$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/0423873AD9C511EEA944FA80C4F9AE02.roa File: 0423873AD9C511EEA944FA80C4F9AE02.roa (raw, json) Hash identifier: q9sVPpnGHT0TBWPu4k07DgCGJ80E6prLVfQ+m+J3OXE= Subject key identifier: A4:27:8B:43:09:74:57:B9:D0:04:26:D8:98:4A:21:A5:69:9D:F9:45 Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Certificate serial: D2 Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/0423873AD9C511EEA944FA80C4F9AE02.roa Signing time: Tue 11 Mar 2025 04:52:33 +0000 ROA not before: Tue 11 Mar 2025 04:52:33 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 5068 IP address blocks: 157.15.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936 Validity Not Before: Mar 11 04:52:33 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67cfc191-bc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:4c:8c:cf:f0:9e:da:e8:54:50:58:c1:68: 1c:ea:81:71:f5:6f:b1:24:b0:bf:94:96:8b:43:a9: 21:53:f9:68:7c:48:b7:da:89:3b:a6:a0:b5:7e:26: 70:12:bf:4e:3d:05:dc:33:3e:cd:71:a3:da:44:1d: 00:aa:c5:5d:a2:0d:ac:f7:2d:51:6f:41:b2:91:44: c0:de:7e:55:0e:79:66:6e:fc:ea:9e:9e:1d:31:02: bc:3f:e6:13:96:31:cd:c0:16:17:20:8c:b5:b5:8f: f1:42:f3:ce:e2:b5:15:73:80:ec:e2:17:19:ab:1f: e5:3d:e5:11:0c:a4:74:f9:24:7c:d8:93:b6:2b:00: 96:7d:ba:17:8c:81:a1:2b:d5:c9:00:a6:8b:4b:a6: df:84:9f:b4:5b:da:5d:ee:c7:a4:23:a3:19:ca:f5: ce:b5:ed:f2:1a:4d:d9:15:9b:e7:1d:1f:f4:79:9d: f6:ae:e2:84:f4:7a:d5:55:be:db:86:f2:bc:f3:42: 27:d4:24:ef:4a:a8:c4:6b:aa:4f:4b:8c:b0:28:f5: 29:61:09:b2:24:e7:fa:ae:5c:96:e6:4d:97:e4:4d: 8e:3d:08:60:d5:ea:ab:60:4c:dd:96:5d:50:38:a5: d1:0c:b9:9a:cc:f0:3a:f1:39:9b:df:8a:6e:0a:43: ca:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:27:8B:43:09:74:57:B9:D0:04:26:D8:98:4A:21:A5:69:9D:F9:45 X509v3 Authority Key Identifier: keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/0423873AD9C511EEA944FA80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.28.0/23 Signature Algorithm: sha256WithRSAEncryption 04:87:1e:2c:4e:16:ed:1c:d9:b9:3b:48:3e:cd:3c:c0:80:5e: f1:7d:d2:9b:05:44:8a:0f:fb:85:47:72:b5:af:de:fb:03:db: 7d:df:cc:16:a0:71:5f:cb:f7:37:3c:be:7f:eb:e2:ce:7b:b9: 2e:40:d3:1c:8e:c9:10:65:c8:e5:c5:76:9d:fd:46:4b:47:c1: 3d:2e:fb:47:57:b0:7c:46:ce:ef:51:31:7d:cf:bd:a5:7c:95: 8e:d5:17:43:0a:f0:82:cc:5d:40:d5:46:75:db:f4:76:ac:fa: f7:18:03:14:b2:63:b0:a0:1d:7d:e9:f6:77:1e:31:64:99:6a: bb:2f:fa:49:af:5a:aa:11:b0:ce:2b:3b:16:c6:ef:f2:d1:25: f6:d4:ba:9a:86:48:8f:5d:61:2c:2e:b5:c1:5f:4c:30:05:37: f3:6c:a8:e0:bb:c2:cd:c1:0e:09:c7:cd:dc:56:8b:fa:ad:26: aa:56:01:4e:e9:30:0b:21:dd:e6:84:a6:55:89:bd:c7:12:6b: 06:25:f8:85:13:bd:c8:d9:cc:ed:31:0a:9e:1a:94:2f:08:df: 1f:80:b3:9c:e1:da:ae:1e:80:1e:c3:ec:77:b6:87:01:37:d5: 00:83:fd:1f:65:f2:c6:17:8e:62:6c:4b:96:22:b1:ce:fc:2c: 59:e7:1c:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDVCNUNDNDAzMDlBMDdDMDNERjBCNjMwNEZDRDg0MEY5 NTBCRkIwNDEwHhcNMjUwMzExMDQ1MjMzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmYzE5MS1iYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLRMjM/wntroVFBYwWgc6oFx9W+xJLC/lJaLQ6khU/lofEi32ok7pqC1fiZw Er9OPQXcMz7NcaPaRB0AqsVdog2s9y1Rb0GykUTA3n5VDnlmbvzqnp4dMQK8P+YT ljHNwBYXIIy1tY/xQvPO4rUVc4Ds4hcZqx/lPeURDKR0+SR82JO2KwCWfboXjIGh K9XJAKaLS6bfhJ+0W9pd7sekI6MZyvXOte3yGk3ZFZvnHR/0eZ32ruKE9HrVVb7b hvK880In1CTvSqjEa6pPS4ywKPUpYQmyJOf6rlyW5k2X5E2OPQhg1eqrYEzdll1Q OKXRDLmazPA68Tmb34puCkPKSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKQni0MJ dFe50AQm2JhKIaVpnflFMB8GA1UdIwQYMBaAFFtcxAMJoHwD3wtjBPzYQPlQv7BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi82RUI5QzAzRUM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZBUGZDMk1FX05oQS1WQ19z RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxekVBd21nZkFQZkMyTUVfTmhBLVZDX3NFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE5MzYvNkVCOUMwM0VDNjM2MTFFRUFCQ0MwNDBCQzRGOUFFMDIvMDQyMzg3M0FE OUM1MTFFRUE5NDRGQTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdDxwwDQYJKoZIhvcNAQELBQADggEBAASHHixOFu0c2bk7 SD7NPMCAXvF90psFRIoP+4VHcrWv3vsD233fzBagcV/L9zc8vn/r4s57uS5A0xyO yRBlyOXFdp39RktHwT0u+0dXsHxGzu9RMX3PvaV8lY7VF0MK8ILMXUDVRnXb9Has +vcYAxSyY7CgHX3p9nceMWSZarsv+kmvWqoRsM4rOxbG7/LRJfbUupqGSI9dYSwu tcFfTDAFN/NsqOC7ws3BDgnHzdxWi/qtJqpWAU7pMAsh3eaEplWJvccSawYl+IUT vcjZzO0xCp4alC8I3x+As5zh2q4egB7D7He2hwE31QCD/R9l8sYXjmJsS5Yisc78 LFnnHO8= -----END CERTIFICATE-----Generated at Sun Apr 6 00:20:36 2025 by rpki-client