$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4995362191A11F0B13E9A6EC4F9AE02.roa File: F4995362191A11F0B13E9A6EC4F9AE02.roa (raw, json) Hash identifier: 9YxYIN4P6Jw/HNtC1TN2JPmjeaEJ7PA+60oFtqzexnI= Subject key identifier: 47:C7:92:9F:92:D8:65:E5:E5:B1:14:52:E5:BD:06:99:EA:4A:40:8A Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 26A6 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4995362191A11F0B13E9A6EC4F9AE02.roa Signing time: Mon 05 May 2025 14:56:22 +0000 ROA not before: Mon 05 May 2025 14:56:22 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 60721 IP address blocks: 115.167.9.0/24 maxlen: 24 115.167.62.0/24 maxlen: 24 115.167.63.0/24 maxlen: 24 115.167.76.0/24 maxlen: 24 175.110.80.0/24 maxlen: 24 223.29.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9894 (0x26a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: May 5 14:56:22 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6818d195-afd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6f:06:64:d2:c2:bc:2a:f9:6b:5f:a9:5d:92: 77:86:40:02:3e:07:ab:8f:5f:93:f1:ca:f4:4f:8e: c8:7e:b9:af:7b:4b:e1:0c:cb:ab:da:07:86:bc:17: 09:e4:cc:64:09:86:40:74:9b:83:f2:9f:43:c1:20: 9a:8d:83:c9:b5:f3:4f:da:df:64:73:34:cb:8d:03: 9d:f2:9c:16:1a:f0:ba:a2:6b:1b:93:d4:e2:d6:58: 23:be:cd:bb:34:4d:a2:2d:40:85:e1:74:a3:0e:f6: 58:a2:05:e7:a0:76:ac:74:b6:58:99:75:75:5a:dc: b1:12:9c:7c:a1:02:b4:32:b8:07:9f:52:03:35:cd: af:7f:9a:22:21:85:fe:cd:ff:41:f5:ca:b9:05:ab: 2b:ff:36:49:bc:0f:7b:e1:17:05:94:a1:af:4a:d1: a2:e9:5a:a7:09:a6:c7:66:51:fc:b9:66:2b:a4:15: 42:14:2c:9e:34:76:f0:9d:fb:a6:38:a1:e2:63:08: c0:c6:66:6e:b1:13:29:49:fc:70:e8:58:f1:d4:49: 26:4d:2e:19:fb:21:f5:7e:d4:92:e7:0e:13:84:7b: 40:4c:33:20:0d:ab:fc:00:48:09:20:2c:15:73:ce: c6:5c:55:ef:26:36:61:24:ab:7b:49:0d:fa:f6:22: 6b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C7:92:9F:92:D8:65:E5:E5:B1:14:52:E5:BD:06:99:EA:4A:40:8A X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4995362191A11F0B13E9A6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.167.9.0/24 115.167.62.0/23 115.167.76.0/24 175.110.80.0/24 223.29.239.0/24 Signature Algorithm: sha256WithRSAEncryption 03:ae:63:2a:5c:a0:df:ab:dc:56:bd:df:18:bc:09:57:35:e5: 9e:69:9c:aa:96:24:b8:a4:1c:e1:6d:fa:e8:da:51:06:9b:c7: 37:a3:db:70:d3:17:47:7f:35:92:09:14:91:b1:1e:83:77:6b: 19:cf:03:95:10:3a:b5:b2:ae:dd:3d:b8:86:99:ed:12:98:34: f5:17:17:6a:ad:89:3a:a1:85:32:d6:73:2d:09:f4:dd:97:a0: 60:c3:54:bd:fe:8f:0f:73:74:73:ec:f5:fc:9a:a6:20:80:03: 69:c5:1c:5e:35:33:8b:15:3a:21:12:8e:c4:3b:3a:b0:9e:55: 98:b1:ba:04:de:e7:df:03:21:de:18:d6:a3:5b:84:d6:50:44: f8:73:33:fb:04:3b:82:7c:52:cb:92:f9:1e:c4:49:41:a4:62: 4c:ca:de:d4:50:ca:7a:a2:cb:f0:f0:63:b1:48:08:e3:75:58: 04:22:db:53:88:53:f8:36:25:74:ec:67:1b:bd:c3:a2:c2:08: 90:95:9c:d2:bd:38:da:66:62:a8:0b:52:1e:03:09:47:93:5c: df:9d:50:68:5e:92:b2:1d:99:fa:15:92:0f:22:9f:8a:32:0f: 45:45:c9:f5:ed:f4:c0:da:fe:bb:75:48:a8:d6:15:56:0d:c2: a4:f1:8c:81 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICJqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwNTA1MTQ1NjIyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE4ZDE5NS1hZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3G8GZNLCvCr5a1+pXZJ3hkACPgerj1+T8cr0T47Ifrmve0vhDMur2geGvBcJ 5MxkCYZAdJuD8p9DwSCajYPJtfNP2t9kczTLjQOd8pwWGvC6omsbk9Ti1lgjvs27 NE2iLUCF4XSjDvZYogXnoHasdLZYmXV1WtyxEpx8oQK0MrgHn1IDNc2vf5oiIYX+ zf9B9cq5Basr/zZJvA974RcFlKGvStGi6VqnCabHZlH8uWYrpBVCFCyeNHbwnfum OKHiYwjAxmZusRMpSfxw6Fjx1EkmTS4Z+yH1ftSS5w4ThHtATDMgDav8AEgJICwV c87GXFXvJjZhJKt7SQ369iJrkQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEfHkp+S 2GXl5bEUUuW9BpnqSkCKMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRjQ5OTUzNjIx OTFBMTFGMEIxM0U5QTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBABzpwkDBAFzpz4DBABzp0wDBACvblADBADfHe8wDQYJKoZI hvcNAQELBQADggEBAAOuYypcoN+r3Fa93xi8CVc15Z5pnKqWJLikHOFt+ujaUQab xzej23DTF0d/NZIJFJGxHoN3axnPA5UQOrWyrt09uIaZ7RKYNPUXF2qtiTqhhTLW cy0J9N2XoGDDVL3+jw9zdHPs9fyapiCAA2nFHF41M4sVOiESjsQ7OrCeVZixugTe 598DId4Y1qNbhNZQRPhzM/sEO4J8UsuS+R7ESUGkYkzK3tRQynqiy/DwY7FICON1 WAQi21OIU/g2JXTsZxu9w6LCCJCVnNK9ONpmYqgLUh4DCUeTXN+dUGhekrIdmfoV kg8in4oyD0VFyfXt9MDa/rt1SKjWFVYNwqTxjIE= -----END CERTIFICATE-----Generated at Sun May 11 19:58:30 2025 by rpki-client