$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/A146F2C2ECD011EE8891034AC4F9AE02.roa File: A146F2C2ECD011EE8891034AC4F9AE02.roa (raw, json) Hash identifier: 39u+3z7NTrOVqsJcMoLGpjbEQiERAqJS+HnJZxNpbpg= Subject key identifier: CE:5C:1C:0E:B4:EB:54:76:33:62:FB:29:4B:F7:84:A5:D7:BD:87:2A Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Certificate serial: AF Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/A146F2C2ECD011EE8891034AC4F9AE02.roa Signing time: Sat 01 Mar 2025 08:08:39 +0000 ROA not before: Sat 01 Mar 2025 08:08:38 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138467 IP address blocks: 157.10.6.0/24 maxlen: 24 157.10.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989 Validity Not Before: Mar 1 08:08:38 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67c2c086-8502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:95:87:34:dd:ab:1a:9d:ae:e4:ce:22:fe:78: 76:9b:17:c2:cd:13:4f:07:b4:57:eb:18:e0:35:aa: f9:c8:19:f4:22:2d:a8:29:be:f6:d7:20:8b:77:57: d1:d1:62:65:48:6a:6d:d1:20:88:2b:be:d6:42:3f: b0:e4:cb:f5:9c:dd:74:b7:cf:b7:fe:7b:d2:c6:60: 05:d2:4a:56:3e:f2:96:e3:81:2b:2d:4c:f7:a4:5c: 28:91:4b:c0:1c:de:7c:8d:90:6c:1d:a7:f9:a2:09: 82:22:3c:71:bf:71:b9:03:2a:49:9c:8c:ca:be:6c: 72:f8:8d:a7:b3:56:98:fb:a4:2a:10:e0:26:ce:4a: e2:8d:8c:6f:f0:26:4e:b3:ce:be:7e:bb:0d:75:8f: ad:17:23:17:99:43:f8:b0:db:29:d6:de:31:75:eb: 75:52:5e:97:aa:8a:86:29:cf:3c:a4:4a:46:fb:b0: 07:17:22:bf:ea:15:1f:9a:d9:6f:49:d4:1e:42:ce: d8:84:72:3c:f0:12:86:ba:ba:3f:4e:d8:e0:6a:68: a4:2c:55:d3:00:90:be:29:50:ce:b2:98:15:3c:02: 5d:ec:cd:19:31:fc:63:24:e5:77:2d:f6:36:87:d2: 36:af:e7:88:e9:2f:4e:80:66:45:02:1b:01:d4:bc: 8b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5C:1C:0E:B4:EB:54:76:33:62:FB:29:4B:F7:84:A5:D7:BD:87:2A X509v3 Authority Key Identifier: keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/A146F2C2ECD011EE8891034AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.6.0/23 Signature Algorithm: sha256WithRSAEncryption 92:51:73:2b:db:d4:ba:d2:a0:1c:ed:3e:54:1d:ec:7c:ab:28: 14:87:13:c7:f0:0b:78:fe:60:bf:c3:fa:1f:d1:99:b9:45:b3: 6b:ee:c5:3d:6f:29:f2:80:06:86:d4:90:25:08:f7:97:c9:5c: 0a:26:df:90:c0:6d:41:45:05:ad:9a:cc:fb:89:ad:87:24:57: 52:a4:8a:1d:5a:1e:23:f4:12:bb:e0:86:85:0f:ef:1b:6e:ca: 5b:5a:9a:29:c9:ba:2d:57:b9:f1:f0:ae:e5:c9:a8:52:31:c8: b4:2b:76:d0:cf:52:77:b0:36:a8:6d:78:69:5f:6a:9f:50:17: c8:54:b2:d3:0f:5e:16:8b:f5:51:ac:8b:7d:4d:75:25:b6:e9: 63:29:07:e1:a4:ae:89:0e:01:0e:02:20:c0:18:ac:53:7c:d0: 27:95:35:a0:68:dd:b7:49:e2:11:26:b2:cf:c5:78:6e:6b:91: 7a:e6:94:08:04:54:bd:0d:a6:42:4e:98:86:0b:cc:61:0c:3e: f1:ac:56:21:c6:85:bd:32:db:14:d2:18:d2:1d:ce:ac:02:5b: 53:16:d1:bb:11:17:f0:bc:5d:6d:66:e7:ff:96:4a:ee:df:f6: cc:e9:32:da:e5:8b:92:db:dd:4f:e0:5f:53:95:6d:e8:a4:74: fb:ae:95:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG MkE1RjZGQkIwHhcNMjUwMzAxMDgwODM4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyYzA4Ni04NTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZWHNN2rGp2u5M4i/nh2mxfCzRNPB7RX6xjgNar5yBn0Ii2oKb721yCLd1fR 0WJlSGpt0SCIK77WQj+w5Mv1nN10t8+3/nvSxmAF0kpWPvKW44ErLUz3pFwokUvA HN58jZBsHaf5ogmCIjxxv3G5AypJnIzKvmxy+I2ns1aY+6QqEOAmzkrijYxv8CZO s86+frsNdY+tFyMXmUP4sNsp1t4xdet1Ul6XqoqGKc88pEpG+7AHFyK/6hUfmtlv SdQeQs7YhHI88BKGuro/TtjgamikLFXTAJC+KVDOspgVPAJd7M0ZMfxjJOV3LfY2 h9I2r+eI6S9OgGZFAhsB1LyLtQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM5cHA60 61R2M2L7KUv3hKXXvYcqMB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjM5ODkvMzE2MUMzN0VFQ0QwMTFFRThBMjI0RDQ5QzRGOUFFMDIvQTE0NkYyQzJF Q0QwMTFFRTg4OTEwMzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCgYwDQYJKoZIhvcNAQELBQADggEBAJJRcyvb1LrSoBzt PlQd7HyrKBSHE8fwC3j+YL/D+h/RmblFs2vuxT1vKfKABobUkCUI95fJXAom35DA bUFFBa2azPuJrYckV1Kkih1aHiP0ErvghoUP7xtuyltaminJui1XufHwruXJqFIx yLQrdtDPUnewNqhteGlfap9QF8hUstMPXhaL9VGsi31NdSW26WMpB+GkrokOAQ4C IMAYrFN80CeVNaBo3bdJ4hEmss/FeG5rkXrmlAgEVL0NpkJOmIYLzGEMPvGsViHG hb0y2xTSGNIdzqwCW1MW0bsRF/C8XW1m5/+WSu7f9szpMtrli5Lb3U/gX1OVbeik dPuulVk= -----END CERTIFICATE-----Generated at Sun Apr 6 01:46:42 2025 by rpki-client