$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/EE8CD88EEA5A11EF922B276DC4F9AE02.roa File: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (raw, json) Hash identifier: NgoL1gjr88ZdEn/6hgZXntqKOlCBVmw0eMD59yFjWlQ= Subject key identifier: E1:E1:B7:C7:31:57:EF:5C:66:BB:F7:F1:5D:FE:61:3F:33:47:E1:7A Certificate issuer: /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Certificate serial: 02 Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/EE8CD88EEA5A11EF922B276DC4F9AE02.roa Signing time: Thu 13 Feb 2025 22:36:14 +0000 ROA not before: Thu 13 Feb 2025 22:36:14 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 7575 IP address blocks: 160.250.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB Validity Not Before: Feb 13 22:36:14 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67ae73de-ca29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:4e:8d:86:58:0e:da:c0:09:82:e2:fc:49: 9f:ec:c5:92:a3:07:f5:1c:09:1b:bc:06:0a:5f:e0: 15:97:73:c5:0c:8d:4d:e3:5e:71:b5:12:82:7b:be: 5f:88:c3:04:9e:c6:88:90:4e:c5:81:ce:ad:2a:eb: e2:41:18:5d:7d:8b:80:58:c7:37:b2:93:93:27:13: 0c:ce:2f:63:b9:53:06:d4:88:bb:16:52:e8:51:95: 23:23:8b:08:70:ec:f6:99:04:d4:5b:fa:c5:02:f7: 62:72:7b:be:04:55:ad:79:fc:91:fc:f7:ac:e5:a4: bc:74:fa:6c:fe:19:f3:b1:0a:e2:a9:d3:08:46:48: e1:c6:31:d7:7f:8b:d4:00:57:c5:c8:56:19:9d:f1: 99:e5:b5:55:3a:bd:d7:2f:bc:78:01:05:7a:ca:eb: e2:8b:b0:e6:41:d1:47:98:ac:e1:68:0e:9e:12:98: 52:11:d8:b8:3a:a4:c7:b9:e9:6e:04:7c:4d:e7:45: a7:c7:88:c4:5f:03:62:20:5e:b3:a4:4b:de:81:06: e4:0f:1f:fd:c6:49:91:3e:0e:1d:52:21:5f:73:f1: 16:7b:f8:14:91:e2:ee:ed:63:68:a5:4f:98:2b:47: 13:eb:0c:79:6e:3c:a2:a5:d6:7d:da:48:bf:41:2f: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E1:B7:C7:31:57:EF:5C:66:BB:F7:F1:5D:FE:61:3F:33:47:E1:7A X509v3 Authority Key Identifier: keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/EE8CD88EEA5A11EF922B276DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.232.0/23 Signature Algorithm: sha256WithRSAEncryption 27:42:b9:e1:e7:d3:7b:bf:71:88:0c:43:63:e5:b1:da:0f:69: 2d:1a:d7:5d:fe:d5:68:66:63:b5:8f:ba:24:33:af:c1:14:61: 5f:09:22:61:af:4c:56:4f:d8:ce:c7:b6:29:19:d8:e4:c2:ee: 0b:3f:72:a0:d3:52:16:b7:2d:85:7b:c9:24:d4:bf:b6:81:a5: 8c:e4:59:28:1c:ba:90:08:6b:b3:9e:ff:a6:e5:83:2b:ea:6d: b6:d1:6e:81:20:2a:0b:cc:32:85:0c:13:5d:d3:22:c0:de:c7: c9:8b:c6:9a:fc:f1:e2:ff:79:59:fa:85:24:1c:c7:e1:56:8d: 15:f2:d5:3e:95:0e:10:ed:9e:2a:04:12:e1:bb:43:91:36:b7: d9:01:99:2d:c1:e7:a3:5b:20:07:ec:bc:6e:0e:c2:be:8a:fe: 1c:00:2f:0b:d4:66:d4:48:39:29:2a:4d:7b:71:d3:9b:39:4d: 27:a8:8a:68:4a:2e:3e:ed:06:2f:3c:88:ce:da:de:d3:eb:c7: 88:87:c7:b3:ba:ed:37:c5:b6:2f:25:ed:15:9f:f1:ae:06:76: dc:da:bd:5d:68:ca:fa:ee:ed:00:d9:ca:36:77:22:30:db:86: a2:5e:31:2a:fb:78:45:ec:58:17:64:29:ac:aa:49:60:a8:77: 2b:dd:10:d8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTFDQjExMC8GA1UEBRMoNTY1MjBGQTFENzZFOTVGMDgxOUI2RERENDk2N0I0NTUw NDY5ODY5RDAeFw0yNTAyMTMyMjM2MTRaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YWU3M2RlLWNhMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxU06NhlgO2sAJguL8SZ/sxZKjB/UcCRu8Bgpf4BWXc8UMjU3jXnG1EoJ7vl+I wwSexoiQTsWBzq0q6+JBGF19i4BYxzeyk5MnEwzOL2O5UwbUiLsWUuhRlSMjiwhw 7PaZBNRb+sUC92Jye74EVa15/JH896zlpLx0+mz+GfOxCuKp0whGSOHGMdd/i9QA V8XIVhmd8ZnltVU6vdcvvHgBBXrK6+KLsOZB0UeYrOFoDp4SmFIR2Lg6pMe56W4E fE3nRafHiMRfA2IgXrOkS96BBuQPH/3GSZE+Dh1SIV9z8RZ7+BSR4u7tY2ilT5gr RxPrDHluPKKl1n3aSL9BL6VdAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU4eG3xzFX 71xmu/fxXf5hPzNH4XowHwYDVR0jBBgwFoAUVlIPoddulfCBm23dSWe0VQRphp0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MUNCLzVCNkZBMzYwRUE1 QTExRUZCODRBRTQ2OEM0RjlBRTAyL1ZsSVBvZGR1bGZDQm0yM2RTV2UwVlFScGhw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVmxJUG9kZHVsZkNCbTIzZFNXZTBWUVJwaHAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFDQi81QjZGQTM2MEVBNUExMUVGQjg0QUU0NjhDNEY5QUUwMi9FRThDRDg4RUVB NUExMUVGOTIyQjI3NkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaD66DANBgkqhkiG9w0BAQsFAAOCAQEAJ0K54efTe79xiAxD Y+Wx2g9pLRrXXf7VaGZjtY+6JDOvwRRhXwkiYa9MVk/Yzse2KRnY5MLuCz9yoNNS FrcthXvJJNS/toGljORZKBy6kAhrs57/puWDK+ptttFugSAqC8wyhQwTXdMiwN7H yYvGmvzx4v95WfqFJBzH4VaNFfLVPpUOEO2eKgQS4btDkTa32QGZLcHno1sgB+y8 bg7Cvor+HAAvC9Rm1Eg5KSpNe3HTmzlNJ6iKaEouPu0GLzyIztre0+vHiIfHs7rt N8W2LyXtFZ/xrgZ23Nq9XWjK+u7tANnKNnciMNuGol4xKvt4RexYF2QprKpJYKh3 K90Q2A== -----END CERTIFICATE-----Generated at Sat Apr 5 19:48:32 2025 by rpki-client