$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/27888CE6FB6D11EF8B0AC378C4F9AE02.roa File: 27888CE6FB6D11EF8B0AC378C4F9AE02.roa (raw, json) Hash identifier: SwoWdydjTyjB87GcmJesuDZnK7lMqvQOllCR5999h28= Subject key identifier: B7:4F:DA:3C:89:7E:40:E0:EA:4A:54:DE:59:DD:F7:67:CD:F3:06:33 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 0FA9 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/27888CE6FB6D11EF8B0AC378C4F9AE02.roa Signing time: Fri 07 Mar 2025 15:59:31 +0000 ROA not before: Fri 07 Mar 2025 15:59:31 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 398704 IP address blocks: 139.190.0.0/21 maxlen: 24 139.190.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 20:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4009 (0xfa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134 Validity Not Before: Mar 7 15:59:31 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67cb17e2-183e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:8f:a9:87:a9:d2:6c:37:10:cb:ed:34:1c: 25:b4:bd:28:d8:26:38:3a:82:bc:59:59:38:d7:c3: 21:59:a1:22:41:e1:ce:84:b8:36:aa:97:3a:e2:ad: 8f:eb:9c:40:c7:45:f4:eb:e5:a6:b2:56:a6:3a:67: ed:9c:7f:b3:b1:81:a9:a8:09:ec:f2:d6:81:27:c0: 7c:af:46:26:f8:40:42:95:13:2a:21:77:ab:c9:ea: 5d:cd:37:17:65:d7:0f:34:ba:99:17:2f:3a:a7:14: dd:57:a1:30:96:c0:f1:ec:36:e2:af:0d:33:b7:6f: a5:8a:79:a3:da:b8:d5:20:5d:d9:d7:d0:34:46:d6: 36:aa:d5:40:6e:32:84:99:24:4b:08:7c:f9:04:1d: 4f:0c:52:d5:e9:00:fb:86:87:33:3f:93:d4:e5:9b: d2:78:fd:d5:93:4c:9b:0b:8e:56:70:68:6e:95:d1: 5b:ea:7c:ed:a8:7b:ca:c8:50:64:ef:f8:8e:18:d6: d9:9e:75:1f:c4:c1:88:88:a4:54:e8:cb:01:47:57: 41:a9:e4:54:50:91:f2:ce:e7:53:c0:70:56:28:70: bc:56:fe:4b:ca:1d:ac:59:40:6f:6d:24:57:7f:4f: cf:30:71:5a:ca:87:e4:1f:c4:39:ef:54:03:6e:8d: fd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4F:DA:3C:89:7E:40:E0:EA:4A:54:DE:59:DD:F7:67:CD:F3:06:33 X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/27888CE6FB6D11EF8B0AC378C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.0.0/21 139.190.80.0/21 Signature Algorithm: sha256WithRSAEncryption 29:b8:8f:a0:1e:52:80:52:7e:4d:3f:19:c6:ce:de:1c:48:b9: ae:64:64:85:62:71:f0:52:c8:1a:ec:76:c3:19:94:c4:80:6b: c6:48:1c:c0:fe:6f:50:97:1a:14:79:e1:78:1a:c0:26:d7:60: 88:73:a3:45:09:77:d5:bb:57:0e:80:81:86:c5:72:ee:0c:f8: 84:ce:c6:63:95:56:c5:5d:26:ac:5d:67:e4:5d:d8:cf:2a:8e: a1:79:dc:44:8b:1e:80:e9:70:32:49:3b:75:47:a2:5c:dc:a8: 5c:9c:43:9e:98:b8:30:02:01:65:33:36:d2:cd:03:ef:a9:94: 6c:51:c7:d2:30:a2:2c:85:94:95:48:6c:45:45:c1:9e:b2:0f: 76:c2:94:38:ca:4b:b3:71:b5:e3:11:49:d3:58:e9:51:43:79: 1e:74:da:a8:38:ae:d3:eb:20:78:16:e7:55:23:44:f2:af:82: 29:56:13:0f:56:27:d0:ea:d2:88:3a:4b:76:a1:34:f8:c7:0c: 53:8e:5a:00:56:e4:d6:20:2d:d1:3a:63:1b:60:9f:e5:c9:c9: f3:5b:3a:cd:7d:a9:00:ff:3f:46:52:38:16:4c:5c:a6:64:84: ee:2b:51:68:1a:65:ae:e5:8e:4d:38:7f:6b:b3:b1:2d:d6:4d: 23:66:59:e7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICD6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUwMzA3MTU1OTMxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NiMTdlMi0xODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyraPqYep0mw3EMvtNBwltL0o2CY4OoK8WVk418MhWaEiQeHOhLg2qpc64q2P 65xAx0X06+WmslamOmftnH+zsYGpqAns8taBJ8B8r0Ym+EBClRMqIXeryepdzTcX ZdcPNLqZFy86pxTdV6EwlsDx7Dbirw0zt2+linmj2rjVIF3Z19A0RtY2qtVAbjKE mSRLCHz5BB1PDFLV6QD7hoczP5PU5ZvSeP3Vk0ybC45WcGhuldFb6nztqHvKyFBk 7/iOGNbZnnUfxMGIiKRU6MsBR1dBqeRUUJHyzudTwHBWKHC8Vv5Lyh2sWUBvbSRX f0/PMHFayofkH8Q571QDbo39hwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLdP2jyJ fkDg6kpU3lnd92fN8wYzMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMjc4ODhDRTZG QjZEMTFFRjhCMEFDMzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAOLvgADBAOLvlAwDQYJKoZIhvcNAQELBQADggEBACm4j6Ae UoBSfk0/GcbO3hxIua5kZIVicfBSyBrsdsMZlMSAa8ZIHMD+b1CXGhR54XgawCbX YIhzo0UJd9W7Vw6AgYbFcu4M+ITOxmOVVsVdJqxdZ+Rd2M8qjqF53ESLHoDpcDJJ O3VHolzcqFycQ56YuDACAWUzNtLNA++plGxRx9IwoiyFlJVIbEVFwZ6yD3bClDjK S7NxteMRSdNY6VFDeR502qg4rtPrIHgW51UjRPKvgilWEw9WJ9Dq0og6S3ahNPjH DFOOWgBW5NYgLdE6Yxtgn+XJyfNbOs19qQD/P0ZSOBZMXKZkhO4rUWgaZa7ljk04 f2uzsS3WTSNmWec= -----END CERTIFICATE-----Generated at Thu Mar 13 06:34:15 2025 by rpki-client