$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DD79FFEEF33411EF850AD53AC4F9AE02.roa File: DD79FFEEF33411EF850AD53AC4F9AE02.roa (raw, json) Hash identifier: f2/gu2LlUkaXF0d4zgRr/z1sGGtFedi/6Y1PjUwb3kE= Subject key identifier: CC:D8:EB:1E:B2:54:F5:44:64:81:21:AA:EF:8C:02:BD:F6:68:16:28 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 0F14 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DD79FFEEF33411EF850AD53AC4F9AE02.roa Signing time: Tue 25 Feb 2025 04:56:25 +0000 ROA not before: Tue 25 Feb 2025 04:56:25 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 46841 IP address blocks: 139.190.16.0/24 maxlen: 24 139.190.18.0/24 maxlen: 24 139.190.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 20:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3860 (0xf14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134 Validity Not Before: Feb 25 04:56:25 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67bd4d79-c077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:fd:04:a5:19:00:de:38:10:f6:d7:cb:02: 3f:80:84:67:a5:e6:9b:1e:16:7a:10:6a:5a:0d:33: 8b:a0:3b:17:c3:39:7e:5c:62:76:97:05:f2:55:6b: 5a:2d:04:5d:e1:f3:73:b8:bc:c9:47:7e:9c:f7:e0: cb:b2:8c:5b:32:44:11:95:60:88:0c:55:94:d5:d9: 4d:2b:3c:75:9c:20:8d:09:93:24:1e:b4:4c:cc:32: 21:65:06:f4:0a:8c:34:ed:44:8c:e5:71:5a:2e:20: ff:8a:b8:5b:49:96:5d:57:ca:26:68:b3:10:c7:f0: d8:59:04:9c:3a:4b:e3:cc:11:4d:20:4f:e2:6d:e0: 5e:98:83:a0:2c:98:df:a5:19:9d:d4:53:0a:64:68: f4:49:a2:bb:f5:e7:a0:5f:4d:32:9f:21:ac:d0:e9: d7:6a:9b:cd:4e:1f:7a:eb:c9:40:71:04:26:4a:9d: 3a:e4:9f:b2:62:3c:2c:c0:d3:e6:fa:02:21:be:aa: 5b:2f:70:79:17:b6:1a:0d:0a:78:68:94:e3:28:9a: 7c:03:3a:29:fc:1d:1e:5e:e5:13:a2:c7:f0:87:90: b3:3c:c2:ea:18:b3:d0:2d:91:d9:a6:d9:2e:d4:5b: ad:b0:d5:99:69:5e:19:ed:e9:9d:fe:0a:a9:86:bf: 70:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D8:EB:1E:B2:54:F5:44:64:81:21:AA:EF:8C:02:BD:F6:68:16:28 X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DD79FFEEF33411EF850AD53AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.16.0/24 139.190.18.0/24 139.190.28.0/24 Signature Algorithm: sha256WithRSAEncryption 96:cf:53:39:fd:2e:76:25:d6:55:d9:1b:c0:4c:03:8a:10:67: 39:2d:28:2e:a0:82:03:83:6d:d9:90:ef:39:0f:da:02:e2:06: 0a:e2:1c:fb:a5:e1:e2:17:c2:d7:bd:30:5a:d5:33:5e:dd:c2: 22:04:8c:f3:ce:31:84:9c:27:7a:24:9c:94:25:4b:24:f6:14: ba:3d:bd:3e:f4:a6:da:ef:f8:77:b6:83:ae:3f:14:c9:c9:86: 2e:c7:b2:39:a5:12:37:3b:b9:bc:0e:3a:6d:05:99:fc:ce:7f: 6b:98:93:7a:fe:c8:0b:0b:c2:f8:0c:52:d1:5b:cd:ba:b4:84: 39:1c:38:e5:7d:25:47:a5:f0:7f:e5:fd:50:cb:c2:32:83:76: 50:c5:3d:9b:cc:ee:72:e7:99:66:9f:a5:ac:48:c6:b2:10:f9: b1:3c:d9:1e:b7:2e:cd:08:cb:c1:fa:a0:1b:e7:8a:cc:15:13: f3:bd:fa:74:77:96:64:f4:9a:24:e2:6a:37:15:2c:52:16:92: 41:1e:fe:97:81:a4:41:7d:8b:0a:57:91:9c:49:2c:f0:a7:61: e0:cf:7d:5f:d5:13:cd:0f:31:c1:81:7a:08:c2:27:96:31:35: 67:6d:68:da:4a:88:bc:8e:75:bd:4d:a4:75:2d:78:d1:8b:d8: a0:22:ff:75 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUwMjI1MDQ1NjI1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JkNGQ3OS1jMDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yH9BKUZAN44EPbXywI/gIRnpeabHhZ6EGpaDTOLoDsXwzl+XGJ2lwXyVWta LQRd4fNzuLzJR36c9+DLsoxbMkQRlWCIDFWU1dlNKzx1nCCNCZMkHrRMzDIhZQb0 Cow07USM5XFaLiD/irhbSZZdV8omaLMQx/DYWQScOkvjzBFNIE/ibeBemIOgLJjf pRmd1FMKZGj0SaK79eegX00ynyGs0OnXapvNTh9668lAcQQmSp065J+yYjwswNPm +gIhvqpbL3B5F7YaDQp4aJTjKJp8Azop/B0eXuUTosfwh5CzPMLqGLPQLZHZptku 1FutsNWZaV4Z7emd/gqphr9wKQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMzY6x6y VPVEZIEhqu+MAr32aBYoMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvREQ3OUZGRUVG MzM0MTFFRjg1MEFENTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBACLvhADBACLvhIDBACLvhwwDQYJKoZIhvcNAQELBQADggEB AJbPUzn9LnYl1lXZG8BMA4oQZzktKC6gggODbdmQ7zkP2gLiBgriHPul4eIXwte9 MFrVM17dwiIEjPPOMYScJ3oknJQlSyT2FLo9vT70ptrv+He2g64/FMnJhi7Hsjml Ejc7ubwOOm0FmfzOf2uYk3r+yAsLwvgMUtFbzbq0hDkcOOV9JUel8H/l/VDLwjKD dlDFPZvM7nLnmWafpaxIxrIQ+bE82R63Ls0Iy8H6oBvniswVE/O9+nR3lmT0miTi ajcVLFIWkkEe/peBpEF9iwpXkZxJLPCnYeDPfV/VE80PMcGBegjCJ5YxNWdtaNpK iLyOdb1NpHUteNGL2KAi/3U= -----END CERTIFICATE-----Generated at Thu Mar 13 06:40:13 2025 by rpki-client