$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa File: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (raw, json) Hash identifier: 3b/+EfJ1p5yKcSM+K7504gjRkoUg1csZXTQnr7kAeRc= Subject key identifier: F8:CA:73:BE:FB:61:AD:2C:9A:DC:55:8C:63:23:F3:28:23:41:5A:C3 Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 2877 Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa Signing time: Mon 24 Feb 2025 04:22:34 +0000 ROA not before: Mon 24 Feb 2025 04:22:34 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 141718 IP address blocks: 43.250.124.0/24 maxlen: 24 43.250.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10359 (0x2877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9 Validity Not Before: Feb 24 04:22:34 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67bbf40a-b722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:66:fb:13:e5:2b:ed:10:48:e2:94:2c:79: fd:78:e0:9b:0c:74:9f:ce:ad:b0:60:df:6a:a4:db: 35:7b:74:c6:00:1c:74:56:38:fd:7b:40:27:9f:48: 92:ab:2d:2a:53:16:22:2d:f5:c6:8c:17:1f:ed:6e: 3c:d2:3a:ce:db:c5:cb:c0:50:4c:5f:35:d4:b9:cf: 6e:19:09:73:5e:e0:76:12:fd:74:0c:f2:c8:ea:86: a2:07:0c:17:db:5b:27:e2:67:c9:a9:b2:40:b1:db: a1:e7:72:4f:42:c8:31:02:24:72:0f:63:da:68:a8: 2e:a9:b2:42:a3:3f:b6:2e:1c:aa:53:93:66:12:48: 54:b0:6b:fe:cb:6c:b8:fa:e2:e7:67:2d:9a:b7:a1: 5a:e6:89:7d:7a:cb:c5:a9:61:ef:d0:04:50:2f:24: fc:1c:ff:68:3a:17:9a:c8:a8:57:84:89:f9:4a:34: 75:58:12:91:f6:ae:e9:ba:26:93:db:f2:85:ed:7c: 94:a1:f9:db:77:0c:01:4b:94:cb:14:d1:92:b9:92: c7:9e:05:32:f5:3b:2b:fc:3b:7c:34:7c:56:5d:2a: 62:bc:9d:dc:f7:1b:95:3a:f8:1b:18:a5:9d:57:9b: a9:22:27:1b:ff:ee:fa:c3:55:83:02:41:57:50:66: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CA:73:BE:FB:61:AD:2C:9A:DC:55:8C:63:23:F3:28:23:41:5A:C3 X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.124.0/23 Signature Algorithm: sha256WithRSAEncryption aa:e5:fb:fe:0c:e4:61:7d:0c:b3:1d:cc:54:55:82:19:92:1a: f9:da:83:03:52:71:65:6b:25:75:06:2f:ad:da:59:80:bf:f4: 96:95:d5:66:03:7b:8c:a7:2c:bc:6a:bb:c0:50:2f:c5:86:a5: ed:64:a5:36:e5:17:20:3d:d2:97:0e:dc:bb:54:88:51:ed:ae: 14:f1:c1:88:25:90:fa:dd:bd:5d:a2:91:fc:38:84:0b:b6:68: 06:28:ca:26:f2:32:dc:e2:e2:1b:99:62:c7:df:cd:42:ed:d7: d2:2b:2f:c0:cc:af:fc:eb:4a:ba:33:ea:16:66:53:bf:d4:66: d4:26:99:48:ea:72:7d:ad:a2:c5:56:cf:e7:0f:e0:fc:25:e5: 20:af:a2:5f:ff:37:20:ff:b2:fb:81:60:78:61:9c:61:39:d0: c1:df:d7:54:18:5b:ab:ad:d3:d7:73:d9:a8:76:32:0b:d5:3d: af:f4:41:44:ca:5c:04:50:46:10:c0:dd:4c:dd:22:a9:7e:dc: 4a:0f:aa:ce:1a:f3:9f:c1:a0:31:d2:41:f1:14:48:5e:1c:d4: 02:2f:4d:e0:e9:c5:4d:f6:d4:50:aa:cb:ab:a7:61:3c:04:49: fc:45:d5:0c:ec:1a:bf:3a:51:1b:5e:dd:66:8e:ad:72:8b:f9: 4c:ee:f9:92 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjUwMjI0MDQyMjM0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JiZjQwYS1iNzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX9m+xPlK+0QSOKULHn9eOCbDHSfzq2wYN9qpNs1e3TGABx0Vjj9e0Ann0iS qy0qUxYiLfXGjBcf7W480jrO28XLwFBMXzXUuc9uGQlzXuB2Ev10DPLI6oaiBwwX 21sn4mfJqbJAsduh53JPQsgxAiRyD2PaaKguqbJCoz+2LhyqU5NmEkhUsGv+y2y4 +uLnZy2at6Fa5ol9esvFqWHv0ARQLyT8HP9oOheayKhXhIn5SjR1WBKR9q7puiaT 2/KF7XyUofnbdwwBS5TLFNGSuZLHngUy9Tsr/Dt8NHxWXSpivJ3c9xuVOvgbGKWd V5upIicb/+76w1WDAkFXUGYHSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPjKc777 Ya0smtxVjGMj8ygjQVrDMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjEzQjkvMTg5N0IyNTI5RjlEMTFFNDk2MTk1MzJEQzRGOUFFMDIvQkY5QzY1NUU3 QTQ3MTFFRjlDN0EwRTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEr+nwwDQYJKoZIhvcNAQELBQADggEBAKrl+/4M5GF9DLMd zFRVghmSGvnagwNScWVrJXUGL63aWYC/9JaV1WYDe4ynLLxqu8BQL8WGpe1kpTbl FyA90pcO3LtUiFHtrhTxwYglkPrdvV2ikfw4hAu2aAYoyibyMtzi4huZYsffzULt 19IrL8DMr/zrSroz6hZmU7/UZtQmmUjqcn2tosVWz+cP4Pwl5SCvol//NyD/svuB YHhhnGE50MHf11QYW6ut09dz2ah2MgvVPa/0QUTKXARQRhDA3UzdIql+3EoPqs4a 85/BoDHSQfEUSF4c1AIvTeDpxU321FCqy6unYTwESfxF1QzsGr86URte3WaOrXKL +Uzu+ZI= -----END CERTIFICATE-----Generated at Sun Apr 6 06:12:27 2025 by rpki-client