$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa File: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (raw, json) Hash identifier: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM= Subject key identifier: 09:71:48:38:A9:F5:4C:52:54:D3:9E:36:6E:3A:3A:B7:87:A0:18:80 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: 04 Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa Signing time: Sun 05 Jan 2025 05:19:22 +0000 ROA not before: Sun 05 Jan 2025 05:19:22 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 153478 IP address blocks: 161.248.90.0/23 maxlen: 23 161.248.90.0/24 maxlen: 24 161.248.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854 Validity Not Before: Jan 5 05:19:22 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677a1659-628d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:45:bc:ac:5e:95:f6:13:e5:af:93:be:d8: 9b:56:e8:2b:06:2c:a3:dd:cb:50:98:ee:5a:a4:35: e2:95:81:50:fd:bb:46:27:57:c7:9a:26:78:47:14: 6f:ea:fb:cc:b4:86:ed:8d:d4:79:10:6e:ed:f0:38: 5c:93:83:38:04:d0:36:f8:66:17:51:79:ef:16:b7: 4d:f4:7a:29:ed:34:3b:37:13:03:91:50:8d:56:ad: e0:d6:50:97:8b:b4:6b:f2:31:b5:1f:c4:bc:a0:b5: 50:bf:35:e0:2c:18:60:22:a5:9e:6c:9e:04:05:39: 50:cf:ca:37:41:56:df:6e:bb:57:e3:4b:7d:c6:b4: 31:b0:ce:e1:4b:2a:de:06:60:fa:4d:d3:7b:7e:ae: b4:6a:ba:df:64:c7:05:b9:bb:b4:c5:bd:97:78:0a: 37:d2:e3:5f:93:96:5a:bf:09:d7:58:c0:d2:3d:d1: 4b:e3:6e:ef:ba:bc:0e:15:96:13:d9:85:dd:2b:d4: df:72:4e:f7:80:b5:26:6b:33:df:f3:8c:75:d6:f0: aa:f1:44:76:75:1c:1e:a1:f9:8c:a5:af:69:40:1d: fa:73:e5:d9:31:84:d0:74:c6:ef:09:41:23:29:ff: 7d:04:f0:11:22:11:bc:ca:8e:39:6d:03:8c:24:ae: d9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:71:48:38:A9:F5:4C:52:54:D3:9E:36:6E:3A:3A:B7:87:A0:18:80 X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.90.0/23 Signature Algorithm: sha256WithRSAEncryption 92:ae:88:4c:e8:36:e7:e9:68:6b:80:4f:d4:e8:b5:f8:81:b7: cb:86:d5:2d:06:73:bb:05:55:d1:f2:05:c9:c9:88:71:c2:1b: 0f:6e:01:43:02:71:f4:45:34:24:fa:83:2c:4a:6e:8a:7c:2c: ce:8f:98:61:04:23:9f:4c:39:ad:25:70:bd:74:38:6e:8c:04: d8:35:88:35:69:bf:e4:ed:02:2b:40:34:cd:8c:7c:82:cc:7c: 44:02:c6:7c:32:87:3b:7f:21:34:3a:32:ce:f6:44:f3:39:07: 96:a5:e4:55:f0:3d:21:1d:a5:1e:e1:96:4a:6a:93:95:da:72: 98:78:10:cb:31:92:2c:e1:5c:14:04:8e:f6:38:4c:87:b9:bc: 5e:eb:fc:e3:bf:df:1d:0e:c9:5f:f3:ca:bb:b9:85:21:3b:cc: 4c:26:1e:3e:56:c0:d2:d2:70:34:95:04:3b:25:b9:bf:fe:7c: 9c:0f:ad:b9:32:85:08:f0:90:f3:c4:f6:89:86:f4:98:69:a8: 63:6a:96:41:2d:eb:3c:ec:9a:3d:78:a9:47:2d:d3:d7:5e:c9: 02:ec:af:b5:3c:80:b7:c7:e0:d7:f1:9c:a4:b4:c4:e7:ce:f3: bc:b8:c6:0a:9d:46:2f:78:84:ce:ea:75:b1:fa:04:b1:72:8f: e5:aa:43:1b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Njg1NDExMC8GA1UEBRMoOEIzNDcxQjkwQjdBNUJDNzZDRTNGQzA5QUNBQzg5MjhF QjREODE3OTAeFw0yNTAxMDUwNTE5MjJaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2ExNjU5LTYyOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC210W8rF6V9hPlr5O+2JtW6CsGLKPdy1CY7lqkNeKVgVD9u0YnV8eaJnhHFG/q +8y0hu2N1HkQbu3wOFyTgzgE0Db4ZhdRee8Wt030eintNDs3EwORUI1WreDWUJeL tGvyMbUfxLygtVC/NeAsGGAipZ5sngQFOVDPyjdBVt9uu1fjS33GtDGwzuFLKt4G YPpN03t+rrRqut9kxwW5u7TFvZd4CjfS41+Tllq/CddYwNI90Uvjbu+6vA4VlhPZ hd0r1N9yTveAtSZrM9/zjHXW8KrxRHZ1HB6h+Yylr2lAHfpz5dkxhNB0xu8JQSMp /30E8BEiEbzKjjltA4wkrtkhAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUCXFIOKn1 TFJU0542bjo6t4egGIAwHwYDVR0jBBgwFoAUizRxuQt6W8ds4/wJrKyJKOtNgXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2ODU0L0Q1M0UxQjZFQ0Iy MzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXpSeHVRdDZXOGRzNF93SnJLeUpLT3ROZ1hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njg1NC9ENTNFMUI2RUNCMjMxMUVGOUU4NjY4MkVDNEY5QUUwMi81QTEwQzZBMkNC MjQxMUVGOEIzREQ3MkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4WjANBgkqhkiG9w0BAQsFAAOCAQEAkq6ITOg25+loa4BP 1Oi1+IG3y4bVLQZzuwVV0fIFycmIccIbD24BQwJx9EU0JPqDLEpuinwszo+YYQQj n0w5rSVwvXQ4bowE2DWINWm/5O0CK0A0zYx8gsx8RALGfDKHO38hNDoyzvZE8zkH lqXkVfA9IR2lHuGWSmqTldpymHgQyzGSLOFcFASO9jhMh7m8Xuv847/fHQ7JX/PK u7mFITvMTCYePlbA0tJwNJUEOyW5v/58nA+tuTKFCPCQ88T2iYb0mGmoY2qWQS3r POyaPXipRy3T117JAuyvtTyAt8fg1/GcpLTE587zvLjGCp1GL3iEzup1sfoEsXKP 5apDGw== -----END CERTIFICATE-----Generated at Wed Feb 5 23:09:08 2025 by rpki-client