$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/3136302e3138372e3132352e302f32342d3234203d3e2039343936.roa File: 3136302e3138372e3132352e302f32342d3234203d3e2039343936.roa (raw, json) Hash identifier: WhqNy6vMWe7GumViS/KJCS3KPWIP584A3cKwH5/zuCE= Subject key identifier: 07:E5:AF:EC:C5:B4:3A:58:C4:69:E7:51:0F:A9:CF:86:C1:A1:E6:83 Certificate issuer: /CN=A917447B0000/serialNumber=BD435E3ED6FEEC26F879A0542F609A272CC71307 Certificate serial: 1135D477F9E7B13ACF685135F6F618E1DBAC603C Authority key identifier: BD:43:5E:3E:D6:FE:EC:26:F8:79:A0:54:2F:60:9A:27:2C:C7:13:07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/3136302e3138372e3132352e302f32342d3234203d3e2039343936.roa Signing time: Sat 08 Mar 2025 02:08:13 +0000 ROA not before: Sat 08 Mar 2025 02:03:13 +0000 ROA not after: Sat 07 Mar 2026 02:08:13 +0000 asID: 9496 IP address blocks: 160.187.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 06:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:35:d4:77:f9:e7:b1:3a:cf:68:51:35:f6:f6:18:e1:db:ac:60:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000 Validity Not Before: Mar 8 02:03:13 2025 GMT Not After : Mar 7 02:08:13 2026 GMT Subject: CN=07E5AFECC5B43A58C469E7510FA9CF86C1A1E683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5a:a0:ca:72:db:4a:7d:30:94:5c:56:32:f5: 62:e1:fa:23:24:c5:52:28:03:0d:53:ef:69:79:c4: 60:67:dd:cb:d1:e0:9a:91:09:54:1a:52:a9:69:11: a1:f5:34:35:e3:5f:09:39:3c:0f:37:34:d4:59:97: 7b:09:90:17:67:f0:48:0b:f5:91:db:42:99:34:76: c7:7e:b4:d2:35:20:82:5d:0e:e7:36:64:ed:b4:1c: 52:f6:e8:29:46:4d:23:26:05:03:c2:24:35:11:4b: cf:1e:db:23:4d:94:60:e1:07:bc:a2:2b:6d:a8:7c: c6:52:bc:60:3b:7a:eb:18:c3:3d:23:76:29:c0:9c: 3a:32:77:55:67:bb:37:f4:b2:8a:e6:ce:92:1b:a0: 64:e6:22:17:31:29:ef:69:dd:e9:7f:42:54:ee:e7: 08:42:64:73:09:d0:09:7c:42:46:fe:e7:fb:dc:e2: af:d4:fc:ab:c7:f3:d1:0e:24:6d:6f:a7:ca:d9:c6: e9:a8:82:93:d0:eb:47:ee:b1:0f:df:16:75:c7:c2: 84:04:88:e4:45:0e:b2:87:7b:79:80:2a:4c:57:42: 24:e7:19:d0:4f:c7:41:af:b2:16:c5:89:29:65:93: 21:d2:ff:7e:2a:e7:9f:b1:81:de:e1:0d:e4:ce:81: c2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E5:AF:EC:C5:B4:3A:58:C4:69:E7:51:0F:A9:CF:86:C1:A1:E6:83 X509v3 Authority Key Identifier: keyid:BD:43:5E:3E:D6:FE:EC:26:F8:79:A0:54:2F:60:9A:27:2C:C7:13:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/3136302e3138372e3132352e302f32342d3234203d3e2039343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.125.0/24 Signature Algorithm: sha256WithRSAEncryption 63:26:f8:63:55:37:5c:9c:f8:33:83:b7:00:05:b8:d1:a9:ea: 53:ea:74:51:58:b6:9e:9f:72:e1:4c:c0:be:00:98:7a:75:ee: aa:29:6a:4f:71:d5:08:10:35:bd:eb:b8:d7:9f:60:bb:7a:db: c2:0a:3b:38:77:27:50:68:ff:d0:57:5d:92:55:ec:54:ea:e4: 38:f7:46:f4:c6:d4:44:f6:be:4d:df:e5:28:03:4c:c3:64:25: d9:23:19:54:2c:ea:b5:67:30:d3:8d:45:53:33:8e:e1:63:5d: f2:bd:a9:5f:d1:7d:a3:91:41:9f:1c:2c:b9:d1:29:a8:a5:50: 00:76:18:bf:69:ed:3d:ee:0f:b6:55:8f:bf:4f:01:4e:dd:e5: 35:15:e6:f9:5a:12:e6:3d:81:78:58:a8:88:81:f5:39:57:37: ce:b8:0b:81:76:e7:18:18:c0:c0:8e:b7:1f:c7:63:4a:35:84: c5:95:10:4e:23:ff:03:57:ac:fa:6f:69:4a:e1:f6:01:71:d6: d7:bb:02:17:31:cd:6e:6e:c8:ba:fc:08:44:d4:7d:97:33:6e: f1:c2:82:c8:ea:85:6e:64:0b:e3:90:fc:b2:3b:f6:dc:47:94: 75:cc:58:13:89:c4:40:45:12:59:87:a9:87:68:e3:7e:41:21: 02:db:23:08 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUETXUd/nnsTrPaFE19vYY4dusYDwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRDQzNUUzRUQ2 RkVFQzI2Rjg3OUEwNTQyRjYwOUEyNzJDQzcxMzA3MB4XDTI1MDMwODAyMDMxM1oX DTI2MDMwNzAyMDgxM1owMzExMC8GA1UEAxMoMDdFNUFGRUNDNUI0M0E1OEM0NjlF NzUxMEZBOUNGODZDMUExRTY4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5aoMpy20p9MJRcVjL1YuH6IyTFUigDDVPvaXnEYGfdy9HgmpEJVBpSqWkR ofU0NeNfCTk8Dzc01FmXewmQF2fwSAv1kdtCmTR2x3600jUggl0O5zZk7bQcUvbo KUZNIyYFA8IkNRFLzx7bI02UYOEHvKIrbah8xlK8YDt66xjDPSN2KcCcOjJ3VWe7 N/SyiubOkhugZOYiFzEp72nd6X9CVO7nCEJkcwnQCXxCRv7n+9zir9T8q8fz0Q4k bW+nytnG6aiCk9DrR+6xD98WdcfChASI5EUOsod7eYAqTFdCJOcZ0E/HQa+yFsWJ KWWTIdL/firnn7GB3uEN5M6BwjECAwEAAaOCAhEwggINMB0GA1UdDgQWBBQH5a/s xbQ6WMRp51EPqc+GwaHmgzAfBgNVHSMEGDAWgBS9Q14+1v7sJvh5oFQvYJonLMcT BzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRDQzNUUz RUQ2RkVFQzI2Rjg3OUEwNTQyRjYwOUEyNzJDQzcxMzA3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92VU5lUHRiLTdD YjRlYUJVTDJDYUp5ekhFd2MuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxNzQ0 N0IwMDAwLzAvMzEzNjMwMmUzMTM4MzcyZTMxMzIzNTJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDM5MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoLt9MA0GCSqGSIb3DQEBCwUAA4IB AQBjJvhjVTdcnPgzg7cABbjRqepT6nRRWLaen3LhTMC+AJh6de6qKWpPcdUIEDW9 67jXn2C7etvCCjs4dydQaP/QV12SVexU6uQ490b0xtRE9r5N3+UoA0zDZCXZIxlU LOq1ZzDTjUVTM47hY13yvalf0X2jkUGfHCy50SmopVAAdhi/ae097g+2VY+/TwFO 3eU1Feb5WhLmPYF4WKiIgfU5VzfOuAuBducYGMDAjrcfx2NKNYTFlRBOI/8DV6z6 b2lK4fYBcdbXuwIXMc1ubsi6/AhE1H2XM27xwoLI6oVuZAvjkPyyO/bcR5R1zFgT icRARRJZh6mHaON+QSEC2yMI -----END CERTIFICATE-----Generated at Tue Apr 8 15:28:23 2025 by rpki-client