$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/04E7A654EA9C11EFAC422731C4F9AE02.roa File: 04E7A654EA9C11EFAC422731C4F9AE02.roa (raw, json) Hash identifier: wbMAPtpm4LAtpP/28TR/fe+u3lfRXvXNgn7BbegWoBs= Subject key identifier: 71:0B:D8:80:D0:8E:04:9A:03:70:79:06:82:0B:41:DF:8D:B0:A9:1B Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 35D1 Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/04E7A654EA9C11EFAC422731C4F9AE02.roa Signing time: Fri 14 Feb 2025 06:22:09 +0000 ROA not before: Fri 14 Feb 2025 06:22:09 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 55154 IP address blocks: 116.90.100.0/24 maxlen: 24 116.90.105.0/24 maxlen: 24 116.90.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13777 (0x35d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E Validity Not Before: Feb 14 06:22:09 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67aee111-bded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8b:3d:8e:73:c1:e2:c5:a8:bc:0e:3c:bb:77: 96:3a:80:5c:c2:1d:d6:23:a4:eb:fc:e1:c5:6d:5d: cf:7f:92:f2:e9:09:0f:9f:ea:e4:01:8a:a3:2a:18: 3c:c4:10:45:96:a8:83:24:f5:cb:15:d0:90:cb:c0: 49:68:eb:ae:6c:5c:a2:19:ec:fc:69:c9:c3:22:78: 9f:d6:1e:2d:88:6d:98:85:19:b0:c9:91:4e:51:29: a4:4b:91:7b:fe:bf:e8:e8:3a:6d:ef:b1:e9:dc:1c: 8a:16:e6:2b:ac:bc:d1:36:6b:eb:31:fe:0b:6f:d3: 84:93:74:e6:6a:a4:15:bb:ed:5c:32:27:26:8c:94: cc:4e:7f:24:f7:97:38:8c:00:2e:ab:db:1c:c7:92: d9:cc:92:a5:d9:31:3c:68:b8:b9:b3:54:a4:60:72: b0:27:39:24:af:b9:a5:38:f6:0b:11:54:6c:98:8c: 87:90:3f:18:bc:2c:70:2e:53:b0:4e:ff:8a:f1:a0: 98:87:5e:67:12:26:0f:87:29:79:57:df:96:5c:41: d5:53:f5:29:eb:7e:4b:31:fc:a0:75:19:f8:40:92: 9e:a5:99:05:a5:58:54:33:84:12:59:28:cf:d4:b5: 4e:4f:45:c0:20:0b:bd:68:bd:6b:b7:8a:c9:ba:db: be:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0B:D8:80:D0:8E:04:9A:03:70:79:06:82:0B:41:DF:8D:B0:A9:1B X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/04E7A654EA9C11EFAC422731C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.90.100.0/24 116.90.105.0/24 116.90.115.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:1b:a0:9c:d2:bb:6e:77:a8:8b:a2:f8:da:7e:3f:b1:48:72: ce:a3:e1:61:12:5e:c3:d2:ab:bc:1d:74:46:83:2a:25:17:03: d5:3e:f5:69:1c:68:86:41:34:f0:a5:68:4d:18:c2:2e:66:69: 30:d3:e3:28:0f:54:62:97:3a:a6:7c:a7:03:95:8d:3d:5f:e2: f5:3a:67:80:fe:68:59:1d:37:49:59:ad:35:0a:2c:9d:bf:50: 54:74:01:c5:69:d2:bb:82:7e:7f:73:92:b6:a7:ec:55:bf:7c: 4e:bf:f0:e5:43:33:4e:d1:0d:51:ab:16:96:59:be:c6:45:54: 6b:8a:6a:3c:34:f5:22:ba:b3:03:58:23:13:db:3d:f0:1b:b2: b6:52:40:65:2f:cd:33:d7:ce:88:18:7b:95:cf:a9:3b:8e:11: 34:4f:c0:e2:21:8c:30:31:de:fd:0a:61:1f:a8:5b:a5:24:83: 17:9a:26:af:b6:ca:f1:d8:28:7c:ff:82:87:cb:d7:ab:a5:06: 48:96:ea:03:e1:fd:6b:ed:56:e4:8c:5c:65:61:ce:a5:78:c6: a2:e1:71:f1:14:a6:58:b2:f6:20:1c:8e:f4:0c:c9:79:33:5d: 99:9a:1c:cd:d1:6c:80:40:2a:f3:e2:c9:ed:5b:ae:a5:24:ea: 97:6d:20:7b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjUwMjE0MDYyMjA5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FlZTExMS1iZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34s9jnPB4sWovA48u3eWOoBcwh3WI6Tr/OHFbV3Pf5Ly6QkPn+rkAYqjKhg8 xBBFlqiDJPXLFdCQy8BJaOuubFyiGez8acnDInif1h4tiG2YhRmwyZFOUSmkS5F7 /r/o6Dpt77Hp3ByKFuYrrLzRNmvrMf4Lb9OEk3TmaqQVu+1cMicmjJTMTn8k95c4 jAAuq9scx5LZzJKl2TE8aLi5s1SkYHKwJzkkr7mlOPYLEVRsmIyHkD8YvCxwLlOw Tv+K8aCYh15nEiYPhyl5V9+WXEHVU/Up635LMfygdRn4QJKepZkFpVhUM4QSWSjP 1LVOT0XAIAu9aL1rt4rJutu+qQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHEL2IDQ jgSaA3B5BoILQd+NsKkbMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvMDRFN0E2NTRF QTlDMTFFRkFDNDIyNzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAB0WmQDBAB0WmkDBAB0WnMwDQYJKoZIhvcNAQELBQADggEB AAsboJzSu253qIui+Np+P7FIcs6j4WESXsPSq7wddEaDKiUXA9U+9WkcaIZBNPCl aE0Ywi5maTDT4ygPVGKXOqZ8pwOVjT1f4vU6Z4D+aFkdN0lZrTUKLJ2/UFR0AcVp 0ruCfn9zkran7FW/fE6/8OVDM07RDVGrFpZZvsZFVGuKajw09SK6swNYIxPbPfAb srZSQGUvzTPXzogYe5XPqTuOETRPwOIhjDAx3v0KYR+oW6UkgxeaJq+2yvHYKHz/ gofL16ulBkiW6gPh/WvtVuSMXGVhzqV4xqLhcfEUpliy9iAcjvQMyXkzXZmaHM3R bIBAKvPiye1brqUk6pdtIHs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:21:52 2025 by rpki-client