$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/226B7BC2AAC611EE9F22785DC4F9AE02.roa File: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (raw, json) Hash identifier: sy4Su4ASjc+OqwWE5jPxA/U7NJeDsxDapY34Q7SzDAE= Subject key identifier: 3A:9E:DA:34:DC:75:95:53:BE:B8:1D:F0:72:35:18:3F:9B:9D:90:72 Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Certificate serial: 0D33 Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/226B7BC2AAC611EE9F22785DC4F9AE02.roa Signing time: Thu 20 Feb 2025 18:56:38 +0000 ROA not before: Thu 20 Feb 2025 18:56:38 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 18060 IP address blocks: 163.47.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE07 Validity Not Before: Feb 20 18:56:38 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67b77ae6-9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:5b:e3:08:2b:c7:2b:34:70:79:25:9b:66: 89:0e:e6:e5:ef:9f:4e:fc:32:44:7e:52:ee:53:d0: 50:d4:61:cb:ce:9c:47:ad:62:47:57:ce:f3:74:5b: d9:2d:d8:8c:65:48:3d:0d:da:43:37:d7:c8:64:9d: 19:96:c7:21:86:32:2a:32:a9:ec:ec:be:dd:08:74: c4:5d:c4:16:25:10:12:32:c4:16:c5:70:76:63:e1: 7c:cb:25:f7:77:a2:d9:a8:a4:c3:ec:95:a0:cc:3d: a8:15:e8:d2:05:58:a5:3d:2f:58:b3:c1:be:1d:5b: 42:78:9a:16:00:45:6a:9b:bb:a0:a9:a6:33:43:bd: cf:79:2a:02:03:9a:45:50:9d:6e:20:6e:ad:f4:c7: 6f:b7:d7:7d:7c:5a:4e:15:2a:19:53:7f:82:6f:61: 7a:b7:5a:78:36:8c:05:a1:27:5a:9c:b3:46:f6:ae: 8f:46:8f:25:43:60:e6:43:0e:20:36:8e:1f:a8:f9: da:bc:9f:01:5f:28:ba:82:6f:6f:4b:27:81:4d:72: 54:e6:2e:6b:6c:2b:dd:bb:5a:85:1c:6b:2a:8a:33: a3:83:62:0a:fd:6c:88:40:3d:eb:1f:38:74:76:e9: 24:7e:5f:0d:99:29:40:5b:2e:23:9b:b4:74:b9:79: 04:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9E:DA:34:DC:75:95:53:BE:B8:1D:F0:72:35:18:3F:9B:9D:90:72 X509v3 Authority Key Identifier: keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/226B7BC2AAC611EE9F22785DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.47.82.0/24 Signature Algorithm: sha256WithRSAEncryption 03:4c:9e:7c:8a:a5:3a:87:38:ab:75:51:5e:85:f7:f2:f5:f2: e7:15:61:2f:b4:a8:db:ab:0e:dc:d2:a3:4e:d3:83:4a:4f:1c: b9:bb:38:74:2f:46:f1:8c:6c:3e:ae:91:cb:55:42:a4:2c:38: 91:c2:f4:b5:e9:bc:84:82:f4:c7:61:b5:bf:bb:67:24:f6:f5: 31:ea:97:fd:3c:b6:2b:c1:7c:94:df:50:5a:8e:e8:45:0f:e0: f4:a8:d3:94:be:80:c2:8b:05:41:0c:94:24:02:57:21:7f:ab: 8a:10:d6:d4:19:45:2d:f9:61:f0:7e:4e:22:6c:83:78:b2:19: 36:22:9a:a3:57:d9:8f:71:9b:05:f2:8e:35:18:42:47:d7:30: f7:e3:e5:7e:97:41:52:00:99:ca:b1:64:91:ab:c8:6c:10:c3: 17:37:16:a1:31:1f:52:6a:f1:46:28:e8:48:fd:1e:07:6c:c5: f8:5e:9a:9e:65:f9:4d:99:b5:c1:34:d1:b3:16:ef:e4:87:0f: 62:df:13:a9:4e:1d:e1:cf:ed:fb:50:ce:aa:d6:12:d7:bf:db: be:7f:eb:3f:c7:25:55:45:b7:d7:43:62:a9:18:04:de:d1:35: 0c:bc:c2:0c:70:51:6e:c0:e0:88:66:25:80:8a:13:5b:ce:89: 1f:a5:8b:9b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFMDcxMTAvBgNVBAUTKEM4RUJBMzM0QkQ3REE2RTkyRTY3QzQwOEJEMDM3ODdC QUVBRTBDQUQwHhcNMjUwMjIwMTg1NjM4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I3N2FlNi05NDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0H5b4wgrxys0cHklm2aJDubl759O/DJEflLuU9BQ1GHLzpxHrWJHV87zdFvZ LdiMZUg9DdpDN9fIZJ0ZlschhjIqMqns7L7dCHTEXcQWJRASMsQWxXB2Y+F8yyX3 d6LZqKTD7JWgzD2oFejSBVilPS9Ys8G+HVtCeJoWAEVqm7ugqaYzQ73PeSoCA5pF UJ1uIG6t9Mdvt9d9fFpOFSoZU3+Cb2F6t1p4NowFoSdanLNG9q6PRo8lQ2DmQw4g No4fqPnavJ8BXyi6gm9vSyeBTXJU5i5rbCvdu1qFHGsqijOjg2IK/WyIQD3rHzh0 dukkfl8NmSlAWy4jm7R0uXkEqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDqe2jTc dZVTvrgd8HI1GD+bnZByMB8GA1UdIwQYMBaAFMjrozS9fabpLmfECL0DeHuurgyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkUwNy85NjJDNEI3RUQy QkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1a3VaOFFJdlFONGU2NnVE SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPdWpOTDE5cHVrdVo4UUl2UU40ZTY2dURLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZFMDcvOTYyQzRCN0VEMkJGMTFFOUE4NEQ2NjIyQzRGOUFFMDIvMjI2QjdCQzJB QUM2MTFFRTlGMjI3ODVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACjL1IwDQYJKoZIhvcNAQELBQADggEBAANMnnyKpTqHOKt1 UV6F9/L18ucVYS+0qNurDtzSo07Tg0pPHLm7OHQvRvGMbD6ukctVQqQsOJHC9LXp vISC9Mdhtb+7ZyT29THql/08tivBfJTfUFqO6EUP4PSo05S+gMKLBUEMlCQCVyF/ q4oQ1tQZRS35YfB+TiJsg3iyGTYimqNX2Y9xmwXyjjUYQkfXMPfj5X6XQVIAmcqx ZJGryGwQwxc3FqExH1Jq8UYo6Ej9Hgdsxfhemp5l+U2ZtcE00bMW7+SHD2LfE6lO HeHP7ftQzqrWEte/275/6z/HJVVFt9dDYqkYBN7RNQy8wgxwUW7A4IhmJYCKE1vO iR+li5s= -----END CERTIFICATE-----Generated at Sat Apr 5 13:47:24 2025 by rpki-client