$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/F84FF96A493911ED805EB686C4F9AE02.roa File: F84FF96A493911ED805EB686C4F9AE02.roa (raw, json) Hash identifier: ijCXtRUsXwFEJof/VE44Th7KCx0oFtyuFBMw15cQyvw= Subject key identifier: D2:C2:AD:2E:83:F7:3C:97:C5:B3:29:73:39:E0:95:AD:A8:53:83:1E Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 01F8 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/F84FF96A493911ED805EB686C4F9AE02.roa Signing time: Tue 31 Dec 2024 02:06:04 +0000 ROA not before: Tue 31 Dec 2024 02:06:04 +0000 ROA not after: Wed 30 Apr 2025 00:00:00 +0000 asID: 32787 IP address blocks: 140.168.240.0/24 maxlen: 24 140.168.241.0/24 maxlen: 24 140.168.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 01:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98 Validity Not Before: Dec 31 02:06:04 2024 GMT Not After : Apr 30 00:00:00 2025 GMT Subject: CN=6773518c-3116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:2d:c0:9f:fa:b6:e0:1a:37:61:29:4d:6a: 5c:bc:fc:e8:4c:08:f2:f4:69:6f:01:4c:bc:db:67: 6f:c5:0d:92:93:0a:63:a2:19:0f:3e:65:e8:73:0b: ca:15:04:f7:82:e4:28:7d:2f:66:90:3e:f5:b2:29: e8:be:e3:ce:f4:d1:ea:12:f4:79:70:30:76:1d:df: 98:7e:ce:67:ce:48:6f:05:f4:ea:ee:50:f6:28:4a: d2:a3:e4:9c:5f:9d:58:98:8c:de:1a:71:75:39:65: a1:64:bf:4e:a3:7c:71:f3:18:5c:52:99:ba:a7:1c: 10:f3:b4:ac:78:90:96:fc:1d:56:2b:f4:e5:3d:cd: 6b:43:cc:42:e9:e6:42:e9:71:e4:57:10:b8:ce:ed: f9:a0:53:79:1b:cb:bb:70:e8:8c:e7:44:18:10:7d: 48:06:0f:41:ed:67:e9:81:c5:1a:01:13:61:a0:e6: 28:c0:27:2e:d2:e8:53:c6:21:4b:48:73:d0:e3:dd: 26:6c:19:b3:48:09:95:1c:17:34:2e:1a:b9:d7:e4: a6:d5:76:3a:b4:23:2a:42:3d:74:33:4e:15:7b:c2: e3:fc:be:f8:ec:b6:d8:17:de:83:0d:8e:a3:29:a0: 24:45:68:37:7b:b8:8c:43:0c:77:02:7f:48:27:f3: 63:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C2:AD:2E:83:F7:3C:97:C5:B3:29:73:39:E0:95:AD:A8:53:83:1E X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/F84FF96A493911ED805EB686C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.168.240.0/23 140.168.243.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:6a:58:45:10:62:b5:cd:c6:9f:7b:9b:dd:85:a1:72:bb:81: c0:92:02:39:f4:6f:e2:62:f2:a4:fc:49:dd:62:da:96:b0:64: 2f:76:a1:6d:15:7d:78:e3:04:64:5e:96:02:ff:60:19:83:bc: 45:29:c9:06:c9:ec:33:69:55:a7:c2:50:f8:95:e2:e1:96:ce: d1:11:28:94:5f:0d:2d:5a:7c:cd:00:85:41:e7:a2:e5:9d:0f: bc:ab:0c:da:37:6d:51:ef:0c:23:df:9d:93:5c:f5:f6:fd:ee: ec:76:bb:6a:71:36:24:2a:08:2f:42:f9:96:e9:72:cd:eb:52: df:80:f6:79:99:9b:a9:6b:a0:c2:14:9d:90:ce:62:28:12:67: 47:93:54:ab:83:3a:2c:1d:e2:87:0f:1e:19:65:7e:1a:c6:9d: 00:cc:68:b2:fa:3f:8c:02:48:86:ed:96:37:c1:fd:fb:f0:e4: 2c:9e:44:ae:1a:0c:a6:a9:a6:7f:59:c5:91:70:71:48:22:09: de:76:5e:9b:fc:5d:0b:99:c4:e2:7b:d3:02:a1:ef:8a:32:ce: 54:e3:a8:22:e0:65:8e:a4:51:7b:fc:be:26:2e:f6:b0:e2:a6: 23:81:32:4d:43:b0:03:a7:bd:d8:f2:30:63:60:eb:fd:a0:db: 62:8e:0a:d6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjQxMjMxMDIwNjA0WhcNMjUwNDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzczNTE4Yy0zMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVEtwJ/6tuAaN2EpTWpcvPzoTAjy9GlvAUy822dvxQ2SkwpjohkPPmXocwvK FQT3guQofS9mkD71sinovuPO9NHqEvR5cDB2Hd+Yfs5nzkhvBfTq7lD2KErSo+Sc X51YmIzeGnF1OWWhZL9Oo3xx8xhcUpm6pxwQ87SseJCW/B1WK/TlPc1rQ8xC6eZC 6XHkVxC4zu35oFN5G8u7cOiM50QYEH1IBg9B7WfpgcUaARNhoOYowCcu0uhTxiFL SHPQ490mbBmzSAmVHBc0Lhq51+Sm1XY6tCMqQj10M04Ve8Lj/L747LbYF96DDY6j KaAkRWg3e7iMQwx3An9IJ/NjPwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNLCrS6D 9zyXxbMpczngla2oU4MeMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvRjg0RkY5NkE0 OTM5MTFFRDgwNUVCNjg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGMqPADBACMqPMwDQYJKoZIhvcNAQELBQADggEBAA9qWEUQ YrXNxp97m92FoXK7gcCSAjn0b+Ji8qT8Sd1i2pawZC92oW0VfXjjBGRelgL/YBmD vEUpyQbJ7DNpVafCUPiV4uGWztERKJRfDS1afM0AhUHnouWdD7yrDNo3bVHvDCPf nZNc9fb97ux2u2pxNiQqCC9C+Zbpcs3rUt+A9nmZm6lroMIUnZDOYigSZ0eTVKuD Oiwd4ocPHhllfhrGnQDMaLL6P4wCSIbtljfB/fvw5CyeRK4aDKappn9ZxZFwcUgi Cd52Xpv8XQuZxOJ70wKh74oyzlTjqCLgZY6kUXv8viYu9rDipiOBMk1DsAOnvdjy MGNg6/2g22KOCtY= -----END CERTIFICATE-----Generated at Thu Mar 13 21:56:32 2025 by rpki-client