$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/BB9C14F6AA5511EB86F34077C4F9AE02.roa File: BB9C14F6AA5511EB86F34077C4F9AE02.roa (raw, json) Hash identifier: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ= Subject key identifier: 76:DE:CF:66:CF:F8:57:F3:80:6F:74:71:65:93:5C:95:A1:22:3F:12 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 06E7 Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/BB9C14F6AA5511EB86F34077C4F9AE02.roa Signing time: Wed 29 Jan 2025 08:34:15 +0000 ROA not before: Wed 29 Jan 2025 08:34:15 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 24112 IP address blocks: 166.81.6.0/24 maxlen: 24 166.81.62.0/24 maxlen: 24 166.81.63.0/24 maxlen: 24 166.81.83.0/24 maxlen: 24 166.81.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1767 (0x6e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Jan 29 08:34:15 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6799e807-c755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:69:5a:6d:91:a0:1f:22:ef:ba:6b:e1:bf:fc: e6:b8:3b:dc:80:9a:6f:79:b3:06:27:f7:c4:ee:31: ad:02:8f:9f:c7:c6:4a:ab:8b:c7:71:3a:7c:7a:f2: 99:a2:85:a9:8e:28:27:20:2b:1c:49:bc:92:fa:ea: 7d:73:a2:8a:47:b9:a0:4a:e7:6b:1a:de:ef:c4:95: f8:b5:f4:af:8b:c9:17:9b:c4:17:e5:df:1f:81:0c: 48:a7:ac:9b:4e:af:64:f8:bd:93:2d:50:9b:f5:fb: 2b:bc:ae:0e:3b:d2:27:6c:4b:04:02:25:40:5f:17: f0:26:08:09:46:1e:72:72:af:5a:05:ce:a5:c4:57: ae:1a:50:c9:29:a3:03:f0:a1:96:3e:fd:96:19:07: cf:59:17:df:b7:9b:0d:94:d5:b1:c9:99:4b:6e:04: 81:a5:1f:83:94:ba:2c:64:c5:81:aa:44:4f:14:a1: 2e:ab:02:3e:16:e1:39:2f:bf:a8:1a:1f:37:54:5a: e0:df:9f:c7:9a:e9:7d:e3:7a:f5:90:12:28:b2:c8: f8:8d:79:3b:17:9a:80:0b:ba:0b:c5:b8:b3:62:e7: 9b:3a:d3:fc:9f:73:70:3a:64:15:fe:8d:b5:60:31: 4f:d2:4f:74:ef:e2:a9:72:3c:1c:86:0d:71:16:83: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DE:CF:66:CF:F8:57:F3:80:6F:74:71:65:93:5C:95:A1:22:3F:12 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/BB9C14F6AA5511EB86F34077C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 166.81.6.0/24 166.81.62.0/23 166.81.83.0-166.81.84.255 Signature Algorithm: sha256WithRSAEncryption 5b:e7:e1:a8:1b:ae:8a:35:6e:76:54:23:f0:b8:c6:7a:04:ad: 62:f4:bd:af:d5:9e:c4:85:5a:97:c1:c3:ac:18:7a:04:79:06: fa:7b:26:ba:ef:dd:16:a1:e6:f1:a4:2e:82:9f:46:33:4d:0b: 79:62:04:30:42:a1:37:e5:c6:93:2e:ce:94:aa:ee:fb:e9:da: 03:bc:a9:d8:41:55:9c:2b:fc:e5:26:23:43:f4:38:b2:4e:29: 5a:0e:4a:83:e8:57:ef:2f:89:e4:9d:dc:26:f6:24:99:99:55: 30:3b:ae:1b:d7:e3:a3:c1:0c:09:a5:6b:a1:59:12:76:39:17: a2:d4:8d:ce:fb:00:96:be:a0:8b:9c:4e:3a:65:8b:0e:32:b9: db:73:35:ca:9f:36:81:1b:80:3e:5f:d9:8a:ff:3e:8a:ef:ad: ab:58:10:ce:be:26:1e:88:57:4c:d0:31:fe:bc:f4:94:5f:0b: d5:76:70:16:e2:65:5b:1b:87:9c:ed:50:53:c5:74:d9:0e:74: 8c:ae:c4:fa:0d:ad:3e:36:e2:08:17:51:5d:b4:c4:b2:45:62: c1:c3:cf:2e:09:b5:2b:ad:c5:1c:94:9c:b7:5b:ff:a5:5b:4c: e7:91:29:ff:6b:fb:e9:d6:5f:c2:cb:0b:04:ac:95:6e:dc:07: 99:a5:ae:c2 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUwMTI5MDgzNDE1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5ZTgwNy1jNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GlabZGgHyLvumvhv/zmuDvcgJpvebMGJ/fE7jGtAo+fx8ZKq4vHcTp8evKZ ooWpjignICscSbyS+up9c6KKR7mgSudrGt7vxJX4tfSvi8kXm8QX5d8fgQxIp6yb Tq9k+L2TLVCb9fsrvK4OO9InbEsEAiVAXxfwJggJRh5ycq9aBc6lxFeuGlDJKaMD 8KGWPv2WGQfPWRfft5sNlNWxyZlLbgSBpR+DlLosZMWBqkRPFKEuqwI+FuE5L7+o Gh83VFrg35/Hmul943r1kBIossj4jXk7F5qAC7oLxbizYuebOtP8n3NwOmQV/o21 YDFP0k907+Kpcjwchg1xFoN5UQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFHbez2bP +FfzgG90cWWTXJWhIj8SMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMzMUIvRDBFQ0NENDg4OTNEMTFFQjkxNkRGMDIyQzRGOUFFMDIvQkI5QzE0RjZB QTU1MTFFQjg2RjM0MDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBACmUQYDBAGmUT4wDAMEAKZRUwMEAKZRVDANBgkqhkiG9w0B AQsFAAOCAQEAW+fhqBuuijVudlQj8LjGegStYvS9r9WexIVal8HDrBh6BHkG+nsm uu/dFqHm8aQugp9GM00LeWIEMEKhN+XGky7OlKru++naA7yp2EFVnCv85SYjQ/Q4 sk4pWg5Kg+hX7y+J5J3cJvYkmZlVMDuuG9fjo8EMCaVroVkSdjkXotSNzvsAlr6g i5xOOmWLDjK523M1yp82gRuAPl/Ziv8+iu+tq1gQzr4mHohXTNAx/rz0lF8L1XZw FuJlWxuHnO1QU8V02Q50jK7E+g2tPjbiCBdRXbTEskViwcPPLgm1K63FHJSct1v/ pVtM55Ep/2v76dZfwssLBKyVbtwHmaWuwg== -----END CERTIFICATE-----Generated at Sun May 11 02:13:59 2025 by rpki-client