$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa File: 866314EE5FCC11EF8416052EC4F9AE02.roa (raw, json) Hash identifier: msL/KENDVWQUMvYyaW7j5WzxEJ6sxahQk+kZqFtRzK0= Subject key identifier: 52:92:23:55:73:44:4A:14:B5:A1:23:28:ED:B4:FB:0E:F8:40:74:A8 Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9 Certificate serial: 6D Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa Signing time: Tue 25 Feb 2025 08:19:16 +0000 ROA not before: Tue 25 Feb 2025 08:19:16 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 16509 IP address blocks: 64.251.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883D3 Validity Not Before: Feb 25 08:19:16 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67bd7d04-7526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:56:97:db:95:89:8d:8e:fc:1a:ee:e0:cd: 2f:a8:0a:ac:44:48:7b:21:87:97:89:72:cf:62:4e: 07:dd:44:9f:29:52:89:37:ed:5d:3e:69:21:d9:e4: f3:ab:de:dd:55:ef:0d:0f:a6:ad:24:ec:c3:75:f5: 6e:69:48:19:70:45:f8:82:7f:74:05:08:26:d1:c7: ab:5e:07:b8:0e:20:1f:b2:bc:bc:b6:29:2d:65:6b: 81:fb:bf:97:18:0b:31:58:e6:a3:76:aa:63:25:a0: 6e:2b:76:b3:f7:ae:d1:4f:4d:22:92:1c:f6:19:79: 8e:9c:f2:37:29:f4:3f:74:5c:34:94:60:6e:72:91: 34:f6:2e:47:b0:b5:40:2a:9e:59:6c:aa:20:85:30: 35:f5:db:55:08:e2:19:b0:aa:6a:e1:dc:b3:2f:0b: 58:d5:26:4f:87:a8:2d:64:b0:5b:b5:45:19:0e:b8: 2c:1a:dd:d4:05:a9:44:ec:b9:d5:e4:53:9d:ee:db: 1a:c0:82:26:04:41:e4:ab:33:b2:b8:63:79:d1:21: b2:a1:92:6b:88:63:f7:0c:62:d7:8f:a8:c7:7c:f6: 6d:24:1a:3f:5b:f7:84:1d:c9:0c:c1:49:78:92:05: ef:7e:88:c7:65:79:3e:5b:7b:80:a5:35:2a:d6:ae: 05:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:92:23:55:73:44:4A:14:B5:A1:23:28:ED:B4:FB:0E:F8:40:74:A8 X509v3 Authority Key Identifier: keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 64.251.192.0/21 Signature Algorithm: sha256WithRSAEncryption 51:46:db:37:63:b0:6c:9c:40:fc:05:fd:7e:7b:2e:22:01:e6: bd:b0:fb:e2:d4:b6:da:07:93:19:73:a5:a9:99:f3:6e:9e:26: e4:3e:c6:3c:1f:a1:11:38:1b:4e:5e:fa:0e:58:20:81:59:08: d7:af:dc:9f:55:ff:43:00:4a:8b:3e:67:18:b2:e5:78:aa:18: bd:cd:71:42:f9:34:e4:6c:0f:ce:6f:b6:77:0c:1b:4d:6f:ba: bc:05:28:77:f2:3b:a6:88:65:3a:ac:8f:e5:63:b4:e2:55:00: a2:7c:b4:bc:f6:15:86:a0:77:a6:0e:8e:68:af:5b:dd:74:80: 52:d7:62:f2:92:d6:81:9b:9b:c5:f2:24:ea:93:70:c0:4a:be: 42:98:f4:71:f1:f9:5b:88:7f:79:8a:20:d7:73:ea:87:b4:3e: 6e:e2:58:c8:bb:26:ed:35:1e:31:3d:db:53:d8:97:1b:1d:5c: 0e:8c:bc:68:8a:a6:f2:9c:96:6e:0c:e3:97:86:cb:67:cb:d3: ea:b7:fa:d3:07:a7:ff:b5:1e:89:f4:b5:33:7b:44:1d:6a:81: 57:6a:49:a4:de:91:67:6a:9d:a1:9a:69:6c:0a:d9:e4:69:79: a3:f7:df:43:99:65:dc:5c:7a:6a:25:ab:95:90:85:88:d6:10: d9:39:81:c3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODNEMzExMC8GA1UEBRMoRUIzQzhGMjRCQkFEQzk0MTM0ODcxRDZFNUZEMEI3QzU4 QjQ5RDNDOTAeFw0yNTAyMjUwODE5MTZaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YmQ3ZDA0LTc1MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0sFaX25WJjY78Gu7gzS+oCqxESHshh5eJcs9iTgfdRJ8pUok37V0+aSHZ5POr 3t1V7w0Ppq0k7MN19W5pSBlwRfiCf3QFCCbRx6teB7gOIB+yvLy2KS1la4H7v5cY CzFY5qN2qmMloG4rdrP3rtFPTSKSHPYZeY6c8jcp9D90XDSUYG5ykTT2LkewtUAq nllsqiCFMDX121UI4hmwqmrh3LMvC1jVJk+HqC1ksFu1RRkOuCwa3dQFqUTsudXk U53u2xrAgiYEQeSrM7K4Y3nRIbKhkmuIY/cMYtePqMd89m0kGj9b94QdyQzBSXiS Be9+iMdleT5be4ClNSrWrgXJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUpIjVXNE ShS1oSMo7bT7DvhAdKgwHwYDVR0jBBgwFoAU6zyPJLutyUE0hx1uX9C3xYtJ08kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4M0QzLzhEMDNFRjM2NUUz NjExRUZBQzkyRDMxNEM0RjlBRTAyLzZ6eVBKTHV0eVVFMGh4MXVYOUMzeFl0SjA4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNnp5UEpMdXR5VUUwaHgxdVg5QzN4WXRKMDhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODNEMy84RDAzRUYzNjVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi84NjYzMTRFRTVG Q0MxMUVGODQxNjA1MkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA0D7wDANBgkqhkiG9w0BAQsFAAOCAQEAUUbbN2OwbJxA/AX9 fnsuIgHmvbD74tS22geTGXOlqZnzbp4m5D7GPB+hETgbTl76DlgggVkI16/cn1X/ QwBKiz5nGLLleKoYvc1xQvk05GwPzm+2dwwbTW+6vAUod/I7pohlOqyP5WO04lUA ony0vPYVhqB3pg6OaK9b3XSAUtdi8pLWgZubxfIk6pNwwEq+Qpj0cfH5W4h/eYog 13Pqh7Q+buJYyLsm7TUeMT3bU9iXGx1cDoy8aIqm8pyWbgzjl4bLZ8vT6rf60wen /7UeifS1M3tEHWqBV2pJpN6RZ2qdoZppbArZ5Gl5o/ffQ5ll3Fx6aiWrlZCFiNYQ 2TmBww== -----END CERTIFICATE-----Generated at Thu Mar 13 21:57:01 2025 by rpki-client