$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa File: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (raw, json) Hash identifier: du3inK9qkjwR/A2n6vO6SMQjDynHJ0y0PAziJifzAng= Subject key identifier: 4C:A4:DA:F8:99:A3:86:5C:2E:11:4E:14:54:75:6A:57:6C:24:92:B4 Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Certificate serial: 02EA Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa Signing time: Thu 13 Mar 2025 00:56:14 +0000 ROA not before: Thu 13 Mar 2025 00:56:14 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 134715 IP address blocks: 103.179.206.0/23 maxlen: 24 2400:4e60::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 00:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 746 (0x2ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B54 Validity Not Before: Mar 13 00:56:14 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67d22d2e-b671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:35:10:3a:46:9d:29:1c:6b:01:03:6c:e4:cb: 0f:8a:e2:bd:9f:c0:09:1f:53:7b:07:bd:6f:87:99: 1e:31:3d:b3:77:7a:c8:ea:f3:e6:69:a5:e4:1e:8b: e9:b9:38:1f:2a:f6:fa:0a:cb:6b:60:6f:c8:77:95: 7c:56:2a:57:f4:32:bd:37:f7:db:13:d1:37:73:4c: d6:49:80:12:1a:4c:a2:ee:9b:3b:dd:31:6e:92:87: ae:82:72:1c:21:87:5a:23:45:06:1b:d0:f3:7f:64: 3c:3e:4b:8a:ca:19:ca:87:34:cd:1c:d2:a8:0b:b4: 4f:64:fa:31:0e:e1:0e:d2:45:46:49:17:84:e6:28: 43:f6:4c:10:21:52:a6:01:c9:f7:a8:01:4e:1b:37: f8:2d:7a:10:eb:b0:d5:08:66:35:a3:6d:12:e3:aa: 3c:2e:c6:06:88:5f:01:92:0a:2f:3b:e1:21:0a:ff: a6:ca:c9:0d:20:32:60:69:0f:fe:fd:a2:5f:b3:48: 6f:d8:dc:12:f0:50:f3:cb:e9:88:4b:43:15:d4:cd: c7:7c:6d:b1:9b:18:ae:14:6e:00:59:1e:75:af:16: e9:58:ea:70:15:af:9c:62:6a:b4:b4:57:ab:bc:a7: 58:63:d6:91:d7:93:c5:1e:34:ea:0c:34:16:d2:00: 85:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A4:DA:F8:99:A3:86:5C:2E:11:4E:14:54:75:6A:57:6C:24:92:B4 X509v3 Authority Key Identifier: keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.206.0/23 IPv6: 2400:4e60::/32 Signature Algorithm: sha256WithRSAEncryption 31:17:ab:4f:da:19:68:90:45:b7:32:62:93:21:28:3e:0b:a1: e0:92:16:84:15:14:1b:58:ae:c9:24:6e:26:b1:de:fe:03:f5: 1c:57:c1:bd:82:fc:63:df:33:19:12:41:78:d3:b7:a8:2b:9a: 89:ce:d3:06:aa:9c:ba:65:00:7f:cb:d9:fc:7f:02:ea:7d:e9: 7c:7a:25:30:1a:1f:82:84:7b:4c:73:3e:83:31:43:24:5f:bb: 77:da:fd:6e:f2:9a:d7:4b:39:bc:33:51:04:4d:11:86:fc:3b: 12:ef:29:23:0c:00:9e:d0:13:d1:84:1e:22:a7:d0:03:01:13: 96:20:3f:5e:7e:d2:bb:4d:ae:c2:46:1f:b7:3d:93:89:90:18: 9d:f8:f5:a4:63:d7:e3:2c:50:ea:39:a4:87:ed:1c:29:b0:c4: 28:c1:73:43:cb:4c:b5:4d:09:97:60:e3:f5:a3:cf:e5:ea:c9: 7d:15:47:e2:44:eb:ff:ea:0f:2a:64:38:68:46:e1:ea:f2:81: 0f:21:b7:0f:86:64:57:3a:31:a8:25:e0:e2:aa:f8:e9:2d:e2: ca:bf:99:56:a6:a3:4e:91:74:dc:13:43:15:af:43:c2:e9:3e: 5a:30:9f:c5:14:62:4f:3e:63:0a:96:85:f3:0c:9d:84:bf:3d: 34:b8:92:0f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNTQxMTAvBgNVBAUTKDIyQjM3NDRFMTQ4OUE0QTUxMTJCQ0Q4Q0JGMTdBOThG RjFEQjY2NzUwHhcNMjUwMzEzMDA1NjE0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QyMmQyZS1iNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jUQOkadKRxrAQNs5MsPiuK9n8AJH1N7B71vh5keMT2zd3rI6vPmaaXkHovp uTgfKvb6CstrYG/Id5V8VipX9DK9N/fbE9E3c0zWSYASGkyi7ps73TFukoeugnIc IYdaI0UGG9Dzf2Q8PkuKyhnKhzTNHNKoC7RPZPoxDuEO0kVGSReE5ihD9kwQIVKm Acn3qAFOGzf4LXoQ67DVCGY1o20S46o8LsYGiF8BkgovO+EhCv+myskNIDJgaQ/+ /aJfs0hv2NwS8FDzy+mIS0MV1M3HfG2xmxiuFG4AWR51rxbpWOpwFa+cYmq0tFer vKdYY9aR15PFHjTqDDQW0gCF/QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEyk2viZ o4ZcLhFOFFR1aldsJJK0MB8GA1UdIwQYMBaAFCKzdE4UiaSlESvNjL8XqY/x22Z1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI1NC83MjczNzVCNEQ0 RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBLVVJLODJNdnhlcGpfSGJa blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyTjBUaFNKcEtVUks4Mk12eGVwal9IYlpuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjJCNTQvNzI3Mzc1QjRENEY1MTFFQzhFMTNGRTRFQzRGOUFFMDIvRjJDOTFGNTY3 OEJFMTFFRkJCM0ZDNzZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFns84wDQQCAAIwBwMFACQATmAwDQYJKoZIhvcNAQELBQAD ggEBADEXq0/aGWiQRbcyYpMhKD4LoeCSFoQVFBtYrskkbiax3v4D9RxXwb2C/GPf MxkSQXjTt6grmonO0waqnLplAH/L2fx/Aup96Xx6JTAaH4KEe0xzPoMxQyRfu3fa /W7ymtdLObwzUQRNEYb8OxLvKSMMAJ7QE9GEHiKn0AMBE5YgP15+0rtNrsJGH7c9 k4mQGJ349aRj1+MsUOo5pIftHCmwxCjBc0PLTLVNCZdg4/Wjz+XqyX0VR+JE6//q DypkOGhG4erygQ8htw+GZFc6Magl4OKq+Okt4sq/mVamo06RdNwTQxWvQ8LpPlow n8UUYk8+YwqWhfMMnYS/PTS4kg8= -----END CERTIFICATE-----Generated at Wed Apr 9 02:31:45 2025 by rpki-client