$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/38556AC6ED7711EEA7B2AF12C4F9AE02.roa File: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (raw, json) Hash identifier: x08O0LKYaX3hn9bkCscla0qFn3NKZcPh8LO75bK0AIc= Subject key identifier: 2C:A7:69:F9:E9:52:76:1E:1E:7E:70:41:0F:1E:43:78:89:57:DC:A9 Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: B9 Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/38556AC6ED7711EEA7B2AF12C4F9AE02.roa Signing time: Fri 07 Mar 2025 05:21:44 +0000 ROA not before: Fri 07 Mar 2025 05:21:44 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 9919 IP address blocks: 202.58.21.0/24 maxlen: 24 202.58.23.0/24 maxlen: 24 202.58.24.0/24 maxlen: 24 202.58.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959 Validity Not Before: Mar 7 05:21:44 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ca8267-cf07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:ae:db:28:ec:8c:bd:52:61:f5:e1:57:a8: f1:2b:61:8d:f2:20:1a:cd:42:e5:0d:7f:9a:31:92: 12:59:3f:a4:de:28:e8:49:69:4c:4f:a0:e2:32:36: 22:1e:65:cc:52:40:10:57:19:55:75:37:cd:fb:0a: 75:25:cd:20:a1:61:cc:71:22:27:07:fc:67:79:e4: d4:4e:e8:58:b1:40:4c:40:23:c0:12:c1:e3:7f:02: f1:56:33:9c:f2:ee:27:c3:ce:fb:93:26:a9:78:f5: ff:a4:1d:c5:11:5e:06:a7:46:8a:2e:77:30:7f:02: 08:91:d1:99:f6:6d:0e:04:c9:cc:65:f9:4a:a3:51: ee:9f:4e:dd:ac:a5:92:d6:c7:c3:d6:9c:d4:d7:ee: 62:d5:36:46:45:3d:dc:36:f1:f2:41:85:0c:0e:68: 0b:01:66:db:f3:5c:5e:58:49:f4:a9:21:ca:c3:67: ca:a4:80:9a:73:3f:8c:81:22:dd:83:43:47:b4:c9: 93:a4:74:25:c6:9a:22:ae:41:9e:2a:05:6c:cc:cd: 6a:08:78:c1:d3:6d:3a:e9:59:1f:95:e8:0a:39:3d: 7a:6e:6f:fa:77:a1:a0:f9:ef:b5:09:11:a2:a9:15: 30:64:e1:d6:92:19:94:ff:0f:f0:8f:49:0b:91:26: d9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A7:69:F9:E9:52:76:1E:1E:7E:70:41:0F:1E:43:78:89:57:DC:A9 X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/38556AC6ED7711EEA7B2AF12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.58.21.0/24 202.58.23.0-202.58.25.255 Signature Algorithm: sha256WithRSAEncryption 98:51:0c:07:fd:ec:11:99:69:c7:95:58:b8:2c:6b:03:c4:23: de:6d:74:56:42:6d:f8:54:18:4b:98:c4:e4:d2:25:e3:94:ff: 37:a2:1c:63:5d:ac:d9:d0:13:2c:6d:bb:fe:78:a0:11:a7:40: 60:52:61:78:3d:bf:2a:ba:16:98:6f:83:c3:e2:c7:c1:39:f1: 44:71:ef:dc:d3:07:7e:13:d9:81:40:b7:62:52:fc:90:b6:4f: 52:7d:bd:5e:1e:67:b5:69:b5:4c:3e:42:3b:ac:be:48:0c:2b: 4c:88:19:d0:7a:78:e8:9b:d9:c5:37:a9:d4:d0:a3:ef:0a:69: f2:5f:e5:94:f6:9a:bb:8b:15:fd:59:d8:09:3d:61:04:6e:62: de:d7:39:2b:27:08:43:6d:30:ac:30:b6:be:e7:5b:2f:c3:39: b1:1d:95:48:ef:d3:ad:9f:69:85:b7:a7:3d:41:5f:68:db:0a: 6d:06:0c:eb:dd:a6:00:cb:01:58:ec:35:6c:6c:51:39:38:12: 95:d8:79:2c:a4:24:98:11:39:89:23:d7:04:d3:aa:fe:8c:db: de:00:ec:e1:15:b0:c8:6c:1a:5e:75:94:e7:c3:8a:bd:7c:92: b5:d7:94:38:db:8c:1a:f0:52:de:01:33:12:19:32:74:d2:7d: f5:64:e0:c9 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NTkxMTAvBgNVBAUTKEQ2RUMyMkE3M0E1OUQyQUE5NTU5OTc0NzAyNzlDNjYy RDExMDg4RjIwHhcNMjUwMzA3MDUyMTQ0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhODI2Ny1jZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweWu2yjsjL1SYfXhV6jxK2GN8iAazULlDX+aMZISWT+k3ijoSWlMT6DiMjYi HmXMUkAQVxlVdTfN+wp1Jc0goWHMcSInB/xneeTUTuhYsUBMQCPAEsHjfwLxVjOc 8u4nw877kyapePX/pB3FEV4Gp0aKLncwfwIIkdGZ9m0OBMnMZflKo1Hun07drKWS 1sfD1pzU1+5i1TZGRT3cNvHyQYUMDmgLAWbb81xeWEn0qSHKw2fKpICacz+MgSLd g0NHtMmTpHQlxpoirkGeKgVszM1qCHjB02066VkflegKOT16bm/6d6Gg+e+1CRGi qRUwZOHWkhmU/w/wj0kLkSbZowIDAQABo4ICozCCAp8wHQYDVR0OBBYEFCynafnp UnYeHn5wQQ8eQ3iJV9ypMB8GA1UdIwQYMBaAFNbsIqc6WdKqlVmXRwJ5xmLREIjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9BQTRDNzdFQ0VE NzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBxcVZXWmRIQW5uR1l0RVFp UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U5NTkvQUE0Qzc3RUNFRDc2MTFFRUFEODcxQTExQzRGOUFFMDIvMzg1NTZBQzZF RDc3MTFFRUE3QjJBRjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBADKOhUwDAMEAMo6FwMEAco6GDANBgkqhkiG9w0BAQsFAAOC AQEAmFEMB/3sEZlpx5VYuCxrA8Qj3m10VkJt+FQYS5jE5NIl45T/N6IcY12s2dAT LG27/nigEadAYFJheD2/KroWmG+Dw+LHwTnxRHHv3NMHfhPZgUC3YlL8kLZPUn29 Xh5ntWm1TD5CO6y+SAwrTIgZ0Hp46JvZxTep1NCj7wpp8l/llPaau4sV/VnYCT1h BG5i3tc5KycIQ20wrDC2vudbL8M5sR2VSO/TrZ9phbenPUFfaNsKbQYM692mAMsB WOw1bGxROTgSldh5LKQkmBE5iSPXBNOq/ozb3gDs4RWwyGwaXnWU58OKvXyStdeU ONuMGvBS3gEzEhkydNJ99WTgyQ== -----END CERTIFICATE-----Generated at Thu Mar 13 21:51:42 2025 by rpki-client