$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/4FF339D8F01D11EB8C4B505BC4F9AE02.roa File: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (raw, json) Hash identifier: U9RF+JaWcsKZTr1DEGw1Y5hTdB+oWxy9sRXTz5ZgIuo= Subject key identifier: A5:D2:9E:9A:BC:B4:E2:7C:58:EC:CB:63:51:D7:F8:5C:30:0A:0A:5F Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1AB9 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/4FF339D8F01D11EB8C4B505BC4F9AE02.roa Signing time: Mon 24 Mar 2025 14:50:39 +0000 ROA not before: Mon 24 Mar 2025 14:50:39 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 399077 IP address blocks: 116.51.24.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6841 (0x1ab9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D Validity Not Before: Mar 24 14:50:39 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e1713f-c873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:5b:1f:01:35:e1:82:01:92:15:18:0b:c8: 6f:aa:f9:65:95:2d:d6:9c:60:62:49:75:0f:9d:0f: 4e:86:d3:81:33:94:ab:31:68:fd:1a:d0:c8:ed:de: 3b:55:e7:df:c6:75:f0:58:5e:8f:77:ff:0a:ed:0a: 2a:c8:e3:7b:a7:2a:77:49:68:f5:8c:f3:b9:9f:bf: 2c:bb:35:32:61:50:2a:7e:85:cf:b7:92:f9:44:e4: 2b:27:af:c5:46:36:cd:d0:2d:3a:c3:bb:28:ac:80: ad:ee:44:12:98:27:87:6b:d9:d1:39:f8:16:ee:14: 83:b3:d4:a6:ca:e4:b8:9b:97:d6:f4:a6:d2:c5:14: 97:5e:c1:8d:aa:cf:b4:4e:bb:8e:c8:7c:54:9f:3d: 6c:06:a5:85:01:c2:d5:d3:e3:cc:56:a4:47:2f:d7: 97:a7:e2:14:03:7e:73:13:02:ad:72:4c:e6:e4:09: 39:53:16:88:02:5c:c6:4a:35:3d:66:9a:33:d3:53: fa:6e:a6:bf:88:ee:b7:26:15:0c:1a:70:b0:6f:25: 1d:f5:d3:ee:ed:cf:6f:26:93:e2:d8:9b:88:3c:82: 13:d4:d6:dc:e1:00:69:f1:d7:75:1c:1d:84:47:18: fb:6f:5b:74:09:f7:f4:64:31:ca:f0:3c:4a:08:f0: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D2:9E:9A:BC:B4:E2:7C:58:EC:CB:63:51:D7:F8:5C:30:0A:0A:5F X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/4FF339D8F01D11EB8C4B505BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.51.24.128/25 Signature Algorithm: sha256WithRSAEncryption 24:b0:7d:78:58:87:ad:c0:41:17:cd:bb:48:b0:b6:0c:c1:4c: 59:b7:36:01:7f:91:08:a1:2f:8d:9c:38:5e:aa:12:9f:55:06: 73:5c:73:4d:cb:34:71:31:ec:2f:0d:e9:e0:64:bf:8b:1c:73: a2:cc:cb:40:25:e1:27:ad:f5:c0:2d:f2:86:d5:9b:80:db:d2: d1:93:41:6f:2e:b4:e0:61:a8:e3:e5:d8:65:bf:99:d8:15:98: c6:3e:c4:6b:8c:58:34:ac:d1:cc:09:f1:2e:bc:87:fe:8c:95: c7:bb:e4:54:a1:f6:e7:16:63:22:f0:b6:9d:40:09:6e:2a:0c: f8:b9:3c:ff:80:69:c6:14:f2:e4:7b:2f:06:47:bd:c7:93:3f: 1f:96:53:c8:99:ce:a0:d0:9d:1d:d5:c7:dd:45:1f:5f:63:05: 7c:74:7a:bb:c9:0a:6d:f9:09:c5:2d:dd:9e:82:7f:02:f9:4f: 9c:c3:fe:74:a7:93:82:17:53:71:03:ca:af:7d:29:85:d5:54: 8e:d8:df:4a:1e:9b:63:31:15:96:fd:29:8d:a4:dc:0d:a2:be: ce:11:37:e5:1b:3c:fb:28:37:52:49:aa:ad:05:cb:95:42:34: 21:3f:09:66:48:e1:aa:19:e1:15:41:e4:23:31:11:8e:3d:f2: 73:39:61:fa -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICGrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjUwMzI0MTQ1MDM5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2UxNzEzZi1jODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbNbHwE14YIBkhUYC8hvqvlllS3WnGBiSXUPnQ9OhtOBM5SrMWj9GtDI7d47 VeffxnXwWF6Pd/8K7QoqyON7pyp3SWj1jPO5n78suzUyYVAqfoXPt5L5ROQrJ6/F RjbN0C06w7sorICt7kQSmCeHa9nROfgW7hSDs9SmyuS4m5fW9KbSxRSXXsGNqs+0 TruOyHxUnz1sBqWFAcLV0+PMVqRHL9eXp+IUA35zEwKtckzm5Ak5UxaIAlzGSjU9 Zpoz01P6bqa/iO63JhUMGnCwbyUd9dPu7c9vJpPi2JuIPIIT1Nbc4QBp8dd1HB2E Rxj7b1t0Cff0ZDHK8DxKCPDybQIDAQABo4ICljCCApIwHQYDVR0OBBYEFKXSnpq8 tOJ8WOzLY1HX+FwwCgpfMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvNEZGMzM5RDhG MDFEMTFFQjhDNEI1MDVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgABMAcDBQd0MxiAMA0GCSqGSIb3DQEBCwUAA4IBAQAksH14WIetwEEX zbtIsLYMwUxZtzYBf5EIoS+NnDheqhKfVQZzXHNNyzRxMewvDengZL+LHHOizMtA JeEnrfXALfKG1ZuA29LRk0FvLrTgYajj5dhlv5nYFZjGPsRrjFg0rNHMCfEuvIf+ jJXHu+RUofbnFmMi8LadQAluKgz4uTz/gGnGFPLkey8GR73Hkz8fllPImc6g0J0d 1cfdRR9fYwV8dHq7yQpt+QnFLd2egn8C+U+cw/50p5OCF1NxA8qvfSmF1VSO2N9K HptjMRWW/SmNpNwNor7OETflGzz7KDdSSaqtBcuVQjQhPwlmSOGqGeEVQeQjMRGO PfJzOWH6 -----END CERTIFICATE-----Generated at Sat Apr 5 05:40:39 2025 by rpki-client