$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/8DBD0EBCABCA11EF984C832AC4F9AE02.roa File: 8DBD0EBCABCA11EF984C832AC4F9AE02.roa (raw, json) Hash identifier: 8Dmn7khqMXjuTQiezguWUTsHSU/EM/tHFNVuXGCGR0w= Subject key identifier: 97:8D:3B:40:83:96:29:C5:A4:8B:E6:82:51:85:A3:66:B8:83:DE:5F Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Certificate serial: 02 Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/8DBD0EBCABCA11EF984C832AC4F9AE02.roa Signing time: Tue 26 Nov 2024 07:46:32 +0000 ROA not before: Tue 26 Nov 2024 07:46:32 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 142634 IP address blocks: 160.250.82.0/23 maxlen: 23 160.250.82.0/24 maxlen: 24 160.250.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE Validity Not Before: Nov 26 07:46:32 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67457cd8-183a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e9:eb:37:8c:b8:92:8a:17:bd:5b:c3:36:84: 2b:c6:b8:db:b5:c6:ec:0a:c7:78:b0:10:1f:23:8b: c2:8f:3e:d7:29:c7:1e:88:d3:13:d1:50:3c:a7:c3: f9:aa:f1:8a:75:09:60:0f:0d:fe:eb:e2:5c:58:29: c6:b7:bf:f7:26:01:25:8b:3f:39:77:83:30:21:e4: 20:4f:71:94:2b:1d:bc:ea:d4:dc:2b:d4:22:15:13: b1:72:e4:49:da:c3:db:c9:f9:31:de:bf:01:a1:5e: 1c:a0:65:a9:8f:e8:ee:e3:c2:4d:97:68:bb:37:76: a0:e4:e3:3a:63:a2:9f:2e:43:83:de:89:23:1a:84: 7d:67:3d:50:f0:23:3d:5c:77:e9:67:e6:fb:11:19: d2:2b:68:f5:c8:5c:24:3e:59:bb:c1:bb:d0:e8:c2: b3:44:3c:a2:2c:d0:31:46:21:07:30:d3:8a:00:2b: 26:a6:72:b4:fa:70:c4:c2:0f:de:f0:12:33:05:ad: 6e:f6:f3:b8:c5:fb:11:cb:6f:a9:77:e9:f9:a8:cf: 95:13:73:92:46:3c:80:79:26:03:4f:fa:da:31:c2: b8:f3:85:9b:3b:03:8c:56:52:23:b0:d9:94:9e:46: f4:98:fe:57:02:30:50:e1:3c:6b:49:b0:56:74:15: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8D:3B:40:83:96:29:C5:A4:8B:E6:82:51:85:A3:66:B8:83:DE:5F X509v3 Authority Key Identifier: keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/8DBD0EBCABCA11EF984C832AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.82.0/23 Signature Algorithm: sha256WithRSAEncryption 48:f6:ad:53:dc:20:c4:da:d1:a0:86:b1:0d:9c:7c:3c:f5:b0: b6:bf:78:db:e5:55:42:20:c0:08:63:dc:a3:ac:56:0b:94:30: 51:47:ee:aa:a4:59:0e:83:89:30:66:07:03:ab:06:0e:5a:7a: a3:12:c5:48:88:ba:3a:9e:10:78:fb:93:4f:00:62:30:d7:00: 2e:6c:0c:5e:03:51:0d:b8:8e:cb:e5:ec:aa:4d:b5:47:24:9d: e0:11:d3:97:36:1d:4e:16:5a:2f:6a:0e:83:8a:0c:10:36:b9: d4:59:fa:61:0a:18:8d:b0:d3:9e:f9:57:08:39:50:7e:22:89: 1b:b4:44:46:95:d3:23:97:cb:65:d6:9f:2a:b5:ee:da:11:6f: 2a:69:24:4d:4e:a4:c5:82:ff:6a:d3:54:e8:05:ec:d0:41:1b: c3:6c:1f:98:f6:be:3e:d6:1b:83:ec:80:ed:3a:37:d1:53:9d: c6:76:3c:29:4c:ec:4c:c9:54:0e:b7:fb:23:99:5e:b3:31:68: c1:b9:75:23:a9:20:63:51:15:b6:92:4e:31:6d:62:32:f7:94: 40:ba:d8:b1:84:b9:4a:2d:02:73:df:9e:0a:58:21:08:d2:16: 89:af:c9:19:4c:1a:db:e2:42:5e:1f:f1:4d:cb:72:e0:28:51: 06:a9:74:dd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTBGRTExMC8GA1UEBRMoOTY0RDA4NzI3REFFREFDNzQwMzdBQjlDNDNBNTA4QkFE QkNGREFGRDAeFw0yNDExMjYwNzQ2MzJaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NDU3Y2Q4LTE4M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD6es3jLiSihe9W8M2hCvGuNu1xuwKx3iwEB8ji8KPPtcpxx6I0xPRUDynw/mq 8Yp1CWAPDf7r4lxYKca3v/cmASWLPzl3gzAh5CBPcZQrHbzq1Nwr1CIVE7Fy5Ena w9vJ+THevwGhXhygZamP6O7jwk2XaLs3dqDk4zpjop8uQ4PeiSMahH1nPVDwIz1c d+ln5vsRGdIraPXIXCQ+WbvBu9DowrNEPKIs0DFGIQcw04oAKyamcrT6cMTCD97w EjMFrW7287jF+xHLb6l36fmoz5UTc5JGPIB5JgNP+toxwrjzhZs7A4xWUiOw2ZSe RvSY/lcCMFDhPGtJsFZ0FTOzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUl407QIOW KcWki+aCUYWjZriD3l8wHwYDVR0jBBgwFoAUlk0Icn2u2sdAN6ucQ6UIutvP2v0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMEZFLzJGMkI2RkUyQUJD QTExRUZBOTk0RDEyOUM0RjlBRTAyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbGswSWNuMnUyc2RBTjZ1Y1E2VUl1dHZQMnYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi84REJEMEVCQ0FC Q0ExMUVGOTg0QzgzMkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaD6UjANBgkqhkiG9w0BAQsFAAOCAQEASPatU9wgxNrRoIax DZx8PPWwtr942+VVQiDACGPco6xWC5QwUUfuqqRZDoOJMGYHA6sGDlp6oxLFSIi6 Op4QePuTTwBiMNcALmwMXgNRDbiOy+Xsqk21RySd4BHTlzYdThZaL2oOg4oMEDa5 1Fn6YQoYjbDTnvlXCDlQfiKJG7RERpXTI5fLZdafKrXu2hFvKmkkTU6kxYL/atNU 6AXs0EEbw2wfmPa+PtYbg+yA7To30VOdxnY8KUzsTMlUDrf7I5leszFowbl1I6kg Y1EVtpJOMW1iMveUQLrYsYS5Si0Cc9+eClghCNIWia/JGUwa2+JCXh/xTcty4ChR Bql03Q== -----END CERTIFICATE-----Generated at Sun Apr 6 02:44:59 2025 by rpki-client