$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7E1214D2DB2F11EF8C68334DC4F9AE02.roa File: 7E1214D2DB2F11EF8C68334DC4F9AE02.roa (raw, json) Hash identifier: E06puL1hXdQ1vedEiBLOYOkJIAZ5R4cBKzsjVUC5bKI= Subject key identifier: 28:3D:B1:73:A6:4C:23:DC:F6:3E:D1:ED:CE:95:85:3B:9A:1D:68:07 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 050D Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7E1214D2DB2F11EF8C68334DC4F9AE02.roa Signing time: Sat 25 Jan 2025 15:17:30 +0000 ROA not before: Sat 25 Jan 2025 15:17:30 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153536 IP address blocks: 161.248.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Jan 25 15:17:30 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67950089-89d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:de:44:e4:87:b9:e0:ad:b6:ae:ba:71:cd:b9: 92:8c:84:05:f8:a9:4c:27:60:6f:3a:b4:fc:05:27: 1b:eb:19:1c:3d:03:95:43:eb:1e:a6:63:32:f1:5c: 83:a8:bf:61:5d:0d:4f:ea:4d:2b:7a:4e:82:d2:f3: 48:07:3e:13:77:fb:87:01:d2:86:ee:34:6f:5f:62: 9b:4a:87:c4:0d:d6:f4:9a:67:8e:57:5e:87:af:77: b2:74:19:32:10:94:67:1a:36:b7:b6:cf:2c:12:bd: f3:1d:9f:90:c2:fe:f8:b7:4f:d5:a5:60:7b:30:b2: b4:c6:ad:e5:1d:e6:1c:ce:64:13:58:b5:50:58:01: 82:74:14:9c:46:1d:37:05:66:72:de:91:c4:8c:5e: c5:ab:a7:2b:84:44:7d:d3:95:b0:21:0b:cf:12:8a: 05:fe:3c:05:5c:23:4d:84:93:4c:6b:e8:2a:6b:3e: 9c:56:3b:c9:a8:fe:9d:57:45:53:57:fa:3d:ac:22: 4d:23:d8:0e:83:8d:d3:00:6f:90:23:c3:1d:b7:5c: e7:02:ef:3a:3a:d4:2a:44:31:63:0f:88:d1:a9:87: 65:ed:49:3b:c9:ba:6b:40:a8:20:03:12:0f:0a:ca: a7:e7:81:9e:b6:f1:c3:55:26:df:70:8e:83:0a:86: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3D:B1:73:A6:4C:23:DC:F6:3E:D1:ED:CE:95:85:3B:9A:1D:68:07 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7E1214D2DB2F11EF8C68334DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.184.0/23 Signature Algorithm: sha256WithRSAEncryption 05:1d:b1:36:19:22:ed:4a:a5:82:f1:30:55:08:0e:c1:82:36: c9:92:14:e3:ba:aa:12:02:ce:dd:28:fb:fe:84:b4:76:8c:c0: 23:b2:d3:00:61:26:c1:ff:13:55:22:9c:e9:88:13:58:0a:c2: 06:97:03:71:93:a3:27:82:3e:51:cd:10:77:ba:3a:7a:be:59: ca:8e:7c:f1:3e:72:ae:90:67:ff:e4:84:a9:8f:9c:9e:9a:a5: 94:be:82:74:b2:ea:6f:ea:4b:80:a7:00:99:42:05:4e:57:ec: 3c:88:00:1a:11:4f:fe:ed:28:fa:aa:0a:9d:a3:42:69:e6:0f: cd:69:f5:41:67:e9:e4:a0:cd:3d:2e:b9:4d:14:c7:e0:28:df: ce:37:3f:f5:24:ef:ec:d8:49:33:33:ab:51:0c:fc:98:e1:f2: 74:13:93:ed:95:ac:e4:64:51:64:1f:ee:7d:c8:55:e5:07:3b: d7:90:57:24:4b:00:8f:5c:e0:12:b6:68:12:ba:f2:ba:3a:ff: f2:23:26:b6:66:65:46:2c:4d:47:d2:77:49:ae:09:cd:eb:fa: a8:e3:93:c9:c3:41:ee:d9:a9:26:10:e0:dd:a9:4a:88:f9:db: 1e:47:d2:fd:9c:c2:bc:38:9c:3b:7b:99:c2:9d:93:5d:95:d8: cd:6e:41:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwMTI1MTUxNzMwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk1MDA4OS04OWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4d5E5Ie54K22rrpxzbmSjIQF+KlMJ2BvOrT8BScb6xkcPQOVQ+sepmMy8VyD qL9hXQ1P6k0rek6C0vNIBz4Td/uHAdKG7jRvX2KbSofEDdb0mmeOV16Hr3eydBky EJRnGja3ts8sEr3zHZ+Qwv74t0/VpWB7MLK0xq3lHeYczmQTWLVQWAGCdBScRh03 BWZy3pHEjF7Fq6crhER905WwIQvPEooF/jwFXCNNhJNMa+gqaz6cVjvJqP6dV0VT V/o9rCJNI9gOg43TAG+QI8Mdt1znAu86OtQqRDFjD4jRqYdl7Uk7ybprQKggAxIP Csqn54GetvHDVSbfcI6DCoZNcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCg9sXOm TCPc9j7R7c6VhTuaHWgHMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvN0UxMjE0RDJE QjJGMTFFRjhDNjgzMzREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGh+LgwDQYJKoZIhvcNAQELBQADggEBAAUdsTYZIu1KpYLx MFUIDsGCNsmSFOO6qhICzt0o+/6EtHaMwCOy0wBhJsH/E1UinOmIE1gKwgaXA3GT oyeCPlHNEHe6Onq+WcqOfPE+cq6QZ//khKmPnJ6apZS+gnSy6m/qS4CnAJlCBU5X 7DyIABoRT/7tKPqqCp2jQmnmD81p9UFn6eSgzT0uuU0Ux+Ao3843P/Uk7+zYSTMz q1EM/Jjh8nQTk+2VrORkUWQf7n3IVeUHO9eQVyRLAI9c4BK2aBK68ro6//IjJrZm ZUYsTUfSd0muCc3r+qjjk8nDQe7ZqSYQ4N2pSoj52x5H0v2cwrw4nDt7mcKdk12V 2M1uQXA= -----END CERTIFICATE-----Generated at Mon Apr 7 17:22:56 2025 by rpki-client