$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/193128AAD15D11EE8BD5C02BC4F9AE02.roa File: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (raw, json) Hash identifier: /+hXj2B+GgaDbKZ5BK9B4X/m6qkH66B+b+D/QNmlbQE= Subject key identifier: 0C:9B:90:AC:5F:90:D5:E6:0C:FD:C1:F6:28:52:8B:3F:BF:31:41:6C Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Certificate serial: 08D8 Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/193128AAD15D11EE8BD5C02BC4F9AE02.roa Signing time: Thu 06 Feb 2025 20:19:01 +0000 ROA not before: Thu 06 Feb 2025 20:19:00 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 45593 IP address blocks: 112.78.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2264 (0x8d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Validity Not Before: Feb 6 20:19:00 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a51934-dc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:1f:8e:6b:21:57:01:36:66:9a:94:03:0f: ed:bd:25:7b:9a:c9:43:55:6a:51:95:ca:5c:61:1c: 65:74:a5:9d:0d:a4:50:05:d2:12:9e:3f:1c:20:1c: ab:b7:1b:ec:b3:b5:f2:9d:95:2b:35:dd:d8:57:45: 28:c1:8d:48:d9:4e:aa:dd:a3:b2:44:f9:3b:3b:fd: 64:3e:0f:61:51:61:67:b1:1c:65:78:95:76:b6:5d: ec:4b:92:b3:af:bb:96:28:b6:1e:6e:83:07:ac:54: df:30:b6:45:e5:72:6c:2e:04:62:b4:75:86:ae:9b: 22:3a:2a:0f:c3:47:7e:7b:43:9e:f1:39:58:34:34: f3:03:b0:df:37:39:f2:20:77:c4:03:2f:df:4e:42: f4:d2:39:5a:7d:56:10:f7:11:99:2b:94:62:fd:18: 4c:44:d0:b0:50:39:6d:11:ff:72:13:78:49:d9:89: 7f:1c:a0:33:0d:d0:24:10:a2:8a:4a:29:21:2f:84: ba:ff:c7:e0:e4:f1:c0:bf:eb:50:8b:67:96:8c:37: e7:57:3a:91:3e:ce:3e:b5:05:91:69:e3:9f:04:8c: 01:ba:5a:5d:1a:84:34:d7:d3:fb:5a:00:51:d8:ed: 92:93:dc:ae:30:49:33:97:71:84:48:7c:8e:1e:e1: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9B:90:AC:5F:90:D5:E6:0C:FD:C1:F6:28:52:8B:3F:BF:31:41:6C X509v3 Authority Key Identifier: keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/193128AAD15D11EE8BD5C02BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.78.111.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:35:cc:aa:3e:88:2d:88:b2:0c:03:7b:28:d3:3d:51:0f:e6: 12:a1:f0:93:5c:66:8d:4b:06:d4:d8:63:00:4a:77:b9:73:5c: df:f3:dc:7c:48:0e:fc:bc:0f:e9:fa:b5:bb:f0:36:e2:11:bc: 24:2b:aa:8c:a6:50:73:0c:23:84:a2:dd:9c:27:41:5e:42:17: fc:b6:48:76:c8:a5:6d:1b:16:18:d1:2f:09:6f:3e:9a:8f:5e: c6:d4:88:79:8c:9c:30:23:57:ea:9c:91:81:2f:f7:8f:94:49: 5f:82:fa:95:69:c2:af:73:63:6b:d1:f2:a4:ac:00:f3:52:3a: f1:79:72:7c:38:1e:12:9a:72:4e:a5:4d:e0:d2:fd:99:3a:d6: aa:28:e2:42:eb:9b:77:22:74:a1:6a:eb:d4:f2:00:0b:a1:70: 6b:3e:f8:cb:06:56:7f:32:c9:4f:fe:83:fa:75:6b:ad:f3:0b: 4d:b9:4d:0e:12:ad:33:04:1f:77:43:e4:f5:c2:52:5f:5b:4b: 00:25:c3:6a:29:bb:2e:04:cf:78:68:2d:ba:7d:e6:13:5e:bb: 48:84:a2:97:3c:3d:e3:c5:67:98:fb:4b:44:8d:e5:c4:1f:78: 6a:1b:bc:77:eb:5f:1d:0e:9a:13:2c:4c:20:f9:ee:6d:c1:8b: d3:20:96:1a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxNUYxMTAvBgNVBAUTKDRDNzBFMDIwMzJFQTU5QzJBRkQ1NDFBMTg3MEQ3NEIw NDBEMUI2QTIwHhcNMjUwMjA2MjAxOTAwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E1MTkzNC1kYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3esfjmshVwE2ZpqUAw/tvSV7mslDVWpRlcpcYRxldKWdDaRQBdISnj8cIByr txvss7XynZUrNd3YV0UowY1I2U6q3aOyRPk7O/1kPg9hUWFnsRxleJV2tl3sS5Kz r7uWKLYeboMHrFTfMLZF5XJsLgRitHWGrpsiOioPw0d+e0Oe8TlYNDTzA7DfNzny IHfEAy/fTkL00jlafVYQ9xGZK5Ri/RhMRNCwUDltEf9yE3hJ2Yl/HKAzDdAkEKKK SikhL4S6/8fg5PHAv+tQi2eWjDfnVzqRPs4+tQWRaeOfBIwBulpdGoQ019P7WgBR 2O2Sk9yuMEkzl3GESHyOHuGhgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAybkKxf kNXmDP3B9ihSiz+/MUFsMB8GA1UdIwQYMBaAFExw4CAy6lnCr9VBoYcNdLBA0bai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjE1Ri9GMzEyQ0EyNkE2 M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdjS3YxVUdoaHcxMHNFRFJ0 cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIRGdJRExxV2NLdjFVR2hodzEwc0VEUnRxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDYxNUYvRjMxMkNBMjZBNjNGMTFFQThEMDY4MjRBQzRGOUFFMDIvMTkzMTI4QUFE MTVEMTFFRThCRDVDMDJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABwTm8wDQYJKoZIhvcNAQELBQADggEBAC81zKo+iC2IsgwD eyjTPVEP5hKh8JNcZo1LBtTYYwBKd7lzXN/z3HxIDvy8D+n6tbvwNuIRvCQrqoym UHMMI4Si3ZwnQV5CF/y2SHbIpW0bFhjRLwlvPpqPXsbUiHmMnDAjV+qckYEv94+U SV+C+pVpwq9zY2vR8qSsAPNSOvF5cnw4HhKack6lTeDS/Zk61qoo4kLrm3cidKFq 69TyAAuhcGs++MsGVn8yyU/+g/p1a63zC025TQ4SrTMEH3dD5PXCUl9bSwAlw2op uy4Ez3hoLbp95hNeu0iEopc8PePFZ5j7S0SN5cQfeGobvHfrXx0OmhMsTCD57m3B i9Mglho= -----END CERTIFICATE-----Generated at Mon May 12 22:04:22 2025 by rpki-client