$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/986FA3843F8F11EBA86B1F11C4F9AE02.roa File: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (raw, json) Hash identifier: g4ujWaFHIUcsfNfe71CuG/s3pHzpyQSa/LcK8feuuHQ= Subject key identifier: 26:83:B6:E2:11:A8:8C:EE:38:20:55:D7:54:8A:E2:ED:06:47:CD:3E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 16B9 Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/986FA3843F8F11EBA86B1F11C4F9AE02.roa Signing time: Sun 22 Dec 2024 16:54:11 +0000 ROA not before: Sun 22 Dec 2024 16:54:11 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 18190 IP address blocks: 136.158.132.0/24 maxlen: 24 136.158.133.0/24 maxlen: 24 136.158.134.0/24 maxlen: 24 136.158.135.0/24 maxlen: 24 136.158.136.0/24 maxlen: 24 136.158.137.0/24 maxlen: 24 136.158.138.0/24 maxlen: 24 136.158.169.0/24 maxlen: 24 136.158.170.0/24 maxlen: 24 136.158.171.0/24 maxlen: 24 161.49.148.0/24 maxlen: 24 161.49.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 16:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5817 (0x16b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B Validity Not Before: Dec 22 16:54:11 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67684433-a572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:67:52:a8:14:b1:28:66:14:ea:b6:9c:c0: bb:04:09:99:00:50:97:15:a5:bb:d8:91:c2:d1:75: b7:f3:b4:7f:26:78:5e:f4:2f:38:8c:54:13:2c:09: 7a:75:3e:01:0d:c4:4f:20:de:5b:cf:7a:eb:66:1a: 89:dc:33:ad:d8:b4:01:38:da:45:5f:62:ee:30:9a: 79:a3:96:e1:81:e7:d3:5b:44:2e:dc:44:80:b3:56: e5:0f:2a:e1:84:dd:67:c7:d8:84:d1:2e:02:1c:d7: 29:93:6d:25:20:38:fe:86:9f:6c:70:bd:4a:28:2f: 56:7b:98:b1:e6:9d:46:60:03:d7:f3:5a:33:75:65: 23:b0:59:dc:d2:77:26:e0:a2:bb:36:87:ad:80:f0: 59:ca:fa:bb:9f:dc:15:dd:a4:ca:bd:8a:b8:26:78: 69:11:52:59:23:f1:8c:8b:72:f2:15:66:e1:3c:ec: ef:39:72:c4:79:f2:12:56:44:29:66:b9:f3:25:43: df:f5:e4:7b:e7:36:2b:ec:ad:7a:24:31:d2:85:3a: 53:68:95:34:ab:a0:b7:b2:72:82:d5:5e:ae:67:bb: 72:7f:dc:c1:e2:32:f3:04:72:82:54:41:7a:9d:2b: 2c:75:5c:b2:e8:04:f8:a6:41:81:1e:2e:d6:62:1d: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:83:B6:E2:11:A8:8C:EE:38:20:55:D7:54:8A:E2:ED:06:47:CD:3E X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/986FA3843F8F11EBA86B1F11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 136.158.132.0-136.158.138.255 136.158.169.0-136.158.171.255 161.49.148.0/24 161.49.178.0/24 Signature Algorithm: sha256WithRSAEncryption 09:6b:0e:75:bc:d7:ed:a6:53:eb:d4:d4:d4:91:59:93:59:38: 1a:40:03:92:f3:1f:2c:93:cf:f5:30:a4:03:4b:9d:03:37:68: 71:8f:48:5b:ee:cd:00:a7:b1:c6:e4:40:19:df:17:0e:f3:40: fa:c9:36:76:fb:c2:1d:9b:92:1e:f7:15:bf:e6:6d:9b:28:51: 70:07:6b:50:0c:be:c7:a1:53:c2:09:d7:3e:52:e3:7c:eb:da: 83:16:1c:7d:af:74:25:ac:4b:af:b3:8e:1d:07:03:a5:cf:1a: b0:a3:14:95:c7:22:3f:c6:fc:01:c2:f0:5c:77:1e:2d:f5:03: 8c:1a:be:ee:95:55:6b:65:cd:46:c1:b0:90:39:21:9b:0c:d0: f7:ad:a7:b3:23:4a:20:e3:8e:b5:e1:d5:c4:77:a0:d7:e8:c0: 83:1d:c7:99:86:2d:c1:4b:59:9b:4e:b2:55:2a:0b:ca:bd:53: 38:1e:bc:a0:52:c2:be:ba:a2:83:c6:ae:cc:45:80:78:34:9c: 31:d7:bd:b7:c7:c6:7d:0d:e5:da:e6:da:dd:ee:69:37:0d:5f: ae:8d:74:f3:9d:69:01:a6:67:f0:c9:85:7e:8c:00:fd:bf:5d: e2:9d:c2:fe:d4:15:82:19:8f:2d:09:5c:9e:c6:e1:bc:3e:35: ab:af:06:d1 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICFrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjQxMjIyMTY1NDExWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY4NDQzMy1hNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKFnUqgUsShmFOq2nMC7BAmZAFCXFaW72JHC0XW387R/Jnhe9C84jFQTLAl6 dT4BDcRPIN5bz3rrZhqJ3DOt2LQBONpFX2LuMJp5o5bhgefTW0Qu3ESAs1blDyrh hN1nx9iE0S4CHNcpk20lIDj+hp9scL1KKC9We5ix5p1GYAPX81ozdWUjsFnc0ncm 4KK7NoetgPBZyvq7n9wV3aTKvYq4JnhpEVJZI/GMi3LyFWbhPOzvOXLEefISVkQp ZrnzJUPf9eR75zYr7K16JDHShTpTaJU0q6C3snKC1V6uZ7tyf9zB4jLzBHKCVEF6 nSssdVyy6AT4pkGBHi7WYh1pCwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFCaDtuIR qIzuOCBV11SK4u0GR80+MB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIxOEIvRjk4QjVGMEMyMUY5MTFFODk2QzFERDIzQzRGOUFFMDIvOTg2RkEzODQz RjhGMTFFQkE4NkIxRjExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgwDAMEAoiehAMEAIieijAMAwQAiJ6pAwQCiJ6oAwQAoTGUAwQA oTGyMA0GCSqGSIb3DQEBCwUAA4IBAQAJaw51vNftplPr1NTUkVmTWTgaQAOS8x8s k8/1MKQDS50DN2hxj0hb7s0Ap7HG5EAZ3xcO80D6yTZ2+8Idm5Ie9xW/5m2bKFFw B2tQDL7HoVPCCdc+UuN869qDFhx9r3QlrEuvs44dBwOlzxqwoxSVxyI/xvwBwvBc dx4t9QOMGr7ulVVrZc1GwbCQOSGbDND3raezI0og44614dXEd6DX6MCDHceZhi3B S1mbTrJVKgvKvVM4HrygUsK+uqKDxq7MRYB4NJwx1723x8Z9DeXa5trd7mk3DV+u jXTznWkBpmfwyYV+jAD9v13incL+1BWCGY8tCVyexuG8PjWrrwbR -----END CERTIFICATE-----Generated at Fri Apr 11 21:32:37 2025 by rpki-client