$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/3E9ACB6EE29611EFAE82780AC4F9AE02.roa File: 3E9ACB6EE29611EFAE82780AC4F9AE02.roa (raw, json) Hash identifier: wyEjofnc8ole0121WyuEbUERePWJfuYpn1FXolEHMnM= Subject key identifier: 32:F1:48:F6:93:73:5F:9E:39:B1:3E:CE:F4:7D:C0:69:01:3D:77:7B Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: 38 Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/3E9ACB6EE29611EFAE82780AC4F9AE02.roa Signing time: Wed 05 Feb 2025 04:08:28 +0000 ROA not before: Wed 05 Feb 2025 04:08:28 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138004 IP address blocks: 161.248.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 19:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1 Validity Not Before: Feb 5 04:08:28 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67a2e43c-657d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:56:4f:fd:88:46:03:69:91:62:e5:2f:da: 9f:89:ec:43:78:a6:c4:cf:1f:16:c2:39:97:d8:eb: 31:9e:35:6b:5e:68:77:0a:a9:23:d3:79:05:42:aa: 38:2a:b5:6f:09:e7:76:b4:9e:dc:f5:a9:54:2f:89: a3:25:75:20:50:4c:a6:de:24:02:db:2b:2c:b6:ec: 4e:78:dc:0e:37:a3:27:31:ca:0a:74:2b:06:38:56: 9b:62:b4:ed:eb:b5:c9:bb:1a:d1:72:1c:cb:ef:f7: 8d:2e:08:73:83:94:af:fc:59:73:39:f1:32:2e:11: c1:cd:28:ef:bf:ff:80:42:f6:63:b7:90:33:da:64: 5b:b7:60:52:97:11:19:19:b1:77:d9:8b:98:52:d6: 5f:c3:4a:0b:0a:9c:ec:b1:94:c4:b9:41:64:c9:d9: b8:42:9a:de:99:a9:97:7e:28:e2:9b:c5:f4:3d:c6: 6f:e8:4f:6c:7d:8a:61:4f:e6:d4:1b:5b:3b:da:ca: bd:f2:19:8c:85:2c:be:e5:40:84:36:e4:d5:95:6c: 3c:84:7c:5d:93:7b:31:c9:e0:ec:e4:c7:65:ad:1c: fc:9b:a2:c6:f2:eb:8b:89:1f:d5:22:7c:17:d1:11: 92:21:b1:f4:2c:99:3c:28:44:e6:f8:d1:2c:e2:f3: 69:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F1:48:F6:93:73:5F:9E:39:B1:3E:CE:F4:7D:C0:69:01:3D:77:7B X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/3E9ACB6EE29611EFAE82780AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.10.0/24 Signature Algorithm: sha256WithRSAEncryption 20:8b:6b:9f:21:6e:2c:78:43:9a:14:5d:66:04:87:cd:48:f2: 18:38:4e:3b:ce:63:cd:de:17:09:27:d1:b9:7e:f0:a7:3d:2a: 20:d0:2f:4c:32:64:c1:2c:44:81:da:e1:6c:75:5f:de:24:53: da:00:37:01:00:01:1a:09:0f:2f:07:3e:d0:ff:7c:2f:e3:4c: 62:e5:db:a1:42:98:00:b6:50:b1:1a:9a:7a:dc:b2:19:da:a0: 2b:db:d5:13:0b:eb:5c:31:6d:ea:32:e9:59:a4:c7:23:37:98: 36:77:f2:ff:f2:ed:a0:ee:ad:1d:4a:e8:74:c7:64:5e:c2:6e: ba:89:6d:09:a6:0d:f3:76:44:a3:fe:36:c9:5a:36:c5:79:19: 9f:4c:9c:8a:3a:1b:c7:02:cb:05:2c:74:62:f5:c4:71:61:44: ff:30:fe:50:d6:ef:36:62:a5:41:dd:fb:ff:0f:28:4e:cf:44: c3:fa:ee:86:0d:d9:83:3e:59:f9:2c:bc:61:27:f8:58:d4:0e: 88:c1:5b:de:9c:26:eb:f9:d0:49:f8:e5:51:42:b8:c2:24:24: fb:1f:36:3f:f1:86:df:44:78:4e:32:6f:35:d0:c8:2c:d8:a8: 1d:84:4d:99:c7:af:61:f8:fb:93:73:cf:53:95:d6:bb:bf:4e: 73:c4:cf:da -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjNDMTExMC8GA1UEBRMoNERDN0UyOEI1NDZGMkEwQjUzOEU4Q0RGODMyRDlBQTFG MzdDQzhFNDAeFw0yNTAyMDUwNDA4MjhaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTJlNDNjLTY1N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7l1ZP/YhGA2mRYuUv2p+J7EN4psTPHxbCOZfY6zGeNWteaHcKqSPTeQVCqjgq tW8J53a0ntz1qVQviaMldSBQTKbeJALbKyy27E543A43oycxygp0KwY4VptitO3r tcm7GtFyHMvv940uCHODlK/8WXM58TIuEcHNKO+//4BC9mO3kDPaZFu3YFKXERkZ sXfZi5hS1l/DSgsKnOyxlMS5QWTJ2bhCmt6ZqZd+KOKbxfQ9xm/oT2x9imFP5tQb Wzvayr3yGYyFLL7lQIQ25NWVbDyEfF2TezHJ4Ozkx2WtHPybosby64uJH9UifBfR EZIhsfQsmTwoROb40Szi82mZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMvFI9pNz X545sT7O9H3AaQE9d3swHwYDVR0jBBgwFoAUTcfii1RvKgtTjozfgy2aofN8yOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyM0MxL0QwMzIwRUY4QkY0 RjExRUZCQ0Y2ODk0NEM0RjlBRTAyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVGNmaWkxUnZLZ3RUam96Zmd5MmFvZk44eU9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi8zRTlBQ0I2RUUy OTYxMUVGQUU4Mjc4MEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKH4CjANBgkqhkiG9w0BAQsFAAOCAQEAIItrnyFuLHhDmhRd ZgSHzUjyGDhOO85jzd4XCSfRuX7wpz0qINAvTDJkwSxEgdrhbHVf3iRT2gA3AQAB GgkPLwc+0P98L+NMYuXboUKYALZQsRqaetyyGdqgK9vVEwvrXDFt6jLpWaTHIzeY Nnfy//LtoO6tHUrodMdkXsJuuoltCaYN83ZEo/42yVo2xXkZn0ycijobxwLLBSx0 YvXEcWFE/zD+UNbvNmKlQd37/w8oTs9Ew/ruhg3Zgz5Z+Sy8YSf4WNQOiMFb3pwm 6/nQSfjlUUK4wiQk+x82P/GG30R4TjJvNdDILNioHYRNmcevYfj7k3PPU5XWu79O c8TP2g== -----END CERTIFICATE-----Generated at Wed Feb 5 22:51:15 2025 by rpki-client