$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/91D2F686B4BE11EFA41A5C26C4F9AE02.roa File: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (raw, json) Hash identifier: sKOTsNVX+CZUe222IvZsyt4goGILGlPT7qY6Zl0V7Cg= Subject key identifier: 85:F1:36:D7:E0:4B:71:F2:01:05:17:F0:AB:E7:7C:11:63:1C:81:29 Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C Certificate serial: 29 Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/91D2F686B4BE11EFA41A5C26C4F9AE02.roa Signing time: Thu 06 Feb 2025 15:10:52 +0000 ROA not before: Thu 06 Feb 2025 15:10:52 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 136396 IP address blocks: 160.250.94.0/24 maxlen: 24 160.250.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 06:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C Validity Not Before: Feb 6 15:10:52 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67a4d0fc-c1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:70:0f:1d:40:cf:03:5e:6c:83:9b:4e:b9:e1: 5d:0b:56:7f:a2:07:aa:9a:a0:82:ff:57:56:58:a6: 11:dc:10:53:29:52:a0:2f:dc:a9:3b:f0:e3:f9:5e: b1:30:fa:f3:50:dd:8f:9d:60:e8:d1:08:89:85:f2: b5:ef:53:aa:7f:01:2a:a3:11:0f:30:eb:12:04:e2: 14:f2:d8:8b:91:18:b7:34:3a:5e:91:2f:63:6a:f6: ce:18:c5:c9:09:9a:8d:ef:8b:fe:31:e9:d7:90:bc: 62:d3:9e:8a:9d:d0:bb:5c:d3:18:d2:50:8e:1c:0e: a9:9c:27:ed:87:5b:95:f2:95:36:73:dc:12:9e:a9: 86:50:10:56:75:ae:df:ff:b2:29:9e:a1:c8:c0:f2: da:df:e0:32:ba:78:0e:d9:2f:cb:9b:f0:e2:18:fe: f5:e9:6b:60:39:39:12:0b:65:03:3e:6b:af:d4:ef: 10:69:15:ea:f0:6c:74:5e:b3:97:97:62:85:e8:a9: da:84:9d:5f:07:84:44:16:a3:d4:6a:82:78:b4:61: 0c:6c:6d:bf:1a:26:f3:31:00:65:9b:f1:9e:32:e5: 29:8b:56:ff:b2:db:68:07:78:ca:df:ce:2e:ac:73: eb:52:3e:bb:04:a2:3d:48:e9:3c:da:91:bd:16:39: 3c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F1:36:D7:E0:4B:71:F2:01:05:17:F0:AB:E7:7C:11:63:1C:81:29 X509v3 Authority Key Identifier: keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/91D2F686B4BE11EFA41A5C26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.94.0/23 Signature Algorithm: sha256WithRSAEncryption 80:ed:13:2b:5e:e9:b6:85:2b:98:39:ec:c8:62:76:92:1f:23: 8b:82:f8:0c:d4:a8:80:0a:e3:3d:ad:d5:d2:61:a0:53:af:f6: 93:8e:df:19:89:65:8f:dc:03:b7:5b:30:64:f6:d1:27:6d:b9: a6:1f:08:78:b6:49:b9:cf:67:ab:c9:f7:0b:4b:30:b2:63:80: 76:7f:16:96:7c:8b:cc:73:83:58:56:73:53:6b:6b:09:48:16: 94:f4:c0:2c:64:12:81:69:9e:6c:9c:69:8c:19:b4:9d:e1:92: f9:bd:03:41:6a:35:fc:24:6a:60:99:7d:28:ec:1b:f6:86:2e: 6b:33:bb:a1:6c:fa:a9:b0:7a:fb:40:07:74:ed:b6:05:0c:2f: fa:2b:91:3f:c8:b4:0c:36:aa:9a:4b:41:ea:1d:69:fc:e7:df: a8:c2:cf:2a:bb:55:b1:3b:7b:c2:e6:08:7c:67:59:dc:5d:26: 45:ca:4d:6d:d6:69:6d:db:05:98:66:22:02:46:40:98:a3:48: 79:75:6f:13:7b:53:9e:f1:41:38:d8:33:84:53:c1:fc:e5:39: 98:aa:3a:25:7e:58:50:ab:58:2b:50:21:6e:d4:7e:bc:48:ea: 6e:4e:63:30:7e:b5:4f:e8:b8:6b:02:09:52:ba:eb:5e:7d:61: c1:18:70:ec -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjFBRTExMC8GA1UEBRMoRjZEMzc5MzAyNzc1MUM2MkY4QUJCOTA4ODZFQTkzRjQ5 QjMzRjY0QzAeFw0yNTAyMDYxNTEwNTJaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTRkMGZjLWMxZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrcA8dQM8DXmyDm0654V0LVn+iB6qaoIL/V1ZYphHcEFMpUqAv3Kk78OP5XrEw +vNQ3Y+dYOjRCImF8rXvU6p/ASqjEQ8w6xIE4hTy2IuRGLc0Ol6RL2Nq9s4YxckJ mo3vi/4x6deQvGLTnoqd0Ltc0xjSUI4cDqmcJ+2HW5XylTZz3BKeqYZQEFZ1rt// simeocjA8trf4DK6eA7ZL8ub8OIY/vXpa2A5ORILZQM+a6/U7xBpFerwbHRes5eX YoXoqdqEnV8HhEQWo9Rqgni0YQxsbb8aJvMxAGWb8Z4y5SmLVv+y22gHeMrfzi6s c+tSPrsEoj1I6Tzakb0WOTyXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUhfE21+BL cfIBBRfwq+d8EWMcgSkwHwYDVR0jBBgwFoAU9tN5MCd1HGL4q7kIhuqT9Jsz9kww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyMUFFLzZDNzA0OEE2QUM3 MzExRUZBM0NCRDE0QUM0RjlBRTAyLzl0TjVNQ2QxSEdMNHE3a0lodXFUOUpzejlr dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOXRONU1DZDFIR0w0cTdrSWh1cVQ5SnN6OWt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjFBRS82QzcwNDhBNkFDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi85MUQyRjY4NkI0 QkUxMUVGQTQxQTVDMjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaD6XjANBgkqhkiG9w0BAQsFAAOCAQEAgO0TK17ptoUrmDns yGJ2kh8ji4L4DNSogArjPa3V0mGgU6/2k47fGYllj9wDt1swZPbRJ225ph8IeLZJ uc9nq8n3C0swsmOAdn8WlnyLzHODWFZzU2trCUgWlPTALGQSgWmebJxpjBm0neGS +b0DQWo1/CRqYJl9KOwb9oYuazO7oWz6qbB6+0AHdO22BQwv+iuRP8i0DDaqmktB 6h1p/OffqMLPKrtVsTt7wuYIfGdZ3F0mRcpNbdZpbdsFmGYiAkZAmKNIeXVvE3tT nvFBONgzhFPB/OU5mKo6JX5YUKtYK1AhbtR+vEjqbk5jMH61T+i4awIJUrrrXn1h wRhw7A== -----END CERTIFICATE-----Generated at Tue Apr 22 12:37:32 2025 by rpki-client