$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A2FB9A52A0B011EF8419E529C4F9AE02.roa File: A2FB9A52A0B011EF8419E529C4F9AE02.roa (raw, json) Hash identifier: gD4ZHBqWUOM9sK7E8WYIzo7IqyPnOvv/bBMchnzR9IA= Subject key identifier: FF:A9:93:EB:ED:71:2D:7A:0F:B2:36:32:E6:3D:CE:B7:FA:4F:AC:C8 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 1D90 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A2FB9A52A0B011EF8419E529C4F9AE02.roa Signing time: Wed 20 Nov 2024 10:46:42 +0000 ROA not before: Wed 20 Nov 2024 10:46:42 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 10753 IP address blocks: 115.167.1.0/24 maxlen: 24 115.167.24.0/24 maxlen: 24 115.167.25.0/24 maxlen: 24 115.167.26.0/24 maxlen: 24 115.167.27.0/24 maxlen: 24 115.167.100.0/24 maxlen: 24 115.167.104.0/22 maxlen: 24 115.167.112.0/22 maxlen: 24 175.110.72.0/22 maxlen: 24 175.110.84.0/22 maxlen: 24 175.110.96.0/24 maxlen: 24 180.178.151.0/24 maxlen: 24 223.29.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7568 (0x1d90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134 Validity Not Before: Nov 20 10:46:42 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=673dbe12-1566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:84:0f:a1:35:f4:aa:ec:41:4b:a8:24:8e: a4:ac:8f:c2:d5:b2:e9:57:8a:d5:74:a8:6d:b5:aa: fb:14:ff:1a:23:84:71:10:2b:9c:20:9f:2f:7f:19: ad:e8:bf:52:11:9e:79:6d:f8:0f:7e:eb:fb:9c:c6: 34:d2:55:2c:55:0a:cf:36:2f:d1:6c:d2:ae:b5:16: 90:3e:00:2f:fb:20:a2:a9:6c:a7:a4:f4:f5:60:c8: 30:4a:92:c0:53:14:c2:55:ca:cc:76:4f:f5:9c:80: e9:01:d5:ac:5b:7e:fd:0d:9d:7d:75:16:b5:0c:1d: cf:94:2b:74:14:9a:f2:5e:2c:4e:35:96:b7:13:e2: 3c:81:25:10:69:8c:9c:6d:63:5f:d1:0b:d1:fa:62: 7e:be:8a:6e:f9:31:fe:69:fb:d0:23:4c:da:ee:db: ca:9e:e0:98:46:24:c5:2e:f8:eb:56:0a:f8:cb:49: 65:88:29:87:89:9e:bc:af:b7:cb:5f:94:a1:38:61: 0e:0b:cd:59:a2:7b:5b:61:af:ab:37:05:0f:a0:ec: 07:4a:10:fb:5c:d9:4b:12:e1:72:c1:db:b2:b0:8f: e4:8d:29:d7:77:e2:dc:49:59:cb:73:c9:0b:f8:13: 39:02:73:ab:46:7d:01:0b:70:61:4e:90:6f:fc:8b: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A9:93:EB:ED:71:2D:7A:0F:B2:36:32:E6:3D:CE:B7:FA:4F:AC:C8 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A2FB9A52A0B011EF8419E529C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.167.1.0/24 115.167.24.0/22 115.167.100.0/24 115.167.104.0/22 115.167.112.0/22 175.110.72.0/22 175.110.84.0/22 175.110.96.0/24 180.178.151.0/24 223.29.227.0/24 Signature Algorithm: sha256WithRSAEncryption 66:15:5c:2e:ff:71:a7:4c:8f:12:13:80:41:01:4e:d5:e4:15: 35:ea:ec:4f:67:26:43:b6:a8:7d:7e:f0:76:7a:d3:2f:f3:fe: 54:b2:88:b7:c7:ff:24:52:c8:58:ab:6d:7d:e3:c5:06:71:e1: 1b:6d:f3:34:9c:06:33:7d:23:49:4c:e8:b5:d1:66:96:42:be: c8:7d:20:e5:c4:13:bc:a0:9f:c1:43:f1:ce:41:56:62:24:73: 9b:2d:52:f6:72:4e:61:ac:4e:ab:b0:21:21:3c:d9:8b:0a:bb: a2:9b:d0:13:b0:59:fe:20:ad:80:ff:1b:a3:fd:82:4f:65:71: 2c:40:fd:bf:d7:dd:c2:d7:ad:3c:e4:c1:fe:cb:3d:fe:8d:a2: 71:ec:ca:29:54:ac:7a:1f:e4:47:65:8d:10:97:1f:b8:53:3c: 0e:be:29:9d:b0:f2:4d:d5:5a:88:f0:00:4b:cb:41:3c:54:02: 1a:de:4c:56:47:44:a5:82:42:9f:6b:18:6b:40:17:73:52:54: 4f:98:ef:93:1c:fd:f5:15:a1:f0:ad:cc:54:02:0b:c2:dc:3e: e6:61:dd:a2:ee:88:4a:e6:b6:4d:97:41:6a:27:37:c4:63:59: 75:96:f4:8d:da:5e:f7:1c:76:b1:53:1c:c9:94:b2:a1:7e:dc: 0d:de:df:f4 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgICHZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjQxMTIwMTA0NjQyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNkYmUxMi0xNTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVyED6E19KrsQUuoJI6krI/C1bLpV4rVdKhttar7FP8aI4RxECucIJ8vfxmt 6L9SEZ55bfgPfuv7nMY00lUsVQrPNi/RbNKutRaQPgAv+yCiqWynpPT1YMgwSpLA UxTCVcrMdk/1nIDpAdWsW379DZ19dRa1DB3PlCt0FJryXixONZa3E+I8gSUQaYyc bWNf0QvR+mJ+vopu+TH+afvQI0za7tvKnuCYRiTFLvjrVgr4y0lliCmHiZ68r7fL X5ShOGEOC81ZontbYa+rNwUPoOwHShD7XNlLEuFywduysI/kjSnXd+LcSVnLc8kL +BM5AnOrRn0BC3BhTpBv/IvLvQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFP+pk+vt cS16D7I2MuY9zrf6T6zIMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQTJGQjlBNTJB MEIwMTFFRjg0MTlFNTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVQYIKwYBBQUHAQcBAf8E RjBEMEIEAgABMDwDBABzpwEDBAJzpxgDBABzp2QDBAJzp2gDBAJzp3ADBAKvbkgD BAKvblQDBACvbmADBAC0spcDBADfHeMwDQYJKoZIhvcNAQELBQADggEBAGYVXC7/ cadMjxITgEEBTtXkFTXq7E9nJkO2qH1+8HZ60y/z/lSyiLfH/yRSyFirbX3jxQZx 4Rtt8zScBjN9I0lM6LXRZpZCvsh9IOXEE7ygn8FD8c5BVmIkc5stUvZyTmGsTquw ISE82YsKu6Kb0BOwWf4grYD/G6P9gk9lcSxA/b/X3cLXrTzkwf7LPf6NonHsyilU rHof5EdljRCXH7hTPA6+KZ2w8k3VWojwAEvLQTxUAhreTFZHRKWCQp9rGGtAF3NS VE+Y75Mc/fUVofCtzFQCC8LcPuZh3aLuiErmtk2XQWonN8RjWXWW9I3aXvccdrFT HMmUsqF+3A3e3/Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:37 2025 by rpki-client