$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/E6F611DADD1211EABAE49278C4F9AE02.roa File: E6F611DADD1211EABAE49278C4F9AE02.roa (raw, json) Hash identifier: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500= Subject key identifier: 54:24:22:A4:8C:61:C6:F5:1F:E3:6B:BC:6D:BC:D6:57:32:70:8F:2B Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 18A1 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/E6F611DADD1211EABAE49278C4F9AE02.roa Signing time: Tue 18 Feb 2025 17:35:42 +0000 ROA not before: Tue 18 Feb 2025 17:35:42 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 9820 IP address blocks: 203.188.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 16:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6305 (0x18a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D Validity Not Before: Feb 18 17:35:42 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67b4c4ed-db81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:da:51:bd:15:b7:67:f0:7a:33:7e:c8:5f: 8b:8f:97:ee:87:3e:3f:63:24:f1:7c:fe:a6:41:19: 93:cd:91:08:a3:27:d7:c4:82:fc:52:c6:53:da:40: 1f:92:e0:99:0d:25:f9:40:0e:96:a7:55:60:e4:ea: 5b:c5:0b:44:dd:03:15:a4:95:4a:50:b6:d8:5c:b0: ff:a2:04:bc:00:83:fa:12:0f:d6:25:da:45:b8:09: 2c:6e:3b:94:76:df:aa:6a:f9:bc:c9:b1:3e:b1:fb: e3:99:ff:5f:64:f4:ec:65:0d:60:e0:bd:d1:57:90: bc:09:20:77:6d:c1:98:2c:e4:3f:61:0e:31:0e:21: c8:0f:0a:40:f0:c0:2b:0f:3d:a7:59:29:40:d5:b0: 55:3a:35:8e:7b:eb:01:3e:40:b8:13:b0:08:b6:d5: 08:ec:b1:07:9c:33:0b:17:c8:97:7b:1a:bc:87:b2: 23:50:da:dd:6e:36:48:a6:72:4f:20:f9:dc:03:dc: 8d:a7:18:20:6c:6a:52:4a:d1:8d:39:40:dd:22:81: d4:c2:fb:38:63:4a:c3:d7:70:7e:cb:c5:e6:49:59: 62:a0:5b:e8:f9:84:f5:9a:a5:71:c2:aa:bb:a0:41: 50:6b:16:46:c0:c6:94:95:35:47:20:82:98:15:0b: 8e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:24:22:A4:8C:61:C6:F5:1F:E3:6B:BC:6D:BC:D6:57:32:70:8F:2B X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/E6F611DADD1211EABAE49278C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.188.144.0/20 Signature Algorithm: sha256WithRSAEncryption 92:18:17:00:cf:22:5a:75:61:4b:ef:be:ff:cd:9a:67:67:86: e7:ef:b1:16:55:53:1b:31:7c:98:d1:56:a4:25:c6:65:64:dd: 11:8e:7e:ba:a0:c2:c6:cb:51:7d:58:85:2b:41:b7:53:e0:fe: 06:33:72:fb:0f:59:68:4e:3e:19:14:76:54:58:f3:d8:29:6b: 7d:5c:8f:57:38:03:b2:f4:42:94:ef:5e:c5:2f:3e:e9:af:18: 02:2b:6d:fe:13:20:26:64:70:7e:34:4c:c6:45:50:5b:57:1c: 92:46:a6:11:e0:7a:ea:9a:7b:e6:d9:27:ac:35:20:68:26:0d: cc:cf:c6:0a:9f:9d:fb:dd:8d:55:32:30:e1:4f:5d:07:11:67: a4:0c:2d:59:b5:de:91:7b:f2:cd:1e:27:b1:3a:d7:44:ea:73: ac:15:dc:b1:88:f0:0a:6d:d9:d4:c5:6d:96:b0:f7:4a:0e:05: 94:37:ac:a4:48:42:f4:13:38:b6:ee:b8:e2:2f:64:57:db:9f: 67:13:1d:92:ac:83:0d:c3:2c:77:04:a5:64:4a:c0:c7:26:ed: 70:3f:50:8b:22:c8:8a:34:21:fd:0b:56:1e:26:46:a7:c7:14: 69:41:42:61:4a:e2:6d:24:a1:03:ae:f2:c5:97:0e:0a:62:ab: 01:3b:3a:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUwMjE4MTczNTQyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I0YzRlZC1kYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGXaUb0Vt2fwejN+yF+Lj5fuhz4/YyTxfP6mQRmTzZEIoyfXxIL8UsZT2kAf kuCZDSX5QA6Wp1Vg5OpbxQtE3QMVpJVKULbYXLD/ogS8AIP6Eg/WJdpFuAksbjuU dt+qavm8ybE+sfvjmf9fZPTsZQ1g4L3RV5C8CSB3bcGYLOQ/YQ4xDiHIDwpA8MAr Dz2nWSlA1bBVOjWOe+sBPkC4E7AIttUI7LEHnDMLF8iXexq8h7IjUNrdbjZIpnJP IPncA9yNpxggbGpSStGNOUDdIoHUwvs4Y0rD13B+y8XmSVlioFvo+YT1mqVxwqq7 oEFQaxZGwMaUlTVHIIKYFQuOywIDAQABo4IClTCCApEwHQYDVR0OBBYEFFQkIqSM Ycb1H+NrvG281lcycI8rMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvRTZGNjExREFE RDEyMTFFQUJBRTQ5Mjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBATLvJAwDQYJKoZIhvcNAQELBQADggEBAJIYFwDPIlp1YUvv vv/NmmdnhufvsRZVUxsxfJjRVqQlxmVk3RGOfrqgwsbLUX1YhStBt1Pg/gYzcvsP WWhOPhkUdlRY89gpa31cj1c4A7L0QpTvXsUvPumvGAIrbf4TICZkcH40TMZFUFtX HJJGphHgeuqae+bZJ6w1IGgmDczPxgqfnfvdjVUyMOFPXQcRZ6QMLVm13pF78s0e J7E610Tqc6wV3LGI8Apt2dTFbZaw90oOBZQ3rKRIQvQTOLbuuOIvZFfbn2cTHZKs gw3DLHcEpWRKwMcm7XA/UIsiyIo0If0LVh4mRqfHFGlBQmFK4m0koQOu8sWXDgpi qwE7Os8= -----END CERTIFICATE-----Generated at Mon Apr 7 01:50:35 2025 by rpki-client