$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/403398AA233111EEAF768F66C4F9AE02.roa File: 403398AA233111EEAF768F66C4F9AE02.roa (raw, json) Hash identifier: LFrmkrzanddJe0x2nUkwJLw/OhE7SJ+J+T3fYrc0q4I= Subject key identifier: 05:77:F0:B9:5A:66:C1:89:65:AF:B4:69:E1:8C:8B:53:E0:C5:3C:ED Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Certificate serial: 1299 Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/403398AA233111EEAF768F66C4F9AE02.roa Signing time: Sat 08 Mar 2025 17:06:15 +0000 ROA not before: Sat 08 Mar 2025 17:06:15 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 133200 IP address blocks: 167.179.4.0/24 maxlen: 24 167.179.6.0/24 maxlen: 24 167.179.12.0/24 maxlen: 24 167.179.13.0/24 maxlen: 24 167.179.14.0/24 maxlen: 24 167.179.18.0/24 maxlen: 24 167.179.19.0/24 maxlen: 24 167.179.37.0/24 maxlen: 24 167.179.38.0/24 maxlen: 24 167.179.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 17:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4761 (0x1299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436 Validity Not Before: Mar 8 17:06:15 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67cc7906-318e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:b7:32:70:af:6b:1c:82:95:32:aa:eb:9b: 15:23:26:09:45:0a:33:3a:81:7e:ef:cd:01:ea:06: b9:7d:5a:3f:5e:eb:50:a2:24:88:44:c7:51:b8:82: 8e:78:b3:90:65:16:24:e4:3a:84:b0:3d:a0:26:ac: 99:10:27:ab:1f:60:45:1d:a4:ba:b4:29:1b:93:e9: ac:b2:80:ef:e5:4e:04:83:b1:14:df:4c:87:a0:19: 15:f5:55:66:ff:75:31:c6:14:8d:70:e1:2a:cb:62: 9c:7e:cc:83:7a:d5:2e:61:4b:2f:7f:6d:4f:50:f5: f2:4f:58:9a:d4:b6:b4:4c:f5:75:1e:75:5f:01:49: 0d:f2:8d:d3:6f:23:c1:95:f1:22:9f:c3:76:6c:ba: 1e:6d:72:20:95:6a:a4:45:d0:5b:50:cf:9f:20:5e: d8:ac:54:f2:c3:41:21:90:5b:39:b9:16:5b:89:79: ab:15:90:97:ee:15:05:07:96:62:97:6a:77:89:44: 4d:9d:5a:4d:fe:83:d3:8a:96:45:15:3c:b4:dd:06: f1:dc:e2:1b:04:af:8a:c7:62:58:5d:8c:fe:e3:65: f9:b8:3e:68:d3:ee:f1:39:6d:da:b2:28:d7:eb:96: 73:68:e6:8c:b0:f8:82:1d:24:77:22:85:39:99:33: 3f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:77:F0:B9:5A:66:C1:89:65:AF:B4:69:E1:8C:8B:53:E0:C5:3C:ED X509v3 Authority Key Identifier: keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/403398AA233111EEAF768F66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.179.4.0/24 167.179.6.0/24 167.179.12.0-167.179.14.255 167.179.18.0/23 167.179.37.0-167.179.38.255 167.179.40.0/21 Signature Algorithm: sha256WithRSAEncryption 17:2c:1f:72:be:53:85:82:d7:7b:c0:a8:61:76:26:a2:ad:6d: 42:f5:68:34:7f:cb:5d:9a:51:7a:86:05:b7:57:aa:27:a7:a0: f0:0d:02:37:b5:9d:d3:2e:58:81:1b:4b:b9:08:b4:7b:c4:fb: 8e:55:27:23:e3:db:0e:d7:a9:37:7a:ed:0d:2f:08:de:d6:68: a6:01:7e:92:30:46:46:0c:38:5e:55:7b:33:d3:93:e6:27:89: 81:05:5b:a0:80:4b:f9:d0:29:05:db:ea:56:3b:18:ce:eb:a2: a2:81:44:8d:4d:46:cc:2c:ab:1e:75:2d:eb:50:36:05:51:af: 7a:d7:4f:35:f2:a9:54:f1:3c:1b:8d:84:09:a6:a5:12:7a:c7: ca:7b:4f:7e:b3:a8:15:60:0d:ef:88:75:11:0a:d1:c1:32:e5: 77:b3:b8:3c:71:a2:7e:e7:fe:3f:86:5c:1e:64:a0:95:5c:97: 0c:88:a7:3a:7f:57:82:2c:5f:f2:dd:37:b6:f0:45:8e:8c:9b: fd:a1:27:49:95:8a:81:ad:0a:03:75:65:2c:5d:ab:33:07:c7: 71:5b:99:d0:1a:e5:82:90:b9:11:3a:d3:7c:b7:45:24:c2:7c: 0d:a4:8a:93:d1:cd:67:16:40:a8:2e:28:3e:0a:9c:fb:fe:27: 81:64:be:6d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICEpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF QzhGOUQzNjcwHhcNMjUwMzA4MTcwNjE1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2NjNzkwNi0zMThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZu3MnCvaxyClTKq65sVIyYJRQozOoF+780B6ga5fVo/XutQoiSIRMdRuIKO eLOQZRYk5DqEsD2gJqyZECerH2BFHaS6tCkbk+mssoDv5U4Eg7EU30yHoBkV9VVm /3UxxhSNcOEqy2KcfsyDetUuYUsvf21PUPXyT1ia1La0TPV1HnVfAUkN8o3TbyPB lfEin8N2bLoebXIglWqkRdBbUM+fIF7YrFTyw0EhkFs5uRZbiXmrFZCX7hUFB5Zi l2p3iURNnVpN/oPTipZFFTy03Qbx3OIbBK+Kx2JYXYz+42X5uD5o0+7xOW3asijX 65ZzaOaMsPiCHSR3IoU5mTM/uQIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFAV38Lla ZsGJZa+0aeGMi1PgxTztMB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE0MzYvQTMwQjVBNEFDNzhDMTFFOEE3NkNEOTE0QzRGOUFFMDIvNDAzMzk4QUEy MzMxMTFFRUFGNzY4RjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E PjA8MDoEAgABMDQDBACnswQDBACnswYwDAMEAqezDAMEAKezDgMEAaezEjAMAwQA p7MlAwQAp7MmAwQDp7MoMA0GCSqGSIb3DQEBCwUAA4IBAQAXLB9yvlOFgtd7wKhh diairW1C9Wg0f8tdmlF6hgW3V6onp6DwDQI3tZ3TLliBG0u5CLR7xPuOVScj49sO 16k3eu0NLwje1mimAX6SMEZGDDheVXsz05PmJ4mBBVuggEv50CkF2+pWOxjO66Ki gUSNTUbMLKsedS3rUDYFUa9610818qlU8TwbjYQJpqUSesfKe09+s6gVYA3viHUR CtHBMuV3s7g8caJ+5/4/hlweZKCVXJcMiKc6f1eCLF/y3Te28EWOjJv9oSdJlYqB rQoDdWUsXaszB8dxW5nQGuWCkLkROtN8t0UkwnwNpIqT0c1nFkCoLig+Cpz7/ieB ZL5t -----END CERTIFICATE-----Generated at Mon Apr 7 11:16:52 2025 by rpki-client