$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DC4A492A4E6311EEBED9743CC4F9AE02.roa File: DC4A492A4E6311EEBED9743CC4F9AE02.roa (raw, json) Hash identifier: VPX0H6cdFOsD+zG6jkUQSU97ro/+zyFklQ+WnPjh1dQ= Subject key identifier: 3D:B2:14:DD:AC:A4:9A:FB:56:DA:0F:80:F8:92:82:12:47:5A:20:61 Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Certificate serial: 0992 Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DC4A492A4E6311EEBED9743CC4F9AE02.roa Signing time: Tue 26 Mar 2024 21:10:21 +0000 ROA not before: Tue 26 Mar 2024 21:10:21 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 38566 IP address blocks: 203.78.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2450 (0x992) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB493 Validity Not Before: Mar 26 21:10:21 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660339bc-2044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:d3:1c:a7:a2:c5:9e:47:60:a8:f9:a9:1d: d3:6a:00:f5:3a:86:2f:c4:29:09:ba:8d:15:5d:7c: f2:a3:10:6f:4d:e7:64:c8:23:a1:44:91:8d:2a:8f: eb:6e:5e:3c:72:2b:d1:eb:d5:2b:14:ac:b1:08:bb: b4:eb:af:99:3e:42:37:e1:6e:c6:ce:a2:4c:d7:38: d3:b2:cc:5b:9a:91:61:5b:99:1b:3b:48:8e:c4:68: 20:b5:8a:39:e1:9a:1f:58:60:f6:af:9e:71:7c:6b: 1a:51:a1:6b:84:16:07:5e:0a:3f:b4:06:df:a2:64: 4f:37:cc:4f:2d:65:3f:7e:31:3f:6d:ca:37:53:32: 6e:6d:0d:4d:ba:74:5c:c2:e7:be:ed:21:fe:d3:c2: b2:93:db:89:cf:61:9e:83:03:ed:d2:ee:0c:da:16: 38:fb:d6:ee:42:05:0a:e2:77:d4:db:07:11:0f:b6: 7e:c9:be:29:7f:20:1d:db:01:3a:e8:ff:59:5d:35: 8c:43:3f:c0:fe:ff:7b:63:16:96:27:3a:28:98:11: 0d:56:2f:36:2b:82:bc:4d:1a:73:46:54:9a:1d:fd: b0:90:1e:5f:02:e9:57:99:cc:ca:d6:38:52:b3:a5: a2:74:86:8d:36:7d:14:dd:e0:60:0c:6d:f5:81:93: e6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B2:14:DD:AC:A4:9A:FB:56:DA:0F:80:F8:92:82:12:47:5A:20:61 X509v3 Authority Key Identifier: keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DC4A492A4E6311EEBED9743CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.78.204.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:5b:5c:ca:51:f6:1d:96:bd:b0:1a:39:1f:20:ff:13:12:9a: 7c:31:5a:c3:b8:07:26:01:a3:c1:7c:5b:7d:93:b7:a5:2e:cc: 76:30:a3:b5:eb:cd:90:4d:4d:4b:b3:dd:f1:65:c6:19:bc:39: dc:ba:a4:df:7f:b8:4c:bc:a1:4c:52:6b:9e:1d:81:18:eb:3a: 2a:31:0f:00:cf:95:af:fd:b3:f8:f0:d4:57:6f:23:68:ec:73: b0:36:bc:34:c7:3d:b3:05:50:ea:f0:fd:ce:6f:97:e6:bf:d4: 0f:e4:d6:55:74:1b:9b:9d:75:37:12:c7:e5:24:3f:2c:79:48: 94:ea:d4:9a:86:2f:b4:78:cd:99:56:99:a8:ed:59:c8:63:cf: 4e:17:cf:ad:c7:b0:18:36:ab:3d:58:27:ce:35:93:62:0f:05: d2:86:8a:4e:dd:24:4c:d7:d5:4b:e7:83:b0:ee:d9:ba:14:60: ed:88:9b:0c:e2:6b:46:39:88:e2:29:c5:e9:6d:a8:59:96:4b: 9d:86:de:d6:dd:05:e9:20:67:1a:a8:b6:88:1c:15:05:2b:fe: d9:df:30:a4:2d:6c:a5:1e:0c:b0:4c:3f:11:85:3c:1c:46:c8: 43:80:38:9d:07:d0:57:a7:fb:a0:80:19:d6:61:1c:b9:e0:ef: 7f:9d:ed:2e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4 M0NCRTE4NjcwHhcNMjQwMzI2MjExMDIxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjAzMzliYy0yMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwx/THKeixZ5HYKj5qR3TagD1OoYvxCkJuo0VXXzyoxBvTedkyCOhRJGNKo/r bl48civR69UrFKyxCLu066+ZPkI34W7GzqJM1zjTssxbmpFhW5kbO0iOxGggtYo5 4ZofWGD2r55xfGsaUaFrhBYHXgo/tAbfomRPN8xPLWU/fjE/bco3UzJubQ1NunRc wue+7SH+08Kyk9uJz2GegwPt0u4M2hY4+9buQgUK4nfU2wcRD7Z+yb4pfyAd2wE6 6P9ZXTWMQz/A/v97YxaWJzoomBENVi82K4K8TRpzRlSaHf2wkB5fAulXmczK1jhS s6WidIaNNn0U3eBgDG31gZPmnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD2yFN2s pJr7VtoPgPiSghJHWiBhMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4 RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI0OTMvNUZDQUI2NzI2OEYzMTFFQTgzMkREQjM3QzRGOUFFMDIvREM0QTQ5MkE0 RTYzMTFFRUJFRDk3NDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALLTswwDQYJKoZIhvcNAQELBQADggEBAJtbXMpR9h2WvbAa OR8g/xMSmnwxWsO4ByYBo8F8W32Tt6UuzHYwo7XrzZBNTUuz3fFlxhm8Ody6pN9/ uEy8oUxSa54dgRjrOioxDwDPla/9s/jw1FdvI2jsc7A2vDTHPbMFUOrw/c5vl+a/ 1A/k1lV0G5uddTcSx+UkPyx5SJTq1JqGL7R4zZlWmajtWchjz04Xz63HsBg2qz1Y J841k2IPBdKGik7dJEzX1Uvng7Du2boUYO2Imwzia0Y5iOIpxeltqFmWS52G3tbd BekgZxqotogcFQUr/tnfMKQtbKUeDLBMPxGFPBxGyEOAOJ0H0Fen+6CAGdZhHLng 73+d7S4= -----END CERTIFICATE-----Generated at Sun Feb 16 20:40:15 2025 by rpki-client