$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9E334BDEF0E011EF80FCA362C4F9AE02.roa File: 9E334BDEF0E011EF80FCA362C4F9AE02.roa (raw, json) Hash identifier: CebxBu08076gAVcqEqsJMOY9rNHLRUit0wVmXwotTfE= Subject key identifier: EE:7E:46:E3:F1:6A:26:49:7C:95:C6:44:9D:3E:3D:6C:26:9A:E5:1B Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0532 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9E334BDEF0E011EF80FCA362C4F9AE02.roa Signing time: Sat 22 Feb 2025 05:48:19 +0000 ROA not before: Sat 22 Feb 2025 05:48:19 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153429 IP address blocks: 160.250.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Feb 22 05:48:19 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67b96523-f2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:5d:85:ef:71:c4:c5:eb:8f:70:2e:47:e1: c1:6e:da:f8:f0:a9:e8:ad:5d:64:fe:9c:c0:ce:7e: a4:d9:4e:97:1e:f1:e9:3c:9d:21:99:a8:f2:0e:81: 44:52:97:14:d2:9f:cf:ce:ff:f9:76:8b:0d:28:29: 56:90:2b:a6:1a:61:5b:78:a2:51:3f:09:fb:44:82: f7:fa:ea:5d:e8:35:a6:b7:b2:82:ed:b2:1a:9c:6a: f5:90:ed:9a:a6:68:0f:de:2b:61:0a:24:79:c9:3c: 86:ab:4d:c8:92:df:0c:42:d6:f8:a3:bc:71:d8:d0: 2e:5e:c7:ef:bf:54:58:15:ca:32:ba:d2:a5:71:cd: 0f:e2:f8:7c:94:e5:d1:85:2f:55:15:fd:79:a1:bc: fa:b9:08:9d:58:22:85:d3:a8:49:fa:4e:db:65:c6: 90:58:a6:6d:1d:d9:9a:d0:a0:f3:a7:7f:e1:08:3c: f8:ca:cc:09:c5:6d:b9:e1:4c:bb:68:c9:d6:ce:c5: 84:6c:39:ab:ef:1c:98:78:ea:9f:f4:80:e7:08:0b: 03:f1:5f:be:ae:ce:9e:1f:34:7b:3d:09:75:0d:08: cc:59:86:b6:9e:5b:fc:a5:db:98:0a:9a:04:90:e8: 6b:93:02:af:f5:9c:98:ed:0a:08:9c:7e:b3:c0:0a: de:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7E:46:E3:F1:6A:26:49:7C:95:C6:44:9D:3E:3D:6C:26:9A:E5:1B X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9E334BDEF0E011EF80FCA362C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.58.0/23 Signature Algorithm: sha256WithRSAEncryption b0:bb:16:fe:4e:f7:e8:10:93:6a:53:65:ab:27:49:ad:b4:61: 87:4e:27:25:21:31:c5:7c:53:1a:4b:e5:08:94:ff:ed:0c:b1: 5f:44:1f:e6:b9:bd:e0:6b:39:30:a7:1e:25:76:8c:f7:79:1f: fb:fd:5a:cc:07:21:14:a3:6e:76:08:60:4d:22:41:82:e6:35: 28:dc:6e:b7:ca:c4:40:6a:6c:52:7b:0f:31:92:25:2f:52:b8: cb:f0:64:c3:e7:ab:15:7a:95:d0:c3:5d:64:b1:ea:fc:a0:17: 1e:00:8b:c3:5f:a6:c8:94:6c:62:4f:58:04:8b:3a:9c:a9:c1: a5:1e:b7:d3:41:78:e7:79:f3:ed:00:1a:18:72:05:5d:09:08: 61:6e:94:23:d8:18:90:e6:26:97:bf:58:cb:ed:61:38:09:7d: 87:be:be:8a:2d:3c:fb:cf:d5:24:cf:62:3d:4a:5a:e7:94:e0: 61:08:69:c0:db:1c:14:83:b7:fc:8c:84:25:4c:52:a2:31:12: 42:fa:28:7f:a3:f6:40:16:41:f3:75:c3:e3:47:b0:71:af:eb: 37:d2:f6:72:b1:a2:ae:fe:55:18:ad:16:e9:a4:71:9f:23:9a: 1e:c1:f9:2e:c8:4c:5c:ca:3a:2c:9c:15:c6:04:96:cc:58:64: 38:42:d8:44 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwMjIyMDU0ODE5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I5NjUyMy1mMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcNdhe9xxMXrj3AuR+HBbtr48KnorV1k/pzAzn6k2U6XHvHpPJ0hmajyDoFE UpcU0p/Pzv/5dosNKClWkCumGmFbeKJRPwn7RIL3+upd6DWmt7KC7bIanGr1kO2a pmgP3ithCiR5yTyGq03Ikt8MQtb4o7xx2NAuXsfvv1RYFcoyutKlcc0P4vh8lOXR hS9VFf15obz6uQidWCKF06hJ+k7bZcaQWKZtHdma0KDzp3/hCDz4yswJxW254Uy7 aMnWzsWEbDmr7xyYeOqf9IDnCAsD8V++rs6eHzR7PQl1DQjMWYa2nlv8pduYCpoE kOhrkwKv9ZyY7QoInH6zwArejQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO5+RuPx aiZJfJXGRJ0+PWwmmuUbMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvOUUzMzRCREVG MEUwMTFFRjgwRkNBMzYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGg+jowDQYJKoZIhvcNAQELBQADggEBALC7Fv5O9+gQk2pT ZasnSa20YYdOJyUhMcV8UxpL5QiU/+0MsV9EH+a5veBrOTCnHiV2jPd5H/v9WswH IRSjbnYIYE0iQYLmNSjcbrfKxEBqbFJ7DzGSJS9SuMvwZMPnqxV6ldDDXWSx6vyg Fx4Ai8NfpsiUbGJPWASLOpypwaUet9NBeOd58+0AGhhyBV0JCGFulCPYGJDmJpe/ WMvtYTgJfYe+vootPPvP1STPYj1KWueU4GEIacDbHBSDt/yMhCVMUqIxEkL6KH+j 9kAWQfN1w+NHsHGv6zfS9nKxoq7+VRitFumkcZ8jmh7B+S7ITFzKOiycFcYElsxY ZDhC2EQ= -----END CERTIFICATE-----Generated at Mon Apr 7 19:33:25 2025 by rpki-client