$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/160ADCACE34A11EFA6960F0CC4F9AE02.roa File: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (raw, json) Hash identifier: 526NqZNO2IONfhqjyZNRFm9JBl0LNY6d+qw7jpg0a3U= Subject key identifier: 9D:37:CB:0F:A3:02:DA:4E:6F:E8:D3:DC:A7:34:36:EC:1B:71:56:DB Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Certificate serial: 07E6 Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/160ADCACE34A11EFA6960F0CC4F9AE02.roa Signing time: Tue 04 Feb 2025 22:48:01 +0000 ROA not before: Tue 04 Feb 2025 22:48:01 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138657 IP address blocks: 203.32.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 20:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Validity Not Before: Feb 4 22:48:01 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67a29921-4853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:7a:3b:c6:46:88:c9:94:e1:c2:67:2e:cf: 23:ae:91:14:fb:63:f8:1b:3e:73:44:e4:46:ae:0c: 46:03:0b:a2:bc:4f:66:b6:4a:2d:16:95:29:60:91: 85:0d:b9:3b:11:f6:62:38:60:1f:85:31:a4:b3:70: c8:15:b1:b0:18:36:3a:7a:dd:af:fd:e7:ce:7c:59: 20:90:ee:65:df:ac:59:df:38:d6:94:77:94:71:a9: ef:23:db:08:48:77:98:8f:b9:72:29:dd:e3:22:b4: da:c5:e9:ae:1b:c5:4b:88:bf:fc:e6:70:37:b6:3e: 31:93:29:6a:70:e4:eb:e5:d8:a8:17:3d:5c:46:cf: 6f:4e:53:1b:1e:83:32:3f:a9:e7:30:ed:ae:fe:2a: f0:10:8c:c3:96:af:83:df:01:ab:15:4a:12:98:86: a5:0f:b1:30:e6:70:c5:f8:07:ad:b2:e0:97:c3:c5: ba:37:f8:39:ea:2a:92:fe:47:9e:4c:d5:ca:58:68: 9c:3b:44:61:ad:87:5f:2d:30:c0:c8:74:4d:7f:a9: 39:7f:71:a6:a3:65:17:83:7c:62:b3:57:62:3f:e7: 0e:09:bd:e8:7f:cd:e0:00:da:04:ac:16:34:a0:15: 67:95:be:36:78:39:41:88:c6:8a:7a:98:54:02:30: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:37:CB:0F:A3:02:DA:4E:6F:E8:D3:DC:A7:34:36:EC:1B:71:56:DB X509v3 Authority Key Identifier: keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/160ADCACE34A11EFA6960F0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.32.27.0/24 Signature Algorithm: sha256WithRSAEncryption aa:1a:12:27:10:08:24:39:dd:4f:66:a9:84:e1:68:9d:f5:59: 95:85:f2:58:20:7f:d2:e5:8a:ed:88:ef:f6:46:07:ac:95:27: 6b:49:a7:e1:d9:3b:be:fd:4f:04:c3:cb:e0:b1:be:7e:0c:ce: 2b:1a:b7:55:5e:80:ea:3b:7b:95:8e:43:c3:8e:b0:21:a2:a6: c1:41:dd:d0:71:ef:dc:de:71:4c:99:d7:92:a7:67:25:33:b9: 6a:37:18:85:b9:07:7f:ef:ff:18:d5:83:c6:db:13:39:d3:f4: f1:7e:64:1b:49:66:c8:12:f2:c2:8a:bd:aa:26:22:67:0d:62: 93:67:12:18:88:05:b3:46:10:9b:94:95:65:93:75:9c:a9:61: 6b:59:f5:3b:c4:f4:32:17:37:45:be:d5:25:64:d5:aa:a5:b9: bc:4a:20:a6:28:47:77:2f:a8:7f:03:76:4d:52:24:76:c6:72: 1b:e0:d6:fe:c4:0d:a5:49:94:fd:5b:f0:72:79:f2:d7:f4:f5: 26:80:7f:26:17:b6:8c:d4:54:b8:e6:b4:b8:c4:bc:1d:49:e6: 6d:81:7d:ce:d3:dd:13:2c:3a:24:b9:46:60:8b:5b:c5:75:8c: 49:27:2b:90:16:80:60:74:ec:74:af:54:84:b2:34:5e:f5:7b: 32:b6:a7:d7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY5NDAxMTAvBgNVBAUTKEJENzU2OERDNDQ5MzcyRkUyMkMyRUM5RUI3NzJCN0Q2 RTgyRDJBODAwHhcNMjUwMjA0MjI0ODAxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyOTkyMS00ODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsil6O8ZGiMmU4cJnLs8jrpEU+2P4Gz5zRORGrgxGAwuivE9mtkotFpUpYJGF Dbk7EfZiOGAfhTGks3DIFbGwGDY6et2v/efOfFkgkO5l36xZ3zjWlHeUcanvI9sI SHeYj7lyKd3jIrTaxemuG8VLiL/85nA3tj4xkylqcOTr5dioFz1cRs9vTlMbHoMy P6nnMO2u/irwEIzDlq+D3wGrFUoSmIalD7Ew5nDF+AetsuCXw8W6N/g56iqS/kee TNXKWGicO0RhrYdfLTDAyHRNf6k5f3Gmo2UXg3xis1diP+cOCb3of83gANoErBY0 oBVnlb42eDlBiMaKephUAjDBjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ03yw+j AtpOb+jT3Kc0NuwbcVbbMB8GA1UdIwQYMBaAFL11aNxEk3L+IsLsnrdyt9boLSqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjk0MC9FMEQwNkI4MkQ3 N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2NGl3dXlldDNLMzF1Z3RL b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYVm8zRVNUY3Y0aXd1eWV0M0szMXVndEtvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDY5NDAvRTBEMDZCODJENzdFMTFFQThFRTYxQjMyQzRGOUFFMDIvMTYwQURDQUNF MzRBMTFFRkE2OTYwRjBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLIBswDQYJKoZIhvcNAQELBQADggEBAKoaEicQCCQ53U9m qYThaJ31WZWF8lggf9Lliu2I7/ZGB6yVJ2tJp+HZO779TwTDy+Cxvn4Mzisat1Ve gOo7e5WOQ8OOsCGipsFB3dBx79zecUyZ15KnZyUzuWo3GIW5B3/v/xjVg8bbEznT 9PF+ZBtJZsgS8sKKvaomImcNYpNnEhiIBbNGEJuUlWWTdZypYWtZ9TvE9DIXN0W+ 1SVk1aqlubxKIKYoR3cvqH8Ddk1SJHbGchvg1v7EDaVJlP1b8HJ58tf09SaAfyYX tozUVLjmtLjEvB1J5m2Bfc7T3RMsOiS5RmCLW8V1jEknK5AWgGB07HSvVISyNF71 ezK2p9c= -----END CERTIFICATE-----Generated at Sun Apr 13 02:24:00 2025 by rpki-client