$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/3446813047DC11EFA05E932EC4F9AE02.roa File: 3446813047DC11EFA05E932EC4F9AE02.roa (raw, json) Hash identifier: zLr4joEY+P4VPtuV8/aIjLwuAD3fE/qCh+JRJT72wJE= Subject key identifier: 50:1E:8F:6B:90:D5:73:1F:A1:18:06:F5:7F:41:29:FE:EA:C6:7E:EC Certificate issuer: /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F Certificate serial: 5C Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/3446813047DC11EFA05E932EC4F9AE02.roa Signing time: Thu 09 Jan 2025 05:50:06 +0000 ROA not before: Thu 09 Jan 2025 05:50:06 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152317 IP address blocks: 157.10.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D313B Validity Not Before: Jan 9 05:50:06 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677f638e-aefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:05:4c:1c:bf:a1:ee:de:a4:07:e4:81:11: ca:87:1a:97:34:a5:0a:69:d1:6c:d9:9b:95:1c:b5: b8:55:af:db:7d:5c:bb:df:11:4d:fe:a2:74:c0:db: 16:82:7e:e2:01:1c:23:b8:4c:57:9a:73:18:7b:21: ae:f8:91:e0:6a:35:64:6b:5b:df:46:8e:6a:b6:58: 6c:91:0d:ee:aa:92:d6:df:22:ce:c5:bb:58:3f:5d: 85:e8:bd:d5:cb:98:56:bb:b3:58:fe:5d:4e:08:f4: 9c:1f:b9:a9:c1:40:c9:51:2a:72:95:80:28:7b:fe: 53:55:56:b6:e4:c8:d7:29:3f:b2:59:f3:5a:81:f2: 75:ce:96:77:26:87:6f:4d:28:18:d1:e1:83:59:d0: fd:60:21:34:89:33:70:44:f8:4b:b0:c3:21:65:36: c9:d9:f1:fc:39:11:fe:be:5b:01:ec:b9:75:8c:67: 5e:40:8d:de:d4:d6:2a:dd:ef:3f:22:89:b7:20:3b: 1f:a2:66:6c:ed:37:70:18:1b:ed:cb:d5:e5:0d:15: 48:e9:06:64:ac:1f:c4:70:4f:0c:90:93:a9:95:a7: 36:c2:41:ae:4a:8a:89:fa:70:57:7b:0d:4e:0f:cf: 16:e9:09:81:f4:0b:d3:10:6a:ee:a3:d8:53:de:70: b8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1E:8F:6B:90:D5:73:1F:A1:18:06:F5:7F:41:29:FE:EA:C6:7E:EC X509v3 Authority Key Identifier: keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/3446813047DC11EFA05E932EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.136.0/23 Signature Algorithm: sha256WithRSAEncryption a0:5c:21:2e:15:44:de:b5:96:6f:d0:1e:45:9e:b9:ec:7f:b9: 1c:45:64:4e:1b:9a:1d:0b:a7:56:85:0a:2d:56:b5:55:01:50: dd:29:4b:42:23:39:c2:b5:73:80:01:c8:eb:b6:61:69:2b:07: 14:62:3c:e8:a2:5c:d6:19:21:6f:92:6a:4e:c2:5e:f5:c2:4c: 3a:cb:8e:00:45:49:48:58:57:7b:09:9f:b3:5c:63:da:5b:c7: 35:1c:56:41:74:5a:b7:de:f7:24:52:74:92:94:a4:c6:55:7c: f1:cf:12:ad:c0:6f:86:21:0c:de:f9:07:d5:40:b2:ed:e4:35: b0:be:c8:70:f2:36:32:f8:ef:56:27:8b:11:6c:38:dd:aa:c1: a9:19:ef:38:49:2f:99:eb:49:fb:9d:67:51:7f:e0:3d:76:4d: 2b:ca:c6:c6:16:da:b7:67:2a:f6:07:02:fc:f4:9c:34:26:81: fd:6f:42:34:7c:65:ed:a7:b0:22:bc:f4:79:74:c0:ee:42:5d: 47:23:10:cf:ca:21:3e:69:25:50:f4:9d:3e:12:57:d7:60:50: 6e:ab:24:60:ee:9b:6f:f9:0d:42:1f:7a:0f:8e:48:a5:c5:d3: c2:34:27:df:0d:70:90:24:8c:cf:c1:e5:b3:5b:8d:fe:23:98: 2c:aa:d9:a5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzEzQjExMC8GA1UEBRMoODBFOTI3NUI2RTZFQkM2QUQ3NTg1RDc2QUZCNkE0MDBC NTE0MkMzRjAeFw0yNTAxMDkwNTUwMDZaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2Y2MzhlLWFlZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLcgVMHL+h7t6kB+SBEcqHGpc0pQpp0WzZm5UctbhVr9t9XLvfEU3+onTA2xaC fuIBHCO4TFeacxh7Ia74keBqNWRrW99Gjmq2WGyRDe6qktbfIs7Fu1g/XYXovdXL mFa7s1j+XU4I9JwfuanBQMlRKnKVgCh7/lNVVrbkyNcpP7JZ81qB8nXOlncmh29N KBjR4YNZ0P1gITSJM3BE+EuwwyFlNsnZ8fw5Ef6+WwHsuXWMZ15Ajd7U1ird7z8i ibcgOx+iZmztN3AYG+3L1eUNFUjpBmSsH8RwTwyQk6mVpzbCQa5Kion6cFd7DU4P zxbpCYH0C9MQau6j2FPecLjNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUB6Pa5DV cx+hGAb1f0Ep/urGfuwwHwYDVR0jBBgwFoAUgOknW25uvGrXWF12r7akALUULD8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMTNCL0NDRTk5RDdFNDdE QjExRUZBRUE0QjAyREM0RjlBRTAyL2dPa25XMjV1dkdyWFdGMTJyN2FrQUxVVUxE OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ09rblcyNXV2R3JYV0YxMnI3YWtBTFVVTEQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEzQi9DQ0U5OUQ3RTQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8zNDQ2ODEzMDQ3 REMxMUVGQTA1RTkzMkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0KiDANBgkqhkiG9w0BAQsFAAOCAQEAoFwhLhVE3rWWb9Ae RZ657H+5HEVkThuaHQunVoUKLVa1VQFQ3SlLQiM5wrVzgAHI67ZhaSsHFGI86KJc 1hkhb5JqTsJe9cJMOsuOAEVJSFhXewmfs1xj2lvHNRxWQXRat973JFJ0kpSkxlV8 8c8SrcBvhiEM3vkH1UCy7eQ1sL7IcPI2MvjvVieLEWw43arBqRnvOEkvmetJ+51n UX/gPXZNK8rGxhbat2cq9gcC/PScNCaB/W9CNHxl7aewIrz0eXTA7kJdRyMQz8oh PmklUPSdPhJX12BQbqskYO6bb/kNQh96D45IpcXTwjQn3w1wkCSMz8Hls1uN/iOY LKrZpQ== -----END CERTIFICATE-----Generated at Sat Apr 5 21:42:53 2025 by rpki-client