$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/25922C44F3CF11EFBCC75246C4F9AE02.roa File: 25922C44F3CF11EFBCC75246C4F9AE02.roa (raw, json) Hash identifier: /+v7Ksoid33z04XmzwyzW93GCN47u5aOiXMh700TRNk= Subject key identifier: 3A:64:17:47:E6:DF:E8:A3:67:ED:0B:3C:20:69:41:06:37:2E:A8:77 Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 02 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/25922C44F3CF11EFBCC75246C4F9AE02.roa Signing time: Tue 25 Feb 2025 23:20:49 +0000 ROA not before: Tue 25 Feb 2025 23:20:49 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 140637 IP address blocks: 143.188.160.0/23 maxlen: 26 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4 Validity Not Before: Feb 25 23:20:49 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67be5050-6c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5d:e7:1f:c0:0f:ad:9e:32:3e:b6:f8:d8:98: a9:b5:6b:d5:4c:1d:f0:71:44:1d:09:f0:20:33:dd: d1:e2:11:ae:1c:a3:d2:ba:84:0b:70:c6:37:28:a9: 3c:6c:63:d9:24:b0:f6:03:ae:10:ea:96:bc:8c:f6: 4e:4f:fb:9e:72:50:34:70:73:84:0b:d1:e7:33:4e: 9f:1f:fd:45:7b:f4:53:e6:77:c9:e7:08:d1:9c:e3: e3:2a:2f:9e:a0:91:9f:aa:39:79:5f:77:c4:fd:cd: e0:70:31:d0:3c:b2:7c:e2:a8:69:e9:45:2d:9e:c3: fc:91:d7:e8:81:32:10:1f:64:6b:a8:0b:d6:43:27: 43:74:bc:55:91:29:9b:94:6c:5f:f8:fa:c1:fe:2b: f7:94:16:40:43:27:23:67:a2:a0:58:a7:7c:5e:05: 19:b0:5f:6b:97:a0:06:ef:5b:7b:c9:c0:62:62:23: 74:65:6d:ba:68:96:83:00:90:59:bf:4b:d7:d9:a7: 55:ec:2f:ce:5f:d5:bf:7b:bd:da:b4:63:e7:a2:cf: ad:f3:a6:ad:1f:af:ef:64:71:10:a9:7d:a9:33:0d: 83:55:a7:aa:6e:00:6f:3d:c2:63:f6:ca:6a:17:37: c4:2c:eb:98:a4:af:fb:e7:d0:16:3e:ab:9e:50:44: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:64:17:47:E6:DF:E8:A3:67:ED:0B:3C:20:69:41:06:37:2E:A8:77 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/25922C44F3CF11EFBCC75246C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.188.160.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:b9:13:11:7e:69:db:7b:21:8d:0f:bb:16:46:63:28:ac:79: 75:ff:40:9b:6a:4f:97:5e:43:39:b2:ba:48:10:c3:8e:c2:72: a5:f4:ce:be:34:2d:0b:d4:26:b4:de:38:59:06:e4:bb:d2:aa: b7:85:a2:44:55:22:4c:3e:d5:a9:25:64:95:79:08:b2:7c:8b: 68:29:8b:71:1a:04:f5:b4:12:a9:88:e6:da:34:ae:77:4b:d9: 61:43:d0:1c:32:e0:e9:21:5e:b8:f6:a7:f7:91:b1:56:63:b8: 3d:17:d9:7f:04:9f:62:f3:1e:28:7b:46:d9:8b:5a:5f:5d:b8: 9b:71:20:64:b8:8d:ea:b4:8a:bc:6e:53:2f:16:c0:4d:13:4a: e4:ed:99:10:6c:c4:d1:0a:9e:cd:16:02:1d:fe:0d:55:93:f2: 6d:b6:b7:35:8b:68:ec:8a:8c:77:d1:bc:51:8e:20:12:a4:01: b8:35:00:f5:80:db:a6:b1:2a:b0:01:0a:64:93:69:f4:a0:48: 33:b3:eb:a9:73:65:b7:c0:d3:93:e7:eb:da:d5:5a:fb:ae:eb: 31:b5:82:3d:3a:e8:1e:1d:c5:d5:93:46:c0:d7:92:a8:e3:26: 67:c9:30:2c:83:8a:81:90:8c:d7:5a:96:fc:3d:1e:98:3a:c3: ef:66:9f:dd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoNjYxMzREQTFCRkVEQUMwQzkxOUQyNkIxRjdGOUUxNjhB RjlEMkI0RTAeFw0yNTAyMjUyMzIwNDlaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YmU1MDUwLTZjNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHXecfwA+tnjI+tvjYmKm1a9VMHfBxRB0J8CAz3dHiEa4co9K6hAtwxjcoqTxs Y9kksPYDrhDqlryM9k5P+55yUDRwc4QL0eczTp8f/UV79FPmd8nnCNGc4+MqL56g kZ+qOXlfd8T9zeBwMdA8snziqGnpRS2ew/yR1+iBMhAfZGuoC9ZDJ0N0vFWRKZuU bF/4+sH+K/eUFkBDJyNnoqBYp3xeBRmwX2uXoAbvW3vJwGJiI3RlbbpoloMAkFm/ S9fZp1XsL85f1b97vdq0Y+eiz63zpq0fr+9kcRCpfakzDYNVp6puAG89wmP2ymoX N8Qs65ikr/vn0BY+q55QRKBXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOmQXR+bf 6KNn7Qs8IGlBBjcuqHcwHwYDVR0jBBgwFoAUZhNNob/trAyRnSax9/nhaK+dK04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzY1MEI0REU4RjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEsw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmhOTm9iX3RyQXlSblNheDlfbmhhSy1kSzA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTVENC82NTBCNERFOEYzQ0UxMUVGOTE0RUY2NDRDNEY5QUUwMi8yNTkyMkM0NEYz Q0YxMUVGQkNDNzUyNDZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAY+8oDANBgkqhkiG9w0BAQsFAAOCAQEAPbkTEX5p23shjQ+7 FkZjKKx5df9Am2pPl15DObK6SBDDjsJypfTOvjQtC9QmtN44WQbku9Kqt4WiRFUi TD7VqSVklXkIsnyLaCmLcRoE9bQSqYjm2jSud0vZYUPQHDLg6SFeuPan95GxVmO4 PRfZfwSfYvMeKHtG2YtaX124m3EgZLiN6rSKvG5TLxbATRNK5O2ZEGzE0QqezRYC Hf4NVZPybba3NYto7IqMd9G8UY4gEqQBuDUA9YDbprEqsAEKZJNp9KBIM7PrqXNl t8DTk+fr2tVa+67rMbWCPTroHh3F1ZNGwNeSqOMmZ8kwLIOKgZCM11qW/D0emDrD 72af3Q== -----END CERTIFICATE-----Generated at Sun Apr 6 21:16:32 2025 by rpki-client