$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7CE0C4A0263E11F0BEF46E0CC4F9AE02.roa File: 7CE0C4A0263E11F0BEF46E0CC4F9AE02.roa (raw, json) Hash identifier: n95R42lIr+nkK7P4IgFzf4+ZCk3Iw9bakj9OMKb4lnM= Subject key identifier: 3A:D5:31:7D:8B:3C:25:62:FB:74:C6:F1:31:57:EC:22:FE:57:AE:B5 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0119 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7CE0C4A0263E11F0BEF46E0CC4F9AE02.roa Signing time: Thu 01 May 2025 03:43:47 +0000 ROA not before: Thu 01 May 2025 03:43:47 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133042 IP address blocks: 202.29.66.0/24 maxlen: 24 202.29.172.0/22 maxlen: 24 202.29.176.0/22 maxlen: 24 203.159.160.0/24 maxlen: 24 203.159.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: May 1 03:43:47 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6812edf3-838e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:ef:73:7a:4c:08:ea:ff:93:66:c9:ac:73: 04:c1:c6:5b:b9:76:1a:e1:35:d4:4d:5e:e9:42:72: 4a:01:e5:90:19:a9:45:e7:ee:b2:2c:64:8c:04:09: 9e:6a:d8:15:57:07:e3:1e:eb:3b:60:8e:fc:14:67: 8b:96:fb:c2:99:2b:d6:23:15:05:e2:e9:81:97:64: b6:90:88:2b:9f:5e:9e:40:00:78:aa:a5:84:d3:47: a5:79:15:e5:93:26:ac:a2:48:ab:f8:85:06:05:b8: 8f:38:39:32:a8:59:0a:9e:75:16:4d:0e:66:33:cf: 21:e2:16:db:4b:81:7a:f1:2e:29:06:d8:a4:75:a3: c6:ed:15:df:85:17:b8:51:3d:76:af:8c:9e:8a:cb: 51:fa:79:05:a6:42:e5:c7:10:35:64:c4:18:0d:85: c6:d8:24:ec:91:5b:2d:75:6d:aa:49:45:5a:6d:b8: a2:ee:67:d4:93:f2:84:60:7a:b8:10:8d:e7:bc:2c: 96:d3:0b:16:bc:7d:4d:6b:c3:2f:fc:eb:cb:16:3e: da:e2:99:7e:4c:8b:a1:e4:27:82:43:8f:b6:28:06: ab:57:da:5a:a6:c9:37:e5:50:c7:f0:d8:d5:e5:28: e6:ce:0d:13:ff:fb:78:84:8b:7b:07:51:c3:3c:1c: 27:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D5:31:7D:8B:3C:25:62:FB:74:C6:F1:31:57:EC:22:FE:57:AE:B5 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7CE0C4A0263E11F0BEF46E0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.66.0/24 202.29.172.0-202.29.179.255 203.159.160.0/24 203.159.164.0/24 Signature Algorithm: sha256WithRSAEncryption a9:d2:21:11:76:e8:7a:bb:9d:9b:7d:9a:2e:24:26:7c:06:37: 8e:f0:fc:25:cf:60:4d:a6:60:8a:0f:e9:5f:a8:bd:ed:65:56: bb:be:ba:d7:f9:98:39:f5:eb:33:0a:b6:68:2c:fd:46:32:b0: be:dc:81:52:0e:c6:2d:25:5f:5f:0e:a6:91:b9:8d:d8:43:b9: 85:d0:e0:23:d2:df:49:bb:4b:dc:b1:1b:16:c6:fc:4d:87:3d: 89:3c:ef:fe:29:de:97:76:bd:e5:48:ab:df:5c:d1:2f:03:fb: a4:fa:93:ee:01:63:d9:3d:17:54:22:83:f5:f0:64:39:37:6d: 0d:4a:7f:84:16:d1:66:d3:6b:a6:44:32:56:cd:7e:23:df:18: a9:a1:0f:77:1a:be:35:f4:d5:56:de:2c:ec:34:11:94:08:e1: de:72:5e:b3:2c:0e:cf:9c:67:72:42:47:df:3d:2b:92:da:d2: b7:eb:4c:28:b2:b2:08:56:b2:a2:fe:f1:15:56:f1:e7:56:74: 60:cf:37:9d:b6:86:d0:cd:cb:fd:f7:4c:70:31:84:c2:19:82: 8e:c6:53:00:a7:3d:10:95:f7:bc:78:a1:7d:92:0d:0a:37:e3: af:d5:21:79:6f:a2:fe:36:16:ed:cd:44:bb:12:8f:6b:00:c7: fe:da:fa:b6 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUwNTAxMDM0MzQ3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyZWRmMy04MzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27rvc3pMCOr/k2bJrHMEwcZbuXYa4TXUTV7pQnJKAeWQGalF5+6yLGSMBAme atgVVwfjHus7YI78FGeLlvvCmSvWIxUF4umBl2S2kIgrn16eQAB4qqWE00eleRXl kyasokir+IUGBbiPODkyqFkKnnUWTQ5mM88h4hbbS4F68S4pBtikdaPG7RXfhRe4 UT12r4yeistR+nkFpkLlxxA1ZMQYDYXG2CTskVstdW2qSUVabbii7mfUk/KEYHq4 EI3nvCyW0wsWvH1Na8Mv/OvLFj7a4pl+TIuh5CeCQ4+2KAarV9papsk35VDH8NjV 5Sjmzg0T//t4hIt7B1HDPBwnkQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFDrVMX2L PCVi+3TG8TFX7CL+V661MB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvN0NFMEM0QTAy NjNFMTFGMEJFRjQ2RTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBADKHUIwDAMEAsodrAMEAsodsAMEAMufoAMEAMufpDANBgkq hkiG9w0BAQsFAAOCAQEAqdIhEXboerudm32aLiQmfAY3jvD8Jc9gTaZgig/pX6i9 7WVWu7661/mYOfXrMwq2aCz9RjKwvtyBUg7GLSVfXw6mkbmN2EO5hdDgI9LfSbtL 3LEbFsb8TYc9iTzv/inel3a95Uir31zRLwP7pPqT7gFj2T0XVCKD9fBkOTdtDUp/ hBbRZtNrpkQyVs1+I98YqaEPdxq+NfTVVt4s7DQRlAjh3nJesywOz5xnckJH3z0r ktrSt+tMKLKyCFayov7xFVbx51Z0YM83nbaG0M3L/fdMcDGEwhmCjsZTAKc9EJX3 vHihfZINCjfjr9UheW+i/jYW7c1EuxKPawDH/tr6tg== -----END CERTIFICATE-----Generated at Wed May 14 17:16:27 2025 by rpki-client