$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/30C10672A27411E68C8EC670C4F9AE02.roa File: 30C10672A27411E68C8EC670C4F9AE02.roa (raw, json) Hash identifier: akkWYjfaWEhqYJZrRKjxCpGXnYxAkiIziyHvD0Tsd7w= Subject key identifier: F6:1E:08:11:E7:EF:A0:0E:F2:A6:BE:A5:03:C6:DB:46:3F:34:90:C4 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1D8B Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/30C10672A27411E68C8EC670C4F9AE02.roa Signing time: Fri 28 Feb 2025 16:54:21 +0000 ROA not before: Fri 28 Feb 2025 16:54:21 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 38193 IP address blocks: 203.170.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7563 (0x1d8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288 Validity Not Before: Feb 28 16:54:21 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c1ea3c-e869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:13:0b:47:5d:50:60:5a:fd:f4:7c:7a:c7:37: 9f:a3:db:6b:18:a6:a7:1b:66:ad:74:9e:fc:a4:f7: ca:a3:e6:71:ce:65:5f:e1:61:7d:47:26:da:87:bf: 9f:d6:f9:f9:5f:b5:96:53:f6:62:64:61:1a:16:f7: 15:33:2c:81:88:a7:d4:7f:b9:24:c8:a7:a7:21:43: f3:09:a3:f0:76:3f:18:26:6a:bf:cc:53:62:7d:bc: 76:d0:60:4e:8e:28:26:5e:a5:1b:7f:ec:49:56:3e: 04:fe:67:1c:44:40:e1:ab:1d:36:82:e8:b5:e8:22: d5:09:10:b3:4b:66:5d:b1:46:c2:55:78:6c:4e:32: 91:7e:a8:39:ec:38:46:27:28:ea:63:ef:8f:03:bd: c8:f4:95:82:60:4e:86:4c:80:a9:e9:0b:82:6a:d2: 5d:46:53:2f:60:a1:02:69:78:93:a1:36:1e:84:ee: 1c:7a:b0:9b:46:fa:97:58:3c:1e:1f:51:d5:70:02: ec:f8:94:c1:f9:b7:c5:34:bc:75:fb:7e:e9:64:6d: e0:25:b1:cd:ff:1f:3a:8b:6e:6d:31:64:31:d9:04: 8d:b3:da:49:13:d2:8b:ac:e8:f3:28:28:a7:5f:2c: d7:6c:9c:5d:12:a1:db:ef:0e:ad:46:21:35:a5:bc: 71:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1E:08:11:E7:EF:A0:0E:F2:A6:BE:A5:03:C6:DB:46:3F:34:90:C4 X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/30C10672A27411E68C8EC670C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.170.66.0/23 Signature Algorithm: sha256WithRSAEncryption 15:b9:5d:80:54:fe:57:6a:8e:1e:0b:e1:fd:c0:ff:a7:47:68: 39:13:04:65:2b:51:1e:a1:65:c8:95:78:a3:de:a1:be:c1:04: 42:08:f2:a8:11:bd:51:b3:e8:79:e0:e0:87:81:34:60:f9:62: 42:4e:8d:66:0b:40:7f:f0:14:be:b3:74:b8:55:6e:bb:3f:81: 06:0a:85:5b:80:a1:ce:bf:1c:d9:a8:0f:51:b7:c1:23:03:f8: d0:1b:3e:53:ea:51:51:bb:ac:a6:e0:ef:83:bf:07:e9:6f:48: 1a:a2:17:4e:76:5c:23:95:90:e8:a4:a5:5f:83:57:cd:ce:0c: c5:68:f0:5a:96:a7:c6:c8:1f:fb:9e:3a:51:ff:52:06:b4:23: 09:92:dd:d7:3d:22:76:21:c2:92:13:72:10:93:ca:62:30:b1: d5:7c:c4:64:be:90:67:3c:1b:3f:f0:dc:5e:53:07:7c:28:0b: fd:20:a2:06:9c:d7:9e:15:ea:04:9d:55:11:c2:71:80:33:9f: b7:91:ac:96:c5:31:1a:0d:2f:35:9f:30:2d:62:cd:c0:6a:0d: 4d:a5:dd:91:c4:26:08:5a:cf:e4:13:f3:5d:71:ae:3c:dc:ed: 47:55:da:9d:5d:66:2c:4e:f9:57:8b:22:f5:32:6c:59:76:70: b9:3f:a3:e4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjUwMjI4MTY1NDIxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MxZWEzYy1lODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RMLR11QYFr99Hx6xzefo9trGKanG2atdJ78pPfKo+ZxzmVf4WF9Rybah7+f 1vn5X7WWU/ZiZGEaFvcVMyyBiKfUf7kkyKenIUPzCaPwdj8YJmq/zFNifbx20GBO jigmXqUbf+xJVj4E/mccREDhqx02gui16CLVCRCzS2ZdsUbCVXhsTjKRfqg57DhG JyjqY++PA73I9JWCYE6GTICp6QuCatJdRlMvYKECaXiToTYehO4cerCbRvqXWDwe H1HVcALs+JTB+bfFNLx1+37pZG3gJbHN/x86i25tMWQx2QSNs9pJE9KLrOjzKCin XyzXbJxdEqHb7w6tRiE1pbxxYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPYeCBHn 76AO8qa+pQPG20Y/NJDEMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyODgvQTkzQUE4ODBBMjcyMTFFNkI4QkM5OTZBQzRGOUFFMDIvMzBDMTA2NzJB Mjc0MTFFNjhDOEVDNjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLqkIwDQYJKoZIhvcNAQELBQADggEBABW5XYBU/ldqjh4L 4f3A/6dHaDkTBGUrUR6hZciVeKPeob7BBEII8qgRvVGz6Hng4IeBNGD5YkJOjWYL QH/wFL6zdLhVbrs/gQYKhVuAoc6/HNmoD1G3wSMD+NAbPlPqUVG7rKbg74O/B+lv SBqiF052XCOVkOikpV+DV83ODMVo8FqWp8bIH/ueOlH/Uga0IwmS3dc9InYhwpIT chCTymIwsdV8xGS+kGc8Gz/w3F5TB3woC/0gogac154V6gSdVRHCcYAzn7eRrJbF MRoNLzWfMC1izcBqDU2l3ZHEJghaz+QT811xrjzc7UdV2p1dZixO+VeLIvUybFl2 cLk/o+Q= -----END CERTIFICATE-----Generated at Sun Apr 6 05:34:54 2025 by rpki-client