$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/0B24875C7A4411EB804B7430C4F9AE02.roa File: 0B24875C7A4411EB804B7430C4F9AE02.roa (raw, json) Hash identifier: Y+xehgtewaeOdOL6PowHHRPVgAd4mQJAADuq74in7FA= Subject key identifier: BB:0A:0B:64:C4:9A:1D:E0:D2:9F:02:7E:5D:A4:47:92:F3:D6:9B:E5 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1AB2 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/0B24875C7A4411EB804B7430C4F9AE02.roa Signing time: Mon 24 Mar 2025 14:50:32 +0000 ROA not before: Mon 24 Mar 2025 14:50:32 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138433 IP address blocks: 116.51.29.96/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 14:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6834 (0x1ab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D Validity Not Before: Mar 24 14:50:32 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e17138-f9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:e0:e3:a5:f3:51:db:39:c9:67:41:6c:3a: 75:f4:5a:fc:54:14:b3:2e:af:23:54:20:9f:7d:64: 9d:96:c3:24:a5:7a:69:d6:17:d7:ec:30:5f:ed:79: 21:02:fd:71:d2:0b:38:e3:84:31:1b:e8:0b:91:59: bf:24:98:a5:8b:9b:67:49:16:e3:67:d6:72:29:c3: 3b:36:4a:3d:28:f0:7c:73:40:81:d8:df:69:7a:67: c3:86:3b:5c:dc:4a:39:2f:5c:5a:37:d1:0b:91:ca: 91:2d:8c:87:08:60:75:a3:e4:d9:15:1c:30:44:a6: 05:d3:17:62:b4:7a:03:49:9d:d9:85:79:ee:8c:24: 8d:b7:73:42:6f:ef:a1:ee:83:d8:ab:98:91:56:20: a9:ed:7a:b9:24:c3:44:9e:a9:b1:fb:38:7e:7a:8c: 90:38:3a:8d:a2:a4:22:15:9a:88:f5:87:43:8d:e5: 49:6d:2e:b1:21:e7:65:cf:6e:8d:ee:86:29:e6:a8: 1a:97:f4:1f:58:4d:0d:5e:a1:d0:7e:1d:01:cb:2d: 36:f3:c2:96:0f:27:3d:60:55:82:3e:79:b2:14:fe: 09:1c:d3:b5:da:bb:2f:b4:75:0b:2a:6a:d8:ac:fa: 16:3f:bd:90:80:b4:95:c6:71:87:8b:f8:93:42:2b: d1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0A:0B:64:C4:9A:1D:E0:D2:9F:02:7E:5D:A4:47:92:F3:D6:9B:E5 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/0B24875C7A4411EB804B7430C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.51.29.96/27 Signature Algorithm: sha256WithRSAEncryption c9:9d:1a:0c:df:2d:e2:ac:5d:a3:f2:25:9c:2f:43:d3:c2:9a: 8c:4a:9e:f6:ef:d0:b8:19:94:f3:7d:57:c0:75:bc:1b:8c:e4: 38:47:39:fe:e8:e7:e9:31:1d:b1:a3:f8:6d:97:d1:4f:72:c7: eb:85:a2:da:8c:ac:53:d6:f9:a0:66:ee:46:1b:85:3e:77:16: 05:26:05:b0:d6:81:6e:45:46:f6:f9:06:3b:9e:ac:1e:65:70: 98:46:58:60:15:0d:18:ee:1e:c5:85:1c:a3:03:72:32:01:30: bd:8f:c4:fd:1c:c6:65:00:e3:6d:f6:26:39:49:fe:89:ac:7d: 19:68:18:d7:d0:55:b8:c4:34:9d:b5:b6:38:dd:1a:52:c9:34: 0f:e2:e5:dd:15:e7:dd:df:9f:5c:54:9b:21:13:0e:c4:28:d3: 13:1d:49:ae:41:7f:49:7a:9c:dc:53:6d:f6:7c:74:71:13:1a: 5c:1d:31:33:c3:a0:0d:4e:38:25:56:85:69:10:13:b8:63:78: 8f:d6:b6:ab:f0:5e:e1:2a:ea:c6:f4:a7:4f:a5:31:33:26:e7: 33:d1:38:81:b6:ef:03:fa:b4:cd:0e:40:c3:5f:ae:bd:91:08: 29:40:20:d7:7f:d1:c4:22:dc:bc:3c:0c:c4:02:bb:f4:56:08: c0:96:dd:44 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICGrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjUwMzI0MTQ1MDMyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2UxNzEzOC1mOWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWTg46XzUds5yWdBbDp19Fr8VBSzLq8jVCCffWSdlsMkpXpp1hfX7DBf7Xkh Av1x0gs444QxG+gLkVm/JJili5tnSRbjZ9ZyKcM7Nko9KPB8c0CB2N9pemfDhjtc 3Eo5L1xaN9ELkcqRLYyHCGB1o+TZFRwwRKYF0xditHoDSZ3ZhXnujCSNt3NCb++h 7oPYq5iRViCp7Xq5JMNEnqmx+zh+eoyQODqNoqQiFZqI9YdDjeVJbS6xIedlz26N 7oYp5qgal/QfWE0NXqHQfh0Byy0288KWDyc9YFWCPnmyFP4JHNO12rsvtHULKmrY rPoWP72QgLSVxnGHi/iTQivRkwIDAQABo4ICljCCApIwHQYDVR0OBBYEFLsKC2TE mh3g0p8Cfl2kR5Lz1pvlMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvMEIyNDg3NUM3 QTQ0MTFFQjgwNEI3NDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgABMAcDBQV0Mx1gMA0GCSqGSIb3DQEBCwUAA4IBAQDJnRoM3y3irF2j 8iWcL0PTwpqMSp7279C4GZTzfVfAdbwbjOQ4Rzn+6OfpMR2xo/htl9FPcsfrhaLa jKxT1vmgZu5GG4U+dxYFJgWw1oFuRUb2+QY7nqweZXCYRlhgFQ0Y7h7FhRyjA3Iy ATC9j8T9HMZlAONt9iY5Sf6JrH0ZaBjX0FW4xDSdtbY43RpSyTQP4uXdFefd359c VJshEw7EKNMTHUmuQX9JepzcU232fHRxExpcHTEzw6ANTjglVoVpEBO4Y3iP1rar 8F7hKurG9KdPpTEzJucz0TiBtu8D+rTNDkDDX669kQgpQCDXf9HEIty8PAzEArv0 VgjAlt1E -----END CERTIFICATE-----Generated at Fri Apr 11 07:26:35 2025 by rpki-client