$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CC5A2760062711F0B26BB948C4F9AE02.roa File: CC5A2760062711F0B26BB948C4F9AE02.roa (raw, json) Hash identifier: 2hbPUqFrfBkPJcYNnbFe10AffyI8CrV90p6mta1JHIw= Subject key identifier: 22:1C:F8:19:79:B6:08:E7:C3:C9:7A:73:45:69:B4:70:E8:DD:32:5D Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 058F Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CC5A2760062711F0B26BB948C4F9AE02.roa Signing time: Fri 21 Mar 2025 07:40:45 +0000 ROA not before: Fri 21 Mar 2025 07:40:45 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150862 IP address blocks: 157.10.42.0/23 maxlen: 23 157.10.44.0/23 maxlen: 23 157.15.108.0/23 maxlen: 23 157.15.110.0/23 maxlen: 23 160.22.106.0/23 maxlen: 23 160.30.20.0/23 maxlen: 23 160.30.156.0/23 maxlen: 23 160.30.192.0/23 maxlen: 23 160.30.200.0/23 maxlen: 23 160.187.122.0/23 maxlen: 23 160.187.226.0/23 maxlen: 23 160.187.228.0/23 maxlen: 23 160.187.246.0/23 maxlen: 23 160.191.54.0/23 maxlen: 23 160.191.138.0/23 maxlen: 23 160.191.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Mar 21 07:40:45 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67dd17fd-89da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:1b:b7:66:7a:8c:40:6c:c1:ed:20:eb:cf: 3a:89:9f:49:82:9e:48:7a:cd:93:9e:3b:e2:44:6f: 5d:56:d3:f3:c4:bf:55:fb:72:36:5b:49:e2:62:2c: 50:c3:aa:dd:a2:0f:5e:31:4b:6a:d9:74:83:79:c4: f6:d8:d1:6a:6f:dd:ef:fa:e4:93:c4:1b:e3:81:fa: 8e:c7:67:e5:8b:e6:14:92:b7:3c:ac:01:8a:d9:af: 91:8c:d4:e2:26:e9:d5:a4:9a:fe:d4:68:4c:e5:03: 08:36:1b:f2:fe:b1:e0:cd:3a:04:aa:8a:14:a7:5d: 0e:a5:ee:3c:7e:50:f7:a3:74:36:ba:e6:f2:2f:49: 32:12:47:86:96:dc:fd:e2:b7:48:24:ae:aa:5d:65: 7d:0a:78:71:86:2f:ba:85:25:36:66:9f:cc:ab:83: 57:1a:78:a2:69:f7:c9:00:94:fc:2c:e5:9b:e7:36: ba:a9:50:94:d0:66:8a:ae:e9:1f:ef:14:ec:8b:92: 91:42:71:8c:79:01:08:37:04:fc:2f:d3:a0:af:49: cf:8a:ee:5f:1c:b8:49:76:ec:20:d3:4b:b7:d2:57: da:8c:30:86:83:f8:20:39:0e:79:92:9f:d8:df:ba: 5d:dd:e6:4a:d4:8c:0f:d4:8e:89:0c:02:e1:dd:79: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1C:F8:19:79:B6:08:E7:C3:C9:7A:73:45:69:B4:70:E8:DD:32:5D X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CC5A2760062711F0B26BB948C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.42.0-157.10.45.255 157.15.108.0/22 160.22.106.0/23 160.30.20.0/23 160.30.156.0/23 160.30.192.0/23 160.30.200.0/23 160.187.122.0/23 160.187.226.0-160.187.229.255 160.187.246.0/23 160.191.54.0/23 160.191.138.0/23 160.191.174.0/23 Signature Algorithm: sha256WithRSAEncryption 79:7b:18:80:95:16:8c:9c:65:4d:89:7d:a1:28:71:a6:58:7e: 58:cc:00:ca:14:35:90:05:92:fd:83:ef:57:15:a5:1b:82:dd: ed:64:1f:98:4b:e5:d3:4d:78:52:cf:4f:2e:3e:58:cb:da:b7: 06:da:95:40:37:d6:00:4f:6a:c3:6d:7e:1a:a9:d9:b9:b9:6d: f1:77:18:d1:44:ab:d8:b8:cb:15:bd:9e:3b:32:6c:e1:f7:88: 1c:1e:15:a7:bf:ab:c6:19:90:bb:a5:74:09:7a:90:a6:23:33: b5:97:10:a9:01:e7:76:35:77:a8:fa:f0:3e:50:c9:75:16:02: e4:c5:32:13:37:77:a2:eb:13:da:30:0f:80:ba:5a:e4:4e:ce: 4d:8a:57:03:1c:94:de:24:28:3b:5d:f9:b3:b2:30:6a:42:f0: 6d:40:71:aa:d3:70:da:16:9d:98:57:10:13:11:64:89:dc:51: 8a:80:d6:1e:61:43:b6:86:fc:86:bc:c3:1b:8e:37:e8:93:7d: b0:53:eb:fe:66:36:2d:48:7f:48:47:47:51:d1:3e:ab:bd:db: b9:67:eb:61:47:77:b7:ec:06:01:c3:43:1b:32:85:7d:d7:34: 2c:f0:56:66:c3:dd:aa:00:88:46:e6:03:c2:58:b9:f4:ca:d7: b1:7c:e5:40 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwMzIxMDc0MDQ1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RkMTdmZC04OWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIcbt2Z6jEBswe0g6886iZ9Jgp5Ies2TnjviRG9dVtPzxL9V+3I2W0niYixQ w6rdog9eMUtq2XSDecT22NFqb93v+uSTxBvjgfqOx2fli+YUkrc8rAGK2a+RjNTi JunVpJr+1GhM5QMINhvy/rHgzToEqooUp10Ope48flD3o3Q2uubyL0kyEkeGltz9 4rdIJK6qXWV9Cnhxhi+6hSU2Zp/Mq4NXGniiaffJAJT8LOWb5za6qVCU0GaKrukf 7xTsi5KRQnGMeQEINwT8L9Ogr0nPiu5fHLhJduwg00u30lfajDCGg/ggOQ55kp/Y 37pd3eZK1IwP1I6JDALh3XmwhQIDAQABo4IC7TCCAukwHQYDVR0OBBYEFCIc+Bl5 tgjnw8l6c0VptHDo3TJdMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQ0M1QTI3NjAw NjI3MTFGMEIyNkJCOTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwdwYIKwYBBQUHAQcBAf8E aDBmMGQEAgABMF4wDAMEAZ0KKgMEAZ0KLAMEAp0PbAMEAaAWagMEAaAeFAMEAaAe nAMEAaAewAMEAaAeyAMEAaC7ejAMAwQBoLviAwQBoLvkAwQBoLv2AwQBoL82AwQB oL+KAwQBoL+uMA0GCSqGSIb3DQEBCwUAA4IBAQB5exiAlRaMnGVNiX2hKHGmWH5Y zADKFDWQBZL9g+9XFaUbgt3tZB+YS+XTTXhSz08uPljL2rcG2pVAN9YAT2rDbX4a qdm5uW3xdxjRRKvYuMsVvZ47Mmzh94gcHhWnv6vGGZC7pXQJepCmIzO1lxCpAed2 NXeo+vA+UMl1FgLkxTITN3ei6xPaMA+AulrkTs5NilcDHJTeJCg7XfmzsjBqQvBt QHGq03DaFp2YVxATEWSJ3FGKgNYeYUO2hvyGvMMbjjfok32wU+v+ZjYtSH9IR0dR 0T6rvdu5Z+thR3e37AYBw0MbMoV91zQs8FZmw92qAIhG5gPCWLn0ytexfOVA -----END CERTIFICATE-----Generated at Mon Apr 7 19:33:24 2025 by rpki-client