$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/3D68F8C29A4A11EA94706012C4F9AE02.roa File: 3D68F8C29A4A11EA94706012C4F9AE02.roa (raw, json) Hash identifier: +Q2D0d9yEIcvHWqL458RmFQjgHnoWa/Nyf3wOjdRqJY= Subject key identifier: 32:BD:7E:80:25:CC:18:F5:D0:17:24:02:69:A2:E3:8F:FB:5A:0B:67 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1AB5 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/3D68F8C29A4A11EA94706012C4F9AE02.roa Signing time: Mon 24 Mar 2025 14:50:36 +0000 ROA not before: Mon 24 Mar 2025 14:50:35 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 30821 IP address blocks: 116.51.16.112/28 maxlen: 28 116.51.22.160/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6837 (0x1ab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D Validity Not Before: Mar 24 14:50:35 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e1713b-36c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ea:f2:2e:d5:49:83:2a:92:b9:67:75:76:d3: f7:ca:22:db:89:28:5c:ac:26:f9:75:75:eb:86:31: ad:0e:06:22:b1:13:df:f7:5c:d7:50:dd:0c:77:44: 21:aa:61:9f:69:d2:21:c4:eb:8e:c7:bc:f8:2c:0b: 59:b7:58:2a:2f:c2:f3:ac:b0:12:c0:2a:da:16:41: 21:c8:40:07:6b:fd:98:43:d3:59:d2:a0:0d:df:dc: 2b:f3:67:af:df:3f:59:98:95:91:cc:5d:81:b4:54: 20:72:f1:11:3f:87:66:9b:7d:74:7b:55:bc:9a:68: a0:f9:71:1b:06:e9:38:3a:83:40:4b:0c:75:9b:1a: 8d:e9:10:13:f7:fd:6f:b1:37:5f:95:04:df:03:5a: 2b:12:49:01:0a:cb:b7:32:b8:f6:27:db:61:f4:e8: fc:13:af:0b:71:69:3b:31:97:a7:02:34:c6:49:c9: 35:8f:b6:5d:75:df:d9:b1:6f:3c:3d:67:1d:9e:91: cf:65:03:b1:25:67:fc:af:7c:b5:21:34:77:c9:03: 95:dc:c8:6b:20:6b:b4:bf:88:90:7e:f9:f3:49:67: 34:a2:9e:99:4f:0a:c4:74:27:84:69:14:e4:be:2e: a3:00:b7:ce:c6:c9:6e:98:ac:ed:01:73:55:6f:0a: 9f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BD:7E:80:25:CC:18:F5:D0:17:24:02:69:A2:E3:8F:FB:5A:0B:67 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/3D68F8C29A4A11EA94706012C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.51.16.112/28 116.51.22.160/28 Signature Algorithm: sha256WithRSAEncryption 00:67:ed:2d:9b:be:7d:bf:3a:66:2b:62:ab:fb:4e:b9:dd:70: c2:d8:32:93:81:cf:39:b0:60:8a:ab:56:77:f0:8c:d9:cf:a9: 9f:2a:76:b6:3a:25:17:17:88:b0:a0:1b:be:35:69:3c:60:f4: 17:7a:77:55:68:46:ce:9d:b9:e9:3f:e9:71:69:aa:68:9d:1a: 8d:73:60:85:44:9a:4c:3a:0c:55:fd:af:1e:79:16:7d:90:97: 10:ec:df:bd:90:27:a7:98:12:9b:c6:5c:a9:5b:21:82:75:4a: e0:d4:fb:4d:17:2c:23:84:43:13:30:cd:48:6f:ba:24:ff:d5: c7:91:19:5d:a0:53:6d:86:39:0b:92:2f:dc:97:94:64:5f:70: c1:f2:de:87:4a:3e:df:b4:a9:bf:b4:0d:df:f4:15:17:4b:30: 4a:bf:ce:47:98:f7:97:fa:ad:81:10:a0:5b:05:77:87:b3:74: e3:86:5e:e6:94:17:43:03:80:d2:53:cc:7c:9a:2e:37:9c:c5: d5:95:08:73:84:fa:89:6a:2b:0f:23:a7:e3:53:c0:46:f3:ac: de:8a:ef:78:71:18:bc:8d:65:1c:a3:e6:a8:0c:0b:48:2f:b1: a4:4f:1f:d1:c3:8c:1c:ff:6f:3f:ef:a2:d9:25:54:ae:59:5c: 3e:f0:1a:e2 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICGrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjUwMzI0MTQ1MDM1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2UxNzEzYi0zNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uryLtVJgyqSuWd1dtP3yiLbiShcrCb5dXXrhjGtDgYisRPf91zXUN0Md0Qh qmGfadIhxOuOx7z4LAtZt1gqL8LzrLASwCraFkEhyEAHa/2YQ9NZ0qAN39wr82ev 3z9ZmJWRzF2BtFQgcvERP4dmm310e1W8mmig+XEbBuk4OoNASwx1mxqN6RAT9/1v sTdflQTfA1orEkkBCsu3Mrj2J9th9Oj8E68LcWk7MZenAjTGSck1j7Zddd/ZsW88 PWcdnpHPZQOxJWf8r3y1ITR3yQOV3MhrIGu0v4iQfvnzSWc0op6ZTwrEdCeEaRTk vi6jALfOxslumKztAXNVbwqfywIDAQABo4ICnTCCApkwHQYDVR0OBBYEFDK9foAl zBj10BckAmmi44/7WgtnMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvM0Q2OEY4QzI5 QTRBMTFFQTk0NzA2MDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4DBQR0MxBwAwUEdDMWoDANBgkqhkiG9w0BAQsFAAOCAQEAAGft LZu+fb86Zitiq/tOud1wwtgyk4HPObBgiqtWd/CM2c+pnyp2tjolFxeIsKAbvjVp PGD0F3p3VWhGzp256T/pcWmqaJ0ajXNghUSaTDoMVf2vHnkWfZCXEOzfvZAnp5gS m8ZcqVshgnVK4NT7TRcsI4RDEzDNSG+6JP/Vx5EZXaBTbYY5C5Iv3JeUZF9wwfLe h0o+37Spv7QN3/QVF0swSr/OR5j3l/qtgRCgWwV3h7N044Ze5pQXQwOA0lPMfJou N5zF1ZUIc4T6iWorDyOn41PARvOs3orveHEYvI1lHKPmqAwLSC+xpE8f0cOMHP9v P++i2SVUrllcPvAa4g== -----END CERTIFICATE-----Generated at Sat Apr 5 05:55:16 2025 by rpki-client