$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/23AF26C40C2B11EBAD607865C4F9AE02.roa File: 23AF26C40C2B11EBAD607865C4F9AE02.roa (raw, json) Hash identifier: lqzj6YduHCJKV8dYpz5WAfuKsZiHyQ1FWQ0JXN7wCvU= Subject key identifier: 4C:AC:B8:44:EB:77:23:B1:08:35:7A:9D:31:BD:E3:15:89:11:01:AF Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 0790 Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/23AF26C40C2B11EBAD607865C4F9AE02.roa Signing time: Fri 02 May 2025 21:33:53 +0000 ROA not before: Fri 02 May 2025 21:33:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133448 IP address blocks: 139.5.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 21:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: May 2 21:33:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68153a41-4a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:a6:02:0f:07:31:9c:8f:5f:5b:db:5e:99: 20:4e:e8:bc:60:d9:fe:cb:4f:ad:8a:08:e8:4d:94: fe:73:a0:d0:56:90:69:c6:64:04:6d:af:29:67:ee: 16:31:ab:9a:a7:4e:ff:8a:d0:8c:8f:4e:81:ab:1b: 7c:60:47:ed:21:53:33:35:dc:26:9b:f5:d9:4c:dd: 1b:a8:d1:5a:45:ea:c0:0c:8c:8a:61:8b:8d:f1:66: cc:61:62:98:15:22:b7:c5:80:7c:ec:a6:9a:25:9f: b3:7e:88:69:1e:6a:90:13:3a:e7:70:d6:47:dc:00: ba:f2:20:06:99:08:49:2b:7e:0d:e5:9a:60:73:78: a7:07:1e:5e:88:1f:0c:d2:6c:ab:f1:7e:ba:da:ee: 2a:61:90:de:b3:f1:5c:75:48:31:f8:ca:9e:1b:c9: 46:af:13:62:a1:a6:69:05:15:34:39:b6:00:1a:a5: 0a:71:ea:11:02:ff:43:8e:54:8a:5b:b0:34:18:f2: 09:d4:b5:63:6f:26:db:32:f0:45:4a:40:19:9c:3e: c3:93:81:b8:87:8d:93:fd:6d:97:dc:3f:d0:e8:67: 12:d1:f8:01:f2:c2:12:45:e9:76:4d:87:dc:bf:72: f9:18:ce:e0:bc:b3:b6:f2:d9:d8:a5:5c:aa:1a:36: 3a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AC:B8:44:EB:77:23:B1:08:35:7A:9D:31:BD:E3:15:89:11:01:AF X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/23AF26C40C2B11EBAD607865C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.5.176.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:a7:39:94:b7:c3:4f:47:bb:5e:00:ba:d9:e1:77:d3:5c:5b: 65:16:11:38:49:62:91:fd:db:b6:f1:67:cb:f1:b6:35:0b:fc: fa:5f:e9:31:15:0f:e9:7e:2e:24:ca:56:9d:eb:24:7e:fe:6c: fb:f2:ac:77:e9:40:78:44:49:f4:e2:08:93:f5:2a:86:c8:62: ab:5a:c1:b6:d5:84:ad:c2:7f:37:77:1b:e7:64:ae:3a:79:42: 5d:2d:a2:c0:52:1e:8c:f8:ce:d1:3c:54:7c:fa:73:c9:7c:2e: fa:7b:8a:d0:ba:3c:ce:39:e0:d7:5d:3e:e4:70:2b:9c:b1:8d: 78:4f:55:2b:f3:a3:1f:66:59:31:5b:4f:b8:a6:0a:42:b0:1b: fc:c0:f6:da:1e:00:3a:1a:1d:8b:15:3b:90:f1:5c:b6:b6:6b: 13:89:60:7b:67:ba:f3:69:70:a2:61:36:b6:bd:c8:97:19:59: 01:33:a3:95:68:e6:ab:7c:1c:0d:9b:07:f3:db:4c:83:67:43: 60:e3:c5:10:99:ee:0e:2f:8f:d3:24:2a:e1:2b:51:f4:29:78: b9:93:47:5c:14:30:f0:43:01:39:28:c5:c7:38:9f:50:a8:c6: e5:4c:72:18:f4:48:9b:cb:56:64:6f:9f:ce:d5:b9:3c:41:51: 30:aa:98:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjUwNTAyMjEzMzUzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1M2E0MS00YTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJWmAg8HMZyPX1vbXpkgTui8YNn+y0+tigjoTZT+c6DQVpBpxmQEba8pZ+4W Mauap07/itCMj06Bqxt8YEftIVMzNdwmm/XZTN0bqNFaRerADIyKYYuN8WbMYWKY FSK3xYB87KaaJZ+zfohpHmqQEzrncNZH3AC68iAGmQhJK34N5Zpgc3inBx5eiB8M 0myr8X662u4qYZDes/FcdUgx+MqeG8lGrxNioaZpBRU0ObYAGqUKceoRAv9DjlSK W7A0GPIJ1LVjbybbMvBFSkAZnD7Dk4G4h42T/W2X3D/Q6GcS0fgB8sISRel2TYfc v3L5GM7gvLO28tnYpVyqGjY6mwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEysuETr dyOxCDV6nTG94xWJEQGvMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkYzMTIvQUE5MkI5NzgwQzI5MTFFQjk1NDBERDYxQzRGOUFFMDIvMjNBRjI2QzQw QzJCMTFFQkFENjA3ODY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACLBbAwDQYJKoZIhvcNAQELBQADggEBAC+nOZS3w09Hu14A utnhd9NcW2UWEThJYpH927bxZ8vxtjUL/Ppf6TEVD+l+LiTKVp3rJH7+bPvyrHfp QHhESfTiCJP1KobIYqtawbbVhK3Cfzd3G+dkrjp5Ql0tosBSHoz4ztE8VHz6c8l8 Lvp7itC6PM454NddPuRwK5yxjXhPVSvzox9mWTFbT7imCkKwG/zA9toeADoaHYsV O5DxXLa2axOJYHtnuvNpcKJhNra9yJcZWQEzo5Vo5qt8HA2bB/PbTINnQ2DjxRCZ 7g4vj9MkKuErUfQpeLmTR1wUMPBDATkoxcc4n1CoxuVMchj0SJvLVmRvn87VuTxB UTCqmDE= -----END CERTIFICATE-----Generated at Sat May 10 04:57:55 2025 by rpki-client