7d:54:0d:d1:31:5d:ac: 5d:6c:66:80:08:03:20:53:7e:5d:0f:27:3f:e4:0f: 3f:2c:e7:e8:2c:a1:94:94:50:47:dc:47:63:1b:e8: 74:b6:5a:b4:d9:3d:f6:77:67:18:f9:1c:a2:3f:56: f4:ea:63:85:e6:43:4e:1e:dd:c9:30:39:5c:e5:48: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F6:0F:FC:2A:B8:74:33:EA:AA:39:DE:2A:74:E1:E9:C1:B5:54:B9 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/756C3370F38611EFBF7CEF35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.158.204.0/22 IPv6: 2405:d340::/32 Signature Algorithm: sha256WithRSAEncryption 6e:d7:33:08:74:4a:a9:07:c3:8b:8a:71:87:9d:50:47:9e:89: da:91:e6:3d:8b:d4:ea:29:f9:04:00:71:00:ba:47:91:3c:cd: 7d:72:f5:02:66:85:35:16:96:d9:51:1a:af:86:53:81:db:29: 28:d1:da:8d:29:02:6c:c0:71:02:7a:30:0a:01:20:d4:8e:5d: f8:f9:82:0e:ca:68:d8:d7:05:98:3d:90:60:c6:bd:6e:a7:14: b5:d7:18:2f:d7:08:ac:f2:7a:85:f6:a2:67:9e:d7:cd:09:93: 14:da:33:f9:9b:5b:10:f6:57:99:43:87:e0:43:74:ff:9e:98: 4c:17:b8:d9:b2:a4:62:27:90:03:11:0c:ea:50:bd:7f:7c:90: 4d:f3:ae:3f:93:9f:df:83:28:87:d7:c5:e7:c5:50:d6:99:51: 1b:3c:ca:23:81:e8:09:c2:e5:ea:4a:e2:5e:50:94:31:4b:f6: 7c:34:c8:02:ea:f9:4d:2b:67:5c:18:b2:3b:d3:de:27:61:82: 18:11:91:f4:18:a6:0d:61:a8:3d:e9:0c:69:4d:e8:73:49:77: 4e:d6:1a:d2:e7:ee:7c:1d:0b:41:21:92:cb:2c:3c:b1:d8:ac: 54:6b:17:62:fc:10:6e:b1:47:ac:1e:72:80:5f:86:55:04:1b: 05:f4:0c:04 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICIdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjUwMjI1MTQ0MDI5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JkZDY1ZC00ZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDvdN/dOqdACVxcg0nC321ikl5nCgMLhUX1/Y9dIPzSe6JT7J3j0VCWt0Wgt eWIYjHVvbvNMluWf2Z+pu7FMw5KYWhA/LZrDV2ON7DQq6tZv6yZ3w/pnE/IBGus7 kGikaY1GXWqP8nTKyKLQGA6nsXyzierfYrsqIf4koXLQzghZc4r6augLMgcji73t AcWROX3qD8OT4zqTRDP/Pkv+kHHBTvvSNFNcuuBrSJ43h4mNk/2m3vufx8izgn1U DdExXaxdbGaACAMgU35dDyc/5A8/LOfoLKGUlFBH3EdjG+h0tlq02T32d2cY+Ryi P1b06mOF5kNOHt3JMDlc5UhNMQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIj2D/wq uHQz6qo53ip04enBtVS5MB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvNzU2QzMzNzBG Mzg2MTFFRkJGN0NFRjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBALcnswwDQQCAAIwBwMFACQF00AwDQYJKoZIhvcNAQELBQAD ggEBAG7XMwh0SqkHw4uKcYedUEeeidqR5j2L1Oop+QQAcQC6R5E8zX1y9QJmhTUW ltlRGq+GU4HbKSjR2o0pAmzAcQJ6MAoBINSOXfj5gg7KaNjXBZg9kGDGvW6nFLXX GC/XCKzyeoX2omee180JkxTaM/mbWxD2V5lDh+BDdP+emEwXuNmypGInkAMRDOpQ vX98kE3zrj+Tn9+DKIfXxefFUNaZURs8yiOB6AnC5epK4l5QlDFL9nw0yALq+U0r Z1wYsjvT3idhghgRkfQYpg1hqD3pDGlN6HNJd07WGtLn7nwdC0EhksssPLHYrFRr F2L8EG6xR6wecoBfhlUEGwX0DAQ= -----END CERTIFICATE-----Generated at Sat Apr 5 07:13:57 2025 by rpki-client