$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/3D8B70B4E38D11EFBE901A46C4F9AE02.roa File: 3D8B70B4E38D11EFBE901A46C4F9AE02.roa (raw, json) Hash identifier: xtMQdylJd5ExIfku7HjSFZQ9NVkXk2zy2EL4rw3KqeI= Subject key identifier: A2:3E:62:F3:36:A1:0F:68:66:DB:52:55:08:BB:C7:91:E0:C8:5E:06 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: 13 Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/3D8B70B4E38D11EFBE901A46C4F9AE02.roa Signing time: Wed 05 Feb 2025 06:48:43 +0000 ROA not before: Wed 05 Feb 2025 06:48:43 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 153531 IP address blocks: 161.248.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9 Validity Not Before: Feb 5 06:48:43 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a309cb-be15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:b1:f1:7a:6d:45:9b:33:22:e1:73:f8:51: ca:a1:8e:de:47:26:fb:a1:c9:45:4c:de:fd:6f:de: f9:c7:25:da:5e:f2:9b:05:f6:03:07:81:fe:4d:ac: bf:11:ea:6b:57:3e:1a:21:dd:c4:3e:c1:f2:85:3f: 13:35:9b:b0:ad:44:39:21:d1:f9:a2:e0:2e:83:ba: bd:f5:7d:7e:df:51:39:b7:4e:b2:5d:41:c0:09:ed: 8a:2f:63:13:55:c9:cf:ad:ae:f9:d9:37:ef:2d:47: ae:ce:19:65:fd:2b:b1:79:6a:a7:cd:48:b9:2e:04: aa:a2:e8:30:40:17:ba:90:cb:b6:cc:9e:33:89:33: 99:c8:a2:ba:a0:f6:cd:bb:a3:85:47:6d:34:be:19: d3:61:d6:63:e3:aa:f8:fc:b7:31:53:97:71:46:64: 48:02:fa:1e:56:7b:eb:e6:30:e6:ee:96:a0:4c:23: 27:67:20:d4:b7:d1:ea:2f:31:8f:be:ba:34:78:5f: 9b:95:a6:85:fb:19:13:85:d6:01:46:2a:8f:a0:87: 2b:e1:56:9e:a1:47:dc:63:87:da:44:48:12:fd:2f: 77:69:d8:30:83:86:ec:13:f6:1d:65:24:11:24:4b: c0:0b:d1:c1:02:59:d2:18:f9:5c:a2:3a:3b:73:4b: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3E:62:F3:36:A1:0F:68:66:DB:52:55:08:BB:C7:91:E0:C8:5E:06 X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/3D8B70B4E38D11EFBE901A46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.218.0/23 Signature Algorithm: sha256WithRSAEncryption a7:61:14:3d:ef:66:57:f7:eb:aa:9e:5c:c3:4c:95:56:3f:ba: a5:f4:27:b0:a2:cb:19:29:98:76:41:3e:5e:d5:bc:f3:a2:97: 24:62:17:fe:0f:07:5f:c7:97:82:39:37:2f:34:6d:16:f4:a2: 10:69:83:df:97:b2:5c:6e:3b:dc:a1:df:7d:93:e9:5f:47:bb: 21:e3:b4:25:f4:dc:69:48:aa:10:f6:de:84:81:63:13:11:62: 66:98:f5:ef:b6:f1:eb:d0:44:e3:38:5d:43:00:90:12:00:3c: db:0a:b0:d7:c6:8a:47:30:98:6b:37:2f:40:f0:a0:84:a6:c0: a5:77:8b:c7:25:d4:8a:9e:e5:6a:55:43:28:c8:00:f1:92:5c: a6:8d:12:fa:77:c3:01:1d:8d:c2:23:52:eb:58:d3:79:b2:a3: bc:3e:6c:47:8a:2c:06:eb:fb:4e:cd:d6:53:f9:5f:83:ce:db: 61:3c:e5:88:ea:98:9a:90:53:f8:ae:74:b8:b1:d2:0c:99:d3: c0:7f:3c:59:98:42:83:72:82:ce:90:49:8c:06:dc:e5:ad:42: b3:2e:7d:1f:a5:7c:2b:08:0b:a4:c3:0b:f0:4d:dd:8b:5f:05: 4d:d7:4d:75:21:be:fb:ca:15:90:ee:10:68:25:02:00:24:a3: 27:29:0f:2c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkREOTExMC8GA1UEBRMoOTY3Qjk3RDlFMzExMjUwRDgyOTQyRDI3RTRDNUY5MEQ5 ODEzODA1ODAeFw0yNTAyMDUwNjQ4NDNaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTMwOWNiLWJlMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIOLHxem1FmzMi4XP4Ucqhjt5HJvuhyUVM3v1v3vnHJdpe8psF9gMHgf5NrL8R 6mtXPhoh3cQ+wfKFPxM1m7CtRDkh0fmi4C6Dur31fX7fUTm3TrJdQcAJ7YovYxNV yc+trvnZN+8tR67OGWX9K7F5aqfNSLkuBKqi6DBAF7qQy7bMnjOJM5nIorqg9s27 o4VHbTS+GdNh1mPjqvj8tzFTl3FGZEgC+h5We+vmMObulqBMIydnINS30eovMY++ ujR4X5uVpoX7GROF1gFGKo+ghyvhVp6hR9xjh9pESBL9L3dp2DCDhuwT9h1lJBEk S8AL0cECWdIY+VyiOjtzS80ZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUoj5i8zah D2hm21JVCLvHkeDIXgYwHwYDVR0jBBgwFoAUlnuX2eMRJQ2ClC0n5MX5DZgTgFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGREQ5L0I2MjJGQThBRDZE RTExRUZCMDQ3NEUxQkM0RjlBRTAyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbG51WDJlTVJKUTJDbEMwbjVNWDVEWmdUZ0ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CNjIyRkE4QUQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi8zRDhCNzBCNEUz OEQxMUVGQkU5MDFBNDZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH42jANBgkqhkiG9w0BAQsFAAOCAQEAp2EUPe9mV/frqp5c w0yVVj+6pfQnsKLLGSmYdkE+XtW886KXJGIX/g8HX8eXgjk3LzRtFvSiEGmD35ey XG473KHffZPpX0e7IeO0JfTcaUiqEPbehIFjExFiZpj177bx69BE4zhdQwCQEgA8 2wqw18aKRzCYazcvQPCghKbApXeLxyXUip7lalVDKMgA8ZJcpo0S+nfDAR2NwiNS 61jTebKjvD5sR4osBuv7Ts3WU/lfg87bYTzliOqYmpBT+K50uLHSDJnTwH88WZhC g3KCzpBJjAbc5a1Csy59H6V8KwgLpMML8E3di18FTddNdSG++8oVkO4QaCUCACSj JykPLA== -----END CERTIFICATE-----Generated at Sun Apr 6 01:49:25 2025 by rpki-client