$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/03833742FBE511EFA186694BC4F9AE02.roa File: 03833742FBE511EFA186694BC4F9AE02.roa (raw, json) Hash identifier: yxR5aoeZgrptD6VDd4aNF+JjuUnYRY8iYqJvTUH0fjQ= Subject key identifier: 55:47:BF:50:C7:5B:ED:86:FC:23:55:3B:D1:64:C4:6A:A0:7A:CD:2A Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 034B Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/03833742FBE511EFA186694BC4F9AE02.roa Signing time: Sat 08 Mar 2025 06:17:30 +0000 ROA not before: Sat 08 Mar 2025 06:17:30 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 133467 IP address blocks: 157.119.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 843 (0x34b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5 Validity Not Before: Mar 8 06:17:30 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67cbe0f9-60d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2f:64:fa:ac:1c:ae:cd:f4:e3:97:dc:9a:7b: ce:4e:e4:0c:12:76:d4:e4:a9:f1:d5:02:56:2a:7c: 1b:3c:03:c4:f9:eb:4a:ed:25:02:2e:58:26:1c:db: 43:35:45:37:2a:3b:1d:a6:4d:5f:79:77:79:e2:c0: 58:9d:d1:10:d0:37:18:44:ee:55:47:c2:45:53:9f: 8f:1b:35:a5:2c:c5:bd:35:66:f4:04:9a:6b:8f:dd: fd:1f:a5:cc:32:ee:08:39:0b:96:c7:5d:a4:3d:49: 8a:1c:3f:e8:23:d3:d8:9c:52:14:77:72:f7:5e:a6: 15:03:e5:d6:46:47:d3:07:a1:25:ab:fd:be:da:89: 28:b1:6f:8e:8b:af:df:93:31:69:89:2d:27:b8:27: 9f:96:a6:6b:9b:57:d1:b5:db:c2:6f:ab:93:78:ec: 6f:38:cc:ac:d5:92:bf:74:37:c7:f2:50:51:12:5f: 75:1f:9e:ee:6c:7b:6b:a3:47:e8:69:f3:98:d9:3a: fc:d5:32:e8:a8:fc:d5:ed:d3:ce:c3:6b:df:45:f9: 1c:2d:f3:6f:cd:c4:f8:c7:35:ff:c0:8c:6c:ab:6d: fa:b6:18:01:89:ee:f4:3c:ae:0c:f7:78:14:e6:a2: 61:b0:f9:06:f3:3f:87:34:1f:d2:57:f0:dc:27:ba: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:47:BF:50:C7:5B:ED:86:FC:23:55:3B:D1:64:C4:6A:A0:7A:CD:2A X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/03833742FBE511EFA186694BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.119.22.0/24 Signature Algorithm: sha256WithRSAEncryption 85:98:36:e3:a2:6f:70:4f:96:bd:de:05:9c:be:d8:eb:da:bb: 37:0c:cc:ae:fd:23:7f:67:96:76:89:2d:c1:8c:d9:4b:5f:e5: 02:ec:8a:c9:dc:79:cc:d7:49:6f:be:f6:f4:ae:b0:83:2e:90: 77:11:c9:7c:86:20:e4:d4:b6:a3:3d:9e:30:41:d6:75:da:8e: 1f:6e:99:f4:4f:8b:ba:86:17:d6:4c:61:f2:dc:ee:87:f2:37: de:70:10:51:99:7f:a5:b5:8e:99:f0:ba:f6:cb:4e:1e:c6:3e: cf:7c:0e:55:36:ae:5d:e7:77:aa:7d:82:af:89:81:95:7f:c6: 87:49:48:9a:a2:f7:53:47:02:fc:9f:cc:02:8c:4b:7e:5b:c0: 42:e7:44:6a:31:f2:53:52:59:11:26:d8:9d:13:3c:41:fc:6c: 87:8c:d9:cf:30:39:19:b7:87:ab:ed:9b:19:af:f6:77:6d:b5: 4a:63:11:06:90:47:ed:e6:18:d2:17:3b:5d:0c:a8:1b:44:5a: a2:cd:63:72:40:44:25:61:57:aa:f7:93:4a:1b:4d:4e:c6:99: 95:90:31:06:45:0e:85:7c:39:7b:c5:77:61:c9:81:89:b9:f4: ba:64:58:b8:c6:0f:f3:c1:5e:9c:4d:75:28:a1:57:02:ac:7a: e1:ff:c6:32 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjUwMzA4MDYxNzMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NiZTBmOS02MGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8C9k+qwcrs3045fcmnvOTuQMEnbU5Knx1QJWKnwbPAPE+etK7SUCLlgmHNtD NUU3Kjsdpk1feXd54sBYndEQ0DcYRO5VR8JFU5+PGzWlLMW9NWb0BJprj939H6XM Mu4IOQuWx12kPUmKHD/oI9PYnFIUd3L3XqYVA+XWRkfTB6Elq/2+2okosW+Oi6/f kzFpiS0nuCeflqZrm1fRtdvCb6uTeOxvOMys1ZK/dDfH8lBREl91H57ubHtro0fo afOY2Tr81TLoqPzV7dPOw2vfRfkcLfNvzcT4xzX/wIxsq236thgBie70PK4M93gU 5qJhsPkG8z+HNB/SV/DcJ7rAkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFVHv1DH W+2G/CNVO9FkxGqges0qMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyQjUvNkQ1RkVEOTJDQzJGMTFFQzg1NTM4MDM3QzRGOUFFMDIvMDM4MzM3NDJG QkU1MTFFRkExODY2OTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACddxYwDQYJKoZIhvcNAQELBQADggEBAIWYNuOib3BPlr3e BZy+2OvauzcMzK79I39nlnaJLcGM2Utf5QLsisnceczXSW++9vSusIMukHcRyXyG IOTUtqM9njBB1nXajh9umfRPi7qGF9ZMYfLc7ofyN95wEFGZf6W1jpnwuvbLTh7G Ps98DlU2rl3nd6p9gq+JgZV/xodJSJqi91NHAvyfzAKMS35bwELnRGox8lNSWREm 2J0TPEH8bIeM2c8wORm3h6vtmxmv9ndttUpjEQaQR+3mGNIXO10MqBtEWqLNY3JA RCVhV6r3k0obTU7GmZWQMQZFDoV8OXvFd2HJgYm59LpkWLjGD/PBXpxNdSihVwKs euH/xjI= -----END CERTIFICATE-----Generated at Sun Apr 6 19:37:57 2025 by rpki-client