$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/768A78DEBD2611EF8A770126C4F9AE02.roa File: 768A78DEBD2611EF8A770126C4F9AE02.roa (raw, json) Hash identifier: bedYh0Cz1EAZYTDvf5z+pKuqW2CmQr1LQh7OzHFw928= Subject key identifier: 66:89:5A:E3:DC:44:49:E4:23:59:32:D1:3E:EA:F3:23:0C:87:47:63 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 04A4 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/768A78DEBD2611EF8A770126C4F9AE02.roa Signing time: Wed 18 Dec 2024 09:57:17 +0000 ROA not before: Wed 18 Dec 2024 09:57:17 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153443 IP address blocks: 160.250.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Dec 18 09:57:17 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67629c7c-21bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f2:2f:1b:ff:f7:29:3a:2e:47:26:46:e5:8d: ea:d2:3e:85:03:b4:f8:37:df:0c:a3:f1:b3:0a:1d: 76:df:ad:5c:c7:9d:ee:37:31:50:d9:89:4a:9f:b4: 96:32:fa:0e:22:92:81:33:0c:0c:97:6b:13:a9:7b: 8a:8a:ae:6b:42:75:a3:5e:ed:fb:84:33:9b:36:d0: ef:0a:73:e5:72:05:76:40:5f:cd:4b:60:ec:14:5f: c9:b3:2d:0e:7c:18:fa:04:d2:c2:59:cc:27:45:83: 10:d3:12:cb:6a:f1:8c:f5:62:80:39:97:b3:10:47: 24:e4:5b:62:1f:5d:ea:80:6f:0e:b1:7f:a9:dc:fa: ec:af:0a:73:71:98:ec:fe:ad:cb:8a:88:d0:aa:9b: 07:b6:e1:52:30:83:c7:2c:07:62:8d:10:ba:f5:c4: 3d:d3:9d:93:c4:19:6e:a9:19:c1:4e:be:a7:40:e0: 92:58:c8:ef:02:36:a2:0f:63:61:f8:2a:bc:5e:46: 69:45:8b:08:8d:41:f4:5f:3a:9f:c6:be:65:16:0b: 18:f7:eb:8d:00:86:09:21:aa:ee:5a:cb:5b:ae:8c: 66:bd:61:32:ed:b7:84:91:b7:fc:46:45:be:71:96: a2:fb:66:80:99:c3:68:e5:e1:cb:00:4a:af:71:ae: 88:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:89:5A:E3:DC:44:49:E4:23:59:32:D1:3E:EA:F3:23:0C:87:47:63 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/768A78DEBD2611EF8A770126C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.180.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:af:cf:8b:22:32:a5:54:7c:d2:4a:18:76:20:4f:bf:24:b8: cc:ba:2f:36:42:f7:f6:81:14:28:46:60:86:6e:d7:21:49:39: d3:88:db:e4:58:d4:f3:22:b8:b4:89:51:5f:2c:8a:19:d3:9d: 16:9d:4e:89:0a:35:1f:8a:98:9e:16:60:52:b1:53:e2:bc:80: 53:48:89:58:36:81:9f:58:49:4e:b8:00:4f:a6:ed:96:0a:e7: ca:20:4e:1a:52:1f:3f:43:33:c5:42:a1:db:94:1b:3e:3a:f1: 5e:64:70:24:eb:32:52:95:e5:d1:88:d5:13:71:0f:f5:0b:ca: 52:1e:e8:cc:bf:72:65:6b:eb:d6:06:e8:76:50:e6:5c:42:19: bd:99:a1:e3:0c:8c:10:d4:30:9a:e1:0a:fa:11:3c:a6:6e:f9: a5:ee:64:a0:11:d9:13:f5:9e:de:db:4d:4c:63:fa:dc:bb:7d: 61:06:d9:2e:de:3e:9e:4a:7e:7f:a9:cc:89:72:dc:df:c1:55: e8:0a:dd:a3:05:74:e0:4a:d0:fb:85:bf:cf:d3:83:ed:c9:0b: a7:25:ee:23:ae:d3:e1:99:6a:ce:6b:87:17:c0:53:8f:df:34: 1d:4d:c8:d4:e7:15:b0:f5:fe:63:9f:d6:3f:59:5a:f2:84:de: 8c:33:14:aa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQxMjE4MDk1NzE3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYyOWM3Yy0yMWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPIvG//3KTouRyZG5Y3q0j6FA7T4N98Mo/GzCh12361cx53uNzFQ2YlKn7SW MvoOIpKBMwwMl2sTqXuKiq5rQnWjXu37hDObNtDvCnPlcgV2QF/NS2DsFF/Jsy0O fBj6BNLCWcwnRYMQ0xLLavGM9WKAOZezEEck5FtiH13qgG8OsX+p3PrsrwpzcZjs /q3LiojQqpsHtuFSMIPHLAdijRC69cQ9052TxBluqRnBTr6nQOCSWMjvAjaiD2Nh +Cq8XkZpRYsIjUH0Xzqfxr5lFgsY9+uNAIYJIaruWstbroxmvWEy7beEkbf8RkW+ cZai+2aAmcNo5eHLAEqvca6IIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGaJWuPc REnkI1ky0T7q8yMMh0djMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNzY4QTc4REVC RDI2MTFFRjhBNzcwMTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGg+rQwDQYJKoZIhvcNAQELBQADggEBAF+vz4siMqVUfNJK GHYgT78kuMy6LzZC9/aBFChGYIZu1yFJOdOI2+RY1PMiuLSJUV8sihnTnRadTokK NR+KmJ4WYFKxU+K8gFNIiVg2gZ9YSU64AE+m7ZYK58ogThpSHz9DM8VCoduUGz46 8V5kcCTrMlKV5dGI1RNxD/ULylIe6My/cmVr69YG6HZQ5lxCGb2ZoeMMjBDUMJrh CvoRPKZu+aXuZKAR2RP1nt7bTUxj+ty7fWEG2S7ePp5Kfn+pzIly3N/BVegK3aMF dOBK0PuFv8/Tg+3JC6cl7iOu0+GZas5rhxfAU4/fNB1NyNTnFbD1/mOf1j9ZWvKE 3owzFKo= -----END CERTIFICATE-----Generated at Mon Apr 7 19:39:18 2025 by rpki-client