$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/2395AD02E44911EFB4261C43C4F9AE02.roa File: 2395AD02E44911EFB4261C43C4F9AE02.roa (raw, json) Hash identifier: 8uCs5a5eLk7Ncqt7vpJ0jpqLXEXaJ1qSV8aFHl3ul6c= Subject key identifier: E8:74:2A:F7:9B:FA:2D:55:DE:18:0B:78:3E:09:7F:97:28:3D:CF:59 Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 0256 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/2395AD02E44911EFB4261C43C4F9AE02.roa Signing time: Thu 06 Feb 2025 05:13:45 +0000 ROA not before: Thu 06 Feb 2025 05:13:45 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 13335 IP address blocks: 123.108.74.0/24 maxlen: 24 123.108.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8 Validity Not Before: Feb 6 05:13:45 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67a44509-ec4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1e:f0:74:03:bb:23:9b:b9:19:b5:56:29:77: f4:36:59:50:b0:5c:12:81:e1:c8:87:11:7c:60:a6: 13:1e:c4:df:20:7a:7b:1f:9b:2c:cb:db:0d:a0:39: 53:e2:b2:ba:7c:c3:62:29:c8:f2:b0:c3:71:b1:17: b7:1b:9b:b9:d2:ba:ff:13:41:9a:a7:04:0f:81:04: 75:ee:21:51:06:0a:c0:48:2b:19:30:c5:d7:11:11: c4:6c:09:ec:2c:81:20:84:0b:20:c3:f2:17:b0:0c: 07:67:30:4d:51:d6:f7:dd:16:f7:bf:07:f3:be:4e: d7:0f:15:0a:0a:3d:5e:a0:00:ac:67:d7:34:fe:50: 74:ce:47:8a:d1:a0:d8:66:2f:0a:96:cd:60:3f:36: e3:fa:23:7c:a9:4a:4b:94:4c:13:23:13:19:5f:00: f6:62:8e:85:14:bd:f3:57:cb:1b:11:3e:04:e2:f7: a7:d2:f8:9e:20:96:78:74:c2:5c:da:13:b7:54:7f: 24:2c:7e:be:1c:68:82:84:51:07:d2:33:7b:20:5f: ca:e7:a2:e8:d0:c0:33:d3:43:19:9f:0f:39:3a:c2: 88:ab:18:b0:e3:2c:55:0e:4b:aa:c8:c4:68:2e:ac: d7:08:36:1f:3a:a0:0b:e3:68:72:e0:23:85:58:b2: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:74:2A:F7:9B:FA:2D:55:DE:18:0B:78:3E:09:7F:97:28:3D:CF:59 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/2395AD02E44911EFB4261C43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.108.74.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:79:98:77:d8:0a:ab:22:18:a6:96:3a:18:88:ba:37:d7:b1: 84:32:e2:8c:73:01:43:74:b6:a8:75:bf:53:77:71:0e:12:ed: a4:72:55:b4:0e:d9:16:2d:8b:0b:a1:67:7f:da:c1:3d:ec:29: f9:3a:08:0c:e6:1e:ef:af:49:94:91:7b:84:82:ed:c7:3a:00: 94:56:e4:bd:e5:b7:e1:96:4e:c3:2d:b6:58:58:74:45:a5:31: 0c:b2:d5:26:b1:2d:a0:84:2d:f9:38:9d:8e:0f:ee:18:90:21: 62:af:5d:61:53:04:2e:51:21:d1:9b:40:48:4e:01:95:17:53: bf:6f:a9:51:99:4b:79:ca:3c:4a:4f:4d:68:94:20:f8:ad:6a: 78:8f:02:a8:1e:08:e1:f0:a3:e8:60:d4:ef:61:6e:72:9d:c0: ed:8a:61:9b:a7:1e:26:f4:91:f0:26:a8:b1:69:9a:4a:66:41: b8:ec:86:bd:96:2d:7c:fd:93:01:98:9a:ba:1f:5f:82:31:a2: de:c2:9e:26:7d:db:ee:46:cc:f7:89:64:6e:92:ae:ea:77:1f: af:6f:30:37:65:8a:dc:cf:8b:1d:1f:cd:b3:3d:55:3f:13:d2: bd:6c:a9:8e:41:ff:93:4a:75:74:92:a1:a6:3a:03:b3:70:18: 26:87:c4:52 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwMjA2MDUxMzQ1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E0NDUwOS1lYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1B7wdAO7I5u5GbVWKXf0NllQsFwSgeHIhxF8YKYTHsTfIHp7H5ssy9sNoDlT 4rK6fMNiKcjysMNxsRe3G5u50rr/E0GapwQPgQR17iFRBgrASCsZMMXXERHEbAns LIEghAsgw/IXsAwHZzBNUdb33Rb3vwfzvk7XDxUKCj1eoACsZ9c0/lB0zkeK0aDY Zi8Kls1gPzbj+iN8qUpLlEwTIxMZXwD2Yo6FFL3zV8sbET4E4ven0vieIJZ4dMJc 2hO3VH8kLH6+HGiChFEH0jN7IF/K56Lo0MAz00MZnw85OsKIqxiw4yxVDkuqyMRo LqzXCDYfOqAL42hy4COFWLK7sQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOh0Kveb +i1V3hgLeD4Jf5coPc9ZMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIyQjgvM0Y0NENCQUUyRjREMTFFRDhGNUE2QTY0QzRGOUFFMDIvMjM5NUFEMDJF NDQ5MTFFRkI0MjYxQzQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAF7bEowDQYJKoZIhvcNAQELBQADggEBAC95mHfYCqsiGKaW OhiIujfXsYQy4oxzAUN0tqh1v1N3cQ4S7aRyVbQO2RYtiwuhZ3/awT3sKfk6CAzm Hu+vSZSRe4SC7cc6AJRW5L3lt+GWTsMttlhYdEWlMQyy1SaxLaCELfk4nY4P7hiQ IWKvXWFTBC5RIdGbQEhOAZUXU79vqVGZS3nKPEpPTWiUIPitaniPAqgeCOHwo+hg 1O9hbnKdwO2KYZunHib0kfAmqLFpmkpmQbjshr2WLXz9kwGYmrofX4Ixot7CniZ9 2+5GzPeJZG6Srup3H69vMDdlitzPix0fzbM9VT8T0r1sqY5B/5NKdXSSoaY6A7Nw GCaHxFI= -----END CERTIFICATE-----Generated at Sat Apr 5 03:55:19 2025 by rpki-client