$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa File: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (raw, json) Hash identifier: XLgRz6Ys+AWKVb/kmctJ9W9xNxym6vJibxlk+kHS4Ys= Subject key identifier: E0:46:83:A9:92:49:76:BB:F1:73:E2:78:65:DA:A3:87:E1:13:9D:D2 Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Certificate serial: 02 Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa Signing time: Mon 20 Jan 2025 05:16:10 +0000 ROA not before: Mon 20 Jan 2025 05:16:09 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 45650 IP address blocks: 161.248.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5 Validity Not Before: Jan 20 05:16:09 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=678ddc19-5652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3e:3b:2d:28:2f:c4:d2:55:c3:71:95:99:6e: 10:04:43:70:c0:0f:8c:b7:4a:d5:8a:a3:78:c5:e8: 63:f8:58:d9:5c:e7:85:a9:a1:65:18:87:83:01:2d: b3:9e:e8:de:c0:fa:c3:d5:1c:7c:18:8d:72:4f:ee: b2:5b:ed:00:f7:4c:e2:74:40:1c:f0:81:68:c6:54: 91:23:9c:90:e6:78:16:57:20:32:56:c3:9b:93:2a: 67:a3:32:df:3d:0a:0c:9d:9a:4a:31:db:a1:a2:b9: 8b:53:bf:29:ae:5a:a5:8d:35:c4:ff:13:ac:a5:f6: 2b:ce:6b:78:3e:18:23:b2:80:71:21:4d:3b:f9:c5: 03:06:42:b3:d8:c2:cd:75:4f:1e:fc:cf:ee:ca:6c: 43:4d:bf:77:47:1d:20:26:1a:5e:d3:e5:e3:6a:f6: 5e:33:49:f1:35:6d:5a:23:ee:24:7e:c5:df:75:8d: 6d:ab:55:cb:3b:3c:01:5d:36:9b:25:ad:59:04:2a: 37:91:91:85:b6:13:c3:d2:56:92:36:9b:75:20:ac: a2:16:d8:48:78:cb:1c:36:df:98:65:86:69:a8:5c: 2d:b5:be:41:73:e5:51:22:c6:81:ec:1d:90:2a:cd: f3:73:9d:f0:eb:d3:85:be:30:69:1d:e1:b4:b4:4c: 17:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:46:83:A9:92:49:76:BB:F1:73:E2:78:65:DA:A3:87:E1:13:9D:D2 X509v3 Authority Key Identifier: keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.216.0/23 Signature Algorithm: sha256WithRSAEncryption 64:e1:83:1c:ac:99:34:67:2e:bc:28:b5:9e:13:eb:37:da:01: d5:47:de:88:4f:a8:44:60:4f:94:a3:f2:10:22:d4:cb:6e:a5: f9:84:64:90:c1:ef:5b:2b:ac:ca:6d:da:77:e4:28:21:5a:2d: bf:33:60:32:70:9d:64:e6:0a:bb:bb:c4:4b:be:9c:6e:14:7d: 14:90:f3:f3:e9:e4:f2:1f:ac:3e:a7:4c:76:bd:b3:a2:53:70: 62:c1:38:5a:df:77:d5:8d:a9:1f:5c:c5:17:5f:aa:ff:0f:dd: eb:48:6d:06:41:00:42:5a:4b:7d:58:7c:36:9c:52:28:0a:d5: 79:04:3c:1c:0d:c2:8b:8b:ba:66:30:f0:6e:e5:5b:a9:85:2e: 66:1f:4c:07:ee:33:d4:ca:5c:e9:d7:88:1a:1a:1a:3c:cc:84: bb:14:9c:c6:ca:27:ac:89:be:f2:6c:f1:8f:f7:6c:3c:ea:0c: 4c:25:e4:62:d5:89:5e:40:a4:bd:00:77:90:5a:ff:e1:4e:b9: 6f:00:c9:f4:37:37:3e:a4:4f:fb:88:9a:95:7b:aa:fb:17:7d: 84:d3:2e:f3:6e:67:5c:93:16:d8:d7:f8:2e:0c:c6:2c:44:1a: c6:44:c7:12:b9:60:25:38:c4:3b:cd:48:98:fc:aa:d0:5e:92: 59:cb:b3:53 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzFGNTExMC8GA1UEBRMoNDkxMzY2NzVFN0UyMzRFN0QyRjg4NDU5OThFMkM2MkRC NDg4ODJDQTAeFw0yNTAxMjAwNTE2MDlaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OGRkYzE5LTU2NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWPjstKC/E0lXDcZWZbhAEQ3DAD4y3StWKo3jF6GP4WNlc54WpoWUYh4MBLbOe 6N7A+sPVHHwYjXJP7rJb7QD3TOJ0QBzwgWjGVJEjnJDmeBZXIDJWw5uTKmejMt89 Cgydmkox26GiuYtTvymuWqWNNcT/E6yl9ivOa3g+GCOygHEhTTv5xQMGQrPYws11 Tx78z+7KbENNv3dHHSAmGl7T5eNq9l4zSfE1bVoj7iR+xd91jW2rVcs7PAFdNpsl rVkEKjeRkYW2E8PSVpI2m3UgrKIW2Eh4yxw235hlhmmoXC21vkFz5VEixoHsHZAq zfNznfDr04W+MGkd4bS0TBdBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU4EaDqZJJ drvxc+J4Zdqjh+ETndIwHwYDVR0jBBgwFoAUSRNmdefiNOfS+IRZmOLGLbSIgsow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUY1L0E3NTREMzgwRDZF QzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1JObWRlZmlOT2ZTLUlSWm1PTEdMYlNJZ3NvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzFGNS9BNzU0RDM4MEQ2RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9BOEE1QzI4RUQ2 RUQxMUVGQjRENzg3NkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH42DANBgkqhkiG9w0BAQsFAAOCAQEAZOGDHKyZNGcuvCi1 nhPrN9oB1UfeiE+oRGBPlKPyECLUy26l+YRkkMHvWyusym3ad+QoIVotvzNgMnCd ZOYKu7vES76cbhR9FJDz8+nk8h+sPqdMdr2zolNwYsE4Wt931Y2pH1zFF1+q/w/d 60htBkEAQlpLfVh8NpxSKArVeQQ8HA3Ci4u6ZjDwbuVbqYUuZh9MB+4z1Mpc6deI GhoaPMyEuxScxsonrIm+8mzxj/dsPOoMTCXkYtWJXkCkvQB3kFr/4U65bwDJ9Dc3 PqRP+4ialXuq+xd9hNMu825nXJMW2Nf4LgzGLEQaxkTHErlgJTjEO81ImPyq0F6S WcuzUw== -----END CERTIFICATE-----Generated at Sun Apr 6 06:42:06 2025 by rpki-client