$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/4A4E595AC91C11EFB0DEB92DC4F9AE02.roa File: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (raw, json) Hash identifier: HYfNBrw+oBYJTv3EK6ZW0QGVMQFBO/Tp09If6c2XiUQ= Subject key identifier: 10:81:D4:B2:6F:8C:73:0E:BA:24:C7:B3:B9:55:6E:E3:A6:BE:1B:CA Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Certificate serial: 37 Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/4A4E595AC91C11EFB0DEB92DC4F9AE02.roa Signing time: Thu 27 Mar 2025 07:13:31 +0000 ROA not before: Thu 27 Mar 2025 07:13:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152678 IP address blocks: 119.160.214.0/24 maxlen: 24 119.160.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08A5 Validity Not Before: Mar 27 07:13:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67e4fa9a-a19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:df:4c:cb:a8:53:a8:86:e1:9a:2e:cc:2c:54: be:71:64:da:87:47:18:41:ca:31:63:a0:09:a6:2f: 38:64:b8:44:07:32:76:73:4f:91:7a:79:28:be:68: 6b:54:8c:60:44:70:b3:ad:da:2f:b1:14:24:90:7e: 9f:01:3b:34:b2:45:bf:6f:1d:9e:a5:e8:a0:05:82: 19:89:fb:96:69:56:27:92:ca:ad:fc:13:94:82:f5: d9:4d:2f:e4:85:b3:48:e4:94:9d:1a:73:09:e5:af: f8:08:22:40:cd:45:f2:59:7b:20:80:69:2b:b4:5a: 9b:27:b1:b8:54:81:0a:63:05:35:40:67:ed:5d:00: ec:9c:58:f6:5b:58:b6:0a:20:4e:3f:26:de:be:0d: 5e:ad:f9:46:08:f9:6b:8c:b9:b5:97:6f:9e:2b:3f: aa:74:a5:42:62:ac:87:df:1c:d0:83:a5:aa:79:6d: 30:7f:c3:3e:4f:52:e9:84:57:2a:c2:73:b7:dc:d9: 30:62:e1:d8:88:f9:74:63:a3:47:ce:2a:88:bf:71: 94:d2:bb:33:6a:97:3a:b0:be:db:1e:4c:dd:4c:82: cd:cf:24:1c:f6:29:bb:13:8e:fc:02:85:80:18:42: 2f:77:ac:7f:bd:1b:f9:4a:1b:d4:a8:a9:30:25:ee: db:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:81:D4:B2:6F:8C:73:0E:BA:24:C7:B3:B9:55:6E:E3:A6:BE:1B:CA X509v3 Authority Key Identifier: keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/4A4E595AC91C11EFB0DEB92DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.160.214.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:f1:20:60:d5:a5:52:96:3e:fa:dc:1e:1f:0e:89:f9:b2:a9: 24:11:14:e2:26:38:2e:d8:09:4a:2c:2d:15:24:0c:79:10:ef: a8:40:e0:8a:ae:f3:07:e4:a3:60:3b:8e:51:27:41:1f:67:10: f9:fa:55:55:cd:32:de:41:3b:80:ac:df:cf:c8:8e:f4:8b:7b: c3:28:b1:66:dd:c5:17:ab:16:6e:2a:a6:c5:84:06:59:22:81: 60:99:8d:c9:d4:fa:67:06:7b:45:ed:ad:95:ff:f1:e7:0e:b2: 80:13:6b:f2:23:9c:9d:8d:23:bf:47:18:8f:74:68:9d:bf:fa: 1f:35:bc:f8:d8:52:84:1e:2a:4e:86:0f:d8:86:41:00:ca:23: cd:0c:7b:b9:a0:16:41:6e:86:9c:2b:6b:89:6b:f2:ca:0e:b2: 01:1a:3e:ad:88:80:88:4d:08:6b:1d:d5:9e:30:f2:ee:ce:f4: fe:0b:25:cb:75:a3:f3:41:0f:cf:5a:f1:cd:71:36:01:8b:29: 8a:4e:e3:c2:3a:26:f5:ce:e8:5c:ce:e6:2d:17:36:52:96:e4: b7:bc:99:77:26:5f:21:df:8a:d0:b9:59:da:eb:29:e3:03:5d: a0:39:b5:31:73:85:92:4e:57:85:8b:73:60:33:82:f2:90:47: ff:5e:03:82 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDhBNTExMC8GA1UEBRMoODVFOEVFOUE4RDMwNTI4NTk5MDYyRDA4Q0I5Q0I5RDUx M0RGNkJENzAeFw0yNTAzMjcwNzEzMzFaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTRmYTlhLWExOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDy30zLqFOohuGaLswsVL5xZNqHRxhByjFjoAmmLzhkuEQHMnZzT5F6eSi+aGtU jGBEcLOt2i+xFCSQfp8BOzSyRb9vHZ6l6KAFghmJ+5ZpVieSyq38E5SC9dlNL+SF s0jklJ0acwnlr/gIIkDNRfJZeyCAaSu0WpsnsbhUgQpjBTVAZ+1dAOycWPZbWLYK IE4/Jt6+DV6t+UYI+WuMubWXb54rP6p0pUJirIffHNCDpap5bTB/wz5PUumEVyrC c7fc2TBi4diI+XRjo0fOKoi/cZTSuzNqlzqwvtseTN1Mgs3PJBz2KbsTjvwChYAY Qi93rH+9G/lKG9SoqTAl7ts/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUEIHUsm+M cw66JMezuVVu46a+G8owHwYDVR0jBBgwFoAUhejumo0wUoWZBi0Iy5y51RPfa9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEE1L0QxNTAzMTM2Qzkx QjExRUY4ODdENkYyQ0M0RjlBRTAyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGVqdW1vMHdVb1daQmkwSXk1eTUxUlBmYTljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhBNS9EMTUwMzEzNkM5MUIxMUVGODg3RDZGMkNDNEY5QUUwMi80QTRFNTk1QUM5 MUMxMUVGQjBERUI5MkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAXeg1jANBgkqhkiG9w0BAQsFAAOCAQEAavEgYNWlUpY++twe Hw6J+bKpJBEU4iY4LtgJSiwtFSQMeRDvqEDgiq7zB+SjYDuOUSdBH2cQ+fpVVc0y 3kE7gKzfz8iO9It7wyixZt3FF6sWbiqmxYQGWSKBYJmNydT6ZwZ7Re2tlf/x5w6y gBNr8iOcnY0jv0cYj3Ronb/6HzW8+NhShB4qToYP2IZBAMojzQx7uaAWQW6GnCtr iWvyyg6yARo+rYiAiE0Iax3VnjDy7s70/gsly3Wj80EPz1rxzXE2AYspik7jwjom 9c7oXM7mLRc2Upbkt7yZdyZfId+K0LlZ2usp4wNdoDm1MXOFkk5XhYtzYDOC8pBH /14Dgg== -----END CERTIFICATE-----Generated at Sat Apr 5 02:03:02 2025 by rpki-client