$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3F810FB0EF6211EF94325432C4F9AE02.roa File: 3F810FB0EF6211EF94325432C4F9AE02.roa (raw, json) Hash identifier: op2F9WcVvyQlIkbKp9g4tj6YzpTflfN4rjAVQkFXg7A= Subject key identifier: 8E:5B:35:17:1A:61:88:C3:CF:0E:68:BB:3D:70:83:1C:4C:2B:03:8F Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 052F Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3F810FB0EF6211EF94325432C4F9AE02.roa Signing time: Thu 20 Feb 2025 08:11:12 +0000 ROA not before: Thu 20 Feb 2025 08:11:12 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153003 IP address blocks: 160.187.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1327 (0x52f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Feb 20 08:11:12 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67b6e3a0-7fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:d2:c1:51:58:0c:3f:22:74:93:4c:33:f7: e3:6c:0e:78:95:d7:05:93:bd:77:45:57:4d:1c:42: 1a:c6:72:1b:ad:19:4c:be:ab:fd:27:1c:19:bc:b3: 20:71:c1:57:19:a9:89:9a:2e:52:ab:33:d0:0f:16: 65:a8:d0:0c:19:10:5e:09:06:83:88:1d:00:a2:0d: c7:2c:c7:7f:1e:59:97:f7:3f:85:fe:d7:f4:8c:3b: 21:81:78:49:7f:d9:c5:dc:f1:62:e5:5c:fd:cd:53: 09:41:39:f5:00:1e:40:dd:7c:e6:21:b6:e7:68:7c: 41:f5:4f:a6:55:1e:78:54:23:8f:12:1a:2b:8a:44: c5:f0:bf:ae:d3:7a:a9:21:38:d4:af:52:16:08:9f: f2:7f:c5:67:23:09:dc:63:92:66:44:6c:6b:35:c8: b6:ac:62:8f:4c:0d:1b:22:1a:96:7f:10:f5:5a:68: f4:c8:7c:8f:b4:db:e5:2f:44:40:c5:69:34:1a:7e: b9:b1:1d:7c:75:46:aa:37:b8:00:b1:a5:ef:8f:53: 41:75:eb:66:36:00:ae:59:1a:50:6f:eb:b0:bc:26: 93:68:c3:86:68:c3:7a:a5:53:28:e6:5e:71:c6:07: 1e:e4:80:b2:fa:62:96:df:04:c2:22:f5:e2:c2:41: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5B:35:17:1A:61:88:C3:CF:0E:68:BB:3D:70:83:1C:4C:2B:03:8F X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3F810FB0EF6211EF94325432C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.148.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:5c:4f:98:60:5e:e9:bb:a1:ff:78:de:7b:5b:2e:29:6b:c4: 97:2f:5c:de:ca:2d:a2:ff:7a:ce:1f:92:20:4e:48:12:45:13: ce:b8:20:6a:44:37:6a:95:8b:a1:b5:cd:b2:77:4e:86:51:ed: 00:f5:e7:f4:96:04:15:0f:4c:5d:57:d3:2d:50:bc:ab:39:82: 97:0a:86:f5:b6:e5:85:fb:73:f7:fd:1d:66:cb:b7:f4:79:22: 05:99:9f:75:23:b5:0a:73:c0:ec:95:38:cd:dc:af:71:98:e8: 8d:d3:75:12:a6:f3:e7:41:8e:5e:fa:4a:95:c2:d8:75:47:dc: 4e:39:3d:8b:7d:f2:f7:58:28:07:bd:48:f7:8b:77:93:db:66: 2a:99:c0:40:6c:60:b3:72:e6:18:8b:70:d7:67:9f:56:52:51: bd:fa:f7:0f:db:c9:b1:69:ce:0a:0c:36:b0:28:03:49:f0:71: f9:ed:4d:4f:fc:36:6f:36:e7:9e:b6:f5:eb:75:a3:d1:38:19: 28:03:70:7c:a0:91:b6:b7:59:6f:38:c7:b2:62:31:e5:aa:f7: bf:33:88:5d:9f:f6:f9:39:19:5c:67:70:ba:09:24:e7:2f:24: ed:9d:2c:c4:7b:60:22:7b:b0:b6:a3:a4:38:ff:0e:3a:4f:7b: e9:e0:ae:e9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwMjIwMDgxMTEyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I2ZTNhMC03ZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3nSwVFYDD8idJNMM/fjbA54ldcFk713RVdNHEIaxnIbrRlMvqv9JxwZvLMg ccFXGamJmi5SqzPQDxZlqNAMGRBeCQaDiB0Aog3HLMd/HlmX9z+F/tf0jDshgXhJ f9nF3PFi5Vz9zVMJQTn1AB5A3XzmIbbnaHxB9U+mVR54VCOPEhorikTF8L+u03qp ITjUr1IWCJ/yf8VnIwncY5JmRGxrNci2rGKPTA0bIhqWfxD1Wmj0yHyPtNvlL0RA xWk0Gn65sR18dUaqN7gAsaXvj1NBdetmNgCuWRpQb+uwvCaTaMOGaMN6pVMo5l5x xgce5ICy+mKW3wTCIvXiwkE6RwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI5bNRca YYjDzw5ouz1wgxxMKwOPMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvM0Y4MTBGQjBF RjYyMTFFRjk0MzI1NDMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgu5QwDQYJKoZIhvcNAQELBQADggEBAFxcT5hgXum7of94 3ntbLilrxJcvXN7KLaL/es4fkiBOSBJFE864IGpEN2qVi6G1zbJ3ToZR7QD15/SW BBUPTF1X0y1QvKs5gpcKhvW25YX7c/f9HWbLt/R5IgWZn3UjtQpzwOyVOM3cr3GY 6I3TdRKm8+dBjl76SpXC2HVH3E45PYt98vdYKAe9SPeLd5PbZiqZwEBsYLNy5hiL cNdnn1ZSUb369w/bybFpzgoMNrAoA0nwcfntTU/8Nm8255629et1o9E4GSgDcHyg kba3WW84x7JiMeWq978ziF2f9vk5GVxncLoJJOcvJO2dLMR7YCJ7sLajpDj/DjpP e+ngruk= -----END CERTIFICATE-----Generated at Mon Apr 7 19:33:26 2025 by rpki-client