$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/CCAA0F667B8911EE9370D427C4F9AE02.roa File: CCAA0F667B8911EE9370D427C4F9AE02.roa (raw, json) Hash identifier: +XCZ4i+FWnCX+GcmIpvSxAa3YM916ys/6BLu7thnPf0= Subject key identifier: EA:F6:9E:5E:8D:EF:C5:A1:52:FC:88:10:75:E9:25:37:59:24:C0:33 Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: E5 Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/CCAA0F667B8911EE9370D427C4F9AE02.roa Signing time: Fri 17 Jan 2025 03:56:56 +0000 ROA not before: Fri 17 Jan 2025 03:56:56 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 152094 IP address blocks: 116.199.202.0/23 maxlen: 23 2401:4d60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D Validity Not Before: Jan 17 03:56:56 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6789d507-80c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:e7:9c:aa:15:99:a9:dc:8b:6d:6d:7d:c6: ea:b3:3e:5a:46:fc:83:83:f4:4a:73:d8:1e:33:45: 51:ec:23:3a:df:76:fc:ad:be:dc:7c:8c:97:ce:4f: dc:14:2f:18:fd:ba:86:0d:a2:d2:26:83:dc:31:75: 2b:b1:a2:f2:eb:e1:e5:11:28:8a:53:00:b1:06:9b: 09:39:34:a3:41:2d:12:96:1a:96:cc:03:d2:d8:7e: 72:58:e7:0a:0c:89:8d:b9:76:f8:3a:4b:43:9d:a4: 79:c9:e7:c3:56:d6:98:81:9f:18:7b:46:14:4b:9a: 73:a7:12:03:c4:6f:0a:7e:3a:61:a4:c9:fe:48:5d: 63:d1:1c:ac:6e:9f:98:b5:4f:cf:57:87:c7:8a:84: 51:03:ff:b7:67:0c:b5:cf:7f:8e:69:b0:4c:62:34: 0f:23:4d:e9:25:f6:0b:57:86:10:c8:0d:ac:c2:50: 4d:c8:bb:70:df:f9:c2:73:65:ab:ff:d6:9b:25:db: 9a:4b:c9:2c:ff:c7:2a:49:82:f6:2b:97:e4:c5:a3: 2c:c4:b1:bc:f8:2e:f3:a4:8b:52:75:0c:7d:36:48: 79:f1:94:c1:5e:44:f9:b8:48:05:b3:39:59:78:b7: e8:f5:49:ea:89:2a:9a:c7:a5:2a:99:17:bf:a2:d5: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F6:9E:5E:8D:EF:C5:A1:52:FC:88:10:75:E9:25:37:59:24:C0:33 X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/CCAA0F667B8911EE9370D427C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.199.202.0/23 IPv6: 2401:4d60::/32 Signature Algorithm: sha256WithRSAEncryption c9:cf:37:33:da:94:fe:d6:46:49:fe:83:1e:90:73:e1:1b:80: 58:8e:50:b5:ae:95:73:0a:af:19:c4:b8:11:90:0d:e5:63:d0: 29:bf:ee:ee:e5:5f:2c:04:0b:5c:03:ff:36:12:8f:4f:4a:67: 5c:b5:f5:91:eb:12:cb:07:b3:c4:bc:58:88:2d:63:bf:5d:00: 64:a8:8c:f6:c2:5c:ee:1f:e4:d9:33:c1:57:86:bd:21:1b:e6: 13:95:55:63:7c:7c:44:ed:ba:49:ff:77:dc:40:c9:0d:96:fb: fa:88:89:95:91:13:b8:2d:84:cb:ea:0f:98:ff:2d:2a:74:14: 9f:2c:e3:3f:23:d9:5c:03:de:6b:d8:72:2d:63:f7:ad:b5:ea: cc:cc:7c:2e:dd:96:e7:70:1f:18:fd:a8:2e:69:7e:1e:a6:d6: 78:26:d9:78:0c:11:06:30:7f:22:e7:00:ed:f8:00:c0:c8:8e: 23:6b:11:7d:44:c1:92:b6:5b:f4:21:eb:0f:ee:6e:bf:59:c8: 8b:78:88:f7:51:ed:f0:86:52:89:c9:1d:7c:58:23:e4:56:14: 05:0b:ad:95:3f:49:27:b0:82:79:2f:07:90:67:3b:d9:20:ab: 1e:18:20:2d:c6:a7:6a:d9:2c:fe:b2:7c:b4:42:91:d0:c9:f0: c9:e4:d4:87 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My RUYwNkU5M0IwHhcNMjUwMTE3MDM1NjU2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg5ZDUwNy04MGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWjnnKoVmanci21tfcbqsz5aRvyDg/RKc9geM0VR7CM633b8rb7cfIyXzk/c FC8Y/bqGDaLSJoPcMXUrsaLy6+HlESiKUwCxBpsJOTSjQS0SlhqWzAPS2H5yWOcK DImNuXb4OktDnaR5yefDVtaYgZ8Ye0YUS5pzpxIDxG8KfjphpMn+SF1j0Rysbp+Y tU/PV4fHioRRA/+3Zwy1z3+OabBMYjQPI03pJfYLV4YQyA2swlBNyLtw3/nCc2Wr /9abJduaS8ks/8cqSYL2K5fkxaMsxLG8+C7zpItSdQx9Nkh58ZTBXkT5uEgFszlZ eLfo9UnqiSqax6UqmRe/otXM/wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOr2nl6N 78WhUvyIEHXpJTdZJMAzMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjlFOUQvNTI4MjhCMkE3Qjg3MTFFRUE4NDBGMjFFQzRGOUFFMDIvQ0NBQTBGNjY3 Qjg5MTFFRTkzNzBENDI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAF0x8owDQQCAAIwBwMFACQBTWAwDQYJKoZIhvcNAQELBQAD ggEBAMnPNzPalP7WRkn+gx6Qc+EbgFiOULWulXMKrxnEuBGQDeVj0Cm/7u7lXywE C1wD/zYSj09KZ1y19ZHrEssHs8S8WIgtY79dAGSojPbCXO4f5NkzwVeGvSEb5hOV VWN8fETtukn/d9xAyQ2W+/qIiZWRE7gthMvqD5j/LSp0FJ8s4z8j2VwD3mvYci1j 96216szMfC7dludwHxj9qC5pfh6m1ngm2XgMEQYwfyLnAO34AMDIjiNrEX1EwZK2 W/Qh6w/ubr9ZyIt4iPdR7fCGUonJHXxYI+RWFAULrZU/SSewgnkvB5BnO9kgqx4Y IC3Gp2rZLP6yfLRCkdDJ8Mnk1Ic= -----END CERTIFICATE-----Generated at Sat Apr 5 15:17:39 2025 by rpki-client