$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa File: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (raw, json) Hash identifier: DGhCmBwIVuA1yV2BSzBBRg3ZffQWFG7MuOhn3OP/r+0= Subject key identifier: 9B:B2:DC:6C:63:9E:A6:07:A3:1F:B4:26:EA:95:2B:12:39:7B:8E:80 Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Certificate serial: 65 Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa Signing time: Thu 20 Feb 2025 09:43:47 +0000 ROA not before: Thu 20 Feb 2025 09:43:47 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 138580 IP address blocks: 160.30.9.0/24 maxlen: 24 160.250.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 05:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Validity Not Before: Feb 20 09:43:47 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67b6f952-5cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:8b:04:57:ba:e9:ad:9a:6d:e3:c5:d9:cb: 1b:28:67:74:23:a5:7b:ca:39:e7:89:e0:cc:fc:00: 63:99:c5:86:7a:47:95:ff:0c:ec:54:93:f6:c1:de: ad:21:de:9d:bb:00:46:c7:75:d8:ec:3a:71:c8:bf: db:93:9f:0c:16:b8:b6:2e:64:ce:16:50:94:a7:a5: 4d:31:75:d2:8b:bc:93:24:71:36:4b:3b:f6:0e:c9: 91:75:83:d1:50:e0:5d:2c:82:3c:6f:19:d6:cb:7b: 7a:3a:09:19:e2:e3:66:5c:94:2e:31:04:c6:73:19: 0e:d6:bf:84:26:43:d9:f4:7b:42:2b:ce:7b:40:87: e0:5b:ce:8e:4b:4d:94:84:bc:92:a2:e8:3f:49:7d: ec:99:01:3d:88:d4:be:9b:87:cf:ea:d3:44:0b:c8: e2:57:2e:fc:8a:d7:f0:2b:d2:94:73:7c:d3:26:28: ff:81:e4:ba:2c:27:c3:00:6a:d9:e0:c7:0f:96:de: 93:fe:99:d6:8e:04:70:28:70:8f:26:6c:e8:da:cc: 04:49:b5:4d:e8:0e:69:f4:e2:d4:23:6b:dc:df:4b: 58:4f:cc:6a:25:08:b0:2f:cf:3f:a0:32:9d:80:b8: c2:49:0f:29:70:d7:f8:e9:c1:e2:6b:fc:8f:01:d9: 73:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B2:DC:6C:63:9E:A6:07:A3:1F:B4:26:EA:95:2B:12:39:7B:8E:80 X509v3 Authority Key Identifier: keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.9.0/24 160.250.86.0/24 Signature Algorithm: sha256WithRSAEncryption 05:b3:b2:ae:18:4b:b2:90:99:00:d9:31:d6:3b:a0:70:31:c6: 1b:70:6d:a5:dd:ff:92:b8:cf:ad:b1:2d:45:20:ef:e7:05:47: e4:c2:06:95:c2:70:da:6b:17:a4:c7:ff:18:13:cc:02:e9:ab: 14:53:6e:04:56:69:f3:c7:c1:e6:5e:b9:70:56:2f:9a:d6:ea: 7d:af:cf:89:15:2e:0f:cf:8f:fc:2e:31:6c:01:15:da:b0:27: 6b:09:39:31:63:a4:db:c2:ef:5f:0f:a8:a2:e6:9f:57:37:7b: 93:69:07:e9:14:48:8b:7f:51:9f:c3:04:0b:ec:2b:ed:d7:1f: 81:cf:4c:fb:d7:8b:ae:ae:74:12:ee:b6:33:f2:dc:99:b9:d6: dd:3c:d4:ee:f3:3e:e9:be:03:f1:e1:fe:fe:9e:07:d5:6e:ca: 6e:7f:ef:26:f0:fa:e2:87:e3:8c:6e:2e:7e:9c:b8:44:47:b3: c9:1d:bd:6a:52:ce:ff:e2:1b:a7:b6:5e:fe:f2:ef:4c:8c:5e: 4d:84:a8:3b:dc:0f:9f:6c:17:14:44:b0:32:b6:0c:91:3a:9a: b0:39:97:8d:61:c9:f4:80:1e:be:46:90:54:25:45:5a:8c:54: ce:27:7f:32:64:b0:23:71:79:e2:71:0a:16:4e:2f:75:28:cf: f0:0c:5b:68 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzdDRDExMC8GA1UEBRMoQzMzNzJERTFGRTlFNTNDMThCMzA1MTZEOTY0QzQzNjcy MkVCM0VDQjAeFw0yNTAyMjAwOTQzNDdaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YjZmOTUyLTVjYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyCYsEV7rprZpt48XZyxsoZ3QjpXvKOeeJ4Mz8AGOZxYZ6R5X/DOxUk/bB3q0h 3p27AEbHddjsOnHIv9uTnwwWuLYuZM4WUJSnpU0xddKLvJMkcTZLO/YOyZF1g9FQ 4F0sgjxvGdbLe3o6CRni42ZclC4xBMZzGQ7Wv4QmQ9n0e0IrzntAh+Bbzo5LTZSE vJKi6D9JfeyZAT2I1L6bh8/q00QLyOJXLvyK1/Ar0pRzfNMmKP+B5LosJ8MAatng xw+W3pP+mdaOBHAocI8mbOjazARJtU3oDmn04tQja9zfS1hPzGolCLAvzz+gMp2A uMJJDylw1/jpweJr/I8B2XMtAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUm7LcbGOe pgejH7Qm6pUrEjl7joAwHwYDVR0jBBgwFoAUwzct4f6eU8GLMFFtlkxDZyLrPssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDN0NEL0Q2NEExRkI0NUVB MjExRUZCMTY3NzI0M0M0RjlBRTAyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd3pjdDRmNmVVOEdMTUZGdGxreERaeUxyUHNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzdDRC9ENjRBMUZCNDVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi81QzhGMEQ1MDVF Q0IxMUVGQTREOEUwN0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAKAeCQMEAKD6VjANBgkqhkiG9w0BAQsFAAOCAQEABbOyrhhL spCZANkx1jugcDHGG3Btpd3/krjPrbEtRSDv5wVH5MIGlcJw2msXpMf/GBPMAumr FFNuBFZp88fB5l65cFYvmtbqfa/PiRUuD8+P/C4xbAEV2rAnawk5MWOk28LvXw+o ouafVzd7k2kH6RRIi39Rn8MEC+wr7dcfgc9M+9eLrq50Eu62M/LcmbnW3TzU7vM+ 6b4D8eH+/p4H1W7Kbn/vJvD64ofjjG4ufpy4REezyR29alLO/+Ibp7Ze/vLvTIxe TYSoO9wPn2wXFESwMrYMkTqasDmXjWHJ9IAevkaQVCVFWoxUzid/MmSwI3F54nEK Fk4vdSjP8AxbaA== -----END CERTIFICATE-----Generated at Sat Apr 19 04:51:48 2025 by rpki-client