$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/FB9C6A1A77CA11EA95ECC830C4F9AE02.roa File: FB9C6A1A77CA11EA95ECC830C4F9AE02.roa (raw, json) Hash identifier: Skuyc2fGs1BUBmTdceynpQf5LoH1L9ZLvXMgJ7JollU= Subject key identifier: F6:4C:90:01:9A:F6:B8:8C:28:4E:AA:44:17:B1:B2:65:23:25:07:DE Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0EB9 Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/FB9C6A1A77CA11EA95ECC830C4F9AE02.roa Signing time: Tue 14 Jan 2025 18:16:21 +0000 ROA not before: Tue 14 Jan 2025 18:16:21 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 26344 IP address blocks: 125.252.78.0/24 maxlen: 24 210.57.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 17:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3769 (0xeb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0 Validity Not Before: Jan 14 18:16:21 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6786a9f5-cf8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:c3:1d:1a:89:95:5c:8e:b3:62:6e:7f:d8: ee:0d:ba:75:dd:59:30:29:bd:1d:75:ba:89:25:56: d3:3b:2e:4f:c1:01:c5:2b:45:42:3a:c7:f2:69:90: 73:18:15:c4:a8:ba:40:ff:2d:8d:7a:b3:b1:3a:88: 6b:7a:f7:54:82:47:59:ee:17:eb:d2:94:4f:61:25: 30:59:80:30:4f:bd:eb:b5:70:81:ce:a6:51:f6:87: fe:5b:d3:c1:5a:66:bd:6b:66:20:2c:ef:f7:34:4d: f3:6f:a7:93:ac:92:02:38:86:71:2f:3f:94:bf:df: 62:f9:2e:bc:1d:55:23:df:63:dd:da:e1:9c:7b:2f: a9:92:3d:ff:aa:2b:a2:9c:0f:63:89:4f:92:c0:79: 65:fb:78:53:b7:b0:0c:00:09:a9:7f:53:cb:86:02: a8:6d:5b:b3:11:82:52:57:a7:f6:61:6f:8b:24:8b: ab:37:2c:05:13:4f:d7:8f:19:26:b3:5e:4b:a6:21: f0:f0:f1:ae:eb:78:42:8d:81:35:62:ea:17:1d:6c: aa:24:a3:4f:ac:85:9f:89:a4:34:b7:c3:ba:f3:60: 86:77:13:da:b2:4b:2b:30:17:b5:73:aa:c0:e7:82: f7:7e:65:5a:97:a1:5b:fd:37:10:6d:df:54:22:fa: eb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4C:90:01:9A:F6:B8:8C:28:4E:AA:44:17:B1:B2:65:23:25:07:DE X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/FB9C6A1A77CA11EA95ECC830C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.252.78.0/24 210.57.15.0/24 Signature Algorithm: sha256WithRSAEncryption 02:4f:ef:6c:39:fb:a3:f4:fd:e2:a8:41:d2:bd:ce:e6:98:68: 44:15:d6:09:55:78:34:c3:b4:45:e6:53:e7:af:40:b3:b7:0e: 9a:1c:60:df:54:58:1f:52:0a:a1:d8:28:78:76:7e:63:07:03: 17:ad:f2:30:e4:6e:a7:35:83:55:f9:4d:09:84:b2:e3:02:11: c1:2f:be:5a:69:9b:82:d6:16:a9:4d:d1:cc:0f:4f:ef:bd:f4: b2:e3:bb:cf:72:bb:8c:d2:db:55:e2:a9:83:0b:bf:c2:ba:3b: 95:06:b6:9a:7c:20:db:cb:70:17:63:91:bb:df:e5:f6:f2:32: 41:9a:39:f6:b6:95:e2:c0:52:fd:a0:07:7c:b1:b6:12:c8:a7: fb:e8:ca:ce:5d:87:70:7f:2d:36:15:98:9f:a5:21:6a:f1:78: 5b:53:ae:ac:b2:31:79:04:55:75:c2:6f:d9:25:0b:db:fa:8e: 0f:d7:fa:1e:c6:e7:19:92:a8:03:ff:5a:32:9a:9e:c1:f7:53: 03:ff:6a:86:66:20:04:f1:ea:da:b1:2a:fb:db:15:65:0a:3d: 11:d3:88:78:1f:d0:30:c4:25:71:1c:37:e6:59:0d:43:93:96: 91:a5:30:b8:a4:c5:bc:34:1d:3f:30:a8:23:f4:d8:97:06:11: 91:08:d7:9f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjUwMTE0MTgxNjIxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg2YTlmNS1jZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArujDHRqJlVyOs2Juf9juDbp13VkwKb0ddbqJJVbTOy5PwQHFK0VCOsfyaZBz GBXEqLpA/y2NerOxOohrevdUgkdZ7hfr0pRPYSUwWYAwT73rtXCBzqZR9of+W9PB Wma9a2YgLO/3NE3zb6eTrJICOIZxLz+Uv99i+S68HVUj32Pd2uGcey+pkj3/qiui nA9jiU+SwHll+3hTt7AMAAmpf1PLhgKobVuzEYJSV6f2YW+LJIurNywFE0/Xjxkm s15LpiHw8PGu63hCjYE1YuoXHWyqJKNPrIWfiaQ0t8O682CGdxPasksrMBe1c6rA 54L3fmVal6Fb/TcQbd9UIvrrhwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPZMkAGa 9riMKE6qRBexsmUjJQfeMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvRkI5QzZBMUE3 N0NBMTFFQTk1RUNDODMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB9/E4DBADSOQ8wDQYJKoZIhvcNAQELBQADggEBAAJP72w5 +6P0/eKoQdK9zuaYaEQV1glVeDTDtEXmU+evQLO3DpocYN9UWB9SCqHYKHh2fmMH Axet8jDkbqc1g1X5TQmEsuMCEcEvvlppm4LWFqlN0cwPT++99LLju89yu4zS21Xi qYMLv8K6O5UGtpp8INvLcBdjkbvf5fbyMkGaOfa2leLAUv2gB3yxthLIp/voys5d h3B/LTYVmJ+lIWrxeFtTrqyyMXkEVXXCb9klC9v6jg/X+h7G5xmSqAP/WjKansH3 UwP/aoZmIATx6tqxKvvbFWUKPRHTiHgf0DDEJXEcN+ZZDUOTlpGlMLikxbw0HT8w qCP02JcGEZEI158= -----END CERTIFICATE-----Generated at Mon Apr 7 04:28:48 2025 by rpki-client