$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa File: 7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa (raw, json) Hash identifier: us0oQzpjK+gxgHVfsqRPvJoG58Ux//ODb3E2G2zkjYI= Subject key identifier: 2D:E0:64:AE:8D:50:1C:5D:2A:27:7E:6E:3E:E6:F1:44:B4:77:93:DE Certificate issuer: /CN=A91EC9A5/serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640 Certificate serial: 085D Authority key identifier: E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa Signing time: Wed 05 Feb 2025 16:37:25 +0000 ROA not before: Wed 05 Feb 2025 16:37:25 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 136246 IP address blocks: 14.128.12.0/24 maxlen: 24 14.128.13.0/24 maxlen: 24 14.128.14.0/24 maxlen: 24 14.128.15.0/24 maxlen: 24 103.84.173.0/24 maxlen: 24 103.84.174.0/24 maxlen: 24 103.84.175.0/24 maxlen: 24 2400:a2c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Feb 2025 21:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2141 (0x85d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9A5 Validity Not Before: Feb 5 16:37:25 2025 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=67a393c5-77bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:98:d0:72:99:ec:89:59:58:6a:6c:cf:19:de: 5b:64:ad:3f:8c:f5:c5:5e:0d:ef:ad:5a:75:1b:e9: 3f:9b:42:c4:8f:93:44:20:e5:0a:b8:b6:86:98:87: 8e:8e:2c:fa:ab:af:3c:fb:4d:9a:7b:0e:49:46:48: 8e:9a:f9:6d:e5:6a:b0:b6:33:6e:1b:e3:ca:b6:8b: 05:38:70:05:13:d1:b3:07:53:2c:f1:85:f5:80:65: 2f:c7:40:63:6d:34:3f:d9:b0:4c:4b:a3:30:77:71: 16:66:02:b2:1d:1c:1b:49:d0:e6:18:d4:9a:28:14: 9e:ea:fe:ea:ec:cc:88:f7:c9:e6:a7:58:62:88:c1: 95:4f:a3:a1:91:25:fb:30:88:27:46:7a:8e:49:d4: 64:bf:29:c4:96:8f:8a:71:66:ad:9e:9f:f5:f7:fa: 7d:e5:be:46:32:7f:cd:0a:f3:33:ee:0c:c6:ea:b7: f7:0b:35:49:fb:43:51:41:6d:fa:be:a0:da:e2:a2: 3b:59:d7:67:c4:d1:8e:2b:f4:6b:ef:f9:43:36:cc: ad:c5:e9:52:5d:bb:46:4c:f5:39:e0:02:94:c8:be: 2f:c1:a9:d0:1e:2c:c1:89:89:70:97:b5:26:30:e2: b4:b7:78:a8:a3:71:08:22:1c:77:ee:ce:50:0c:93: 0e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E0:64:AE:8D:50:1C:5D:2A:27:7E:6E:3E:E6:F1:44:B4:77:93:DE X509v3 Authority Key Identifier: keyid:E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.128.12.0/22 103.84.173.0-103.84.175.255 IPv6: 2400:a2c0::/32 Signature Algorithm: sha256WithRSAEncryption 6c:dd:bc:c0:24:6a:65:7e:3b:48:5e:b0:9a:46:7a:ad:c5:05: 60:43:f3:3e:7d:40:16:cb:05:bd:1b:b8:d9:c7:10:30:e0:61: ba:90:0c:f7:06:55:c1:2d:7e:d3:30:18:f1:21:6f:ab:a7:96: ed:12:c7:45:9c:cd:bf:c7:3c:40:67:15:b0:34:9e:26:16:e3: fa:ca:1c:85:ae:ed:91:73:c5:4b:5b:1c:04:80:7e:2f:bc:52: 19:9c:a4:77:7b:43:28:29:68:08:be:e0:a8:04:38:0d:11:f5: 61:80:bb:cd:4d:86:01:9b:77:f4:66:63:29:43:6c:28:65:85: 15:d1:25:fe:16:3a:21:84:19:3b:ff:4d:7c:25:5d:92:19:f5: b6:41:d0:95:92:64:10:b0:90:fe:48:30:b1:0b:d3:0d:12:f7: 3b:34:6e:a8:ec:3f:39:b3:aa:cc:64:0e:e1:4b:e4:b1:91:1b: e7:0f:89:6a:32:d3:8d:ae:9c:c5:1c:ee:96:e8:a5:49:ad:a7: ff:17:59:82:a0:1c:4e:03:21:82:19:8a:47:07:4f:a4:c6:f5: 97:1b:14:bb:17:63:1a:34:4c:7b:d9:6d:f4:d9:c0:be:7e:17: 4f:e6:84:fb:08:f3:c7:74:8d:a8:47:91:86:15:31:4f:e6:73: 60:fa:9c:18 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QTUxMTAvBgNVBAUTKEU4M0ZDRjRDNkZDOEQ3NEYzQjZBQjQyNTYwNkUyQkM3 NzQ2RDY2NDAwHhcNMjUwMjA1MTYzNzI1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EzOTNjNS03N2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pjQcpnsiVlYamzPGd5bZK0/jPXFXg3vrVp1G+k/m0LEj5NEIOUKuLaGmIeO jiz6q688+02aew5JRkiOmvlt5WqwtjNuG+PKtosFOHAFE9GzB1Ms8YX1gGUvx0Bj bTQ/2bBMS6Mwd3EWZgKyHRwbSdDmGNSaKBSe6v7q7MyI98nmp1hiiMGVT6OhkSX7 MIgnRnqOSdRkvynElo+KcWatnp/19/p95b5GMn/NCvMz7gzG6rf3CzVJ+0NRQW36 vqDa4qI7WddnxNGOK/Rr7/lDNsytxelSXbtGTPU54AKUyL4vwanQHizBiYlwl7Um MOK0t3ioo3EIIhx37s5QDJMOlQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFC3gZK6N UBxdKid+bj7m8US0d5PeMB8GA1UdIwQYMBaAFOg/z0xvyNdPO2q0JWBuK8d0bWZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBNS8wRTgyQzJFQ0M0 RjAxMUVBOTFEQ0RGNzdDNEY5QUUwMi82RF9QVEdfSTEwODdhclFsWUc0cngzUnRa a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZEX1BUR19JMTA4N2FyUWxZRzRyeDNSdFprQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM5QTUvMEU4MkMyRUNDNEYwMTFFQTkxRENERjc3QzRGOUFFMDIvN0FCQzNBRThF M0RGMTFFRjgzRENGQjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBoEAgABMBQDBAIOgAwwDAMEAGdUrQMEBGdUoDANBAIAAjAHAwUAJACiwDAN BgkqhkiG9w0BAQsFAAOCAQEAbN28wCRqZX47SF6wmkZ6rcUFYEPzPn1AFssFvRu4 2ccQMOBhupAM9wZVwS1+0zAY8SFvq6eW7RLHRZzNv8c8QGcVsDSeJhbj+socha7t kXPFS1scBIB+L7xSGZykd3tDKCloCL7gqAQ4DRH1YYC7zU2GAZt39GZjKUNsKGWF FdEl/hY6IYQZO/9NfCVdkhn1tkHQlZJkELCQ/kgwsQvTDRL3OzRuqOw/ObOqzGQO 4UvksZEb5w+JajLTja6cxRzuluilSa2n/xdZgqAcTgMhghmKRwdPpMb1lxsUuxdj GjRMe9lt9NnAvn4XT+aE+wjzx3SNqEeRhhUxT+ZzYPqcGA== -----END CERTIFICATE-----Generated at Thu Feb 20 02:36:57 2025 by rpki-client