$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EF8C82FA2BCA11F080FEBD5FC4F9AE02.roa File: EF8C82FA2BCA11F080FEBD5FC4F9AE02.roa (raw, json) Hash identifier: AHB2aCGcatVupwUR42dmSjzsFBQh+Wlatzdt3K2ft+w= Subject key identifier: EF:5C:10:5B:0F:10:52:78:75:7C:7C:4D:FB:E6:76:AD:4C:E6:0D:00 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 26CA Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EF8C82FA2BCA11F080FEBD5FC4F9AE02.roa Signing time: Thu 08 May 2025 05:11:45 +0000 ROA not before: Thu 08 May 2025 05:11:45 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 6830 IP address blocks: 202.92.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9930 (0x26ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: May 8 05:11:45 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=681c3d11-79fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:fb:bc:06:8b:e4:63:34:ac:1e:00:b1:32: 92:22:57:8d:5e:d9:fe:6b:b5:f4:37:01:3b:af:f0: 24:37:3c:02:7b:e6:46:ba:cb:7e:0f:87:48:b3:8b: a5:06:bf:b3:31:8a:eb:60:44:9a:60:8a:9c:64:28: 79:11:e6:e9:e5:ba:89:54:27:27:da:d2:d3:96:19: 8c:84:57:18:41:c8:99:c6:63:fb:31:e7:ad:4b:25: 68:a2:a1:26:ec:84:03:2a:7e:55:99:15:0e:71:3a: 57:c5:e1:be:fa:fa:e9:a3:aa:cf:25:b0:a2:b5:8c: b4:8b:2c:7e:b3:c6:13:2d:e0:9f:ac:26:62:df:78: 9c:e8:dc:40:d9:88:33:11:b3:dc:50:79:1d:a9:9f: fb:1a:69:5f:04:25:ec:aa:0e:f5:d9:8e:a3:1a:05: 8b:69:37:80:8b:bd:79:03:a0:52:46:a7:e7:2c:55: e4:31:ea:27:f1:7b:3b:40:6a:f8:a2:a0:a2:21:20: 3a:dd:de:80:66:57:05:03:3d:a2:ca:9e:e9:38:5b: a2:cc:62:2c:2a:cc:4f:d1:69:0e:52:65:ba:3b:fd: d9:19:53:f0:1c:fb:d7:8f:c2:22:af:0e:77:13:36: 32:40:d0:39:c1:c9:17:da:67:75:d8:7f:29:ed:d2: ad:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5C:10:5B:0F:10:52:78:75:7C:7C:4D:FB:E6:76:AD:4C:E6:0D:00 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EF8C82FA2BCA11F080FEBD5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.92.21.0/24 Signature Algorithm: sha256WithRSAEncryption 83:16:00:70:25:34:fe:b2:24:01:d4:c9:50:c0:e6:e2:87:b4: 80:43:4c:40:f9:18:e4:a2:5d:6b:6a:06:b9:bd:7b:62:ca:f7: 99:0b:b0:09:fa:37:09:82:57:06:20:50:f4:52:0c:63:dc:1b: d3:fd:3e:f2:3b:ed:b5:e4:d2:ec:67:8d:55:c4:71:b2:52:e3: 65:15:e6:71:e3:de:51:2e:9c:30:1f:8c:47:1c:71:0f:6d:59: c0:8c:47:c0:4e:6f:71:f0:e4:7d:fb:04:16:d7:b7:ea:a6:85: 98:fa:92:25:a1:dd:da:82:2b:24:69:ba:1f:41:d3:e0:fb:77: 7e:cf:36:4f:4e:95:2e:3c:be:58:51:72:42:45:ab:1d:75:16: ea:0d:cd:18:3d:5c:b9:81:17:d1:28:de:60:2e:2e:00:78:bd: f6:a5:ee:bd:13:01:b1:43:da:3a:9b:86:f1:69:ec:ad:c7:49: f0:75:a1:bb:ff:a5:3a:91:9d:79:a9:db:1a:17:ae:2c:53:cc: 05:9b:fa:56:cc:7f:5b:f4:f7:bf:d9:88:95:6f:94:5b:8c:71: 25:f0:cf:55:7d:37:dd:81:44:1b:b3:c5:48:17:66:b5:fd:d6: eb:d2:5d:47:fe:c0:c0:ab:3e:b1:a0:f1:2f:2a:65:ea:69:a2: 5e:53:06:d3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwNTA4MDUxMTQ1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjM2QxMS03OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ev7vAaL5GM0rB4AsTKSIleNXtn+a7X0NwE7r/AkNzwCe+ZGust+D4dIs4ul Br+zMYrrYESaYIqcZCh5Eebp5bqJVCcn2tLTlhmMhFcYQciZxmP7MeetSyVooqEm 7IQDKn5VmRUOcTpXxeG++vrpo6rPJbCitYy0iyx+s8YTLeCfrCZi33ic6NxA2Ygz EbPcUHkdqZ/7GmlfBCXsqg712Y6jGgWLaTeAi715A6BSRqfnLFXkMeon8Xs7QGr4 oqCiISA63d6AZlcFAz2iyp7pOFuizGIsKsxP0WkOUmW6O/3ZGVPwHPvXj8Iirw53 EzYyQNA5wckX2md12H8p7dKt1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFO9cEFsP EFJ4dXx8Tfvmdq1M5g0AMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRUY4QzgyRkEy QkNBMTFGMDgwRkVCRDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKXBUwDQYJKoZIhvcNAQELBQADggEBAIMWAHAlNP6yJAHU yVDA5uKHtIBDTED5GOSiXWtqBrm9e2LK95kLsAn6NwmCVwYgUPRSDGPcG9P9PvI7 7bXk0uxnjVXEcbJS42UV5nHj3lEunDAfjEcccQ9tWcCMR8BOb3Hw5H37BBbXt+qm hZj6kiWh3dqCKyRpuh9B0+D7d37PNk9OlS48vlhRckJFqx11FuoNzRg9XLmBF9Eo 3mAuLgB4vfal7r0TAbFD2jqbhvFp7K3HSfB1obv/pTqRnXmp2xoXrixTzAWb+lbM f1v097/ZiJVvlFuMcSXwz1V9N92BRBuzxUgXZrX91uvSXUf+wMCrPrGg8S8qZepp ol5TBtM= -----END CERTIFICATE-----Generated at Sun May 11 21:09:15 2025 by rpki-client