$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/4C51E1D4F7E511EF9A28D363C4F9AE02.roa File: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (raw, json) Hash identifier: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE= Subject key identifier: FA:0C:8C:4C:22:9E:6B:B4:70:5E:00:0B:F8:94:D1:E5:13:58:66:F3 Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Certificate serial: 06 Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/4C51E1D4F7E511EF9A28D363C4F9AE02.roa Signing time: Mon 03 Mar 2025 04:22:34 +0000 ROA not before: Mon 03 Mar 2025 04:22:34 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153551 IP address blocks: 161.248.246.0/23 maxlen: 23 161.248.246.0/24 maxlen: 24 161.248.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86 Validity Not Before: Mar 3 04:22:34 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c52e8a-fc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:bc:73:1b:60:42:2e:86:78:28:34:1b:80: 9a:d6:5a:5e:ec:c1:94:d8:09:84:41:60:e0:70:65: fe:10:98:3e:eb:17:cc:42:b9:aa:14:fb:8a:9c:a0: e4:7d:1a:c0:07:d6:7b:47:f8:c5:bb:58:b9:51:15: ba:1e:d3:f4:f9:4f:11:41:88:9a:58:87:2c:e7:7d: b8:31:cf:50:07:09:84:a0:26:6f:fe:57:79:26:15: da:fd:ba:3d:42:48:6a:65:33:54:59:c2:70:2e:94: af:8c:af:59:aa:01:2d:2f:0e:75:0d:95:11:e5:a5: 17:c8:c9:93:b0:62:2b:75:d7:b6:ac:5c:c9:73:d2: 41:4e:82:4f:01:9c:03:83:a9:62:56:af:19:5d:c7: e9:7b:7c:01:6f:20:2c:d5:1d:b7:8e:90:cd:4d:b4: a7:ed:69:01:6c:d0:56:a8:19:91:8b:d9:4c:05:2a: 17:fc:df:0c:70:43:1b:b9:b5:93:cb:0b:bf:c0:4c: e0:b6:f1:e7:9e:59:52:bc:d0:89:c2:5f:24:41:fb: 06:40:85:8a:36:de:53:44:e4:6a:22:b8:71:0e:3f: 1f:65:92:56:e7:54:4a:7a:79:78:51:71:99:b8:62: 0a:17:c7:64:4c:f2:b6:dd:52:70:05:2b:33:a7:26: f0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0C:8C:4C:22:9E:6B:B4:70:5E:00:0B:F8:94:D1:E5:13:58:66:F3 X509v3 Authority Key Identifier: keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/4C51E1D4F7E511EF9A28D363C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.246.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:bc:5c:43:2d:05:a5:6f:ba:b7:0c:81:b3:21:68:bb:77:32: 29:f3:86:aa:be:7a:2f:e1:eb:3a:9e:91:dd:f8:8f:19:4f:df: 4d:24:dc:fe:46:ce:cf:89:1b:3d:f0:9e:2e:6a:4d:8c:8d:e6: 43:d6:08:cf:54:01:fb:43:94:66:e4:de:41:27:ec:ec:61:df: ed:dc:fb:7c:9a:5e:65:86:fd:81:c7:1f:76:9a:03:ca:7e:38: c7:8c:fd:9e:6c:05:d4:fb:98:80:f0:aa:94:e2:df:ce:62:25: a0:64:4a:e7:25:50:9c:47:ef:61:17:db:09:b1:30:00:3e:34: 81:08:01:35:fb:f7:6e:15:21:44:63:93:4b:e8:56:87:f0:bb: 56:27:79:46:80:92:d1:09:53:b0:54:f0:db:64:d7:01:32:6d: eb:4b:6b:31:38:8d:06:19:15:18:14:b8:28:34:51:9b:69:30: af:b6:74:68:13:a3:fb:86:9d:a2:69:37:ca:29:cd:a2:d5:3f: b8:ad:f1:4d:af:9b:7c:53:98:fc:7d:1f:26:c3:8d:6e:d5:da: 39:46:7d:44:93:e1:16:12:e0:79:ca:3a:90:e9:8f:2e:df:4d: 73:c9:c5:1b:03:83:8b:00:0d:f0:51:2b:e5:a9:67:dd:db:44: 9e:22:4c:96 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEI4NjExMC8GA1UEBRMoQTVDOTg3MDI0RDBBOEVBQzA5NjQwOUZEOTlFQzMyRUM5 MDQ3MEJBMzAeFw0yNTAzMDMwNDIyMzRaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzUyZThhLWZjMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAybxzG2BCLoZ4KDQbgJrWWl7swZTYCYRBYOBwZf4QmD7rF8xCuaoU+4qcoOR9 GsAH1ntH+MW7WLlRFboe0/T5TxFBiJpYhyznfbgxz1AHCYSgJm/+V3kmFdr9uj1C SGplM1RZwnAulK+Mr1mqAS0vDnUNlRHlpRfIyZOwYit117asXMlz0kFOgk8BnAOD qWJWrxldx+l7fAFvICzVHbeOkM1NtKftaQFs0FaoGZGL2UwFKhf83wxwQxu5tZPL C7/ATOC28eeeWVK80InCXyRB+wZAhYo23lNE5GoiuHEOPx9lklbnVEp6eXhRcZm4 YgoXx2RM8rbdUnAFKzOnJvC1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU+gyMTCKe a7RwXgAL+JTR5RNYZvMwHwYDVR0jBBgwFoAUpcmHAk0KjqwJZAn9mewy7JBHC6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2Lzg5MzMxNDhBRjdF MzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGNtSEFrMEtqcXdKWkFuOW1ld3k3SkJIQzZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI4Ni84OTMzMTQ4QUY3RTMxMUVGOEFEQThBNDFDNEY5QUUwMi80QzUxRTFENEY3 RTUxMUVGOUEyOEQzNjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH49jANBgkqhkiG9w0BAQsFAAOCAQEACrxcQy0FpW+6twyB syFou3cyKfOGqr56L+HrOp6R3fiPGU/fTSTc/kbOz4kbPfCeLmpNjI3mQ9YIz1QB +0OUZuTeQSfs7GHf7dz7fJpeZYb9gccfdpoDyn44x4z9nmwF1PuYgPCqlOLfzmIl oGRK5yVQnEfvYRfbCbEwAD40gQgBNfv3bhUhRGOTS+hWh/C7Vid5RoCS0QlTsFTw 22TXATJt60trMTiNBhkVGBS4KDRRm2kwr7Z0aBOj+4adomk3yinNotU/uK3xTa+b fFOY/H0fJsONbtXaOUZ9RJPhFhLgeco6kOmPLt9Nc8nFGwODiwAN8FEr5aln3dtE niJMlg== -----END CERTIFICATE-----Generated at Sat Apr 5 16:20:49 2025 by rpki-client