$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/0A581522B5E211EFBEF4BC5AC4F9AE02.roa File: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (raw, json) Hash identifier: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso= Subject key identifier: 2F:FC:6E:EC:15:3C:18:8B:7E:1B:28:D7:6B:95:49:63:52:C1:F1:7D Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: 08 Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/0A581522B5E211EFBEF4BC5AC4F9AE02.roa Signing time: Wed 11 Dec 2024 03:25:00 +0000 ROA not before: Wed 11 Dec 2024 03:25:00 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 134563 IP address blocks: 160.250.176.0/24 maxlen: 24 160.250.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958 Validity Not Before: Dec 11 03:25:00 2024 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6759060b-ad0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:50:39:c9:11:cd:36:8c:5f:1c:11:bf:8e: f6:02:c6:43:8f:5c:ae:12:60:39:00:86:21:85:2b: 82:86:0b:0c:5d:e0:ad:70:39:7c:b1:d4:9f:58:e8: 22:09:63:0b:79:70:ed:8e:0b:5a:11:d7:83:11:75: cf:d9:65:e2:54:89:06:e0:bc:69:b6:1c:70:a2:8f: db:6b:ac:67:1b:f0:94:92:97:ad:ed:f3:8d:4d:12: 0a:23:14:5e:2f:aa:76:8e:de:68:e7:6e:70:12:0b: 94:4e:3c:34:38:2b:6c:0a:d8:87:7e:18:6e:e1:6d: 6e:12:65:3d:1e:0c:46:ed:8c:28:1f:75:68:a3:26: 9d:d2:3c:3d:03:97:82:89:71:df:27:2c:0d:bd:7c: e0:64:0d:46:5d:be:7e:e1:b0:1c:f6:62:2c:8f:40: 55:60:b2:b8:a1:c6:30:ca:70:05:fd:b9:49:ce:45: 0e:4c:bb:fa:1d:3a:17:62:59:8e:2d:95:6a:8e:de: c5:86:da:62:88:48:cb:b4:b9:95:e2:e4:af:84:48: bd:1f:00:f7:c3:79:e2:30:59:3c:98:7b:06:ce:98: 0e:f7:20:82:73:fd:60:f4:de:70:cf:50:c3:4a:24: 8d:0d:0f:53:65:0c:b0:53:4c:99:a5:69:0d:af:29: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FC:6E:EC:15:3C:18:8B:7E:1B:28:D7:6B:95:49:63:52:C1:F1:7D X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/0A581522B5E211EFBEF4BC5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.176.0/23 Signature Algorithm: sha256WithRSAEncryption 15:cf:e7:01:80:ce:66:9e:b4:57:81:e0:30:0d:20:d5:89:90: db:7d:38:05:54:d8:6a:cc:aa:54:e8:63:df:52:3c:e4:b5:8b: ac:fd:dd:94:81:b4:80:81:41:95:53:75:cc:cd:c4:da:25:08: a5:b9:5d:71:ad:63:02:3d:ba:0d:58:95:36:dd:53:ab:70:4d: 55:ae:82:b8:29:23:33:e3:95:7e:0b:bd:71:60:9e:77:ac:57: bb:76:54:b2:68:63:45:29:ea:59:82:f7:a7:d1:c4:db:c6:91: 3d:08:36:87:cc:a1:b2:f4:c2:d4:bc:39:1e:5c:ae:e4:4e:9d: f8:06:2d:5b:30:28:fd:cf:81:f9:61:c9:53:5f:03:c9:37:d9: 18:9e:bf:12:b9:95:5a:c2:51:be:0c:2e:dd:89:1a:6a:da:7b: 37:c6:c2:e4:56:82:09:7e:24:cb:0e:96:aa:3d:e8:a8:41:4c: ec:6d:18:92:60:be:ad:85:2b:40:09:79:bb:36:b8:73:1f:e4: e5:1f:db:9e:b2:93:de:5b:c6:0d:87:97:79:f7:f8:90:20:b6: c2:23:fc:8d:2d:bd:78:69:a7:1a:44:45:a9:fa:1e:b5:a1:7d: e2:ba:f3:6e:7c:da:03:f7:17:b6:36:6d:74:41:ca:50:72:3d: 35:31:80:10 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDk1ODExMC8GA1UEBRMoOUY0OTA2QzBENENDOTY0NUQ5QkZEOTMzNjRBMjNBNUEz M0VGNThEQjAeFw0yNDEyMTEwMzI1MDBaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NTkwNjBiLWFkMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJPFA5yRHNNoxfHBG/jvYCxkOPXK4SYDkAhiGFK4KGCwxd4K1wOXyx1J9Y6CIJ Ywt5cO2OC1oR14MRdc/ZZeJUiQbgvGm2HHCij9trrGcb8JSSl63t841NEgojFF4v qnaO3mjnbnASC5ROPDQ4K2wK2Id+GG7hbW4SZT0eDEbtjCgfdWijJp3SPD0Dl4KJ cd8nLA29fOBkDUZdvn7hsBz2YiyPQFVgsrihxjDKcAX9uUnORQ5Mu/odOhdiWY4t lWqO3sWG2mKISMu0uZXi5K+ESL0fAPfDeeIwWTyYewbOmA73IIJz/WD03nDPUMNK JI0ND1NlDLBTTJmlaQ2vKe2hAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUL/xu7BU8 GIt+GyjXa5VJY1LB8X0wHwYDVR0jBBgwFoAUn0kGwNTMlkXZv9kzZKI6WjPvWNsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEOTU4LzY3MkRCMDQ4QjM5 QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldO cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbjBrR3dOVE1sa1hadjlrelpLSTZXalB2V05zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDk1OC82NzJEQjA0OEIzOUIxMUVGODBGNjQzNUVDNEY5QUUwMi8wQTU4MTUyMkI1 RTIxMUVGQkVGNEJDNUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaD6sDANBgkqhkiG9w0BAQsFAAOCAQEAFc/nAYDOZp60V4Hg MA0g1YmQ2304BVTYasyqVOhj31I85LWLrP3dlIG0gIFBlVN1zM3E2iUIpbldca1j Aj26DViVNt1Tq3BNVa6CuCkjM+OVfgu9cWCed6xXu3ZUsmhjRSnqWYL3p9HE28aR PQg2h8yhsvTC1Lw5Hlyu5E6d+AYtWzAo/c+B+WHJU18DyTfZGJ6/ErmVWsJRvgwu 3Ykaatp7N8bC5FaCCX4kyw6Wqj3oqEFM7G0YkmC+rYUrQAl5uza4cx/k5R/bnrKT 3lvGDYeXeff4kCC2wiP8jS29eGmnGkRFqfoetaF94rrzbnzaA/cXtjZtdEHKUHI9 NTGAEA== -----END CERTIFICATE-----Generated at Wed Feb 5 22:56:55 2025 by rpki-client