$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3970B0A2056111F09FFE951DC4F9AE02.roa File: 3970B0A2056111F09FFE951DC4F9AE02.roa (raw, json) Hash identifier: xbelWt2aD+LkpObvKhGplaUuZ4264ZbTGZIuKn2Ngxk= Subject key identifier: FB:EA:B9:10:5D:20:CF:D2:7D:AF:79:79:FB:76:F3:14:49:54:E5:31 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 0FD8 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3970B0A2056111F09FFE951DC4F9AE02.roa Signing time: Thu 20 Mar 2025 07:59:18 +0000 ROA not before: Thu 20 Mar 2025 07:59:18 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 46841 IP address blocks: 139.190.16.0/24 maxlen: 24 139.190.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 20:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4056 (0xfd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Mar 20 07:59:18 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67dbcad6-c525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:46:7d:ce:61:ae:db:3f:63:46:64:a7:5f:76: c2:1c:9b:4c:05:14:bf:3d:de:ad:0f:79:a2:ea:f6: 03:b6:0a:db:43:ff:9d:98:c8:cb:59:e2:3d:3a:7f: c3:e7:52:be:48:9d:e1:b8:ea:0d:17:17:44:78:51: ba:99:da:5d:34:7f:ec:4e:ce:18:d2:50:8f:b7:e6: 2c:87:d7:4e:f3:ea:64:d5:4f:c6:48:ee:5a:88:57: e5:ad:08:d0:ab:fa:71:67:f8:83:23:06:4b:4e:ac: 15:2c:62:97:2c:88:bf:b6:20:9b:e2:9a:7c:e9:6d: c5:b3:85:ac:9b:9a:8e:ac:ed:4f:b3:82:c4:29:88: a8:62:2b:51:b9:19:6d:dd:dc:f3:a8:ca:6d:86:4f: a8:3b:98:73:de:8a:36:ff:bb:37:a1:d1:78:0c:cb: 2e:60:e5:c4:d6:5a:bc:a0:8f:4b:fa:da:2e:bd:f8: 88:2b:6e:64:cf:6d:56:64:17:95:92:b1:95:00:e9: d2:31:b4:cc:cc:23:26:45:1e:74:fa:fb:25:34:02: fc:35:91:93:0f:c8:ec:9c:8e:de:4a:1b:c9:6b:2b: 03:2a:0e:3f:da:60:56:7b:c7:d1:4b:cd:15:a0:12: 1a:5e:20:38:02:3e:15:a5:6d:06:8f:4d:c9:cf:30: 7d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EA:B9:10:5D:20:CF:D2:7D:AF:79:79:FB:76:F3:14:49:54:E5:31 X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3970B0A2056111F09FFE951DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.16.0/24 139.190.18.0/24 Signature Algorithm: sha256WithRSAEncryption 41:59:c7:f0:ea:2e:0b:5e:7f:61:06:a0:75:65:57:b8:86:88: 15:d1:4f:a8:5c:36:0a:95:3d:c9:55:b4:38:3e:a1:2d:08:51: 3f:f3:e5:8c:45:90:0c:5f:9a:73:a6:4d:46:c6:e4:d0:db:34: 92:86:fc:b3:5e:be:8e:dd:e9:15:2e:f5:7b:99:3b:e5:e5:8d: 0e:88:4c:a9:86:ff:d5:47:96:d1:4b:60:a3:a3:86:ef:9a:27: c3:33:bd:02:c1:04:55:0a:e4:38:f1:28:63:e9:bb:b8:74:f7: 07:7f:70:aa:51:d8:8c:8d:8c:fb:7d:5f:d3:db:d8:0e:aa:2b: 2c:da:7c:2f:ec:47:fa:f6:4c:3a:67:05:78:45:d5:4e:2f:bd: cc:47:bf:7d:55:9f:aa:08:ad:96:b7:1b:97:fb:04:4d:64:ae: 14:e2:2a:5d:ed:b6:2e:f5:28:ad:87:6e:df:57:07:5a:4e:c1: b1:c1:8f:79:03:22:ee:7d:42:a0:19:37:aa:23:51:24:92:bb: 49:6a:01:d5:7d:fe:63:d7:06:fc:6a:11:00:09:97:76:13:a1: e3:52:9f:0c:25:a6:53:7b:57:c4:25:01:38:d6:27:7e:84:24: ca:42:e2:9e:7a:d3:76:3f:f0:fc:b2:eb:36:41:05:ce:19:ec: b5:cc:44:be -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICD9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUwMzIwMDc1OTE4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RiY2FkNi1jNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80Z9zmGu2z9jRmSnX3bCHJtMBRS/Pd6tD3mi6vYDtgrbQ/+dmMjLWeI9On/D 51K+SJ3huOoNFxdEeFG6mdpdNH/sTs4Y0lCPt+Ysh9dO8+pk1U/GSO5aiFflrQjQ q/pxZ/iDIwZLTqwVLGKXLIi/tiCb4pp86W3Fs4Wsm5qOrO1Ps4LEKYioYitRuRlt 3dzzqMpthk+oO5hz3oo2/7s3odF4DMsuYOXE1lq8oI9L+touvfiIK25kz21WZBeV krGVAOnSMbTMzCMmRR50+vslNAL8NZGTD8jsnI7eShvJaysDKg4/2mBWe8fRS80V oBIaXiA4Aj4VpW0Gj03JzzB9tQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPvquRBd IM/Sfa95eft28xRJVOUxMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMzk3MEIwQTIw NTYxMTFGMDlGRkU5NTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACLvhADBACLvhIwDQYJKoZIhvcNAQELBQADggEBAEFZx/Dq Lgtef2EGoHVlV7iGiBXRT6hcNgqVPclVtDg+oS0IUT/z5YxFkAxfmnOmTUbG5NDb NJKG/LNevo7d6RUu9XuZO+XljQ6ITKmG/9VHltFLYKOjhu+aJ8MzvQLBBFUK5Djx KGPpu7h09wd/cKpR2IyNjPt9X9Pb2A6qKyzafC/sR/r2TDpnBXhF1U4vvcxHv31V n6oIrZa3G5f7BE1krhTiKl3tti71KK2Hbt9XB1pOwbHBj3kDIu59QqAZN6ojUSSS u0lqAdV9/mPXBvxqEQAJl3YToeNSnwwlplN7V8QlATjWJ36EJMpC4p5603Y/8Pyy 6zZBBc4Z7LXMRL4= -----END CERTIFICATE-----Generated at Thu Apr 17 04:51:14 2025 by rpki-client