$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa File: 2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa (raw, json) Hash identifier: aHkHq3prWV8PYM6R/1n0/cS3AolHN3tQt/aLI9yRoNU= Subject key identifier: 19:AA:34:AB:D8:63:37:D2:9A:AD:61:56:C5:47:85:E3:D3:45:9F:3D Certificate issuer: /CN=A91795CA/serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5 Certificate serial: 0627 Authority key identifier: 91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa Signing time: Tue 06 May 2025 22:33:52 +0000 ROA not before: Tue 06 May 2025 22:33:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141995 IP address blocks: 194.233.64.0/22 maxlen: 22 194.233.68.0/22 maxlen: 22 194.233.72.0/22 maxlen: 22 194.233.76.0/22 maxlen: 22 194.233.80.0/22 maxlen: 22 194.233.84.0/22 maxlen: 22 194.233.88.0/22 maxlen: 22 194.233.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795CA, serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5 Validity Not Before: May 6 22:33:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681a8e4f-1131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:8d:e0:26:94:d1:e7:3d:d2:07:35:9b:d9: 54:19:57:75:58:a5:b0:b4:01:fb:83:88:3d:d5:f8: 1e:b3:a9:4c:1e:b2:c6:01:6f:9e:d4:fc:e7:90:e6: b0:aa:1d:95:5a:86:9b:05:72:1b:11:49:af:81:70: 58:02:db:13:e6:4d:d9:df:33:ef:d2:5b:cd:05:03: 6a:ba:a2:94:53:5c:a3:90:8c:a2:19:88:52:88:45: 7e:93:dd:e9:00:65:dd:40:1b:1e:a2:a6:20:e3:9b: c9:65:e4:ac:54:ba:f1:80:dc:d5:e7:dd:a7:bf:30: 52:4c:2e:9b:91:6d:0f:1e:ca:0d:64:93:23:19:f3: 56:ad:5e:ce:5e:94:92:5a:92:84:ae:98:ad:5b:0c: 8b:fe:6e:ba:6f:e2:19:71:ad:cc:4d:d3:06:07:ac: b1:4f:cc:87:cf:89:bd:78:44:86:bd:2c:9b:6f:39: f4:ec:6a:94:c9:b6:eb:90:a6:ed:78:66:ac:d7:38: 50:78:75:1f:31:cb:72:76:b2:f6:14:a8:01:48:7a: 2d:2b:29:41:2b:6a:4d:c0:f1:05:06:9b:6c:e4:c7: e8:04:37:59:30:65:db:df:10:f8:5f:96:a1:ad:0e: be:6d:07:8d:a9:ef:20:f4:5f:ba:63:92:ce:3b:99: d1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AA:34:AB:D8:63:37:D2:9A:AD:61:56:C5:47:85:E3:D3:45:9F:3D X509v3 Authority Key Identifier: keyid:91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 194.233.64.0/19 Signature Algorithm: sha256WithRSAEncryption 99:bd:a6:61:34:3a:3d:f8:fe:c2:6c:e3:30:8a:84:0a:f5:32: a0:86:c5:22:4b:bd:d3:88:03:60:64:18:37:c6:d6:e9:27:84: f0:e0:07:ca:af:9f:9b:f1:fd:5e:dc:88:10:d3:a4:e0:ae:62: 4c:7b:0c:77:42:82:a3:bc:3f:b9:3d:26:69:99:ce:b6:4b:e7: d1:ec:ba:d2:fa:8a:fe:86:d3:88:9b:c4:79:a8:30:c5:3d:9d: f2:be:fd:ce:7f:38:67:de:ab:b0:b1:a1:0f:09:b9:6c:53:e3: 3e:fd:f3:43:72:11:00:0b:de:80:2d:3d:8d:18:d2:58:6d:1e: 70:e4:f3:50:63:e7:dc:79:19:a0:4f:7a:18:16:32:9c:ad:e6: a3:fb:fa:13:0c:4c:d5:a8:24:24:10:9e:91:15:d0:b1:59:02: 91:62:bd:c9:e3:d2:20:75:78:a5:33:a0:4a:70:39:45:8b:d2: e3:ab:4c:f2:08:dc:9d:ff:f7:97:c0:7f:6d:c4:bf:31:ba:e9: ce:dc:75:67:ec:80:3e:29:77:d7:61:95:54:c9:51:3c:4a:da: 7a:6f:98:cf:71:2c:20:75:97:16:fd:31:2e:28:6a:ea:9e:7d: 6f:e1:99:7a:b7:41:03:84:37:96:e4:8b:34:6b:d4:24:cb:45: a2:29:a9:e5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1Q0ExMTAvBgNVBAUTKDkxNzkxNTE5NUM5NzFBQjQ0MUZEREVERTZGRjNDRDM3 MkU3NTRDQjUwHhcNMjUwNTA2MjIzMzUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhOGU0Zi0xMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3qN4CaU0ec90gc1m9lUGVd1WKWwtAH7g4g91fges6lMHrLGAW+e1PznkOaw qh2VWoabBXIbEUmvgXBYAtsT5k3Z3zPv0lvNBQNquqKUU1yjkIyiGYhSiEV+k93p AGXdQBseoqYg45vJZeSsVLrxgNzV592nvzBSTC6bkW0PHsoNZJMjGfNWrV7OXpSS WpKErpitWwyL/m66b+IZca3MTdMGB6yxT8yHz4m9eESGvSybbzn07GqUybbrkKbt eGas1zhQeHUfMctydrL2FKgBSHotKylBK2pNwPEFBpts5MfoBDdZMGXb3xD4X5ah rQ6+bQeNqe8g9F+6Y5LOO5nRVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBmqNKvY YzfSmq1hVsVHhePTRZ89MB8GA1UdIwQYMBaAFJF5FRlclxq0Qf3e3m/zzTcudUy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS82MzQ3Mzc1Njk4 MDYxMUVCQTg3RTI3NjVDNEY5QUUwMi9rWGtWR1Z5WEdyUkJfZDdlYl9QTk55NTFU TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2tYa1ZHVnlYR3JSQl9kN2ViX1BOTnk1MVRMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk1Q0EvNjM0NzM3NTY5ODA2MTFFQkE4N0UyNzY1QzRGOUFFMDIvMkI4RDc2QUU5 QkI3MTFFQkJCN0JBMDJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAXC6UAwDQYJKoZIhvcNAQELBQADggEBAJm9pmE0Oj34/sJs 4zCKhAr1MqCGxSJLvdOIA2BkGDfG1uknhPDgB8qvn5vx/V7ciBDTpOCuYkx7DHdC gqO8P7k9JmmZzrZL59HsutL6iv6G04ibxHmoMMU9nfK+/c5/OGfeq7CxoQ8JuWxT 4z7980NyEQAL3oAtPY0Y0lhtHnDk81Bj59x5GaBPehgWMpyt5qP7+hMMTNWoJCQQ npEV0LFZApFivcnj0iB1eKUzoEpwOUWL0uOrTPII3J3/95fAf23EvzG66c7cdWfs gD4pd9dhlVTJUTxK2npvmM9xLCB1lxb9MS4oauqefW/hmXq3QQOEN5bkizRr1CTL RaIpqeU= -----END CERTIFICATE-----Generated at Fri May 16 14:42:37 2025 by rpki-client