$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/78C65D926B0B11EFBFE25881C4F9AE02.roa File: 78C65D926B0B11EFBFE25881C4F9AE02.roa (raw, json) Hash identifier: jdwllMTCFqVjmHB+vWxuk6uDQD76msFkVq9++d9B8Cw= Subject key identifier: 46:02:F1:A0:A2:BE:4B:A9:12:40:87:ED:AC:CC:AD:CE:C7:4C:6D:A7 Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9 Certificate serial: 6E Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/78C65D926B0B11EFBFE25881C4F9AE02.roa Signing time: Tue 25 Feb 2025 08:19:17 +0000 ROA not before: Tue 25 Feb 2025 08:19:17 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 23467 IP address blocks: 64.251.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883D3 Validity Not Before: Feb 25 08:19:17 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67bd7d05-d4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a6:3f:fa:da:b3:51:ce:26:04:dc:d6:3a:3a: 4c:f5:37:e2:66:4b:37:3f:e3:a1:4f:62:57:db:b9: f4:e7:4d:cb:8b:ed:83:07:fa:0d:c4:2c:00:9e:38: 75:10:4c:f1:29:c3:88:59:b9:d6:2d:46:3f:5e:ed: 68:61:e1:eb:f9:9b:d2:0b:43:9e:0d:0a:6b:da:59: b0:fe:95:14:e7:31:1a:b0:22:af:7f:38:9b:92:78: 64:7a:54:35:31:04:de:a3:75:2d:41:7a:34:3d:3d: bd:fb:bf:5a:9b:2b:2a:be:d3:3e:52:bc:39:e4:a3: 33:8d:16:77:fe:6d:6a:38:a8:29:68:8c:4c:fa:18: 96:9b:75:7d:a0:74:47:b2:1c:6f:e2:46:3f:84:bf: 1c:59:ab:fc:a9:37:9f:70:46:3d:5c:d3:1a:8a:e6: 3a:6d:a4:81:64:9b:19:76:b9:07:e5:e1:3f:7c:1d: 97:94:23:18:17:22:91:af:51:40:19:8c:3f:f8:06: 6c:82:1e:22:e8:fd:6f:5d:f5:72:0d:9e:c1:76:81: bd:0e:1a:51:51:83:7c:82:29:ae:f3:ad:ba:ef:5a: 5a:ae:b3:95:b0:bf:d4:5b:03:b7:fc:27:cb:d6:ea: 75:0c:ce:b3:f5:74:c8:ef:ac:dc:bb:08:8c:cd:72: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:02:F1:A0:A2:BE:4B:A9:12:40:87:ED:AC:CC:AD:CE:C7:4C:6D:A7 X509v3 Authority Key Identifier: keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/78C65D926B0B11EFBFE25881C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 64.251.192.0/20 Signature Algorithm: sha256WithRSAEncryption 08:f9:61:87:94:10:9f:a5:f4:a8:a6:df:9b:be:17:40:e9:2b: 15:01:9f:2f:62:a4:1f:22:39:33:81:ce:d7:f5:65:86:29:b8: 77:66:3e:e4:d3:11:f6:52:d9:d7:4c:c9:d9:71:a6:b6:f2:ba: 92:02:5d:e2:10:1e:f8:03:10:be:89:bc:78:bb:4b:f4:87:28: d6:bc:13:34:0b:aa:7b:23:95:25:d5:00:cf:66:26:df:a7:51: c2:8f:b3:7a:5f:13:d0:fb:05:4e:97:04:87:cd:72:48:0a:c2: f6:63:62:2f:1d:d8:c5:51:fb:70:2e:f7:4d:c1:98:7d:25:db: 0c:06:09:1e:ce:47:e8:ca:71:12:5b:7b:7f:45:db:f5:3e:fd: cb:62:b9:94:7a:7b:1f:f6:df:ef:d8:17:fe:3b:ce:dd:6a:48: 83:12:74:25:bb:8c:26:ac:f1:54:8f:a3:6c:60:2c:d0:d0:e8: f3:9f:95:23:67:da:e3:3b:d5:66:2a:0b:d6:9e:98:2f:7d:cf: e5:84:a7:ac:05:f7:ad:25:0b:eb:7e:35:b0:54:d5:ad:d8:f0: 1c:f6:ac:af:c0:68:4d:a6:d3:cf:a1:c1:a3:61:d4:9b:65:d0: 76:7d:97:eb:83:57:ae:cd:7a:3e:99:5a:16:b4:15:5c:6a:92: 67:b4:c2:a6 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODNEMzExMC8GA1UEBRMoRUIzQzhGMjRCQkFEQzk0MTM0ODcxRDZFNUZEMEI3QzU4 QjQ5RDNDOTAeFw0yNTAyMjUwODE5MTdaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YmQ3ZDA1LWQ0YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNpj/62rNRziYE3NY6Okz1N+JmSzc/46FPYlfbufTnTcuL7YMH+g3ELACeOHUQ TPEpw4hZudYtRj9e7Whh4ev5m9ILQ54NCmvaWbD+lRTnMRqwIq9/OJuSeGR6VDUx BN6jdS1BejQ9Pb37v1qbKyq+0z5SvDnkozONFnf+bWo4qClojEz6GJabdX2gdEey HG/iRj+EvxxZq/ypN59wRj1c0xqK5jptpIFkmxl2uQfl4T98HZeUIxgXIpGvUUAZ jD/4BmyCHiLo/W9d9XINnsF2gb0OGlFRg3yCKa7zrbrvWlqus5Wwv9RbA7f8J8vW 6nUMzrP1dMjvrNy7CIzNcjpXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQURgLxoKK+ S6kSQIftrMytzsdMbacwHwYDVR0jBBgwFoAU6zyPJLutyUE0hx1uX9C3xYtJ08kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4M0QzLzhEMDNFRjM2NUUz NjExRUZBQzkyRDMxNEM0RjlBRTAyLzZ6eVBKTHV0eVVFMGh4MXVYOUMzeFl0SjA4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNnp5UEpMdXR5VUUwaHgxdVg5QzN4WXRKMDhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODNEMy84RDAzRUYzNjVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi83OEM2NUQ5MjZC MEIxMUVGQkZFMjU4ODFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBED7wDANBgkqhkiG9w0BAQsFAAOCAQEACPlhh5QQn6X0qKbf m74XQOkrFQGfL2KkHyI5M4HO1/Vlhim4d2Y+5NMR9lLZ10zJ2XGmtvK6kgJd4hAe +AMQvom8eLtL9Ico1rwTNAuqeyOVJdUAz2Ym36dRwo+zel8T0PsFTpcEh81ySArC 9mNiLx3YxVH7cC73TcGYfSXbDAYJHs5H6MpxElt7f0Xb9T79y2K5lHp7H/bf79gX /jvO3WpIgxJ0JbuMJqzxVI+jbGAs0NDo85+VI2fa4zvVZioL1p6YL33P5YSnrAX3 rSUL6341sFTVrdjwHPasr8BoTabTz6HBo2HUm2XQdn2X64NXrs16PplaFrQVXGqS Z7TCpg== -----END CERTIFICATE-----Generated at Mon Apr 7 13:55:14 2025 by rpki-client