$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/4426B244F6A011EC8E197883C4F9AE02.roa File: 4426B244F6A011EC8E197883C4F9AE02.roa (raw, json) Hash identifier: tPqGcusMyqiuDoF3oCEh1MkgveCq5i4UTPc8YjbijQA= Subject key identifier: 05:3B:38:C0:7E:87:E7:BE:20:B2:78:59:37:05:E9:CA:18:47:1B:92 Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Certificate serial: 129B Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/4426B244F6A011EC8E197883C4F9AE02.roa Signing time: Sat 08 Mar 2025 17:06:16 +0000 ROA not before: Sat 08 Mar 2025 17:06:16 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55002 IP address blocks: 167.179.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4763 (0x129b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436 Validity Not Before: Mar 8 17:06:16 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67cc7908-267f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d4:c1:33:b7:9e:4a:80:e4:3e:82:43:6a:8f: 8c:0f:7b:0b:00:83:c4:e0:75:a9:84:fd:9d:d7:4c: 37:08:bb:89:51:5b:62:0d:09:f1:51:5c:85:ab:91: 4b:01:e0:dd:1f:d0:5b:10:7a:23:63:8b:77:0b:2c: 32:a3:13:05:4b:57:10:b8:4a:49:6b:0c:bc:5d:3c: d4:2c:5f:d7:ac:44:34:6e:6b:e3:7d:dd:07:88:cb: 53:b6:ec:c4:1b:17:a5:a7:81:44:23:a9:8a:39:b8: c2:03:4e:5c:71:0b:22:0e:38:9c:27:0b:ca:26:81: 57:16:fb:11:05:36:cc:45:ad:0b:30:ba:2e:f3:90: 99:00:dc:39:62:4b:31:87:21:ba:15:8f:22:15:42: 1a:8d:22:19:70:3d:5e:25:33:b0:87:f7:49:4a:a6: 32:bb:56:e9:67:e4:0f:92:be:5f:97:97:4c:ff:0b: 75:cc:26:aa:d2:5b:da:98:53:25:d6:19:07:43:44: 47:e4:0d:74:6b:a3:1a:e0:40:b9:01:e8:f9:a2:53: e2:aa:a4:1f:6a:65:ed:bc:a3:53:ca:fe:b5:8e:7a: 2e:1a:16:a8:2d:cd:25:14:fb:66:22:40:61:5a:4f: 7e:21:77:d4:6d:64:ad:8c:0d:52:ff:a8:e3:18:7c: 93:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3B:38:C0:7E:87:E7:BE:20:B2:78:59:37:05:E9:CA:18:47:1B:92 X509v3 Authority Key Identifier: keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/4426B244F6A011EC8E197883C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.179.8.0/21 Signature Algorithm: sha256WithRSAEncryption 7a:1e:d6:0a:9c:64:4e:37:b2:16:6a:f7:2e:39:5f:12:4a:95: 7a:cb:42:83:4f:3d:d5:0e:90:a3:cd:3a:12:e3:7b:5d:2d:15: 0d:93:c6:2c:25:3e:f4:04:55:e9:a7:ea:fb:7c:9b:f2:27:26: 6a:52:e0:ea:f4:36:6c:df:af:f8:10:1c:3a:a2:24:eb:fc:ba: ca:c5:db:ec:8d:65:b2:c4:08:69:5f:c0:53:59:94:cc:ea:08: 62:3c:86:69:12:49:ef:ad:b8:35:b6:e7:09:83:55:90:b0:36: 8a:e6:9f:af:0b:64:d3:10:37:be:67:63:fc:96:a5:aa:c7:ce: 82:c6:25:80:f9:92:bc:62:aa:ba:a9:ab:9d:d0:b1:18:61:e0: 85:e9:3d:3f:77:8b:57:c2:9a:2c:1a:f2:a2:2c:0c:2c:f6:f8: c9:95:60:06:c6:2c:83:63:fb:d8:0d:b1:5c:2f:72:e7:57:df: 84:b3:71:e6:32:3a:a8:e3:4c:fe:33:f2:41:b0:44:52:fa:99: a8:03:4b:73:49:88:50:59:05:62:dc:51:40:13:0b:f9:7e:20: 30:00:5d:fd:76:8a:e0:c1:fe:c2:86:1e:63:b6:dc:b4:39:e9: 81:1e:82:3f:23:99:d5:3b:49:c7:e1:b5:c1:14:95:df:45:29: 93:55:8f:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF QzhGOUQzNjcwHhcNMjUwMzA4MTcwNjE2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2NjNzkwOC0yNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NTBM7eeSoDkPoJDao+MD3sLAIPE4HWphP2d10w3CLuJUVtiDQnxUVyFq5FL AeDdH9BbEHojY4t3CywyoxMFS1cQuEpJawy8XTzULF/XrEQ0bmvjfd0HiMtTtuzE Gxelp4FEI6mKObjCA05ccQsiDjicJwvKJoFXFvsRBTbMRa0LMLou85CZANw5Yksx hyG6FY8iFUIajSIZcD1eJTOwh/dJSqYyu1bpZ+QPkr5fl5dM/wt1zCaq0lvamFMl 1hkHQ0RH5A10a6Ma4EC5Aej5olPiqqQfamXtvKNTyv61jnouGhaoLc0lFPtmIkBh Wk9+IXfUbWStjA1S/6jjGHyTlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAU7OMB+ h+e+ILJ4WTcF6coYRxuSMB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE0MzYvQTMwQjVBNEFDNzhDMTFFOEE3NkNEOTE0QzRGOUFFMDIvNDQyNkIyNDRG NkEwMTFFQzhFMTk3ODgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAOnswgwDQYJKoZIhvcNAQELBQADggEBAHoe1gqcZE43shZq 9y45XxJKlXrLQoNPPdUOkKPNOhLje10tFQ2TxiwlPvQEVemn6vt8m/InJmpS4Or0 Nmzfr/gQHDqiJOv8usrF2+yNZbLECGlfwFNZlMzqCGI8hmkSSe+tuDW25wmDVZCw Normn68LZNMQN75nY/yWparHzoLGJYD5krxiqrqpq53QsRhh4IXpPT93i1fCmiwa 8qIsDCz2+MmVYAbGLINj+9gNsVwvcudX34SzceYyOqjjTP4z8kGwRFL6magDS3NJ iFBZBWLcUUATC/l+IDAAXf12iuDB/sKGHmO23LQ56YEegj8jmdU7ScfhtcEUld9F KZNVj9g= -----END CERTIFICATE-----Generated at Thu Mar 13 21:56:32 2025 by rpki-client