$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/506CA7ACC8E911EFB3652D2BC4F9AE02.roa File: 506CA7ACC8E911EFB3652D2BC4F9AE02.roa (raw, json) Hash identifier: UAYmTHhr6w42YJmO9WBmk4jfWAcHk48/qIr8BYwFh8M= Subject key identifier: B4:4E:3D:72:B2:46:76:2D:81:97:2E:D8:D5:B4:14:4C:90:BD:74:8E Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B Certificate serial: 58 Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/506CA7ACC8E911EFB3652D2BC4F9AE02.roa Signing time: Thu 02 Jan 2025 09:09:47 +0000 ROA not before: Thu 02 Jan 2025 09:09:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139809 IP address blocks: 160.30.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 08:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64 Validity Not Before: Jan 2 09:09:47 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=677657db-a2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:70:23:b7:5e:c4:cb:12:f0:9a:5d:7b:50: 2f:f2:bb:47:dd:16:14:eb:d2:41:b2:77:1f:f2:24: a1:35:81:9f:25:92:b2:8b:66:13:43:3f:38:47:9a: 99:8d:b8:0d:43:36:5c:85:8d:1e:cf:b1:34:c6:d3: 3b:c6:94:3a:c2:9d:2a:aa:5b:fb:02:63:7a:69:f5: be:ac:65:55:c2:2e:0b:c8:05:07:86:78:5c:87:0f: 1a:96:25:f4:91:85:76:e2:ce:1c:d7:10:4a:31:52: 09:55:24:8a:d0:b2:60:a7:2b:62:2b:2f:a6:5b:f3: b6:2f:d7:73:03:b5:6b:24:1f:6a:af:8d:1f:3e:72: a7:3e:66:dc:b5:2c:1a:0c:9b:9f:a1:a8:67:fa:43: fa:bc:04:ec:fd:c7:4f:1a:5d:2a:f8:f5:fa:b3:eb: 8f:f7:93:2f:e6:32:5f:ea:67:47:6a:d1:40:4e:9e: 39:b7:17:07:d6:77:6f:cb:d7:c2:fa:4e:ac:84:ee: 01:2e:df:65:b0:90:a5:b0:71:7a:ab:63:1c:c2:81: 65:9d:72:d1:d3:19:a8:8d:1a:7b:e8:84:56:a8:e0: 73:44:9d:41:d9:7d:70:f9:8f:38:65:56:98:97:a7: a3:47:0f:7a:2b:d3:d7:f5:97:a7:54:d8:02:f9:c3: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4E:3D:72:B2:46:76:2D:81:97:2E:D8:D5:B4:14:4C:90:BD:74:8E X509v3 Authority Key Identifier: keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/506CA7ACC8E911EFB3652D2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.178.0/24 Signature Algorithm: sha256WithRSAEncryption bb:f2:16:78:0a:e1:71:33:68:3f:34:36:e3:fd:00:96:a9:cc: 19:72:38:70:9c:49:d1:04:9c:7c:55:4f:21:cc:65:c3:c6:11: af:e7:0b:74:b5:4e:26:8d:78:1d:e5:af:83:ac:52:d4:de:ee: 25:22:82:6e:e5:a4:14:b3:b2:6b:19:b0:3d:d7:49:0b:2f:b5: ae:2e:63:56:75:b7:e3:fc:dd:ae:c2:dc:79:94:21:73:66:11: 3e:ed:cb:fd:db:33:53:d2:f5:0e:f9:c6:c2:b8:7d:25:57:01: bb:82:35:ff:98:98:03:97:c0:47:7d:a9:31:db:b7:d5:47:11: 58:0b:4e:97:b5:82:d7:62:2a:58:56:80:7c:3d:4e:2f:6e:b2: 6a:c6:f7:76:fd:99:c4:ee:2a:dd:3a:53:87:7b:1c:47:cb:97: 33:e6:38:15:7f:24:8d:b6:e0:37:d3:0a:d0:25:80:49:2e:59: 2e:c3:62:97:a2:9c:91:1f:d7:80:89:0b:df:a7:8a:6d:5d:02: 72:d7:9a:85:ef:34:6a:22:19:77:cf:fb:3f:fb:4c:52:70:28: d1:cf:bb:4f:34:d1:c6:73:c4:60:3f:80:8e:7f:b8:17:3e:76: 27:d8:f1:b1:9e:1a:12:75:93:ba:f8:d7:a3:b8:ba:be:ef:b9: ef:cd:d5:16 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OUY2NDExMC8GA1UEBRMoMzJEMzUzNzQzQzhGRTJGMDhFOTdCMjJFNUI2MDlBQkMx NENDRkUzQjAeFw0yNTAxMDIwOTA5NDdaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NzY1N2RiLWEyYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv+nAjt17EyxLwml17UC/yu0fdFhTr0kGydx/yJKE1gZ8lkrKLZhNDPzhHmpmN uA1DNlyFjR7PsTTG0zvGlDrCnSqqW/sCY3pp9b6sZVXCLgvIBQeGeFyHDxqWJfSR hXbizhzXEEoxUglVJIrQsmCnK2IrL6Zb87Yv13MDtWskH2qvjR8+cqc+Zty1LBoM m5+hqGf6Q/q8BOz9x08aXSr49fqz64/3ky/mMl/qZ0dq0UBOnjm3FwfWd2/L18L6 TqyE7gEu32WwkKWwcXqrYxzCgWWdctHTGaiNGnvohFao4HNEnUHZfXD5jzhlVpiX p6NHD3or09f1l6dU2AL5w86rAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUtE49crJG di2Bly7Y1bQUTJC9dI4wHwYDVR0jBBgwFoAUMtNTdDyP4vCOl7IuW2CavBTM/jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5RjY0Lzc3QkYwMTkyNjI0 QjExRUZBQjEyMEY0RkM0RjlBRTAyL010TlRkRHlQNHZDT2w3SXVXMkNhdkJUTV9q cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTXROVGREeVA0dkNPbDdJdVcyQ2F2QlRNX2pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC83N0JGMDE5MjYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi81MDZDQTdBQ0M4 RTkxMUVGQjM2NTJEMkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKAesjANBgkqhkiG9w0BAQsFAAOCAQEAu/IWeArhcTNoPzQ2 4/0AlqnMGXI4cJxJ0QScfFVPIcxlw8YRr+cLdLVOJo14HeWvg6xS1N7uJSKCbuWk FLOyaxmwPddJCy+1ri5jVnW34/zdrsLceZQhc2YRPu3L/dszU9L1DvnGwrh9JVcB u4I1/5iYA5fAR32pMdu31UcRWAtOl7WC12IqWFaAfD1OL26yasb3dv2ZxO4q3TpT h3scR8uXM+Y4FX8kjbbgN9MK0CWASS5ZLsNil6KckR/XgIkL36eKbV0Ccteahe80 aiIZd8/7P/tMUnAo0c+7TzTRxnPEYD+Ajn+4Fz52J9jxsZ4aEnWTuvjXo7i6vu+5 783VFg== -----END CERTIFICATE-----Generated at Wed Feb 19 20:34:00 2025 by rpki-client