$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/C241D8CCE1DD11EF9D21BB10C4F9AE02.roa File: C241D8CCE1DD11EF9D21BB10C4F9AE02.roa (raw, json) Hash identifier: aOaJVSoayyWp8EmwajlM6cWFw4ReqENsLISzvhYiTKc= Subject key identifier: 89:26:BC:30:13:59:30:D8:67:F0:9C:70:1F:13:09:D8:86:5B:D5:F3 Certificate issuer: /CN=A912F6E3/serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9 Certificate serial: 22 Authority key identifier: 98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/C241D8CCE1DD11EF9D21BB10C4F9AE02.roa Signing time: Mon 03 Feb 2025 03:20:04 +0000 ROA not before: Mon 03 Feb 2025 03:20:04 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 133906 IP address blocks: 170.10.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 06:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9 Validity Not Before: Feb 3 03:20:04 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a035e3-c470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:6c:83:87:b7:ff:3d:41:07:e7:1d:ad:75: c5:d2:cc:7b:8c:df:96:94:c1:7e:88:96:87:14:95: 04:40:e7:58:60:29:cb:18:12:76:b8:7d:42:97:b7: 16:33:d5:19:3d:45:90:1f:74:6e:11:96:ac:a3:55: d3:72:09:bb:06:89:9e:72:91:39:2f:fc:5c:23:9d: 75:5b:0e:8d:9a:c7:09:0e:0d:66:9a:0a:d0:e3:4d: fe:6a:71:70:7c:0d:c4:b5:fc:ca:89:c1:4d:f6:9a: e9:78:ee:c5:62:c1:e0:82:b2:0f:0e:ca:26:87:f5: 40:dc:28:44:d2:0f:3e:f3:98:d1:5e:00:b3:b9:33: b0:e2:19:e6:2f:65:5f:31:a5:db:45:73:c8:f4:2b: 0a:28:0f:2f:57:35:dd:1c:ca:b0:c4:a5:6c:6f:04: 16:63:5c:c5:51:51:c3:be:13:c5:95:66:65:38:e8: af:e2:fc:e0:c8:9b:dc:2b:c5:e6:5d:0c:6d:52:72: 18:5c:33:1f:36:ed:73:96:dc:00:9a:6b:f8:e2:bb: 34:e0:54:97:ed:c6:34:63:10:54:a1:98:9b:76:8e: 46:80:2f:0f:56:4f:d0:ad:2f:07:c2:b9:23:c9:60: e0:49:65:ed:d3:7c:31:d1:e3:98:ae:99:a6:fe:11: db:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:26:BC:30:13:59:30:D8:67:F0:9C:70:1F:13:09:D8:86:5B:D5:F3 X509v3 Authority Key Identifier: keyid:98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/C241D8CCE1DD11EF9D21BB10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 170.10.70.0/24 Signature Algorithm: sha256WithRSAEncryption a0:ba:e0:35:71:33:42:12:13:e4:77:d0:11:ba:9d:9e:39:44: 24:eb:0f:7e:68:be:5c:8a:e8:c2:6c:a4:d7:2d:44:3a:92:d2: d3:38:3a:ec:dc:3a:48:31:9f:74:18:5a:da:23:84:4c:9d:e3: 4d:eb:ba:25:7a:bf:e2:95:d0:0d:f7:6b:57:78:9d:7e:e5:6a: 3e:a4:3c:48:a9:5e:f4:b4:57:66:a5:36:80:84:4b:f1:cf:af: b0:fc:08:20:05:46:6a:50:46:5e:97:08:ca:ee:dd:dd:6a:bc: 01:22:e9:6d:2c:15:d7:86:b3:f6:ab:ec:c7:87:67:f0:2f:39: 95:db:ce:cb:fd:28:72:d9:9d:cb:64:8d:e1:cd:50:fe:6d:4e: f4:42:0b:54:aa:b0:39:53:8f:26:aa:4c:3d:a1:56:77:f4:76: 1e:a1:57:1e:b7:8d:4f:19:e5:a4:b0:f5:7c:0e:99:71:82:0f: 1e:4b:b2:c8:34:42:d7:3a:28:7d:20:54:86:36:e6:62:08:54: 69:c8:2a:08:e2:fd:6a:fc:ac:9d:18:42:fc:45:ec:39:8b:ad: 78:6c:81:e5:06:eb:42:28:28:72:6e:ac:46:a7:ca:51:95:e1: 00:f6:3b:a7:3d:7a:32:e5:ec:24:82:da:7f:0c:bd:e0:fa:99: 50:0f:d4:8b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjZFMzExMC8GA1UEBRMoOThGRUE2QzQ0RkY1MzI4NDgzNUU4MUQwNzBERkMxODIw QjZENTBFOTAeFw0yNTAyMDMwMzIwMDRaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTAzNWUzLWM0NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6fGyDh7f/PUEH5x2tdcXSzHuM35aUwX6IlocUlQRA51hgKcsYEna4fUKXtxYz 1Rk9RZAfdG4RlqyjVdNyCbsGiZ5ykTkv/FwjnXVbDo2axwkODWaaCtDjTf5qcXB8 DcS1/MqJwU32mul47sViweCCsg8OyiaH9UDcKETSDz7zmNFeALO5M7DiGeYvZV8x pdtFc8j0KwooDy9XNd0cyrDEpWxvBBZjXMVRUcO+E8WVZmU46K/i/ODIm9wrxeZd DG1SchhcMx827XOW3ACaa/jiuzTgVJftxjRjEFShmJt2jkaALw9WT9CtLwfCuSPJ YOBJZe3TfDHR45iumab+EdsZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUiSa8MBNZ MNhn8JxwHxMJ2IZb1fMwHwYDVR0jBBgwFoAUmP6mxE/1MoSDXoHQcN/BggttUOkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNkUzL0VBNTM4MURFQjVE RDExRUY5N0Q5RkEzNEM0RjlBRTAyL21QNm14RV8xTW9TRFhvSFFjTl9CZ2d0dFVP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbVA2bXhFXzFNb1NEWG9IUWNOX0JnZ3R0VU9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjZFMy9FQTUzODFERUI1REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9DMjQxRDhDQ0Ux REQxMUVGOUQyMUJCMTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKoKRjANBgkqhkiG9w0BAQsFAAOCAQEAoLrgNXEzQhIT5HfQ EbqdnjlEJOsPfmi+XIrowmyk1y1EOpLS0zg67Nw6SDGfdBha2iOETJ3jTeu6JXq/ 4pXQDfdrV3idfuVqPqQ8SKle9LRXZqU2gIRL8c+vsPwIIAVGalBGXpcIyu7d3Wq8 ASLpbSwV14az9qvsx4dn8C85ldvOy/0octmdy2SN4c1Q/m1O9EILVKqwOVOPJqpM PaFWd/R2HqFXHreNTxnlpLD1fA6ZcYIPHkuyyDRC1zoofSBUhjbmYghUacgqCOL9 avysnRhC/EXsOYuteGyB5QbrQigocm6sRqfKUZXhAPY7pz16MuXsJILafwy94PqZ UA/Uiw== -----END CERTIFICATE-----Generated at Wed Apr 23 02:47:08 2025 by rpki-client