$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/C578C852218A11EFB28E7B82C4F9AE02.roa File: C578C852218A11EFB28E7B82C4F9AE02.roa (raw, json) Hash identifier: kTzsqNEXZTEaSzrPrWyUs9cD3MM8KSq3zyWoBQVDjyE= Subject key identifier: DC:0F:24:9D:09:35:B0:77:27:65:A9:4F:80:14:9A:22:F3:5A:2F:1A Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Certificate serial: 0205 Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/C578C852218A11EFB28E7B82C4F9AE02.roa Signing time: Mon 03 Feb 2025 02:05:17 +0000 ROA not before: Mon 03 Feb 2025 02:05:17 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 150803 IP address blocks: 115.42.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DF Validity Not Before: Feb 3 02:05:17 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a0245d-7c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:60:ee:3c:12:c9:c0:dc:56:9f:f6:d7:19: 65:0e:ff:75:11:37:fd:32:da:f9:64:69:7d:3c:4c: 43:10:37:10:dd:99:35:ad:0b:2c:c4:0a:38:38:94: 78:03:03:09:4b:0f:bb:0a:08:94:01:f7:13:34:b5: 39:7d:28:fe:4d:55:f1:06:b8:b0:85:1c:1e:fe:17: 81:fe:5c:83:2d:9c:be:84:b2:9e:a3:fa:a1:33:6a: 95:3c:ab:c2:54:e9:24:d1:f6:2b:50:30:55:35:9d: bf:f5:4f:d3:9e:4d:4d:58:6f:26:fd:95:4d:d4:59: 30:54:6d:bf:40:65:5f:5d:e1:58:c0:01:34:c6:d4: ab:68:02:ea:7c:5a:ec:eb:d5:97:3c:b1:4d:f6:1d: 52:b9:85:77:f3:2e:b6:86:45:d0:18:60:08:45:03: 75:09:38:f1:6b:94:db:dd:d3:f0:d8:3a:99:a7:dc: 80:49:8a:ac:5e:54:05:c1:14:4d:9d:e9:95:ca:bf: c5:0d:68:2f:f3:ba:70:74:84:8e:ef:e5:7e:95:8d: 32:3a:c1:38:ef:df:57:ff:54:c0:2f:0b:1f:a2:13: 7d:42:2d:78:60:98:f8:ed:4b:c6:45:7d:bf:50:64: 33:da:9d:31:02:f2:33:91:45:07:6b:ca:41:0c:5d: 81:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0F:24:9D:09:35:B0:77:27:65:A9:4F:80:14:9A:22:F3:5A:2F:1A X509v3 Authority Key Identifier: keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/C578C852218A11EFB28E7B82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.42.63.0/24 Signature Algorithm: sha256WithRSAEncryption 22:7b:1a:c9:54:11:9a:0b:40:9d:6a:f1:4d:82:58:de:32:5e: eb:90:ed:08:84:93:76:1f:04:d7:b0:23:d4:69:63:5f:0d:83: 79:dc:e8:27:73:c9:0d:4d:47:c8:ab:a8:b0:d4:70:08:31:34: c8:58:49:e2:04:53:71:4d:90:1e:db:cb:3a:45:79:f5:13:73: d4:11:cd:e2:6d:74:2a:7e:03:3d:e9:93:1f:61:0d:99:d6:00: 67:8d:a5:2b:80:c9:6c:13:b9:7e:12:ed:99:5b:2b:5e:83:df: 5a:32:77:95:f5:be:53:69:e9:42:ff:b5:95:66:30:e9:86:5d: 16:36:35:45:62:78:cb:34:65:fe:a5:71:f7:1a:3f:57:7d:8a: 6d:94:12:3c:ea:f8:6a:8e:7a:32:f2:1f:5f:b5:e9:c3:35:fc: f0:a9:5f:81:6e:8d:2d:d5:b0:e3:9f:e8:ae:6f:01:eb:59:50: 77:93:f7:72:8e:76:b5:08:7a:7f:b1:4d:37:ba:13:c2:e3:f4: c5:e8:33:b5:dd:e3:20:a2:f3:b7:f6:aa:18:30:ba:28:41:61: f3:22:2e:55:b1:cd:a7:9f:07:40:56:20:62:ad:e9:d0:5c:f3: c4:a5:ff:d8:db:53:0a:e9:49:b0:e1:2c:ea:30:a3:9b:57:2a: 4a:df:38:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5 QTNFRDVERkUwHhcNMjUwMjAzMDIwNTE3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EwMjQ1ZC03YzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttlg7jwSycDcVp/21xllDv91ETf9Mtr5ZGl9PExDEDcQ3Zk1rQssxAo4OJR4 AwMJSw+7CgiUAfcTNLU5fSj+TVXxBriwhRwe/heB/lyDLZy+hLKeo/qhM2qVPKvC VOkk0fYrUDBVNZ2/9U/Tnk1NWG8m/ZVN1FkwVG2/QGVfXeFYwAE0xtSraALqfFrs 69WXPLFN9h1SuYV38y62hkXQGGAIRQN1CTjxa5Tb3dPw2DqZp9yASYqsXlQFwRRN nemVyr/FDWgv87pwdISO7+V+lY0yOsE4799X/1TALwsfohN9Qi14YJj47UvGRX2/ UGQz2p0xAvIzkUUHa8pBDF2BeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNwPJJ0J NbB3J2WpT4AUmiLzWi8aMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3 N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkU3REYvNkQ1NTJENzAyNzdBMTFFREE2QjFBODI2QzRGOUFFMDIvQzU3OEM4NTIy MThBMTFFRkIyOEU3QjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABzKj8wDQYJKoZIhvcNAQELBQADggEBACJ7GslUEZoLQJ1q 8U2CWN4yXuuQ7QiEk3YfBNewI9RpY18Ng3nc6CdzyQ1NR8irqLDUcAgxNMhYSeIE U3FNkB7byzpFefUTc9QRzeJtdCp+Az3pkx9hDZnWAGeNpSuAyWwTuX4S7ZlbK16D 31oyd5X1vlNp6UL/tZVmMOmGXRY2NUVieMs0Zf6lcfcaP1d9im2UEjzq+GqOejLy H1+16cM1/PCpX4FujS3VsOOf6K5vAetZUHeT93KOdrUIen+xTTe6E8Lj9MXoM7Xd 4yCi87f2qhgwuihBYfMiLlWxzaefB0BWIGKt6dBc88Sl/9jbUwrpSbDhLOowo5tX KkrfOO8= -----END CERTIFICATE-----Generated at Sat Apr 5 01:40:44 2025 by rpki-client