$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/B21566C0EE5911EF87651F0AC4F9AE02.roa File: B21566C0EE5911EF87651F0AC4F9AE02.roa (raw, json) Hash identifier: wUwv5nKPByd5iXm4Rp1wHIbyB56bV0LiIzKOApqPsGU= Subject key identifier: 77:64:EC:0F:FE:30:2E:AA:51:75:31:0F:B1:57:EE:77:E7:74:B3:4B Certificate issuer: /CN=A912F6E3/serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9 Certificate serial: 2C Authority key identifier: 98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/B21566C0EE5911EF87651F0AC4F9AE02.roa Signing time: Wed 19 Feb 2025 00:37:28 +0000 ROA not before: Wed 19 Feb 2025 00:37:28 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 1299 IP address blocks: 170.10.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3 Validity Not Before: Feb 19 00:37:28 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67b527c8-f2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:d4:27:5d:b5:ac:76:7f:99:0e:ac:d1:6c: 8a:aa:44:18:39:b8:cd:bf:8f:58:e4:8e:40:db:6a: fa:4b:23:ad:cf:26:b6:6d:03:cc:1f:21:ae:d9:bc: 70:7f:18:f9:16:b5:88:bd:c3:4f:c5:6a:35:e8:74: b5:67:3a:95:48:54:ac:06:5c:6c:74:e3:2d:fb:47: c0:fe:48:fd:3d:56:77:96:dc:26:58:c5:9d:02:e9: 8c:14:1b:8d:ab:59:73:38:43:f2:77:03:65:63:c8: 72:bf:9e:39:46:62:c2:22:91:9c:46:9a:8f:0f:46: f2:7d:5a:2a:f6:4d:cc:71:3d:0a:56:9d:24:bc:c0: 6c:8d:65:b0:82:5c:1e:dd:37:25:5f:6f:67:bd:43: 1c:36:5b:72:9f:bf:46:a9:66:a6:39:61:89:e5:fd: ad:31:6a:7b:7c:7c:6b:b4:3f:37:96:fb:34:b0:c1: 94:88:0d:94:91:a9:20:da:3d:b9:75:28:5c:62:bc: 8d:ef:44:33:d5:a8:de:35:e9:06:83:bb:86:60:62: c2:b8:cc:cd:2e:ae:7f:a5:c4:39:1a:f3:f8:d4:c5: 84:8e:be:44:6c:f6:72:65:b0:af:2e:32:8f:73:54: 36:ec:8d:55:14:ea:4c:0e:55:41:bc:99:01:40:5e: 13:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:64:EC:0F:FE:30:2E:AA:51:75:31:0F:B1:57:EE:77:E7:74:B3:4B X509v3 Authority Key Identifier: keyid:98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/B21566C0EE5911EF87651F0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 170.10.70.0/24 Signature Algorithm: sha256WithRSAEncryption 27:0d:40:23:58:42:7b:41:86:e3:dd:53:25:b2:87:f7:37:10: 3e:9c:3e:bc:03:be:20:d7:12:73:4d:56:12:38:a1:c9:fb:d7: 4b:6c:80:5b:70:4c:00:32:29:af:2a:f4:a3:09:db:85:4c:da: 35:3c:37:a0:77:2e:8c:a6:d1:a3:5f:48:bc:96:aa:86:29:4e: 63:3b:ae:38:68:0c:33:66:e9:64:81:05:1a:5b:7d:78:27:d2: 97:79:9b:af:3f:d4:77:42:55:91:8b:88:d2:60:31:52:27:2e: 3b:f8:07:5b:04:04:1d:7a:9b:d7:9e:53:f4:af:d6:bd:8e:6e: 9e:a1:01:37:2f:96:31:82:26:a0:01:2e:10:00:26:11:f3:01: f7:ac:79:f9:b3:a3:ae:b5:6f:3b:b7:a2:38:c7:97:3d:fa:6f: de:d9:83:da:bb:fd:32:f5:2d:6a:cc:bc:fe:45:fc:71:81:d5: 87:a1:d1:6c:25:5b:97:32:23:24:24:0a:28:c0:e3:37:08:92: 72:a9:71:38:4e:f4:59:73:0e:f4:9d:df:85:85:33:73:ef:b7: 0d:25:d9:46:a5:1e:0f:c1:22:dd:d5:de:88:a8:3c:ed:a7:94: fc:e8:30:92:e7:10:a4:cf:71:76:ad:55:66:f1:26:93:29:29: 03:ed:a8:14 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjZFMzExMC8GA1UEBRMoOThGRUE2QzQ0RkY1MzI4NDgzNUU4MUQwNzBERkMxODIw QjZENTBFOTAeFw0yNTAyMTkwMDM3MjhaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YjUyN2M4LWYyZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBOdQnXbWsdn+ZDqzRbIqqRBg5uM2/j1jkjkDbavpLI63PJrZtA8wfIa7ZvHB/ GPkWtYi9w0/FajXodLVnOpVIVKwGXGx04y37R8D+SP09VneW3CZYxZ0C6YwUG42r WXM4Q/J3A2VjyHK/njlGYsIikZxGmo8PRvJ9Wir2TcxxPQpWnSS8wGyNZbCCXB7d NyVfb2e9Qxw2W3Kfv0apZqY5YYnl/a0xant8fGu0PzeW+zSwwZSIDZSRqSDaPbl1 KFxivI3vRDPVqN416QaDu4ZgYsK4zM0urn+lxDka8/jUxYSOvkRs9nJlsK8uMo9z VDbsjVUU6kwOVUG8mQFAXhP/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUd2TsD/4w LqpRdTEPsVfud+d0s0swHwYDVR0jBBgwFoAUmP6mxE/1MoSDXoHQcN/BggttUOkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNkUzL0VBNTM4MURFQjVE RDExRUY5N0Q5RkEzNEM0RjlBRTAyL21QNm14RV8xTW9TRFhvSFFjTl9CZ2d0dFVP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbVA2bXhFXzFNb1NEWG9IUWNOX0JnZ3R0VU9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjZFMy9FQTUzODFERUI1REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9CMjE1NjZDMEVF NTkxMUVGODc2NTFGMEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKoKRjANBgkqhkiG9w0BAQsFAAOCAQEAJw1AI1hCe0GG491T JbKH9zcQPpw+vAO+INcSc01WEjihyfvXS2yAW3BMADIpryr0ownbhUzaNTw3oHcu jKbRo19IvJaqhilOYzuuOGgMM2bpZIEFGlt9eCfSl3mbrz/Ud0JVkYuI0mAxUicu O/gHWwQEHXqb155T9K/WvY5unqEBNy+WMYImoAEuEAAmEfMB96x5+bOjrrVvO7ei OMeXPfpv3tmD2rv9MvUtasy8/kX8cYHVh6HRbCVblzIjJCQKKMDjNwiScqlxOE70 WXMO9J3fhYUzc++3DSXZRqUeD8Ei3dXeiKg87aeU/OgwkucQpM9xdq1VZvEmkykp A+2oFA== -----END CERTIFICATE-----Generated at Mon Apr 7 03:05:40 2025 by rpki-client