$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/00E1AC30FBAA11EE9C7F3921C4F9AE02.roa File: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (raw, json) Hash identifier: 29v8ayhOME61rr4geagSM3a8sHvyVhtwUdXNMoV9ZDA= Subject key identifier: D6:FE:10:20:6C:5E:46:96:C3:81:B4:C7:25:E6:FE:59:0B:96:7D:DD Certificate issuer: /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Certificate serial: E7 Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/00E1AC30FBAA11EE9C7F3921C4F9AE02.roa Signing time: Thu 13 Mar 2025 04:01:14 +0000 ROA not before: Thu 13 Mar 2025 04:01:14 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9230 IP address blocks: 157.20.54.0/23 maxlen: 23 157.20.54.0/24 maxlen: 24 157.20.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D Validity Not Before: Mar 13 04:01:14 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67d2588a-9666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:30:fa:93:00:74:2f:9a:d8:68:12:5f:c5:29: 6c:f4:54:c6:f5:c7:fd:58:6e:87:34:6f:a2:fd:3e: 81:ff:51:73:ad:e2:8c:14:a3:9a:7f:df:bd:76:1f: ca:66:5c:ea:6e:b1:d6:3e:c4:90:e1:6a:eb:d8:2c: cb:b7:c4:e8:b6:9b:74:07:e6:7a:5c:6a:d0:0a:7f: c8:f7:a6:7a:de:8c:bd:f4:8d:7f:bd:92:d1:d6:85: 26:2a:72:36:77:1e:c8:0d:6a:2b:be:65:69:24:06: e5:46:3e:27:7b:e3:44:26:d0:6e:ea:c5:fd:42:53: 45:e1:41:fb:7f:09:2b:16:17:98:36:23:5a:b0:fa: d6:3e:4d:9c:71:7d:e9:ae:af:0a:62:af:77:33:0b: c3:f2:5b:b2:e9:5d:fc:16:0b:09:36:c5:86:8f:2f: 8e:3f:7d:a9:2d:72:45:1b:30:ed:59:6b:12:c0:33: a0:1e:1a:be:e4:87:12:e7:49:15:fc:79:62:59:b3: 2d:5c:03:64:89:2e:fa:dd:ff:15:70:71:08:68:62: 8a:f2:03:6a:cf:6e:8c:8e:04:2e:6a:86:57:fe:94: c1:36:47:33:ba:b3:61:a7:3b:a2:09:da:e7:09:95: d7:46:12:9c:dc:b2:9f:29:6a:35:72:ea:08:45:6e: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FE:10:20:6C:5E:46:96:C3:81:B4:C7:25:E6:FE:59:0B:96:7D:DD X509v3 Authority Key Identifier: keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/00E1AC30FBAA11EE9C7F3921C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.54.0/23 Signature Algorithm: sha256WithRSAEncryption 95:0f:a7:ce:12:d0:69:8c:2a:09:3b:ac:a8:6f:33:d3:62:8b: 43:6a:ae:e4:a5:09:08:45:60:8d:ef:9c:fc:cd:87:af:b6:10: 9e:48:66:74:4c:cf:ae:00:07:a9:56:39:ca:f0:4f:cc:0d:ea: 60:ad:5f:02:56:69:e0:ce:ae:11:0e:c3:f7:7d:4f:9b:e6:d5: 62:0e:e9:11:8e:d3:cd:06:46:41:19:6a:70:7e:5e:91:fa:18: 28:df:7c:a7:43:ec:c0:76:14:2d:d9:36:9b:5a:b4:29:57:94: 52:ec:4c:64:4d:fb:d9:e6:00:83:84:7c:7a:87:ad:9b:c9:70: da:b6:be:b9:eb:da:b2:5f:29:e5:b7:76:96:48:2e:19:d1:80: 3e:88:96:b3:a3:8f:16:a5:76:cc:fa:b3:f7:b7:d3:54:fc:4a: 6d:ee:d5:02:40:24:26:b9:f2:48:0a:1e:df:ec:f1:2d:9e:0f: 8a:c3:bb:a0:64:83:83:a3:38:93:1f:a7:e6:10:48:88:a7:46: 8d:16:ef:9c:30:c8:73:62:c7:bc:ae:27:8b:ff:96:92:6f:57: 27:10:1d:c1:e6:7a:ad:bb:38:2e:a0:07:2c:73:0d:86:dc:84: e7:0f:f2:e6:27:a5:81:0c:2f:de:08:5b:0f:69:5f:7f:03:31: 71:f8:d9:e5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0QxMTAvBgNVBAUTKDlBODlCQjM3QzU0Mzg2REE5QTg3QTY0RkYwMDk0NDI4 QTMxNzFBNDcwHhcNMjUwMzEzMDQwMTE0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2QyNTg4YS05NjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jD6kwB0L5rYaBJfxSls9FTG9cf9WG6HNG+i/T6B/1FzreKMFKOaf9+9dh/K ZlzqbrHWPsSQ4Wrr2CzLt8Totpt0B+Z6XGrQCn/I96Z63oy99I1/vZLR1oUmKnI2 dx7IDWorvmVpJAblRj4ne+NEJtBu6sX9QlNF4UH7fwkrFheYNiNasPrWPk2ccX3p rq8KYq93MwvD8luy6V38FgsJNsWGjy+OP32pLXJFGzDtWWsSwDOgHhq+5IcS50kV /HliWbMtXANkiS763f8VcHEIaGKK8gNqz26MjgQuaoZX/pTBNkczurNhpzuiCdrn CZXXRhKc3LKfKWo1cuoIRW5WLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNb+ECBs XkaWw4G0xyXm/lkLln3dMB8GA1UdIwQYMBaAFJqJuzfFQ4bamoemT/AJRCijFxpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9DOTJCMzIzMkNF MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9tb203TjhWRGh0cWFoNlpQOEFsRUtLTVhH a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21vbTdOOFZEaHRxYWg2WlA4QWxFS0tNWEdrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUY3M0QvQzkyQjMyMzJDRTFGMTFFRUFDNjI2MTdDQzRGOUFFMDIvMDBFMUFDMzBG QkFBMTFFRTlDN0YzOTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFDYwDQYJKoZIhvcNAQELBQADggEBAJUPp84S0GmMKgk7 rKhvM9Nii0NqruSlCQhFYI3vnPzNh6+2EJ5IZnRMz64AB6lWOcrwT8wN6mCtXwJW aeDOrhEOw/d9T5vm1WIO6RGO080GRkEZanB+XpH6GCjffKdD7MB2FC3ZNptatClX lFLsTGRN+9nmAIOEfHqHrZvJcNq2vrnr2rJfKeW3dpZILhnRgD6IlrOjjxaldsz6 s/e301T8Sm3u1QJAJCa58kgKHt/s8S2eD4rDu6Bkg4OjOJMfp+YQSIinRo0W75ww yHNix7yuJ4v/lpJvVycQHcHmeq27OC6gByxzDYbchOcP8uYnpYEML94IWw9pX38D MXH42eU= -----END CERTIFICATE-----Generated at Sun Apr 6 04:37:19 2025 by rpki-client