$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/47C532D045B911EF93633071C4F9AE02.roa File: 47C532D045B911EF93633071C4F9AE02.roa (raw, json) Hash identifier: wnnmQPYTxqkM9WvnTTi4MEpEuQ7gabJzkmyVQ4uhwWk= Subject key identifier: F4:2E:FF:AB:62:5D:35:0F:E0:4F:20:C0:69:06:FD:A1:78:C1:E7:E2 Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Certificate serial: 5D Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/47C532D045B911EF93633071C4F9AE02.roa Signing time: Thu 09 Jan 2025 05:20:46 +0000 ROA not before: Thu 09 Jan 2025 05:20:46 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152317 IP address blocks: 157.10.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0 Validity Not Before: Jan 9 05:20:46 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677f5cae-611f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:fb:b1:2c:75:5e:9d:61:1f:57:d8:ef:32: da:b8:62:00:cc:93:c4:4c:d0:3d:62:9a:4b:c4:19: e3:7e:39:dd:6c:4a:b4:84:9a:92:44:25:ef:74:cc: 12:21:16:8c:4f:6f:e4:8b:d2:dd:bf:c7:2c:aa:e2: 15:5a:d0:ba:7c:1f:03:37:2a:fb:7b:eb:47:a9:c6: a8:d8:74:67:b1:fd:d1:43:72:97:b3:0f:ae:77:51: 3c:bd:b6:ef:c6:d7:6e:fc:2c:04:f1:c6:1e:ec:3a: 09:2c:7f:c6:e7:0f:6b:47:f8:0c:86:79:da:8b:cb: ee:3b:ba:56:01:f5:e6:b7:90:62:77:35:79:06:ed: cd:d8:ac:34:8a:4b:38:d8:8f:b0:86:dd:de:22:19: 1c:a3:87:02:44:40:39:bb:a8:b3:32:71:9c:c7:d9: 4c:d9:61:03:90:24:5c:15:41:1a:1b:48:b6:ec:03: 57:23:c4:c1:d9:a9:18:a8:2d:8b:ff:b5:85:d3:04: b9:de:b9:8a:a6:1d:2d:72:a7:c6:cc:c5:48:4a:91: a1:67:e7:53:e2:36:9d:51:3b:a9:0e:a7:43:6a:e9: 52:0a:8f:84:8f:87:5d:dc:98:91:f5:d6:d8:5f:97: 72:d1:03:89:fc:84:20:48:25:fe:b4:f8:2a:a9:93: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2E:FF:AB:62:5D:35:0F:E0:4F:20:C0:69:06:FD:A1:78:C1:E7:E2 X509v3 Authority Key Identifier: keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/47C532D045B911EF93633071C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.146.0/23 Signature Algorithm: sha256WithRSAEncryption d3:f9:a2:ed:05:52:68:32:db:44:c8:06:71:2e:6d:fa:b4:0c: c6:8d:b5:7d:0a:ee:4a:a7:98:6b:f0:e1:db:c4:e1:13:39:71: ba:8f:7a:76:a5:b0:30:03:13:f8:1b:6f:9f:1c:fd:b7:34:17: 1f:72:01:06:62:f5:ec:53:80:dd:aa:a7:16:ed:0e:71:b5:29: e8:f6:80:0e:a4:f2:6b:0f:b7:7a:c2:16:60:d3:f9:f0:a5:6f: 20:84:14:44:fb:f2:1f:7c:36:27:5e:96:56:a1:10:bf:27:ac: ce:75:f0:82:7f:e2:0a:3d:b1:f9:c1:ef:fa:4f:38:c2:36:c6: 70:90:a3:c4:9e:47:a9:7f:b9:14:3e:ef:3b:27:cd:14:b1:25: c9:bd:34:78:ad:62:a7:64:1c:2b:57:72:8e:d1:6d:18:0b:dc: 60:c6:b1:bc:7f:8e:fe:3e:20:9e:8d:ac:64:9d:a9:1b:87:b6: 27:88:f0:02:70:81:ea:71:9f:c8:b3:db:23:45:9b:0d:a8:a0: 0c:08:19:d3:0b:90:83:aa:56:2e:49:d1:a3:95:2e:6e:96:d4: dc:28:9a:68:c6:a6:62:49:81:f5:8c:a3:dd:a6:af:a0:b8:5d: 00:d6:3a:65:fa:e4:47:78:6e:00:c6:cc:ef:93:f2:92:bf:56: 2d:77:3d:43 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzREMDExMC8GA1UEBRMoRTA2RkU4NDFDNkJCNDk4QTFGQkY2N0VFM0FBOEM4QTlD NTM4N0QwRjAeFw0yNTAxMDkwNTIwNDZaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2Y1Y2FlLTYxMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbE/uxLHVenWEfV9jvMtq4YgDMk8RM0D1imkvEGeN+Od1sSrSEmpJEJe90zBIh FoxPb+SL0t2/xyyq4hVa0Lp8HwM3Kvt760epxqjYdGex/dFDcpezD653UTy9tu/G 1278LATxxh7sOgksf8bnD2tH+AyGedqLy+47ulYB9ea3kGJ3NXkG7c3YrDSKSzjY j7CG3d4iGRyjhwJEQDm7qLMycZzH2UzZYQOQJFwVQRobSLbsA1cjxMHZqRioLYv/ tYXTBLneuYqmHS1yp8bMxUhKkaFn51PiNp1RO6kOp0Nq6VIKj4SPh13cmJH11thf l3LRA4n8hCBIJf60+Cqpk4qTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9C7/q2Jd NQ/gTyDAaQb9oXjB5+IwHwYDVR0jBBgwFoAU4G/oQca7SYofv2fuOqjIqcU4fQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNEQwL0VDRjgwRjg2NDVC NzExRUZBM0Q5QTA0OUM0RjlBRTAyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNEdfb1FjYTdTWW9mdjJmdU9xaklxY1U0ZlE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9FQ0Y4MEY4NjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80N0M1MzJEMDQ1 QjkxMUVGOTM2MzMwNzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0KkjANBgkqhkiG9w0BAQsFAAOCAQEA0/mi7QVSaDLbRMgG cS5t+rQMxo21fQruSqeYa/Dh28ThEzlxuo96dqWwMAMT+Btvnxz9tzQXH3IBBmL1 7FOA3aqnFu0OcbUp6PaADqTyaw+3esIWYNP58KVvIIQURPvyH3w2J16WVqEQvyes znXwgn/iCj2x+cHv+k84wjbGcJCjxJ5HqX+5FD7vOyfNFLElyb00eK1ip2QcK1dy jtFtGAvcYMaxvH+O/j4gno2sZJ2pG4e2J4jwAnCB6nGfyLPbI0WbDaigDAgZ0wuQ g6pWLknRo5UubpbU3CiaaMamYkmB9Yyj3aavoLhdANY6ZfrkR3huAMbM75Pykr9W LXc9Qw== -----END CERTIFICATE-----Generated at Sat Apr 5 21:20:59 2025 by rpki-client