$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/2593F55EBB2D11EF958B1257C4F9AE02.roa File: 2593F55EBB2D11EF958B1257C4F9AE02.roa (raw, json) Hash identifier: jEtmqnpChnquvMhQ+zoC7zY7voYqL/7oT1xiWD/K3Ik= Subject key identifier: E4:B5:9F:EA:73:8C:BB:DD:0A:F2:DD:DC:69:32:E4:08:26:36:D9:C6 Certificate issuer: /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6 Certificate serial: 2B Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/2593F55EBB2D11EF958B1257C4F9AE02.roa Signing time: Sun 15 Dec 2024 21:40:05 +0000 ROA not before: Sun 15 Dec 2024 21:40:05 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 134192 IP address blocks: 160.187.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED Validity Not Before: Dec 15 21:40:05 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=675f4cb5-4f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:50:cd:8b:d3:23:93:d5:25:69:1c:8a:a7: c0:7a:b6:15:76:32:4d:1f:0e:f9:96:2d:eb:72:b6: 4b:1f:7c:97:06:01:00:c2:5b:7e:37:80:72:b6:f7: a4:8d:c2:92:45:0a:12:6b:19:3a:0e:07:e1:60:c0: c3:01:72:5f:18:bf:11:18:bc:a1:44:d5:73:3c:c1: 82:76:db:78:65:1c:77:9f:b5:7a:80:2a:fd:d5:57: 9d:1c:6b:8b:17:a5:eb:29:13:cb:3a:29:dd:e1:71: 33:41:91:7f:d5:a9:72:0c:5f:71:60:28:93:87:4d: 0f:fc:87:20:f9:a4:b8:25:01:e8:de:d2:c8:ea:44: c5:c0:7c:18:e7:7d:36:cf:77:e5:58:ec:62:e3:c2: 44:1e:14:3d:07:c4:11:c2:32:a1:21:8b:13:41:34: ef:cd:50:00:78:b1:df:18:86:1c:09:c8:17:30:ed: a6:36:61:bc:c1:b2:c4:fb:34:6f:d2:cf:bb:f5:34: b4:5f:ec:12:48:f5:46:1c:fd:62:a7:82:46:d6:ea: 65:b5:dc:29:68:9b:c2:37:22:fd:e3:1a:5b:d4:59: 1d:f4:f1:0d:9c:3a:13:d8:8e:4b:35:e3:74:9e:0d: bc:3e:78:59:64:b4:f8:7f:98:82:82:5c:67:e7:d9: fe:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B5:9F:EA:73:8C:BB:DD:0A:F2:DD:DC:69:32:E4:08:26:36:D9:C6 X509v3 Authority Key Identifier: keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/2593F55EBB2D11EF958B1257C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.185.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:d0:07:29:98:3c:46:22:84:98:5d:7e:0d:36:5a:4a:64:f8: 10:1f:f4:48:8b:b1:0b:b0:5e:ed:ab:79:62:dc:65:76:58:4c: e2:b1:73:6d:a7:ac:00:ea:38:ed:92:9e:ad:01:03:44:b3:41: 9e:ab:57:d1:b9:bb:74:14:ad:7c:dc:76:20:88:20:f5:5b:54: 7a:15:d5:ee:1f:a5:f6:42:d6:0b:2e:86:00:fe:d4:e9:af:16: e8:88:17:6e:3d:5d:da:87:89:e9:dc:88:19:8d:5f:db:20:7a: 8c:71:28:6b:14:39:88:25:f3:23:18:3d:3a:1a:0f:ef:7a:1d: f0:f8:fa:02:40:8d:8b:5c:40:ee:bd:f3:ca:fa:5e:b6:fd:d3: 68:a4:e2:3b:b9:a8:b0:03:20:43:d9:70:2f:85:c8:cd:a1:75: ef:17:37:35:61:99:e4:d6:4c:be:7d:e8:32:36:ac:c2:33:67: a4:80:b4:7b:7e:2a:aa:7c:b9:1b:f4:a1:07:18:ab:e7:8f:8b: 66:56:64:b1:4e:13:5e:6b:2d:3f:bb:f1:7e:f5:63:09:21:7a: 9a:57:eb:3e:dc:1a:ad:7d:b9:82:1c:8a:45:ad:e3:57:13:c1: 0b:66:9d:da:22:10:14:e1:86:b7:2d:41:46:73:11:43:ec:d9: ee:ef:a2:a3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEVFRDExMC8GA1UEBRMoNjkxOEFBNzFGMzZCMDQ2MzUzQTY1Q0MwODk3OEIxOEVG RkI5RjVDNjAeFw0yNDEyMTUyMTQwMDVaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NWY0Y2I1LTRmNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmgVDNi9Mjk9UlaRyKp8B6thV2Mk0fDvmWLetytksffJcGAQDCW343gHK296SN wpJFChJrGToOB+FgwMMBcl8YvxEYvKFE1XM8wYJ223hlHHeftXqAKv3VV50ca4sX pespE8s6Kd3hcTNBkX/VqXIMX3FgKJOHTQ/8hyD5pLglAeje0sjqRMXAfBjnfTbP d+VY7GLjwkQeFD0HxBHCMqEhixNBNO/NUAB4sd8YhhwJyBcw7aY2YbzBssT7NG/S z7v1NLRf7BJI9UYc/WKngkbW6mW13Clom8I3Iv3jGlvUWR308Q2cOhPYjks143Se Dbw+eFlktPh/mIKCXGfn2f5bAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5LWf6nOM u90K8t3caTLkCCY22cYwHwYDVR0jBBgwFoAUaRiqcfNrBGNTplzAiXixjv+59cYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRUVELzM3NDAyQURFODUz QjExRUZBMzA3MjM0OUM0RjlBRTAyL2FSaXFjZk5yQkdOVHBsekFpWGl4anYtNTlj WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYVJpcWNmTnJCR05UcGx6QWlYaXhqdi01OWNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEVFRC8zNzQwMkFERTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi8yNTkzRjU1RUJC MkQxMUVGOTU4QjEyNTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKC7uTANBgkqhkiG9w0BAQsFAAOCAQEALdAHKZg8RiKEmF1+ DTZaSmT4EB/0SIuxC7Be7at5YtxldlhM4rFzbaesAOo47ZKerQEDRLNBnqtX0bm7 dBStfNx2IIgg9VtUehXV7h+l9kLWCy6GAP7U6a8W6IgXbj1d2oeJ6dyIGY1f2yB6 jHEoaxQ5iCXzIxg9OhoP73od8Pj6AkCNi1xA7r3zyvpetv3TaKTiO7mosAMgQ9lw L4XIzaF17xc3NWGZ5NZMvn3oMjaswjNnpIC0e34qqny5G/ShBxir54+LZlZksU4T XmstP7vxfvVjCSF6mlfrPtwarX25ghyKRa3jVxPBC2ad2iIQFOGGty1BRnMRQ+zZ 7u+iow== -----END CERTIFICATE-----Generated at Mon Apr 7 07:59:58 2025 by rpki-client