$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/557F3136DCA511EF98B72959C4F9AE02.roa File: 557F3136DCA511EF98B72959C4F9AE02.roa (raw, json) Hash identifier: YFXHXJDviBoPayGDb4OGE7GmrzEy24l7DcHuFpblUcg= Subject key identifier: 25:A5:33:37:C2:F1:AF:24:29:3D:C3:56:60:B0:72:A7:4E:0C:F5:C6 Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Certificate serial: 77 Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/557F3136DCA511EF98B72959C4F9AE02.roa Signing time: Mon 27 Jan 2025 11:53:34 +0000 ROA not before: Mon 27 Jan 2025 11:53:34 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 45905 IP address blocks: 160.22.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 08:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC Validity Not Before: Jan 27 11:53:34 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=679773bd-9cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e5:59:24:df:68:0b:0e:7f:69:3b:04:95:92: f1:15:86:04:30:0e:7c:78:27:3f:b7:9d:cf:ab:f9: 3a:f5:a3:13:34:b3:5b:1f:c1:09:a6:fb:58:60:63: 45:46:a2:0c:ba:77:80:bc:5a:d8:ab:37:c7:a3:b5: 9b:15:63:ee:dc:bb:f2:b0:ff:70:38:b4:60:bd:52: 6e:a0:8e:53:54:eb:9f:6e:44:7a:ca:72:81:8e:b0: 85:20:8b:a1:50:a9:59:be:8f:d9:9c:85:6f:c7:4d: 42:9a:5a:2f:13:b2:73:c2:da:7e:44:94:51:f7:8b: e0:be:24:74:61:a5:1c:9e:cc:6e:72:55:af:93:1b: 7e:1b:bd:30:3d:7c:aa:ee:82:2a:65:a4:ce:89:89: b7:51:1b:46:73:25:5d:ef:ce:bb:77:39:54:75:02: 89:e1:e4:e0:00:7e:62:e0:e4:03:01:69:02:57:ba: 70:5a:31:1a:ce:90:02:48:50:4d:2b:18:a6:92:7a: d4:03:c4:1c:ce:bc:d1:ef:0c:4a:57:43:cc:e5:46: 1e:3a:60:df:ec:f0:3c:ba:3f:86:88:07:21:d4:52: ed:dd:47:0c:41:b3:9e:b8:4f:a4:8c:e9:fa:85:9f: ee:ef:27:8b:7d:cd:61:df:d0:10:b2:38:d4:03:4f: ce:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A5:33:37:C2:F1:AF:24:29:3D:C3:56:60:B0:72:A7:4E:0C:F5:C6 X509v3 Authority Key Identifier: keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/557F3136DCA511EF98B72959C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.150.0/24 Signature Algorithm: sha256WithRSAEncryption 23:2b:48:23:b5:4c:ef:84:83:27:38:b3:08:61:8a:29:25:80: 83:a6:e9:e7:63:cb:db:2a:7d:0a:36:39:98:99:a9:c9:9a:f5: a7:24:35:8f:b9:69:ad:25:68:f0:06:a7:85:a2:96:f5:33:3e: 78:54:9f:25:77:5a:99:0b:dc:1d:17:f3:34:36:98:73:b4:9e: 63:81:73:cc:4b:26:0f:44:5c:37:1d:60:9b:ad:24:6b:c6:d6: de:67:de:12:11:15:61:66:71:24:d4:af:0a:3f:3d:25:69:fd: 03:b7:74:ec:48:14:12:fd:be:77:9a:00:06:c8:e6:41:5a:9a: f9:5e:1f:8c:df:3c:a4:b5:6e:76:88:fc:82:6f:ff:4c:ef:57: e4:49:b0:3d:53:9d:c4:78:50:8f:c7:59:7e:86:37:79:c4:99: ad:cd:18:f3:16:1e:95:10:7b:94:36:ff:ad:72:08:ef:77:3f: 16:ff:d7:f3:01:a8:57:64:a9:27:a6:7a:9e:d1:5f:b4:8d:bc: de:12:52:c6:44:60:cc:cd:5d:49:3b:11:ce:60:98:b8:e1:42: fb:1c:01:d0:d2:b4:bf:6a:ae:9b:79:b5:77:60:9c:ee:37:da: 69:60:7c:b7:4b:49:4f:8f:af:af:a1:cf:8e:d7:3f:f8:18:b5: af:6e:f3:c5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDNEQzExMC8GA1UEBRMoRkVBQkFEOTIzNUFFRjE3MDIzQ0RDRkIxNjE5MDI2RjND RURCMkM3RjAeFw0yNTAxMjcxMTUzMzRaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OTc3M2JkLTljYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDn5Vkk32gLDn9pOwSVkvEVhgQwDnx4Jz+3nc+r+Tr1oxM0s1sfwQmm+1hgY0VG ogy6d4C8WtirN8ejtZsVY+7cu/Kw/3A4tGC9Um6gjlNU659uRHrKcoGOsIUgi6FQ qVm+j9mchW/HTUKaWi8TsnPC2n5ElFH3i+C+JHRhpRyezG5yVa+TG34bvTA9fKru giplpM6JibdRG0ZzJV3vzrt3OVR1Aonh5OAAfmLg5AMBaQJXunBaMRrOkAJIUE0r GKaSetQDxBzOvNHvDEpXQ8zlRh46YN/s8Dy6P4aIByHUUu3dRwxBs564T6SM6fqF n+7vJ4t9zWHf0BCyONQDT87JAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJaUzN8Lx ryQpPcNWYLByp04M9cYwHwYDVR0jBBgwFoAU/qutkjWu8XAjzc+xYZAm887bLH8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0M0RDLzk3REY3QTEyMzA2 MjExRUY5NzhCNDc2NEM0RjlBRTAyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxI OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX3F1dGtqV3U4WEFqemMteFlaQW04ODdiTEg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy85N0RGN0ExMjMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi81NTdGMzEzNkRD QTUxMUVGOThCNzI5NTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKAWljANBgkqhkiG9w0BAQsFAAOCAQEAIytII7VM74SDJziz CGGKKSWAg6bp52PL2yp9CjY5mJmpyZr1pyQ1j7lprSVo8AanhaKW9TM+eFSfJXda mQvcHRfzNDaYc7SeY4FzzEsmD0RcNx1gm60ka8bW3mfeEhEVYWZxJNSvCj89JWn9 A7d07EgUEv2+d5oABsjmQVqa+V4fjN88pLVudoj8gm//TO9X5EmwPVOdxHhQj8dZ foY3ecSZrc0Y8xYelRB7lDb/rXII73c/Fv/X8wGoV2SpJ6Z6ntFftI283hJSxkRg zM1dSTsRzmCYuOFC+xwB0NK0v2qum3m1d2Cc7jfaaWB8t0tJT4+vr6HPjtc/+Bi1 r27zxQ== -----END CERTIFICATE-----Generated at Wed Feb 19 20:42:52 2025 by rpki-client