$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/24B754BA9B7911EFBA9A2A42C4F9AE02.roa File: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (raw, json) Hash identifier: OE0GQmtT1oUSAp1PhOfnIVxi4IcaA0X4EOEnweGkcfk= Subject key identifier: 3C:69:6E:3B:D4:AB:FA:C4:38:9D:44:C8:D4:0C:E5:4C:E9:FD:A8:F8 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 1101 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/24B754BA9B7911EFBA9A2A42C4F9AE02.roa Signing time: Mon 02 Jun 2025 21:07:04 +0000 ROA not before: Mon 02 Jun 2025 21:07:04 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 139.190.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 20:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4353 (0x1101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Jun 2 21:07:04 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683e1278-9e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:81:e8:4b:9c:af:06:ae:3d:75:f9:e9:6d:bf: 72:21:38:46:61:84:0f:b9:0f:ca:df:9c:da:95:8f: 3b:38:7d:5f:5d:fa:8e:13:49:db:3c:ac:e5:ca:91: 90:99:79:d3:dd:53:29:c9:98:40:68:38:c8:8d:1a: 3f:e4:71:44:08:4b:e5:0a:57:59:d2:dc:45:67:06: 02:09:e1:f5:d9:67:ca:45:dd:78:6d:d4:ac:41:0c: c6:35:75:1e:d8:71:a6:0c:92:4e:18:ff:7c:48:80: 2e:6f:16:43:a3:e1:6c:e7:ee:94:c3:3e:2a:2f:73: e0:07:a3:32:38:a8:db:e1:10:0a:4a:31:80:ee:bf: b5:60:fb:a7:29:ed:89:1f:00:b1:86:bf:ef:3d:fa: b0:e1:c3:73:e3:fb:bc:2f:df:44:a9:4c:e0:1d:74: 49:06:fb:82:b0:7e:2b:bd:9a:8c:5c:be:09:80:70: 75:68:55:cb:f0:ea:3e:89:40:a7:5a:ab:4c:1c:79: 02:05:74:9a:be:3d:a0:bc:7b:31:ba:11:e7:42:9b: 9b:02:5a:69:35:04:93:92:50:2d:00:3b:e8:ff:00: 7f:e0:dd:ad:c6:94:97:18:ed:22:2f:19:8e:42:fb: 16:c3:7b:77:6b:1b:c3:6e:0e:17:92:97:9d:70:9f: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:69:6E:3B:D4:AB:FA:C4:38:9D:44:C8:D4:0C:E5:4C:E9:FD:A8:F8 X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/24B754BA9B7911EFBA9A2A42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.240.0/20 Signature Algorithm: sha256WithRSAEncryption d5:9e:52:7d:f6:55:6f:12:fa:51:3b:a3:8e:3f:97:bc:c7:87: a8:c1:7e:24:f7:af:cb:f6:5d:39:c6:da:11:a5:e3:f5:0b:47: 1e:c7:9e:4c:2e:44:5b:19:91:bb:c9:0d:01:fe:d5:57:0d:1b: 23:3c:3b:d5:ef:5b:a0:b9:80:5a:81:04:81:50:00:34:f9:c6: 3e:09:e2:c8:43:64:20:39:23:fe:06:c0:69:45:7e:c3:22:0a: 2d:e5:2d:87:99:e1:39:29:e0:79:40:12:c5:d2:d7:99:73:cb: cd:77:f0:41:51:8c:b4:b9:5d:ca:36:e4:d7:93:65:db:d0:37: cc:4f:69:a1:12:56:77:a4:3d:1e:cc:7c:02:99:ba:9a:e7:7a: bd:22:d4:9e:97:98:1c:cc:16:51:05:7d:47:1c:cf:ab:60:d3: 4d:2c:1c:78:b2:54:2b:3e:73:6c:10:f8:cb:74:6d:0e:b1:0f: 0b:3e:0c:26:83:cd:31:51:b8:63:d7:48:34:fb:37:c4:4a:77: 9a:82:29:b2:09:83:ac:0b:7d:60:03:25:b5:27:f5:4c:44:b7: 1d:ff:e4:4c:95:a5:bd:2d:5c:b2:39:7a:c4:d0:60:18:ce:15: 14:70:ed:a4:04:35:12:4f:c0:76:1f:93:4f:6e:ff:7c:75:db: 4f:3b:9e:b3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUwNjAyMjEwNzA0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlMTI3OC05ZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIHoS5yvBq49dfnpbb9yIThGYYQPuQ/K35zalY87OH1fXfqOE0nbPKzlypGQ mXnT3VMpyZhAaDjIjRo/5HFECEvlCldZ0txFZwYCCeH12WfKRd14bdSsQQzGNXUe 2HGmDJJOGP98SIAubxZDo+Fs5+6Uwz4qL3PgB6MyOKjb4RAKSjGA7r+1YPunKe2J HwCxhr/vPfqw4cNz4/u8L99EqUzgHXRJBvuCsH4rvZqMXL4JgHB1aFXL8Oo+iUCn WqtMHHkCBXSavj2gvHsxuhHnQpubAlppNQSTklAtADvo/wB/4N2txpSXGO0iLxmO QvsWw3t3axvDbg4XkpedcJ+omQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDxpbjvU q/rEOJ1EyNQM5Uzp/aj4MB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMjRCNzU0QkE5 Qjc5MTFFRkJBOUEyQTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBASLvvAwDQYJKoZIhvcNAQELBQADggEBANWeUn32VW8S+lE7 o44/l7zHh6jBfiT3r8v2XTnG2hGl4/ULRx7HnkwuRFsZkbvJDQH+1VcNGyM8O9Xv W6C5gFqBBIFQADT5xj4J4shDZCA5I/4GwGlFfsMiCi3lLYeZ4Tkp4HlAEsXS15lz y8138EFRjLS5Xco25NeTZdvQN8xPaaESVnekPR7MfAKZuprner0i1J6XmBzMFlEF fUccz6tg000sHHiyVCs+c2wQ+Mt0bQ6xDws+DCaDzTFRuGPXSDT7N8RKd5qCKbIJ g6wLfWADJbUn9UxEtx3/5EyVpb0tXLI5esTQYBjOFRRw7aQENRJPwHYfk09u/3x1 2087nrM= -----END CERTIFICATE-----Generated at Thu Jun 5 19:16:15 2025 by rpki-client