$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/A670A5280E1B11F0ACE35C1EC4F9AE02.roa File: A670A5280E1B11F0ACE35C1EC4F9AE02.roa (raw, json) Hash identifier: ZhJ+bXVaor7/tIqf32e0N1k+mjIJIO6xBDZ+aHdSac4= Subject key identifier: D3:EA:5B:C3:80:0C:BF:54:86:57:06:2E:36:DA:15:70:EC:8B:E2:B0 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 0924 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/A670A5280E1B11F0ACE35C1EC4F9AE02.roa Signing time: Mon 31 Mar 2025 10:33:57 +0000 ROA not before: Mon 31 Mar 2025 10:33:57 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 138526 IP address blocks: 157.119.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509 Validity Not Before: Mar 31 10:33:57 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67ea6f95-3237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:70:72:ad:08:25:a3:6e:31:14:f4:ad:55:ea: e5:69:67:8d:f0:06:84:18:af:5f:cb:1f:31:bd:dc: a9:a9:dd:e7:9d:9f:f2:9b:fb:3f:69:c3:75:90:de: 26:2a:c7:32:2a:53:e7:00:8f:7b:c7:f5:36:01:66: b7:ba:f4:25:77:28:43:8b:a8:e7:83:ff:c8:36:8b: 43:c5:0d:ce:dc:69:93:b0:52:51:4a:54:a2:2d:4e: f5:2b:43:8f:b0:d0:6f:25:0c:e1:e9:5f:59:ea:a3: 95:8b:43:31:09:b9:88:fc:4c:c9:df:d4:cf:46:28: 3c:7c:68:d2:ac:c4:26:e3:1d:76:3f:51:6f:8f:aa: aa:48:57:e3:88:37:de:44:0e:f2:66:48:88:b0:48: e0:b0:4b:73:5a:47:ae:08:55:9d:f9:f4:7a:9c:8a: b7:fd:89:6f:70:e2:10:e5:cd:c8:65:1d:27:fc:e7: 3f:71:47:02:e9:a2:2f:02:eb:5b:03:c3:99:70:02: fb:61:34:3a:cd:c5:80:13:68:b0:8f:be:62:77:8b: a7:02:dd:2d:15:df:69:20:a3:99:14:79:fd:d9:c8: eb:8f:a8:c6:3e:08:56:9f:62:8d:66:b6:ae:4c:49: 04:7b:e0:23:15:63:d8:59:13:a5:80:bd:e1:2f:83: ab:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EA:5B:C3:80:0C:BF:54:86:57:06:2E:36:DA:15:70:EC:8B:E2:B0 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/A670A5280E1B11F0ACE35C1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.119.233.0/24 Signature Algorithm: sha256WithRSAEncryption 24:a7:87:d3:48:f5:de:d2:0c:3a:c5:98:e7:84:d0:63:8f:5e: b9:7c:d2:88:72:ca:29:81:19:ee:9c:54:ec:83:cf:d5:67:93: 0b:8e:77:ab:7f:97:67:e1:db:85:ee:5c:4d:64:c1:d5:b5:f4: 9b:21:0c:98:88:ab:0c:03:70:c9:4e:41:ef:cf:bf:b0:23:2c: c2:6b:ac:33:fe:0b:ac:57:1b:9a:c7:d8:34:13:39:49:a6:a5: ca:f8:65:45:c8:29:0b:e5:4e:92:a0:c8:b1:0a:03:7d:c8:a8: 09:5d:e1:f1:eb:2d:91:e0:dc:8b:94:35:c3:f5:51:36:d7:89: 20:a3:2e:bd:b5:14:a8:30:67:0e:65:a0:7c:e4:43:0e:14:c2: 0d:02:9b:d4:3b:b8:51:e0:65:6c:03:9a:14:87:34:b4:37:f4: 67:0b:4a:81:eb:8f:d3:e4:4e:4a:59:79:d5:12:a5:e3:80:68: cd:8e:22:e8:fe:60:93:23:53:fd:53:97:ab:82:17:73:f7:68: b2:39:6d:8a:c0:7e:d4:54:96:fd:c3:f0:2f:3b:0a:7f:bc:ca: bd:f3:01:04:fb:0b:60:e2:cb:fd:59:6a:ab:38:5b:d8:f3:22: 7e:3b:ba:58:2e:3f:c2:b5:97:96:16:7f:09:14:34:30:af:64: 18:98:eb:50 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjUwMzMxMTAzMzU3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhNmY5NS0zMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHByrQglo24xFPStVerlaWeN8AaEGK9fyx8xvdypqd3nnZ/ym/s/acN1kN4m KscyKlPnAI97x/U2AWa3uvQldyhDi6jng//INotDxQ3O3GmTsFJRSlSiLU71K0OP sNBvJQzh6V9Z6qOVi0MxCbmI/EzJ39TPRig8fGjSrMQm4x12P1Fvj6qqSFfjiDfe RA7yZkiIsEjgsEtzWkeuCFWd+fR6nIq3/YlvcOIQ5c3IZR0n/Oc/cUcC6aIvAutb A8OZcAL7YTQ6zcWAE2iwj75id4unAt0tFd9pIKOZFHn92cjrj6jGPghWn2KNZrau TEkEe+AjFWPYWROlgL3hL4OrLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNPqW8OA DL9UhlcGLjbaFXDsi+KwMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU1MDkvNzlFQTU5MUVBN0JEMTFFQUFBQTYyOTQ4QzRGOUFFMDIvQTY3MEE1Mjgw RTFCMTFGMEFDRTM1QzFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdd+kwDQYJKoZIhvcNAQELBQADggEBACSnh9NI9d7SDDrF mOeE0GOPXrl80ohyyimBGe6cVOyDz9VnkwuOd6t/l2fh24XuXE1kwdW19JshDJiI qwwDcMlOQe/Pv7AjLMJrrDP+C6xXG5rH2DQTOUmmpcr4ZUXIKQvlTpKgyLEKA33I qAld4fHrLZHg3IuUNcP1UTbXiSCjLr21FKgwZw5loHzkQw4Uwg0Cm9Q7uFHgZWwD mhSHNLQ39GcLSoHrj9PkTkpZedUSpeOAaM2OIuj+YJMjU/1Tl6uCF3P3aLI5bYrA ftRUlv3D8C87Cn+8yr3zAQT7C2Diy/1Zaqs4W9jzIn47ulguP8K1l5YWfwkUNDCv ZBiY61A= -----END CERTIFICATE-----Generated at Sun Apr 6 21:09:38 2025 by rpki-client