$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/624EED84E05611EF94B15084C4F9AE02.roa File: 624EED84E05611EF94B15084C4F9AE02.roa (raw, json) Hash identifier: R+rzbH36dZLSxYjNi8lcV9C3gxouYn22pNUnJ/fDW7o= Subject key identifier: DA:46:E8:81:D9:C6:3B:8C:D5:9C:27:5D:24:5C:F0:D4:DC:3A:39:A5 Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Certificate serial: 0118 Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/624EED84E05611EF94B15084C4F9AE02.roa Signing time: Sat 03 May 2025 04:41:12 +0000 ROA not before: Sat 03 May 2025 04:41:12 +0000 ROA not after: Tue 02 Sep 2025 00:00:00 +0000 asID: 152139 IP address blocks: 210.87.70.0/23 maxlen: 23 210.87.70.0/24 maxlen: 24 210.87.71.0/24 maxlen: 24 2001:df3:3e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Validity Not Before: May 3 04:41:12 2025 GMT Not After : Sep 2 00:00:00 2025 GMT Subject: CN=68159e68-d62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:b5:45:2e:08:a1:20:52:54:72:c7:6f:f2: 55:00:90:c9:63:fb:2e:9a:2c:8e:27:60:31:4b:0f: bd:ae:2d:bb:7c:5d:fb:8e:02:43:b3:5e:97:0a:00: 7c:43:7b:86:fd:c8:66:ae:37:c2:07:c8:d8:cf:99: 51:0a:89:f0:1f:12:95:df:f2:94:55:fa:1f:4c:2e: ce:55:20:0b:c1:8d:b2:ea:bb:18:93:5f:21:47:92: ee:22:3e:23:d2:5c:48:fa:a3:f6:ba:e8:e3:6f:ca: 35:9e:59:5e:ba:46:bc:f8:74:72:9c:1a:c0:17:c9: 60:6c:7f:ec:5d:c8:b3:88:f6:08:12:e7:05:26:11: f4:ee:c0:b2:3d:a1:9c:f4:30:38:07:ca:c9:06:e5: f5:29:44:e2:8c:d1:c4:10:0d:9b:80:93:af:80:f7: c8:0f:13:b3:da:92:a4:28:d0:52:1e:fa:c4:97:0b: 0d:25:dd:62:7a:0b:3e:a5:3d:03:11:78:2f:b1:f6: fd:b6:65:2b:4e:5b:46:1f:32:66:3b:22:d2:e0:9d: 25:f1:40:89:4c:76:90:5a:11:f9:c9:c9:d5:05:34: 1a:64:1f:c5:e7:97:89:2d:2c:93:cf:59:23:65:a9: 20:60:51:93:b3:13:55:59:c4:de:49:e1:2b:b2:45: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:46:E8:81:D9:C6:3B:8C:D5:9C:27:5D:24:5C:F0:D4:DC:3A:39:A5 X509v3 Authority Key Identifier: keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/624EED84E05611EF94B15084C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.87.70.0/23 IPv6: 2001:df3:3e40::/48 Signature Algorithm: sha256WithRSAEncryption 83:bc:a0:51:01:af:35:67:cf:4e:66:c0:31:c2:00:d3:72:ee: 58:94:04:30:07:f9:e1:4c:fe:01:ae:a8:cd:df:8c:af:a5:86: ea:90:e8:28:85:4f:6e:ff:7b:f9:87:82:4c:73:99:11:ac:ba: 55:58:fd:af:ff:9c:c8:e9:a3:87:ee:9e:35:46:9b:92:4a:34: b5:42:69:70:bf:d7:87:83:71:20:95:5b:46:c1:a8:86:f1:69: 52:96:5f:d5:f8:ed:ee:62:bf:e8:83:81:cd:40:a6:ff:7b:7c: 21:e9:96:cd:8d:0b:f0:e6:9b:88:3d:8c:9c:12:3e:cc:f1:41: 22:66:f1:7e:f2:83:3c:fa:74:e2:4e:cf:d2:12:3e:61:40:3b: 46:16:86:90:d7:a2:fe:1f:27:cb:26:1d:f4:ad:7e:77:0b:f0: 13:fb:17:1e:dc:4a:c3:b7:00:22:d7:bb:08:b1:a8:bb:49:2e: 81:f5:9f:a4:2c:09:c1:5c:f9:64:a0:32:da:2d:02:a7:a4:22: d3:68:98:12:e0:96:a3:39:e5:fe:1e:2f:b9:52:e9:df:29:0d: f7:a7:41:90:0e:f4:82:0d:e3:23:f8:ff:75:7b:da:de:18:77: 55:e7:a8:b8:8a:cd:ee:bb:21:3a:98:21:f6:de:0e:71:af:e3: 77:a8:33:61 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDY4QjNGRjE2NjU4OUM4NDQxQTQ0RkRDQTYxRjQyQjNB NjNBRTExMjkwHhcNMjUwNTAzMDQ0MTEyWhcNMjUwOTAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1OWU2OC1kNjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2+1RS4IoSBSVHLHb/JVAJDJY/sumiyOJ2AxSw+9ri27fF37jgJDs16XCgB8 Q3uG/chmrjfCB8jYz5lRConwHxKV3/KUVfofTC7OVSALwY2y6rsYk18hR5LuIj4j 0lxI+qP2uujjb8o1nlleuka8+HRynBrAF8lgbH/sXciziPYIEucFJhH07sCyPaGc 9DA4B8rJBuX1KUTijNHEEA2bgJOvgPfIDxOz2pKkKNBSHvrElwsNJd1iegs+pT0D EXgvsfb9tmUrTltGHzJmOyLS4J0l8UCJTHaQWhH5ycnVBTQaZB/F55eJLSyTz1kj ZakgYFGTsxNVWcTeSeErskUBjwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNpG6IHZ xjuM1ZwnXSRc8NTcOjmlMB8GA1UdIwQYMBaAFGiz/xZlichEGkT9ymH0KzpjrhEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlFUWFSUDNLWWZRck9tT3VF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FMUF9GbVdKeUVRYVJQM0tZZlFyT21PdUVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTJDNUQvM0I5REQ0MTA5MkM0MTFFRUI1MjFCQjQ5QzRGOUFFMDIvNjI0RUVEODRF MDU2MTFFRjk0QjE1MDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHSV0YwDwQCAAIwCQMHACABDfM+QDANBgkqhkiG9w0BAQsF AAOCAQEAg7ygUQGvNWfPTmbAMcIA03LuWJQEMAf54Uz+Aa6ozd+Mr6WG6pDoKIVP bv97+YeCTHOZEay6VVj9r/+cyOmjh+6eNUabkko0tUJpcL/Xh4NxIJVbRsGohvFp UpZf1fjt7mK/6IOBzUCm/3t8IemWzY0L8OabiD2MnBI+zPFBImbxfvKDPPp04k7P 0hI+YUA7RhaGkNei/h8nyyYd9K1+dwvwE/sXHtxKw7cAIte7CLGou0kugfWfpCwJ wVz5ZKAy2i0Cp6Qi02iYEuCWoznl/h4vuVLp3ykN96dBkA70gg3jI/j/dXva3hh3 VeeouIrN7rshOpgh9t4Oca/jd6gzYQ== -----END CERTIFICATE-----Generated at Tue May 13 15:30:14 2025 by rpki-client