$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6427B5882C7D11EFBD8C926BC4F9AE02.roa File: 6427B5882C7D11EFBD8C926BC4F9AE02.roa (raw, json) Hash identifier: C6OsmrBGR0FUahfm2R9W5VTJYnYe63OI54B7q6NY/pM= Subject key identifier: EB:67:BC:22:AB:88:C8:C0:46:74:C2:60:8F:56:5B:DB:EE:0F:B2:F4 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 051F Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6427B5882C7D11EFBD8C926BC4F9AE02.roa Signing time: Fri 07 Feb 2025 06:48:08 +0000 ROA not before: Fri 07 Feb 2025 06:48:08 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 149107 IP address blocks: 157.66.24.0/23 maxlen: 23 157.66.26.0/23 maxlen: 23 160.30.18.0/23 maxlen: 23 160.191.164.0/23 maxlen: 23 160.250.182.0/23 maxlen: 23 160.250.184.0/23 maxlen: 23 160.250.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1311 (0x51f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Feb 7 06:48:08 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67a5aca8-1de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d1:6a:71:3a:82:76:38:2c:4a:32:0f:ae:4a: af:4b:9a:3c:b0:5d:5d:38:d5:76:84:a8:46:72:5c: 97:e3:80:dd:65:7d:44:96:0b:12:8c:27:59:d5:0f: cc:bb:53:cd:4a:98:5c:b8:c1:ed:e0:cc:16:23:d5: 91:ee:d9:a2:79:5c:a1:98:10:4c:f7:63:ad:8f:1e: a0:a0:43:68:34:88:30:69:14:32:a5:0c:95:88:b3: e0:63:06:10:8f:48:f4:8c:3b:e1:48:99:20:f8:c5: 55:fd:3a:51:8a:cc:ad:9d:e7:84:10:ea:0a:ee:db: d7:f0:fe:f3:54:e8:3c:f4:b4:38:ff:4a:d2:9a:e2: 23:08:b9:62:13:a6:6f:f4:07:2e:97:79:6e:12:df: 18:53:d3:94:d4:62:97:6b:1f:9c:bf:7d:b0:53:c9: 8b:dc:d5:17:10:80:a6:f7:2b:92:f3:b2:e9:b2:bf: 11:07:af:0b:a9:8f:9d:98:11:46:18:e0:c9:15:9d: 68:77:74:f3:79:24:1a:91:67:39:2d:ba:7e:4a:45: 1f:4d:41:69:16:72:80:6e:c7:2d:0a:b4:f7:37:91: a8:9b:86:7f:05:62:52:73:38:5e:fb:1e:e3:10:cc: 10:ab:d8:f9:6a:1a:48:9a:e6:f6:fb:fc:46:3b:81: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:67:BC:22:AB:88:C8:C0:46:74:C2:60:8F:56:5B:DB:EE:0F:B2:F4 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6427B5882C7D11EFBD8C926BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.24.0/22 160.30.18.0/23 160.191.164.0/23 160.250.182.0-160.250.187.255 Signature Algorithm: sha256WithRSAEncryption 05:8a:05:0a:8e:2a:c5:24:df:0e:40:34:80:75:b2:0f:5b:19: 15:b9:4d:c3:47:69:7a:78:ef:2a:2c:4e:a9:90:1e:8a:f8:7a: 53:38:8d:b5:38:a9:22:18:0d:83:6b:78:66:46:42:14:48:ee: 86:5f:6b:a5:a3:c6:da:32:bd:b4:a0:1e:70:ee:f1:7e:bf:f1: 07:43:07:06:f1:42:59:27:b5:f8:3b:b8:95:cf:49:71:b3:0b: 14:59:28:76:db:fb:ef:65:74:d8:68:47:2a:37:c3:e5:bd:cd: 75:4c:ba:0e:21:dc:ca:d9:07:88:29:2a:c8:34:7a:b2:6f:32: c2:81:ef:42:c9:7e:1a:9c:c4:0b:72:fc:f8:0a:cf:bb:94:69: 83:9e:9a:19:9d:3a:8e:51:e4:ae:9d:09:07:80:77:28:88:1a: eb:65:84:87:0a:29:27:31:a8:2f:73:4c:b4:69:f1:da:01:83: 40:4f:99:a1:3f:83:58:bc:6a:7a:88:c3:98:db:91:20:a9:0c: 0c:2f:b6:7e:6a:54:cd:b3:1c:69:45:f1:a2:83:4c:6d:81:d7: 36:a6:c4:ac:24:31:18:dd:9e:39:4f:e3:5e:c9:8b:0d:99:f8: dc:49:2e:3d:2b:ba:dd:3f:e8:5d:22:aa:2e:2d:d1:01:ae:71: ff:56:65:8c -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICBR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwMjA3MDY0ODA4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E1YWNhOC0xZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNFqcTqCdjgsSjIPrkqvS5o8sF1dONV2hKhGclyX44DdZX1ElgsSjCdZ1Q/M u1PNSphcuMHt4MwWI9WR7tmieVyhmBBM92Otjx6goENoNIgwaRQypQyViLPgYwYQ j0j0jDvhSJkg+MVV/TpRisytneeEEOoK7tvX8P7zVOg89LQ4/0rSmuIjCLliE6Zv 9Acul3luEt8YU9OU1GKXax+cv32wU8mL3NUXEICm9yuS87Lpsr8RB68LqY+dmBFG GODJFZ1od3TzeSQakWc5Lbp+SkUfTUFpFnKAbsctCrT3N5Gom4Z/BWJSczhe+x7j EMwQq9j5ahpImub2+/xGO4HDKQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFOtnvCKr iMjARnTCYI9WW9vuD7L0MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNjQyN0I1ODgy QzdEMTFFRkJEOEM5MjZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAKdQhgDBAGgHhIDBAGgv6QwDAMEAaD6tgMEAqD6uDANBgkq hkiG9w0BAQsFAAOCAQEABYoFCo4qxSTfDkA0gHWyD1sZFblNw0dpenjvKixOqZAe ivh6UziNtTipIhgNg2t4ZkZCFEjuhl9rpaPG2jK9tKAecO7xfr/xB0MHBvFCWSe1 +Du4lc9JcbMLFFkodtv772V02GhHKjfD5b3NdUy6DiHcytkHiCkqyDR6sm8ywoHv Qsl+GpzEC3L8+ArPu5Rpg56aGZ06jlHkrp0JB4B3KIga62WEhwopJzGoL3NMtGnx 2gGDQE+ZoT+DWLxqeojDmNuRIKkMDC+2fmpUzbMcaUXxooNMbYHXNqbErCQxGN2e OU/jXsmLDZn43EkuPSu63T/oXSKqLi3RAa5x/1ZljA== -----END CERTIFICATE-----Generated at Mon Apr 7 05:03:08 2025 by rpki-client