$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/8BB6CB12A4D511EB9E4DF342C4F9AE02.roa File: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (raw, json) Hash identifier: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg= Subject key identifier: C3:8B:8C:3A:6E:B3:E1:FE:20:51:90:EF:10:50:EE:E8:56:F2:B4:BF Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 06DE Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/8BB6CB12A4D511EB9E4DF342C4F9AE02.roa Signing time: Fri 24 Jan 2025 22:32:05 +0000 ROA not before: Fri 24 Jan 2025 22:32:05 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 51318 IP address blocks: 166.81.32.0/24 maxlen: 24 166.81.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B Validity Not Before: Jan 24 22:32:05 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679414e4-72a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0c:c5:07:ba:28:97:8f:f5:d8:7b:94:76:e0: a3:12:f1:10:9b:05:2d:23:af:89:5e:cf:54:33:d7: e0:8a:17:8b:0e:d3:94:7d:10:a2:14:3e:7c:25:3b: 05:48:f6:09:bf:6a:33:a4:2f:24:22:0d:91:56:63: a0:12:43:39:4a:0e:d7:6d:81:df:a7:06:dd:08:85: ca:23:5a:e0:5d:62:93:24:d1:43:4b:f1:a0:5e:fe: ac:bc:80:f6:41:b0:82:07:72:82:c7:c2:85:1e:b8: cf:29:2f:1f:d0:d0:b6:6c:3d:6c:0e:17:4e:53:0f: a9:ae:5d:5f:3f:b3:cf:eb:50:2b:31:0c:a7:c4:e5: 67:81:74:08:73:5e:60:85:f9:5d:dc:65:a9:3d:3a: 91:4d:9f:0d:51:b0:61:1a:74:4d:47:f5:c3:58:ee: 0e:63:a8:25:22:dd:fc:51:23:63:61:5b:59:a5:46: 30:2a:5e:20:54:f5:ec:cf:33:a1:5e:ad:8d:f4:bc: e3:07:68:33:d0:5f:a3:c9:b0:44:b4:d5:99:16:55: 9d:7a:e1:a6:91:8b:01:ce:9b:36:28:20:fb:d4:60: f0:08:f5:fd:6c:6d:85:af:6d:18:0c:df:e4:c1:7b: 49:f9:33:1a:f3:55:d9:ba:03:a0:45:3e:73:70:4c: bb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8B:8C:3A:6E:B3:E1:FE:20:51:90:EF:10:50:EE:E8:56:F2:B4:BF X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/8BB6CB12A4D511EB9E4DF342C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 166.81.32.0/24 166.81.64.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:aa:10:d3:4a:b9:1c:d5:1e:6a:a4:23:e7:e4:9c:01:de:d7: 0a:c8:b6:80:93:3f:8b:9e:78:fe:a2:a8:e3:37:82:d8:51:ff: 94:c9:7e:82:da:a3:2e:05:e2:2e:06:3f:06:7a:9d:9e:bf:70: 80:8e:0a:ff:a1:59:61:9b:0c:01:30:8b:7b:1c:34:31:f4:90: ef:e2:8a:0d:84:ff:fb:02:eb:57:a1:60:34:74:eb:b8:7a:b3: 85:89:0d:fd:61:44:73:75:2c:2c:42:f7:db:d8:45:ff:15:1a: f8:6c:ef:de:c5:f8:50:7b:57:46:cb:dd:76:f5:0c:38:9a:87: 6e:cb:c6:5f:45:d9:71:8b:04:8e:66:61:b5:a1:6b:a6:f6:ad: f5:93:55:97:ba:5f:b2:ad:ec:cc:b2:6b:55:2d:02:84:f7:9e: c4:ab:2f:1b:4e:ee:56:c2:27:ca:f8:b0:1b:b3:ae:5f:a9:67: 5f:6b:05:9b:93:ff:e4:88:1a:28:cc:3a:59:dc:66:aa:ce:aa: ae:f3:c4:b3:24:26:c2:00:7b:cf:e2:f6:2e:4b:91:6d:c3:d4: c7:bb:b3:d8:fe:d2:a8:29:54:c1:f9:82:83:74:21:4b:c7:99: f5:54:7a:c3:f7:4d:70:fc:44:ce:3b:8e:4e:19:12:4c:a7:6f: 33:c2:f7:d1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUwMTI0MjIzMjA1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk0MTRlNC03MmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QzFB7ool4/12HuUduCjEvEQmwUtI6+JXs9UM9fgiheLDtOUfRCiFD58JTsF SPYJv2ozpC8kIg2RVmOgEkM5Sg7XbYHfpwbdCIXKI1rgXWKTJNFDS/GgXv6svID2 QbCCB3KCx8KFHrjPKS8f0NC2bD1sDhdOUw+prl1fP7PP61ArMQynxOVngXQIc15g hfld3GWpPTqRTZ8NUbBhGnRNR/XDWO4OY6glIt38USNjYVtZpUYwKl4gVPXszzOh Xq2N9LzjB2gz0F+jybBEtNWZFlWdeuGmkYsBzps2KCD71GDwCPX9bG2Fr20YDN/k wXtJ+TMa81XZugOgRT5zcEy7pwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMOLjDpu s+H+IFGQ7xBQ7uhW8rS/MB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMzMUIvRDBFQ0NENDg4OTNEMTFFQjkxNkRGMDIyQzRGOUFFMDIvOEJCNkNCMTJB NEQ1MTFFQjlFNERGMzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACmUSADBACmUUAwDQYJKoZIhvcNAQELBQADggEBAHyqENNK uRzVHmqkI+fknAHe1wrItoCTP4ueeP6iqOM3gthR/5TJfoLaoy4F4i4GPwZ6nZ6/ cICOCv+hWWGbDAEwi3scNDH0kO/iig2E//sC61ehYDR067h6s4WJDf1hRHN1LCxC 99vYRf8VGvhs797F+FB7V0bL3Xb1DDiah27Lxl9F2XGLBI5mYbWha6b2rfWTVZe6 X7Kt7Myya1UtAoT3nsSrLxtO7lbCJ8r4sBuzrl+pZ19rBZuT/+SIGijMOlncZqrO qq7zxLMkJsIAe8/i9i5LkW3D1Me7s9j+0qgpVMH5goN0IUvHmfVUesP3TXD8RM47 jk4ZEkynbzPC99E= -----END CERTIFICATE-----Generated at Sat Apr 5 19:12:59 2025 by rpki-client