$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa File: F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa (raw, json) Hash identifier: UXMIu/hMoV1TOCA/88ixIL/Bxz73uON80t/UXak3hoA= Subject key identifier: B2:78:36:84:D0:1C:28:3C:B3:95:16:09:AC:D8:3D:00:B8:70:5D:95 Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Certificate serial: 36A4 Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa Signing time: Wed 12 Mar 2025 06:40:56 +0000 ROA not before: Wed 12 Mar 2025 06:40:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136969 IP address blocks: 39.62.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 14:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13988 (0x36a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0832 Validity Not Before: Mar 12 06:40:56 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67d12c77-058a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:50:f5:73:2d:21:0d:00:1d:a1:98:f9:d6: db:2e:68:52:1f:26:19:db:12:6b:ca:a0:7d:f2:61: f9:df:dd:a9:ac:f0:20:84:79:60:8c:57:69:7b:99: 9c:2c:bc:a7:4d:db:36:8b:8e:5c:4a:eb:98:6b:cb: d1:5e:78:f0:73:57:77:ec:84:bf:7e:69:1f:18:b8: 5e:46:34:ad:6b:05:c5:ca:29:b8:f9:fc:c6:62:c4: 2f:b7:3b:fe:a1:83:29:f1:5b:d9:6a:59:37:83:97: da:ea:9e:a1:f5:5e:81:a3:3c:74:19:d9:46:7e:bb: 43:fc:4f:df:ac:85:9f:6d:fc:15:ee:ea:c9:e7:86: ac:c0:aa:f9:7c:a2:d6:22:38:71:22:b0:8a:33:a4: cb:bd:d9:e1:66:ff:af:5a:66:7f:8b:d6:42:81:f5: cb:c6:40:5b:4c:bb:46:dc:07:63:d1:ee:f4:3f:04: ac:fb:cc:50:8b:0f:17:1e:ae:fb:2a:87:ca:eb:dc: 3d:d7:fc:7e:6c:51:7f:78:1b:04:ad:77:20:20:bb: 67:53:16:31:6e:40:bf:fd:af:9e:f0:c5:26:1b:df: c8:27:cb:19:c0:26:06:9b:c4:6b:39:4b:ba:0d:1c: 22:c3:43:08:ae:cb:6c:f2:e5:d6:c8:e6:d7:f4:03: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:78:36:84:D0:1C:28:3C:B3:95:16:09:AC:D8:3D:00:B8:70:5D:95 X509v3 Authority Key Identifier: keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 39.62.0.0/19 Signature Algorithm: sha256WithRSAEncryption 34:d8:14:41:f2:f2:90:8d:36:d1:63:f8:1a:9b:a3:67:5b:b1: 7e:87:3c:01:09:6b:ff:32:44:d0:a4:ff:a5:cd:a6:e1:00:e3: 74:03:0c:4c:9c:a3:28:46:24:2c:85:9b:2a:27:0c:d6:e6:c7: b1:b0:b1:eb:35:9b:50:66:5f:a9:ba:99:53:2e:e9:75:2d:a1: 3b:16:9f:d3:ab:4e:58:91:e3:a6:fe:85:90:a7:50:44:26:95: 8c:0f:14:45:a5:bd:06:06:87:f9:b2:ef:54:ef:06:16:be:2f: 2b:5e:0e:cd:a1:a0:2f:cb:b5:5b:e3:d8:85:bd:3e:cf:2c:a6: 24:8e:bc:a9:39:73:f8:fd:83:97:7d:83:73:26:ed:cf:ba:34: 9c:b3:c8:3e:a2:c1:cf:3b:46:b2:46:6c:d0:ac:f9:d9:5c:68: 79:53:25:1a:75:6e:2e:54:be:19:87:c9:96:27:20:c1:f3:92: 61:70:f7:ad:02:dc:a7:40:b6:51:13:80:07:4d:b0:93:96:cc: c8:26:9d:c0:c8:b5:aa:a1:23:ab:cb:1a:02:fb:bc:dd:4f:4a: 75:61:cc:04:df:25:4b:cd:a9:c2:5d:1f:7a:47:07:25:56:74: 83:c1:96:c2:82:89:77:ef:af:70:9f:e1:09:21:c5:d1:d3:82: e8:70:4a:a3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB NzYwQUVCNTQwHhcNMjUwMzEyMDY0MDU2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QxMmM3Ny0wNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXxQ9XMtIQ0AHaGY+dbbLmhSHyYZ2xJryqB98mH5392prPAghHlgjFdpe5mc LLynTds2i45cSuuYa8vRXnjwc1d37IS/fmkfGLheRjStawXFyim4+fzGYsQvtzv+ oYMp8VvZalk3g5fa6p6h9V6Bozx0GdlGfrtD/E/frIWfbfwV7urJ54aswKr5fKLW IjhxIrCKM6TLvdnhZv+vWmZ/i9ZCgfXLxkBbTLtG3Adj0e70PwSs+8xQiw8XHq77 KofK69w91/x+bFF/eBsErXcgILtnUxYxbkC//a+e8MUmG9/IJ8sZwCYGm8RrOUu6 DRwiw0MIrsts8uXWyObX9AMKRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLJ4NoTQ HCg8s5UWCazYPQC4cF2VMB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA4MzIvOURBRjc4MEUxRDk0MTFFMjk5MDFGM0Y4MDhCMDJDRDIvRjMzQ0VGQTZG RjBDMTFFRkFGQUY3RDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAUnPgAwDQYJKoZIhvcNAQELBQADggEBADTYFEHy8pCNNtFj +Bqbo2dbsX6HPAEJa/8yRNCk/6XNpuEA43QDDEycoyhGJCyFmyonDNbmx7Gwses1 m1BmX6m6mVMu6XUtoTsWn9OrTliR46b+hZCnUEQmlYwPFEWlvQYGh/my71TvBha+ LyteDs2hoC/LtVvj2IW9Ps8spiSOvKk5c/j9g5d9g3Mm7c+6NJyzyD6iwc87RrJG bNCs+dlcaHlTJRp1bi5UvhmHyZYnIMHzkmFw960C3KdAtlETgAdNsJOWzMgmncDI taqhI6vLGgL7vN1PSnVhzATfJUvNqcJdH3pHByVWdIPBlsKCiXfvr3Cf4QkhxdHT guhwSqM= -----END CERTIFICATE-----Generated at Thu Mar 13 06:40:02 2025 by rpki-client