$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B10F5E8E557511EF9F54A83AC4F9AE02.roa File: B10F5E8E557511EF9F54A83AC4F9AE02.roa (raw, json) Hash identifier: 8J4b1PAKtOBlgwqeiW7IFAwx2ztxvABI9zaiUdRVvTs= Subject key identifier: 05:AE:CA:D2:3C:26:3D:94:04:DE:A5:D8:4C:B3:59:4E:6E:5E:89:FF Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0566 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B10F5E8E557511EF9F54A83AC4F9AE02.roa Signing time: Wed 12 Mar 2025 09:33:05 +0000 ROA not before: Wed 12 Mar 2025 09:33:05 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135918 IP address blocks: 157.10.198.0/23 maxlen: 23 157.66.81.0/24 maxlen: 24 157.66.100.0/23 maxlen: 23 157.66.218.0/23 maxlen: 23 160.22.122.0/23 maxlen: 23 160.25.232.0/23 maxlen: 23 160.30.112.0/23 maxlen: 23 160.191.48.0/23 maxlen: 23 160.191.50.0/23 maxlen: 23 160.191.236.0/23 maxlen: 23 160.250.130.0/23 maxlen: 23 160.250.134.0/23 maxlen: 23 160.250.136.0/23 maxlen: 23 160.250.246.0/23 maxlen: 23 161.248.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1382 (0x566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Mar 12 09:33:05 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67d154d1-8c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:43:93:e4:f2:af:c1:42:ce:2d:f7:b1:bb: b3:c0:81:a6:44:fc:76:5f:15:20:09:06:69:1d:9e: 2d:f4:d9:3f:69:69:35:ea:57:9d:02:b0:d1:9d:2d: 16:6c:9d:f8:5e:e8:56:dc:d1:92:7a:c8:2f:f7:e1: d8:05:a7:5f:ca:dd:0e:98:55:2d:20:55:74:56:cf: 8b:7f:54:6e:eb:c3:3b:c3:8c:ae:13:22:43:ec:79: e5:ce:83:ad:9b:15:56:21:d6:03:0e:bf:ed:de:30: d4:f5:66:ed:27:f2:70:6f:f3:74:f0:74:9c:18:79: 64:bf:00:25:fa:e5:e0:d9:1b:94:cb:fc:d4:4c:50: fe:65:4a:a7:d5:20:a5:9b:b7:ba:0c:66:bf:dd:1a: 69:72:39:55:b2:14:95:fb:88:15:6a:89:49:6e:e8: bb:a7:ca:07:b1:bc:89:cf:e3:9b:42:f1:c8:d8:31: 8b:57:02:b4:c4:de:01:4a:f7:f8:60:77:a6:18:96: 5a:86:a7:d2:b9:a7:6c:e6:cd:85:42:85:a0:f9:58: f6:1c:1e:02:62:23:bf:9f:1b:55:ba:3d:32:4b:10: 00:9e:bf:45:e9:a0:42:f6:c1:a4:41:ec:37:32:0b: 5d:49:26:00:ff:83:19:b4:7e:3d:51:18:09:10:c3: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AE:CA:D2:3C:26:3D:94:04:DE:A5:D8:4C:B3:59:4E:6E:5E:89:FF X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B10F5E8E557511EF9F54A83AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.198.0/23 157.66.81.0/24 157.66.100.0/23 157.66.218.0/23 160.22.122.0/23 160.25.232.0/23 160.30.112.0/23 160.191.48.0/22 160.191.236.0/23 160.250.130.0/23 160.250.134.0-160.250.137.255 160.250.246.0/23 161.248.146.0/23 Signature Algorithm: sha256WithRSAEncryption 71:a5:8c:79:44:c9:75:92:d5:e8:77:74:3d:59:e0:1d:df:eb: 4b:80:64:78:fb:2c:d6:ba:5e:ca:c5:77:e9:d0:95:0a:bb:b0: 72:3f:4c:fc:f1:b4:c0:b9:a0:c4:e7:d8:4d:6b:49:b3:6d:66: 27:9c:2b:a5:ac:d1:79:1e:b5:85:e3:cd:76:bf:65:bc:ed:bd: 5a:85:59:6f:fd:67:3f:f1:6c:68:2c:28:93:56:75:1f:b0:b5: 4c:13:19:70:4b:53:9d:e2:51:11:c0:e5:1d:50:73:29:1e:ae: 3d:8c:1b:df:a8:f9:04:e4:2b:96:2f:5d:02:73:5b:4a:6f:c5: d6:f3:83:a3:99:c9:ca:0c:9f:66:4b:01:be:6b:96:99:b5:82: b2:c2:0d:8e:43:91:f9:d9:4c:f5:97:84:a6:2b:ab:dd:ac:48: 55:f9:9e:d2:db:cc:11:ea:82:a5:d9:6a:8f:a6:7e:9c:e9:f6: e4:a5:4a:af:ee:e9:f9:01:6d:5d:8e:36:72:d7:67:d2:30:9e: 49:18:61:9d:5e:33:63:43:8a:19:23:6f:ae:3c:df:61:28:58: 60:b8:87:b4:8a:1a:dd:1d:99:0c:e6:dd:7e:ef:52:f0:90:3d: 8d:44:fb:10:e8:4c:c9:35:46:cd:57:a6:fb:dd:c0:8c:d6:18: c8:9c:18:dd -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwMzEyMDkzMzA1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QxNTRkMS04YzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0dDk+Tyr8FCzi33sbuzwIGmRPx2XxUgCQZpHZ4t9Nk/aWk16ledArDRnS0W bJ34XuhW3NGSesgv9+HYBadfyt0OmFUtIFV0Vs+Lf1Ru68M7w4yuEyJD7HnlzoOt mxVWIdYDDr/t3jDU9WbtJ/Jwb/N08HScGHlkvwAl+uXg2RuUy/zUTFD+ZUqn1SCl m7e6DGa/3RppcjlVshSV+4gVaolJbui7p8oHsbyJz+ObQvHI2DGLVwK0xN4BSvf4 YHemGJZahqfSuads5s2FQoWg+Vj2HB4CYiO/nxtVuj0ySxAAnr9F6aBC9sGkQew3 MgtdSSYA/4MZtH49URgJEMORvwIDAQABo4IC5TCCAuEwHQYDVR0OBBYEFAWuytI8 Jj2UBN6l2EyzWU5uXon/MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQjEwRjVFOEU1 NTc1MTFFRjlGNTRBODNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbwYIKwYBBQUHAQcBAf8E YDBeMFwEAgABMFYDBAGdCsYDBACdQlEDBAGdQmQDBAGdQtoDBAGgFnoDBAGgGegD BAGgHnADBAKgvzADBAGgv+wDBAGg+oIwDAMEAaD6hgMEAaD6iAMEAaD69gMEAaH4 kjANBgkqhkiG9w0BAQsFAAOCAQEAcaWMeUTJdZLV6Hd0PVngHd/rS4BkePss1rpe ysV36dCVCruwcj9M/PG0wLmgxOfYTWtJs21mJ5wrpazReR61hePNdr9lvO29WoVZ b/1nP/FsaCwok1Z1H7C1TBMZcEtTneJREcDlHVBzKR6uPYwb36j5BOQrli9dAnNb Sm/F1vODo5nJygyfZksBvmuWmbWCssINjkOR+dlM9ZeEpiur3axIVfme0tvMEeqC pdlqj6Z+nOn25KVKr+7p+QFtXY42ctdn0jCeSRhhnV4zY0OKGSNvrjzfYShYYLiH tIoa3R2ZDObdfu9S8JA9jUT7EOhMyTVGzVem+93AjNYYyJwY3Q== -----END CERTIFICATE-----Generated at Mon Apr 7 03:12:30 2025 by rpki-client