$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa File: 05054224D8E411E9BEB7986DC4F9AE02.roa (raw, json) Hash identifier: C8YUnzVpdG1ic9MCuW7celmXkhXkYeCvagfWnZShYbQ= Subject key identifier: DF:F6:6E:A1:31:52:04:5B:07:C5:F2:79:78:D6:F0:45:C6:D8:AA:64 Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627 Certificate serial: 0CFF Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa Signing time: Wed 22 Jan 2025 17:56:30 +0000 ROA not before: Wed 22 Jan 2025 17:56:30 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 9930 IP address blocks: 161.142.0.0/16 maxlen: 19 192.228.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4 Validity Not Before: Jan 22 17:56:30 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6791314e-2397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d2:db:bc:14:84:ba:d4:01:66:36:f7:09:e6: 95:2c:86:35:aa:8d:4e:20:cd:78:d7:f1:c2:51:84: 72:17:c8:e7:10:d7:f9:85:be:5f:56:c2:62:91:70: 11:cc:53:4d:da:cd:00:cd:98:55:58:8c:8d:52:d2: 03:6c:34:65:e4:e2:d9:ae:3b:1f:fa:dd:7e:0e:44: 67:ed:08:9e:30:04:d0:3a:ee:4b:43:e9:b3:70:29: a4:7e:73:dd:8b:f2:84:c0:df:89:7c:8b:e8:41:2b: 56:73:d8:e8:7d:7e:79:db:68:9b:f2:16:79:04:d4: bd:7e:46:a8:0e:c7:35:51:90:e6:6f:47:26:e5:c2: df:b9:53:22:ad:7b:8e:3d:d6:55:e0:4f:33:61:35: ab:ad:fb:c4:e9:fd:3c:c3:56:f0:74:19:99:b9:7d: 3e:9d:5d:f9:88:cd:1e:6b:ff:fc:f9:84:54:3d:6e: 47:d4:ab:17:5f:ad:99:74:76:a6:e9:88:b4:e1:55: bc:5c:24:3d:bf:bb:44:dc:28:78:b3:22:c1:b4:1f: 0d:30:88:92:e4:40:7e:38:91:0f:67:b2:b6:00:ae: 48:2a:8f:04:fc:78:8e:f1:c1:d4:87:87:87:21:e3: 35:92:18:0f:ac:54:67:9d:35:be:e8:6d:c1:bb:db: c1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F6:6E:A1:31:52:04:5B:07:C5:F2:79:78:D6:F0:45:C6:D8:AA:64 X509v3 Authority Key Identifier: keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.142.0.0/16 192.228.128.0/17 Signature Algorithm: sha256WithRSAEncryption 75:71:0b:a4:0e:90:54:73:74:d5:ae:c6:38:cb:08:fc:8c:05: 31:38:e2:6a:8b:92:9a:3c:a8:ca:7c:d4:a2:0e:74:0e:56:e1: 42:29:88:01:7a:36:74:b6:aa:88:80:29:33:44:d6:47:b2:44: da:34:f8:ac:5f:92:27:fd:26:ac:1b:3d:a8:80:78:05:9b:96: 9f:58:90:9a:f9:41:95:57:8b:8f:bd:47:93:35:f5:82:41:08: 31:56:3b:f7:01:6c:2a:79:f5:0e:c6:ff:55:a2:37:e7:60:c8: 20:a3:8b:12:e1:dd:5d:1c:2d:c9:c8:e5:06:fb:99:37:4a:55: 03:b9:80:5e:94:ec:2e:76:fa:f2:27:06:d1:f0:93:08:e9:9c: 48:b5:b6:e2:bd:0c:86:90:98:5e:fb:c1:f3:59:22:e3:ec:fd: 18:87:df:ae:d2:bf:90:d6:6e:84:0f:b3:4b:52:8b:1c:17:6d: 06:b4:bf:da:3f:f6:45:39:fc:21:0d:4d:f3:a2:69:40:f9:6b: 2b:d0:32:fb:ab:4c:90:2d:20:e1:0f:cf:0b:66:03:10:fa:28: 2e:84:8b:f7:6a:19:2a:6e:5c:4e:ee:c8:86:d6:35:eb:f4:37: 1e:7e:29:72:38:e1:4d:76:5d:58:01:21:db:6a:06:48:9d:71: 77:db:12:69 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEEyRjZGNjYxMzEyQzk1QkYwNUEwQjUyMzBCMTM3MUQ0 NjIyRkQ2MjcwHhcNMjUwMTIyMTc1NjMwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkxMzE0ZS0yMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8dLbvBSEutQBZjb3CeaVLIY1qo1OIM141/HCUYRyF8jnENf5hb5fVsJikXAR zFNN2s0AzZhVWIyNUtIDbDRl5OLZrjsf+t1+DkRn7QieMATQOu5LQ+mzcCmkfnPd i/KEwN+JfIvoQStWc9jofX5522ib8hZ5BNS9fkaoDsc1UZDmb0cm5cLfuVMirXuO PdZV4E8zYTWrrfvE6f08w1bwdBmZuX0+nV35iM0ea//8+YRUPW5H1KsXX62ZdHam 6Yi04VW8XCQ9v7tE3Ch4syLBtB8NMIiS5EB+OJEPZ7K2AK5IKo8E/HiO8cHUh4eH IeM1khgPrFRnnTW+6G3Bu9vBqQIDAQABo4ICmjCCApYwHQYDVR0OBBYEFN/2bqEx UgRbB8XyeXjW8EXG2KpkMB8GA1UdIwQYMBaAFKL29mExLJW/BaC1IwsTcdRiL9Yn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yNjFEMjgzMEQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xiOEZvTFVqQ3hOeDFHSXYx aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL292YjJZVEVzbGI4Rm9MVWpDeE54MUdJdjFpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdCQzQvMjYxRDI4MzBENTBEMTFFOUJBRDZDMjI2QzRGOUFFMDIvMDUwNTQyMjRE OEU0MTFFOUJFQjc5ODZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8E FTATMBEEAgABMAsDAwChjgMEB8DkgDANBgkqhkiG9w0BAQsFAAOCAQEAdXELpA6Q VHN01a7GOMsI/IwFMTjiaouSmjyoynzUog50DlbhQimIAXo2dLaqiIApM0TWR7JE 2jT4rF+SJ/0mrBs9qIB4BZuWn1iQmvlBlVeLj71HkzX1gkEIMVY79wFsKnn1Dsb/ VaI352DIIKOLEuHdXRwtycjlBvuZN0pVA7mAXpTsLnb68icG0fCTCOmcSLW24r0M hpCYXvvB81ki4+z9GIffrtK/kNZuhA+zS1KLHBdtBrS/2j/2RTn8IQ1N86JpQPlr K9Ay+6tMkC0g4Q/PC2YDEPooLoSL92oZKm5cTu7IhtY16/Q3Hn4pcjjhTXZdWAEh 22oGSJ1xd9sSaQ== -----END CERTIFICATE-----Generated at Sat Apr 5 23:07:48 2025 by rpki-client