$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/129AD14466B311EF8C2A846AC4F9AE02.roa File: 129AD14466B311EF8C2A846AC4F9AE02.roa (raw, json) Hash identifier: bjTWbmq3d+od179Pm148BG4unrBVnlhItsP4PXRUpGA= Subject key identifier: 0D:6A:72:85:E5:7E:34:0D:8B:57:41:8E:3B:76:6D:FD:4B:2D:F3:89 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 056B Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/129AD14466B311EF8C2A846AC4F9AE02.roa Signing time: Thu 13 Mar 2025 14:44:18 +0000 ROA not before: Thu 13 Mar 2025 14:44:18 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 149147 IP address blocks: 160.25.146.0/23 maxlen: 23 160.191.250.0/23 maxlen: 23 161.248.32.0/23 maxlen: 23 161.248.94.0/23 maxlen: 23 161.248.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1387 (0x56b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Mar 13 14:44:18 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67d2ef42-ae43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:28:31:51:ea:91:e2:0c:4c:3f:43:bc:35:51: 97:07:a6:0c:1d:55:10:2f:10:2e:5e:1f:cd:b9:bf: 55:0e:26:41:43:fc:2d:75:f3:99:4b:ab:98:2b:aa: fa:4e:ea:83:fa:c1:87:4a:a5:63:7a:6b:2d:ff:0c: 84:0c:60:2b:3e:ba:fd:5c:77:43:d9:da:c3:ac:65: e8:f9:54:81:7e:04:d8:7a:85:70:66:53:5c:30:a6: f4:1c:93:42:de:70:26:a7:9a:94:f3:91:5b:9c:ac: 3e:b6:b6:a7:98:85:f7:e7:ec:1a:22:3b:ca:9e:eb: e2:d0:06:5a:15:7b:ad:dc:88:9d:60:e4:fe:27:f5: 7c:7d:42:ee:29:f1:f5:6d:8e:3c:36:9d:00:58:12: 10:cc:ba:e6:85:f8:95:e3:a2:f5:ff:b5:83:93:d3: 26:e7:24:74:4a:b9:a1:84:71:60:5b:e4:e6:61:d6: 79:48:98:98:11:ee:d5:06:3b:91:57:cc:c4:28:a2: b7:3d:91:89:0c:3c:68:f9:7b:92:64:2f:39:7c:ba: 1c:60:25:ce:bf:72:16:91:70:3e:b2:da:d9:4d:52: 3d:d2:71:42:f0:23:5a:85:10:99:8b:36:89:4b:9d: bd:b0:f2:ed:f0:07:c9:30:2b:7e:3f:a3:63:3c:a2: e8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6A:72:85:E5:7E:34:0D:8B:57:41:8E:3B:76:6D:FD:4B:2D:F3:89 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/129AD14466B311EF8C2A846AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.146.0/23 160.191.250.0/23 161.248.32.0/23 161.248.94.0-161.248.97.255 Signature Algorithm: sha256WithRSAEncryption 3b:70:c3:af:f2:af:ed:94:99:f0:97:f4:c2:f5:0e:f9:ab:00: d5:1c:bb:9b:95:3c:5f:fa:d7:9b:c2:2f:ba:da:74:14:0b:3f: 36:d8:99:e5:52:22:e4:99:2e:7c:22:37:8a:8e:93:7f:84:c9: ce:97:00:0e:58:e5:1d:84:3a:13:84:4e:b9:1d:c6:b7:01:1d: cb:e4:d0:6c:e6:cf:55:c2:45:52:95:5d:ce:4a:4d:65:80:ab: bb:72:56:3b:16:03:2b:ff:9a:0d:2a:ee:77:ae:a7:40:f2:51: 60:09:46:e3:99:07:96:89:58:d6:74:3a:e1:27:c5:ab:77:b5: b5:88:73:1d:b8:37:7c:da:73:65:f4:cf:ba:a5:2c:90:7e:a0: 54:d9:bb:55:8a:b4:1e:f7:18:de:04:85:82:23:22:82:8e:01: 73:44:a8:1c:02:81:6c:95:0a:d1:6d:5a:48:b2:66:62:a1:b6: dd:13:83:9a:47:7c:7e:fb:1c:b3:1c:77:8e:3b:89:1a:34:3e: 81:b3:47:9d:b4:33:95:6d:d7:e4:ae:d1:30:57:68:36:03:e7: d7:95:82:ab:3c:6f:5b:1a:f4:28:78:3f:a7:78:f5:fe:48:2e: ce:18:8c:ed:5c:4f:05:64:c2:aa:d2:c9:1b:78:9e:0e:4e:41: 7b:50:3e:0a -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwMzEzMTQ0NDE4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QyZWY0Mi1hZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCgxUeqR4gxMP0O8NVGXB6YMHVUQLxAuXh/Nub9VDiZBQ/wtdfOZS6uYK6r6 TuqD+sGHSqVjemst/wyEDGArPrr9XHdD2drDrGXo+VSBfgTYeoVwZlNcMKb0HJNC 3nAmp5qU85FbnKw+tranmIX35+waIjvKnuvi0AZaFXut3IidYOT+J/V8fULuKfH1 bY48Np0AWBIQzLrmhfiV46L1/7WDk9Mm5yR0SrmhhHFgW+TmYdZ5SJiYEe7VBjuR V8zEKKK3PZGJDDxo+XuSZC85fLocYCXOv3IWkXA+strZTVI90nFC8CNahRCZizaJ S529sPLt8AfJMCt+P6NjPKLoPwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFA1qcoXl fjQNi1dBjjt2bf1LLfOJMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMTI5QUQxNDQ2 NkIzMTFFRjhDMkE4NDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAGgGZIDBAGgv/oDBAGh+CAwDAMEAaH4XgMEAaH4YDANBgkq hkiG9w0BAQsFAAOCAQEAO3DDr/Kv7ZSZ8Jf0wvUO+asA1Ry7m5U8X/rXm8Ivutp0 FAs/NtiZ5VIi5JkufCI3io6Tf4TJzpcADljlHYQ6E4ROuR3GtwEdy+TQbObPVcJF UpVdzkpNZYCru3JWOxYDK/+aDSrud66nQPJRYAlG45kHlolY1nQ64SfFq3e1tYhz Hbg3fNpzZfTPuqUskH6gVNm7VYq0HvcY3gSFgiMigo4Bc0SoHAKBbJUK0W1aSLJm YqG23RODmkd8fvscsxx3jjuJGjQ+gbNHnbQzlW3X5K7RMFdoNgPn15WCqzxvWxr0 KHg/p3j1/kguzhiM7VxPBWTCqtLJG3ieDk5Be1A+Cg== -----END CERTIFICATE-----Generated at Mon Apr 7 19:27:12 2025 by rpki-client