$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/91F6CB78CC8411EFB64BE274C4F9AE02.roa File: 91F6CB78CC8411EFB64BE274C4F9AE02.roa (raw, json) Hash identifier: Lyqkbw8kpDEXFRP3wM9V8TcwvtVc37CFnp2p01EAY4g= Subject key identifier: E5:86:C2:81:4D:A3:8A:42:E6:27:63:05:D1:1D:CF:D5:40:77:84:49 Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 041A Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/91F6CB78CC8411EFB64BE274C4F9AE02.roa Signing time: Mon 06 Jan 2025 23:18:43 +0000 ROA not before: Mon 06 Jan 2025 23:18:43 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 149977 IP address blocks: 203.32.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75 Validity Not Before: Jan 6 23:18:43 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=677c64d3-2fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:57:0c:7e:a8:19:65:d5:89:2b:76:cb:cb: bc:55:85:d6:7a:10:a3:66:57:bf:62:a3:3a:a6:15: 71:00:42:39:22:89:a2:7b:5a:7f:27:65:be:c8:9b: 3d:a0:31:32:ec:42:88:2c:42:9d:f1:0b:db:23:a5: 6f:6a:8a:67:b5:f3:c9:80:0c:54:ca:4a:3a:fa:64: e9:96:70:27:a8:cb:f1:e3:3f:ba:c3:61:53:a7:a9: af:5c:86:c1:7c:3e:0e:b2:91:a7:c2:7b:55:79:d0: e6:ea:88:c8:4d:a4:ca:6c:2c:13:bd:38:a9:2b:1c: d0:df:d3:20:c2:c9:32:2a:ac:7b:65:0a:2c:8a:43: 1d:28:15:2c:47:a9:89:ee:33:3c:f9:fa:e2:40:7f: 23:56:77:d5:ad:25:4b:27:2a:6d:7a:6e:ce:42:80: c9:c2:8c:e7:69:73:78:a2:af:ff:e2:50:56:a6:e6: f0:a3:94:53:c2:7a:2b:a5:ad:7d:0b:91:d8:c9:52: 4a:ac:95:17:5c:df:fc:0e:e0:80:c6:53:b5:09:5a: da:f2:88:70:8c:b4:eb:a2:99:5c:85:61:2a:10:18: d1:2d:51:d2:0e:4a:0b:84:c6:f6:68:d8:3a:0d:04: 15:82:cf:42:c0:ce:6a:48:16:29:c3:e7:9b:b0:66: fa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:86:C2:81:4D:A3:8A:42:E6:27:63:05:D1:1D:CF:D5:40:77:84:49 X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/91F6CB78CC8411EFB64BE274C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.32.28.0/24 Signature Algorithm: sha256WithRSAEncryption 53:d9:7a:e6:5f:09:0e:9d:0c:1c:35:aa:96:00:c9:e0:63:35: b7:b9:78:4b:02:90:90:0e:65:6e:42:8a:21:f0:33:2e:78:f2: 05:9f:ca:25:e9:fa:67:d9:d5:42:18:dc:9b:bf:08:78:11:cc: 79:5c:92:07:21:af:57:5b:c0:2b:27:de:22:d8:e6:3b:ed:b6: ff:c8:10:99:a5:52:ee:19:ae:94:cc:99:34:fd:12:82:64:ad: 60:9e:7e:02:b0:3c:f6:81:20:cf:bd:8d:1b:27:f2:ee:0d:e2: db:2d:f9:51:40:ea:d9:7d:03:0e:50:dd:8b:61:83:4d:55:51: 07:ca:b0:45:99:34:2e:26:c4:61:d5:21:6c:50:63:9e:b6:46: 01:5c:ca:62:a6:fe:3e:67:3f:89:e2:65:fe:d8:c8:9e:51:00: b8:53:d7:60:ba:10:ea:07:fb:23:a8:63:68:6f:0f:fb:e0:e0: 50:ef:e3:f6:a6:ee:75:e1:af:db:ee:d9:9d:f3:cf:a9:a6:85: ba:1d:0b:f4:f0:ad:1c:ad:f6:49:63:2a:d2:b2:ae:87:81:41: 02:70:cc:85:5b:38:00:d3:e2:76:d7:13:7e:a4:60:0e:44:33: ce:4c:0c:72:0c:cf:69:6c:66:e3:d4:12:67:65:d5:33:49:c4: 42:b7:99:e5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjUwMTA2MjMxODQzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdjNjRkMy0yZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZVXDH6oGWXViSt2y8u8VYXWehCjZle/YqM6phVxAEI5Iomie1p/J2W+yJs9 oDEy7EKILEKd8QvbI6VvaopntfPJgAxUyko6+mTplnAnqMvx4z+6w2FTp6mvXIbB fD4OspGnwntVedDm6ojITaTKbCwTvTipKxzQ39MgwskyKqx7ZQosikMdKBUsR6mJ 7jM8+friQH8jVnfVrSVLJyptem7OQoDJwoznaXN4oq//4lBWpubwo5RTwnorpa19 C5HYyVJKrJUXXN/8DuCAxlO1CVra8ohwjLTroplchWEqEBjRLVHSDkoLhMb2aNg6 DQQVgs9CwM5qSBYpw+ebsGb6LQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOWGwoFN o4pC5idjBdEdz9VAd4RJMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvOTFGNkNCNzhD Qzg0MTFFRkI2NEJFMjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLIBwwDQYJKoZIhvcNAQELBQADggEBAFPZeuZfCQ6dDBw1 qpYAyeBjNbe5eEsCkJAOZW5CiiHwMy548gWfyiXp+mfZ1UIY3Ju/CHgRzHlckgch r1dbwCsn3iLY5jvttv/IEJmlUu4ZrpTMmTT9EoJkrWCefgKwPPaBIM+9jRsn8u4N 4tst+VFA6tl9Aw5Q3Ythg01VUQfKsEWZNC4mxGHVIWxQY562RgFcymKm/j5nP4ni Zf7YyJ5RALhT12C6EOoH+yOoY2hvD/vg4FDv4/am7nXhr9vu2Z3zz6mmhbodC/Tw rRyt9kljKtKyroeBQQJwzIVbOADT4nbXE36kYA5EM85MDHIMz2lsZuPUEmdl1TNJ xEK3meU= -----END CERTIFICATE-----Generated at Wed Feb 5 12:57:00 2025 by rpki-client