$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/8B91AD8CD6B811EF86FC5149C4F9AE02.roa File: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (raw, json) Hash identifier: nKrpei7NHXS/yvzIer9NaLALl/Q2sUCsHstVjHOpR2Y= Subject key identifier: 30:04:0E:3D:BA:8B:4E:04:BF:E6:3D:A6:C0:26:26:2D:77:E4:43:FC Certificate issuer: /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Certificate serial: 17 Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/8B91AD8CD6B811EF86FC5149C4F9AE02.roa Signing time: Sun 19 Jan 2025 22:55:58 +0000 ROA not before: Sun 19 Jan 2025 22:55:58 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 1221 IP address blocks: 202.8.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC132 Validity Not Before: Jan 19 22:55:58 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=678d82fd-5762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:6d:c3:5d:e8:21:23:30:e5:11:d6:7b:2b: ad:1e:b8:e4:f6:cb:de:76:4b:13:50:92:2f:ec:80: 5f:3f:f2:1d:65:89:14:c6:88:b1:7b:96:ef:0a:54: ba:33:7b:d7:12:00:5f:61:9c:ee:43:22:44:8a:41: fd:3f:e6:df:ac:d9:ce:5e:62:e2:c1:bc:98:25:53: 28:58:be:19:73:66:b5:a5:16:e9:87:f8:78:0a:38: fc:63:68:02:af:f9:17:73:8d:21:31:c0:b0:a2:02: bc:22:3a:6d:a4:56:60:d3:4c:1d:3f:3d:1a:85:c6: b8:70:62:72:b3:ae:da:fb:49:2a:df:54:e2:19:39: 9a:9a:47:21:80:b3:da:97:84:82:73:74:f0:5e:a6: bf:e1:9e:4f:ca:e6:70:52:6d:54:7c:0a:1c:52:f9: 11:fd:c8:75:b9:4a:65:10:a9:ed:86:e3:52:c7:43: a9:3b:64:9d:9d:b6:95:4c:64:34:ea:fa:48:c6:81: 23:55:6e:11:d6:8a:06:d6:d4:be:d3:23:11:21:9c: 69:96:76:7b:b0:99:1f:f9:70:73:a4:62:27:68:a7: 71:7a:2c:b6:2a:24:ed:29:e6:60:65:78:47:ef:d1: 7c:9c:d7:6e:dd:7f:1d:e1:06:7a:74:87:b4:1a:f3: 23:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:04:0E:3D:BA:8B:4E:04:BF:E6:3D:A6:C0:26:26:2D:77:E4:43:FC X509v3 Authority Key Identifier: keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/8B91AD8CD6B811EF86FC5149C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.8.92.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:55:49:15:14:03:4d:c8:e8:25:db:de:9d:b7:1a:d5:e6:3f: e2:c5:26:f2:02:ea:19:64:a5:0a:1f:bf:5d:73:10:98:3c:82: b5:41:93:5b:24:7b:51:11:69:5f:24:d8:3c:f5:c3:c5:b6:d9: 3f:88:86:07:41:b2:23:f0:e5:3d:ff:ec:4c:75:5b:ea:1f:7e: dd:46:43:45:4e:26:83:c2:85:ea:db:8c:28:04:41:ab:19:c2: 81:03:21:97:4a:da:72:0c:3f:8f:2c:91:cd:a8:b2:5f:ad:14: cc:89:3d:53:b5:46:e1:f1:0c:2d:cb:df:13:10:d9:ad:4a:83: c3:07:df:a7:a5:4c:28:06:b9:e4:32:a3:22:d8:02:96:80:ff: 4c:98:87:0c:12:67:36:d8:bc:37:ef:03:74:98:6a:b0:36:aa: 16:a6:dc:86:8c:94:52:4c:25:ec:33:a6:5f:8c:7c:7e:88:94: f7:7e:d7:55:9d:2c:9a:e1:7c:f2:c3:04:24:80:84:c7:1d:4b: a3:37:64:49:7c:a5:17:73:4a:02:c2:29:01:ab:2d:ea:3d:1e: 61:d2:94:c4:d5:b1:09:25:67:16:56:a0:a2:06:84:7e:4a:d7: 8c:c8:45:cb:53:d5:ea:8d:92:44:d1:c8:fe:37:0e:ad:db:44: 55:6b:6d:72 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzEzMjExMC8GA1UEBRMoODVFOTk5QzIyQkVFMDFDMzI2NEQzRDIyNjc1ODIxMDky RkZGRDAyQzAeFw0yNTAxMTkyMjU1NThaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OGQ4MmZkLTU3NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaR23DXeghIzDlEdZ7K60euOT2y952SxNQki/sgF8/8h1liRTGiLF7lu8KVLoz e9cSAF9hnO5DIkSKQf0/5t+s2c5eYuLBvJglUyhYvhlzZrWlFumH+HgKOPxjaAKv +RdzjSExwLCiArwiOm2kVmDTTB0/PRqFxrhwYnKzrtr7SSrfVOIZOZqaRyGAs9qX hIJzdPBepr/hnk/K5nBSbVR8ChxS+RH9yHW5SmUQqe2G41LHQ6k7ZJ2dtpVMZDTq +kjGgSNVbhHWigbW1L7TIxEhnGmWdnuwmR/5cHOkYidop3F6LLYqJO0p5mBleEfv 0Xyc127dfx3hBnp0h7Qa8yN/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMAQOPbqL TgS/5j2mwCYmLXfkQ/wwHwYDVR0jBBgwFoAUhemZwivuAcMmTT0iZ1ghCS//0Cww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMTMyL0M0RkExNEY4Qjgw QzExRUY4NEZBM0UzNUM0RjlBRTAyL2hlbVp3aXZ1QWNNbVRUMGlaMWdoQ1NfXzBD dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGVtWndpdnVBY01tVFQwaVoxZ2hDU19fMEN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzEzMi9DNEZBMTRGOEI4MEMxMUVGODRGQTNFMzVDNEY5QUUwMi84QjkxQUQ4Q0Q2 QjgxMUVGODZGQzUxNDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMoIXDANBgkqhkiG9w0BAQsFAAOCAQEALlVJFRQDTcjoJdve nbca1eY/4sUm8gLqGWSlCh+/XXMQmDyCtUGTWyR7URFpXyTYPPXDxbbZP4iGB0Gy I/DlPf/sTHVb6h9+3UZDRU4mg8KF6tuMKARBqxnCgQMhl0racgw/jyyRzaiyX60U zIk9U7VG4fEMLcvfExDZrUqDwwffp6VMKAa55DKjItgCloD/TJiHDBJnNti8N+8D dJhqsDaqFqbchoyUUkwl7DOmX4x8foiU937XVZ0smuF88sMEJICExx1LozdkSXyl F3NKAsIpAast6j0eYdKUxNWxCSVnFlagogaEfkrXjMhFy1PV6o2SRNHI/jcOrdtE VWttcg== -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:47 2025 by rpki-client