$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/89E51722DF9011EFB2CE892EC4F9AE02.roa File: 89E51722DF9011EFB2CE892EC4F9AE02.roa (raw, json) Hash identifier: KpVW4cQhj8alBR7jcPtqJ2dq3s1eufaG57nwvRNG5IA= Subject key identifier: C8:6E:5B:21:0F:A4:39:6D:C0:73:11:18:BB:95:32:C1:3D:72:93:E8 Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Certificate serial: 0B Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/89E51722DF9011EFB2CE892EC4F9AE02.roa Signing time: Fri 31 Jan 2025 05:36:25 +0000 ROA not before: Fri 31 Jan 2025 05:36:25 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 140637 IP address blocks: 143.174.192.0/21 maxlen: 21 143.174.200.0/21 maxlen: 21 192.199.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 06:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8357 Validity Not Before: Jan 31 05:36:25 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=679c6159-0d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8d:3c:f0:dd:19:cb:d7:a8:5d:04:ab:74:03: e7:54:8c:e7:80:59:77:20:33:71:69:aa:e0:bc:3c: 4e:09:16:a6:09:23:5e:a3:0d:44:98:9c:6c:44:bb: 50:2f:53:59:09:b1:35:12:65:15:7a:ce:f9:91:f8: 86:74:54:e1:9f:0a:0d:af:77:ef:6c:45:af:19:02: b7:d1:e6:75:c0:5c:9d:c3:9b:7e:84:97:ae:e3:55: ad:41:0b:ad:e8:d9:e1:57:d6:ae:e4:69:de:e5:f2: ce:23:48:84:4b:7b:9b:a3:47:d4:7e:03:17:1a:26: 83:ad:6f:62:d3:eb:2c:23:43:14:04:bf:dd:63:94: 03:60:0e:7f:c8:89:ab:63:5a:53:62:f5:45:5e:bb: 61:32:94:ef:3e:ba:85:37:6b:ea:15:7b:48:4f:93: 47:aa:88:fe:e0:91:db:ba:f2:20:3e:be:e0:59:44: 6f:4c:24:85:38:d2:83:8a:56:89:2d:cc:e9:8c:13: 21:b6:ba:2c:90:27:2e:c2:b8:4d:f9:a5:8e:5b:a2: 56:99:36:16:c1:9e:f6:39:9c:96:20:bf:79:c8:0f: 8d:60:af:29:b1:75:d8:76:93:fc:43:bd:40:ff:0d: 3a:d6:b2:83:b3:a4:4e:7a:23:65:d1:d8:83:16:91: e0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6E:5B:21:0F:A4:39:6D:C0:73:11:18:BB:95:32:C1:3D:72:93:E8 X509v3 Authority Key Identifier: keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/89E51722DF9011EFB2CE892EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.174.192.0/20 192.199.32.0/21 Signature Algorithm: sha256WithRSAEncryption 74:3e:f9:fb:f1:5d:f7:c4:90:1b:44:a1:54:bf:ff:73:8b:9f: 47:79:2d:f0:29:c6:b7:76:cf:3b:03:3b:0f:2e:91:96:0c:dd: 44:aa:07:5f:d9:d1:c8:3d:c7:80:71:5a:ef:a6:2c:68:66:0b: f1:40:2e:9e:31:4e:cc:21:e2:12:6a:dd:8a:be:68:5a:97:df: 0e:2f:05:f1:53:d5:e3:98:37:fd:05:ff:04:0b:3b:70:62:a7: 47:cc:dd:13:d4:16:1c:ee:1a:4c:52:d1:81:b1:8f:d2:9f:58: 25:46:6a:78:11:e5:1a:3b:ac:df:04:89:81:65:9a:cd:3f:78: 0a:5e:4a:55:dd:90:64:73:01:49:b4:98:de:cd:e4:a0:c9:88: 00:46:1e:05:f5:47:f9:46:48:76:32:dc:41:df:2b:0e:50:05: a2:29:85:4f:21:4d:3e:fd:1f:af:55:be:87:75:2b:a5:d7:62: 4b:58:c0:5d:95:3e:d2:45:5b:6c:77:3b:cc:cf:55:5d:bc:83: 6a:a5:16:78:3b:9d:65:5b:2a:b6:1f:b1:8d:cc:72:f8:7f:38: 6c:ff:f0:34:40:78:00:67:56:90:76:b7:b3:c5:a3:21:21:d7: 2b:38:c2:ab:b8:32:64:45:21:21:7c:c1:36:86:45:4f:59:9f: e0:cc:0f:77 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODM1NzExMC8GA1UEBRMoMzYxRkFEQTJFMEE4OENGMjg3RjRDRTZDQzNCNDQ2MkM5 MTMzMEJGQzAeFw0yNTAxMzEwNTM2MjVaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OWM2MTU5LTBkMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9jTzw3RnL16hdBKt0A+dUjOeAWXcgM3FpquC8PE4JFqYJI16jDUSYnGxEu1Av U1kJsTUSZRV6zvmR+IZ0VOGfCg2vd+9sRa8ZArfR5nXAXJ3Dm36El67jVa1BC63o 2eFX1q7kad7l8s4jSIRLe5ujR9R+AxcaJoOtb2LT6ywjQxQEv91jlANgDn/Iiatj WlNi9UVeu2EylO8+uoU3a+oVe0hPk0eqiP7gkdu68iA+vuBZRG9MJIU40oOKVokt zOmMEyG2uiyQJy7CuE35pY5bolaZNhbBnvY5nJYgv3nID41grymxddh2k/xDvUD/ DTrWsoOzpE56I2XR2IMWkeDVAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUyG5bIQ+k OW3AcxEYu5UywT1yk+gwHwYDVR0jBBgwFoAUNh+touCojPKH9M5sw7RGLJEzC/ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MzU3LzE0QTc4RjJDREY4 QTExRUY4NzQ3MkI3NEM0RjlBRTAyL05oLXRvdUNvalBLSDlNNXN3N1JHTEpFekNf dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmgtdG91Q29qUEtIOU01c3c3UkdMSkV6Q193LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODM1Ny8xNEE3OEYyQ0RGOEExMUVGODc0NzJCNzRDNEY5QUUwMi84OUU1MTcyMkRG OTAxMUVGQjJDRTg5MkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEBI+uwAMEA8DHIDANBgkqhkiG9w0BAQsFAAOCAQEAdD75+/Fd 98SQG0ShVL//c4ufR3kt8CnGt3bPOwM7Dy6RlgzdRKoHX9nRyD3HgHFa76YsaGYL 8UAunjFOzCHiEmrdir5oWpffDi8F8VPV45g3/QX/BAs7cGKnR8zdE9QWHO4aTFLR gbGP0p9YJUZqeBHlGjus3wSJgWWazT94Cl5KVd2QZHMBSbSY3s3koMmIAEYeBfVH +UZIdjLcQd8rDlAFoimFTyFNPv0fr1W+h3UrpddiS1jAXZU+0kVbbHc7zM9VXbyD aqUWeDudZVsqth+xjcxy+H84bP/wNEB4AGdWkHa3s8WjISHXKzjCq7gyZEUhIXzB NoZFT1mf4MwPdw== -----END CERTIFICATE-----Generated at Mon Apr 7 11:32:25 2025 by rpki-client