$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/79395BE68EB311EF9A8DFC3CC4F9AE02.roa File: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (raw, json) Hash identifier: IVs/EZ3aUjzucqrKlhAwA1VLfGJK+bUizU/goA1sqEo= Subject key identifier: 6E:A6:8C:B2:70:96:F9:F1:48:8C:1F:94:0F:3D:5A:BA:AD:13:3C:82 Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Certificate serial: 0DD9 Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/79395BE68EB311EF9A8DFC3CC4F9AE02.roa Signing time: Sun 20 Oct 2024 07:18:16 +0000 ROA not before: Sun 20 Oct 2024 07:18:16 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 64513 IP address blocks: 43.231.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3545 (0xdd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2 Validity Not Before: Oct 20 07:18:16 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6714aeb7-14e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:df:5d:4b:ff:84:db:26:f8:e6:1b:4d:25:c9: 24:b4:0a:84:4f:15:db:74:1b:1d:f7:b2:ee:74:3e: 1c:d2:54:9e:bf:b1:93:09:8d:83:77:3e:05:6a:97: 3e:9c:f6:a6:25:d3:9d:c2:76:ac:a2:c2:1c:a5:76: c6:ec:48:07:a5:04:18:66:d2:b0:69:f7:af:5d:8a: 44:fc:a7:7e:3a:68:43:dc:01:f2:1c:35:73:89:ff: 72:59:82:cf:2d:8f:54:62:eb:ed:03:f0:26:e4:f3: 61:7e:9a:df:5e:d4:5a:60:44:c1:77:f3:85:ef:91: c0:f2:fb:13:df:13:4a:ca:db:f3:5a:91:2b:51:d3: c0:75:5a:53:6d:2d:62:a4:a4:58:2c:42:58:c3:5b: 41:dd:0b:12:f1:9a:5e:cb:ef:26:46:12:6b:d8:af: 61:71:42:5f:95:4e:16:cb:42:76:2c:1b:43:89:6b: db:d9:a1:f8:1e:d7:bc:ed:ae:7d:40:94:1c:73:06: 18:bd:a4:74:c8:e2:1d:c7:aa:87:e8:eb:07:e6:9d: af:f4:d7:b3:00:31:b1:23:2e:34:db:c8:00:26:22: 83:29:05:fe:67:93:e4:93:d7:6c:28:5b:55:17:06: b7:15:a1:57:0e:c1:2e:31:2c:c8:73:7a:68:17:ea: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A6:8C:B2:70:96:F9:F1:48:8C:1F:94:0F:3D:5A:BA:AD:13:3C:82 X509v3 Authority Key Identifier: keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/79395BE68EB311EF9A8DFC3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.31.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:91:9a:ec:4e:9f:43:39:19:7e:0a:f4:1d:9c:ba:18:3d:3e: ce:b4:a1:d3:14:0f:a6:e4:c1:d0:fd:9e:55:1e:c7:5a:44:ea: 5a:82:a2:b7:52:6f:d3:87:fe:12:3f:89:92:e9:dd:c2:98:06: 55:b1:3e:ee:d2:de:fa:fd:bd:4f:e3:d3:78:eb:de:98:98:2e: 7e:65:38:55:1f:46:ea:03:69:a0:f7:4b:6f:bd:69:a4:a4:18: 97:ad:c5:40:34:a9:4b:81:66:e6:48:d2:c0:39:ac:78:64:bd: 72:fc:b2:60:d1:aa:1c:ef:6b:58:d8:e0:85:29:6c:b9:90:f3: 02:46:71:fb:45:2d:b0:62:95:31:79:eb:ad:17:53:8e:ba:ba: 1c:40:e6:b7:c1:1f:7b:bb:54:22:ca:85:55:71:20:0c:92:34: 4e:50:e6:bd:6b:e0:38:67:73:08:d9:15:3a:dc:d3:02:e5:68: 3d:2b:7f:06:14:41:d0:4b:39:15:13:0b:4d:f7:7c:12:ec:db: c9:a7:47:7b:ea:7d:19:d9:ea:0c:8c:34:09:81:c5:4d:1a:be: 44:e1:00:7b:0d:e5:8f:ed:4a:5e:7c:3e:47:e4:c0:2f:a8:3e: 3c:02:27:13:4b:32:c8:a2:ab:50:91:aa:c8:2f:d6:a4:be:f7: dc:93:7f:c8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKEM4NzNCQjYxMEI5MTNDM0VDREM3MDhBMjY1QTc0QjEx NDFBNzZGNTQwHhcNMjQxMDIwMDcxODE2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE0YWViNy0xNGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyd9dS/+E2yb45htNJckktAqETxXbdBsd97LudD4c0lSev7GTCY2Ddz4Fapc+ nPamJdOdwnasosIcpXbG7EgHpQQYZtKwafevXYpE/Kd+OmhD3AHyHDVzif9yWYLP LY9UYuvtA/Am5PNhfprfXtRaYETBd/OF75HA8vsT3xNKytvzWpErUdPAdVpTbS1i pKRYLEJYw1tB3QsS8Zpey+8mRhJr2K9hcUJflU4Wy0J2LBtDiWvb2aH4Hte87a59 QJQccwYYvaR0yOIdx6qH6OsH5p2v9NezADGxIy4028gAJiKDKQX+Z5Pkk9dsKFtV Fwa3FaFXDsEuMSzIc3poF+qJeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG6mjLJw lvnxSIwflA89WrqtEzyCMB8GA1UdIwQYMBaAFMhzu2ELkTw+zccIomWnSxFBp29U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi84MkU0QzJBMEE2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBEN054d2lpWmFkTEVVR25i MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lITzdZUXVSUEQ3Tnh3aWlaYWRMRVVHbmIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjQ5RjIvODJFNEMyQTBBNkVFMTFFOTg1RjNCMDExQzRGOUFFMDIvNzkzOTVCRTY4 RUIzMTFFRjlBOERGQzNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr5x8wDQYJKoZIhvcNAQELBQADggEBAGyRmuxOn0M5GX4K 9B2cuhg9Ps60odMUD6bkwdD9nlUex1pE6lqCordSb9OH/hI/iZLp3cKYBlWxPu7S 3vr9vU/j03jr3piYLn5lOFUfRuoDaaD3S2+9aaSkGJetxUA0qUuBZuZI0sA5rHhk vXL8smDRqhzva1jY4IUpbLmQ8wJGcftFLbBilTF5660XU466uhxA5rfBH3u7VCLK hVVxIAySNE5Q5r1r4DhncwjZFTrc0wLlaD0rfwYUQdBLORUTC033fBLs28mnR3vq fRnZ6gyMNAmBxU0avkThAHsN5Y/tSl58PkfkwC+oPjwCJxNLMsiiq1CRqsgv1qS+ 99yTf8g= -----END CERTIFICATE-----Generated at Wed Feb 19 22:12:39 2025 by rpki-client