$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/C48E5CA6EC5811EFB20A8A18C4F9AE02.roa File: C48E5CA6EC5811EFB20A8A18C4F9AE02.roa (raw, json) Hash identifier: vLgyAt4VKcLI4TYUSdqX2oSSFdxzy2+HjS3FIN16Cr8= Subject key identifier: F7:15:A7:33:91:4B:CE:2A:88:12:C0:4F:34:8D:AC:56:9C:7C:7B:EC Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Certificate serial: 27 Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/C48E5CA6EC5811EFB20A8A18C4F9AE02.roa Signing time: Sun 16 Feb 2025 11:25:47 +0000 ROA not before: Sun 16 Feb 2025 11:25:47 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 214571 IP address blocks: 160.250.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 06:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Validity Not Before: Feb 16 11:25:47 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67b1cb3b-d5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fb:78:57:07:be:96:e6:24:6d:1a:c5:5f:ae: db:ef:8a:33:90:71:35:f4:70:4e:ee:9b:46:d3:d5: 93:8c:04:71:9d:00:3d:ed:39:ba:43:49:4a:40:0e: 0b:94:3c:02:e0:75:dc:9b:3d:95:27:db:78:7b:9f: a4:73:9e:55:d2:87:2e:52:aa:79:e6:8c:99:62:59: 24:2f:a5:a5:06:e8:7a:36:8d:d4:bd:06:ad:99:6f: 56:5d:03:bf:1b:d3:56:91:38:a1:02:3b:aa:2f:6d: c9:e7:75:66:0b:d4:7f:22:18:da:a9:08:85:5c:f4: 3f:59:17:a7:7f:a5:a6:94:3d:2a:4e:61:31:07:dd: 93:2e:7f:27:e4:39:1f:8d:a9:58:00:98:30:bb:35: 51:f9:b4:53:3c:98:1b:a4:05:2f:fe:4d:5c:a5:66: e5:c5:83:b7:3f:61:71:f6:3a:7e:36:04:e1:ce:c3: e6:77:f9:6b:60:a2:80:ab:8c:cc:49:0c:ff:70:21: 89:9e:a8:03:ca:d1:14:bf:e6:a2:2c:80:aa:eb:24: 84:5f:2f:be:b0:da:e4:34:99:1a:51:cd:c7:d8:5d: 46:74:59:09:1f:23:44:f4:0c:61:6e:98:cc:c8:9b: 2b:f9:8b:94:1d:d0:bf:ac:05:23:99:ec:27:f0:8f: 70:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:15:A7:33:91:4B:CE:2A:88:12:C0:4F:34:8D:AC:56:9C:7C:7B:EC X509v3 Authority Key Identifier: keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/C48E5CA6EC5811EFB20A8A18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.224.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:61:3c:4b:7b:ce:49:d7:26:dc:39:6c:eb:45:79:d9:8e:f4: fa:3f:cb:95:b7:06:dc:71:6a:83:7f:4c:71:80:d9:46:72:ff: a8:27:fd:63:41:a1:4a:2d:07:1c:a7:fd:91:12:42:a0:2a:3f: 6e:cf:c9:2d:a4:58:d1:45:36:0d:d8:6e:19:90:fd:6f:d6:4e: c3:71:e4:f5:43:b2:1b:d2:42:81:cb:14:b7:76:15:64:b5:f6: d5:5a:19:9e:26:c3:48:40:60:a6:16:ac:1c:da:22:60:6c:cc: 08:86:26:66:35:3f:3e:03:08:12:72:51:68:7e:65:ea:60:8d: 7b:82:95:74:49:29:2c:2f:a5:0d:7b:76:43:8d:80:fa:7f:ca: c5:20:1b:e5:06:2d:fb:de:57:d9:68:91:1d:14:24:07:6d:35: f7:56:c7:0e:9e:84:aa:bc:a3:02:66:07:6a:eb:72:0e:23:9c: e0:42:50:93:b7:49:76:e2:1c:dd:68:0a:75:fe:17:f2:eb:0e: f2:c6:ed:82:fa:e2:8f:72:fc:53:96:e3:ba:cf:ae:41:87:55: 93:04:ed:77:34:5e:83:4e:66:97:48:5e:f4:08:89:3c:b2:06: b1:81:2d:21:4d:fe:3a:b6:d4:f6:01:63:ce:3c:5c:50:0f:af: a2:c8:21:cb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Rjc1MzExMC8GA1UEBRMoMkQ0OUIzQUU2REExOEI2MzQ2NEEzMTc3QUIzMjEwMTk0 MkU2QTUxQTAeFw0yNTAyMTYxMTI1NDdaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YjFjYjNiLWQ1YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj+3hXB76W5iRtGsVfrtvvijOQcTX0cE7um0bT1ZOMBHGdAD3tObpDSUpADguU PALgddybPZUn23h7n6RznlXShy5SqnnmjJliWSQvpaUG6Ho2jdS9Bq2Zb1ZdA78b 01aROKECO6ovbcnndWYL1H8iGNqpCIVc9D9ZF6d/paaUPSpOYTEH3ZMufyfkOR+N qVgAmDC7NVH5tFM8mBukBS/+TVylZuXFg7c/YXH2On42BOHOw+Z3+WtgooCrjMxJ DP9wIYmeqAPK0RS/5qIsgKrrJIRfL76w2uQ0mRpRzcfYXUZ0WQkfI0T0DGFumMzI myv5i5Qd0L+sBSOZ7Cfwj3CNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9xWnM5FL ziqIEsBPNI2sVpx8e+wwHwYDVR0jBBgwFoAULUmzrm2hi2NGSjF3qzIQGULmpRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNzUzLzc4MDlEQTAyQkMw RDExRUY5QjRBRDY0OUM0RjlBRTAyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFVtenJtMmhpMk5HU2pGM3F6SVFHVUxtcFJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Rjc1My83ODA5REEwMkJDMEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9DNDhFNUNBNkVD NTgxMUVGQjIwQThBMThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKD64DANBgkqhkiG9w0BAQsFAAOCAQEAS2E8S3vOSdcm3Dls 60V52Y70+j/LlbcG3HFqg39McYDZRnL/qCf9Y0GhSi0HHKf9kRJCoCo/bs/JLaRY 0UU2DdhuGZD9b9ZOw3Hk9UOyG9JCgcsUt3YVZLX21VoZnibDSEBgphasHNoiYGzM CIYmZjU/PgMIEnJRaH5l6mCNe4KVdEkpLC+lDXt2Q42A+n/KxSAb5QYt+95X2WiR HRQkB20191bHDp6EqryjAmYHautyDiOc4EJQk7dJduIc3WgKdf4X8usO8sbtgvri j3L8U5bjus+uQYdVkwTtdzReg05ml0he9AiJPLIGsYEtIU3+OrbU9gFjzjxcUA+v osghyw== -----END CERTIFICATE-----Generated at Tue Apr 22 06:18:59 2025 by rpki-client