$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/07E139E0D7D911EFAF94EB63C4F9AE02.roa File: 07E139E0D7D911EFAF94EB63C4F9AE02.roa (raw, json) Hash identifier: 3cWdltZihW+k8wlPfwhhM8+p6XRKCUhHisXydKbaKi4= Subject key identifier: 8F:23:AA:A0:82:C6:26:4C:0D:E1:EB:9B:0C:81:E8:90:50:05:50:6B Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 04F7 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/07E139E0D7D911EFAF94EB63C4F9AE02.roa Signing time: Tue 21 Jan 2025 09:21:02 +0000 ROA not before: Tue 21 Jan 2025 09:21:02 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153502 IP address blocks: 161.248.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1271 (0x4f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Jan 21 09:21:02 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=678f66fd-807a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:3b:db:c0:bb:7f:93:8e:cc:93:4c:4d:6f: 52:1d:4a:4d:53:a3:c8:3a:76:9f:d3:1c:25:1d:4e: a2:4d:8a:02:c9:7b:a1:d3:7b:21:32:b6:8b:f3:59: 0e:d8:16:39:f4:56:8e:26:96:22:cd:1c:c4:19:f1: 75:c7:45:8c:de:d9:a8:cd:c2:5d:cb:4c:3b:40:45: ad:94:50:14:7e:bf:12:81:38:c7:a6:ae:f0:f3:7c: 9e:28:65:64:7a:0a:7f:91:84:df:93:89:85:c3:9b: d1:8c:7d:c6:46:50:c2:c5:cb:c3:94:9b:72:ee:13: be:c3:1b:39:85:90:b1:98:5e:7e:f5:16:49:a7:0e: 6d:2c:d6:e1:33:41:be:2d:8a:1f:ca:eb:79:d6:fa: 98:fd:fd:3f:e2:e0:1a:ce:8f:ec:76:47:5f:6d:f0: fb:84:83:27:68:92:69:fa:c5:94:54:b6:9c:8e:4c: 74:a3:cb:e5:ca:64:bb:19:bb:96:b3:6d:2d:2f:dc: 3f:b6:3b:5c:e2:40:2f:ed:87:28:38:86:c4:12:10: 14:fd:d0:8d:4e:75:86:bb:f8:4d:d2:82:dd:70:13: 06:94:ef:6d:57:cd:a1:f1:e1:b7:37:a0:62:28:72: 12:6e:7b:a8:0c:70:1e:09:66:87:96:8d:cf:bc:b9: 6e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:23:AA:A0:82:C6:26:4C:0D:E1:EB:9B:0C:81:E8:90:50:05:50:6B X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/07E139E0D7D911EFAF94EB63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.82.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:3a:5f:d6:ba:53:2d:27:3b:9f:9b:4a:c5:10:f5:2d:b9:a5: 6f:3b:08:6e:77:64:8f:bc:72:ff:c2:e3:95:34:52:48:ba:08: 46:cf:8d:9c:18:32:01:cb:99:b5:01:79:7a:38:56:ac:a2:c6: a9:c7:b4:18:c0:9f:84:41:eb:81:22:98:60:0a:3e:3f:dc:aa: f8:b8:6e:e2:6c:88:e6:2a:1b:59:87:76:72:73:d2:9c:4a:c3: 97:8b:51:b2:b9:99:08:37:5f:95:05:ca:f8:02:19:6a:22:0c: ff:66:49:1f:0c:40:d5:5b:99:58:ec:8d:49:69:97:88:15:c3: 72:fd:64:a5:85:33:53:1b:ad:3c:ed:1e:c6:9d:b4:3a:c2:04: 0b:c9:3e:5f:00:95:83:be:e2:b5:68:7d:65:12:12:7e:f5:fe: b2:1d:13:ef:d1:c6:87:e0:0d:6d:41:52:d9:46:78:98:dd:80: ca:b9:2f:2e:8d:23:3c:81:f6:a7:5e:7f:7d:88:0e:71:17:9e: 7f:6d:ef:a9:91:b8:f7:b2:28:3f:2b:c8:a3:e6:b3:5c:10:a2: e2:10:92:80:6e:d9:09:a6:10:45:a2:7c:a4:3f:d1:ef:b0:8e: b6:cb:35:ee:97:b8:d7:29:fa:4e:7f:ac:d2:d0:c6:7b:17:f6: 0c:08:3d:1f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwMTIxMDkyMTAyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhmNjZmZC04MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW8728C7f5OOzJNMTW9SHUpNU6PIOnaf0xwlHU6iTYoCyXuh03shMraL81kO 2BY59FaOJpYizRzEGfF1x0WM3tmozcJdy0w7QEWtlFAUfr8SgTjHpq7w83yeKGVk egp/kYTfk4mFw5vRjH3GRlDCxcvDlJty7hO+wxs5hZCxmF5+9RZJpw5tLNbhM0G+ LYofyut51vqY/f0/4uAazo/sdkdfbfD7hIMnaJJp+sWUVLacjkx0o8vlymS7GbuW s20tL9w/tjtc4kAv7YcoOIbEEhAU/dCNTnWGu/hN0oLdcBMGlO9tV82h8eG3N6Bi KHISbnuoDHAeCWaHlo3PvLluSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI8jqqCC xiZMDeHrmwyB6JBQBVBrMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMDdFMTM5RTBE N0Q5MTFFRkFGOTRFQjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGh+FIwDQYJKoZIhvcNAQELBQADggEBAAw6X9a6Uy0nO5+b SsUQ9S25pW87CG53ZI+8cv/C45U0Uki6CEbPjZwYMgHLmbUBeXo4VqyixqnHtBjA n4RB64EimGAKPj/cqvi4buJsiOYqG1mHdnJz0pxKw5eLUbK5mQg3X5UFyvgCGWoi DP9mSR8MQNVbmVjsjUlpl4gVw3L9ZKWFM1MbrTztHsadtDrCBAvJPl8AlYO+4rVo fWUSEn71/rIdE+/RxofgDW1BUtlGeJjdgMq5Ly6NIzyB9qdef32IDnEXnn9t76mR uPeyKD8ryKPms1wQouIQkoBu2QmmEEWifKQ/0e+wjrbLNe6XuNcp+k5/rNLQxnsX 9gwIPR8= -----END CERTIFICATE-----Generated at Mon Apr 7 19:36:51 2025 by rpki-client