$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/172C2B96197711F0A993397AC4F9AE02.roa File: 172C2B96197711F0A993397AC4F9AE02.roa (raw, json) Hash identifier: 9ByI1R/8UoBUoqrLxfOWYkU9YKprJy6KVIMEGdoolfo= Subject key identifier: 8B:17:02:4E:9D:D6:4B:8B:5A:7B:44:CA:5D:DC:43:4B:DA:D0:32:EB Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 0827 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/172C2B96197711F0A993397AC4F9AE02.roa Signing time: Mon 14 Apr 2025 21:26:13 +0000 ROA not before: Mon 14 Apr 2025 21:26:13 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 138677 IP address blocks: 45.64.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Apr 14 21:26:13 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67fd7d75-f4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:8c:36:34:f3:19:8c:e9:c4:85:30:19:74: c2:00:17:54:0f:82:4f:70:df:2f:07:be:af:00:cc: 3e:ff:f4:1d:f9:93:7b:de:86:d9:58:f0:9d:d7:f7: ec:85:1f:14:e4:be:ad:8b:d3:d1:77:a1:08:b2:a8: b0:94:55:5f:1d:03:e1:3d:5f:3e:2f:8e:34:69:88: 79:1b:00:0f:80:8f:33:16:63:c9:a2:32:28:4c:e8: c7:26:57:db:d7:3e:46:fd:88:36:89:c3:6f:38:c9: e0:bf:b9:88:83:a0:b5:a1:78:cc:8c:62:6b:59:0e: 8e:a4:2a:dd:3e:9a:e7:6e:1a:5e:2a:99:bb:76:ff: af:da:f9:f2:35:13:3c:80:cd:f1:0d:de:08:b6:b0: 0a:74:d5:e5:ea:c7:b7:03:33:c8:42:f9:d4:05:f7: ea:3e:aa:e0:db:e9:97:63:9c:53:eb:af:8f:3e:ff: bf:2b:d0:21:f6:16:95:16:1e:88:7b:9f:71:f6:ab: 24:57:b3:44:24:e5:19:13:43:54:52:4f:38:6f:82: 94:93:22:6d:37:e5:12:ed:cb:a9:89:e2:bc:bf:db: 48:1d:72:90:d3:fb:7b:f4:51:b0:c9:b6:37:b2:b8: 7b:bb:8e:3b:57:9f:20:48:7c:3a:ff:c4:25:08:e7: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:17:02:4E:9D:D6:4B:8B:5A:7B:44:CA:5D:DC:43:4B:DA:D0:32:EB X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/172C2B96197711F0A993397AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.137.0/24 Signature Algorithm: sha256WithRSAEncryption 67:83:d4:80:5f:11:1a:77:87:42:be:2e:77:61:ac:c7:a3:0c: 60:e7:1c:c4:90:38:d8:3f:32:0b:c6:23:0b:80:28:88:02:e9: c5:d5:cb:8e:1a:71:a3:72:91:05:e0:dc:f2:c9:7d:b9:a6:c8: 97:8e:04:de:99:02:3e:7d:80:7b:84:de:59:24:39:73:54:a7: 6a:3f:ba:d5:a6:ae:1f:e9:86:d1:09:be:9c:f3:49:f6:6f:39: 50:66:3c:d9:14:ee:3a:ae:a8:3a:64:8a:92:d2:63:5e:c2:2e: 8b:97:40:85:d6:33:ee:6d:f9:b5:30:0a:a9:91:a0:83:f9:53: 12:b4:a6:a4:30:b6:79:4b:dd:17:81:ed:6c:89:1a:e5:3b:c8: 5f:23:dd:e0:6a:f3:fe:cf:8b:a4:94:75:be:26:e3:53:5e:f1: d4:a5:86:0c:e9:bb:9c:df:15:42:3a:e5:62:23:10:93:8e:d1: 5c:91:8e:a7:c1:9c:87:b3:a9:f8:a4:8d:86:12:70:6c:da:22: a4:a1:2a:26:f0:32:48:c8:1c:4f:45:a0:91:76:97:04:ce:7d: 5b:45:d3:b7:c9:3d:e0:fa:63:8c:76:d7:91:aa:eb:b1:aa:45: 98:06:43:54:82:37:84:fd:ab:12:40:81:e9:af:16:28:09:21: 23:60:4d:23 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjUwNDE0MjEyNjEzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZkN2Q3NS1mNGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArweMNjTzGYzpxIUwGXTCABdUD4JPcN8vB76vAMw+//Qd+ZN73obZWPCd1/fs hR8U5L6ti9PRd6EIsqiwlFVfHQPhPV8+L440aYh5GwAPgI8zFmPJojIoTOjHJlfb 1z5G/Yg2icNvOMngv7mIg6C1oXjMjGJrWQ6OpCrdPprnbhpeKpm7dv+v2vnyNRM8 gM3xDd4ItrAKdNXl6se3AzPIQvnUBffqPqrg2+mXY5xT66+PPv+/K9Ah9haVFh6I e59x9qskV7NEJOUZE0NUUk84b4KUkyJtN+US7cupieK8v9tIHXKQ0/t79FGwybY3 srh7u447V58gSHw6/8QlCOeqOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIsXAk6d 1kuLWntEyl3cQ0va0DLrMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgyRDkvMEVEQTZENUVDRERBMTFFN0JERUE4QzJCQzRGOUFFMDIvMTcyQzJCOTYx OTc3MTFGMEE5OTMzOTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtQIkwDQYJKoZIhvcNAQELBQADggEBAGeD1IBfERp3h0K+ LndhrMejDGDnHMSQONg/MgvGIwuAKIgC6cXVy44acaNykQXg3PLJfbmmyJeOBN6Z Aj59gHuE3lkkOXNUp2o/utWmrh/phtEJvpzzSfZvOVBmPNkU7jquqDpkipLSY17C LouXQIXWM+5t+bUwCqmRoIP5UxK0pqQwtnlL3ReB7WyJGuU7yF8j3eBq8/7Pi6SU db4m41Ne8dSlhgzpu5zfFUI65WIjEJOO0VyRjqfBnIezqfikjYYScGzaIqShKibw MkjIHE9FoJF2lwTOfVtF07fJPeD6Y4x215Gq67GqRZgGQ1SCN4T9qxJAgemvFigJ ISNgTSM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:14 2025 by rpki-client