$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/5D563164AF3411EFB5B51A57C4F9AE02.roa File: 5D563164AF3411EFB5B51A57C4F9AE02.roa (raw, json) Hash identifier: Mjf+9MFV/8wopOF7hLs3Tt14yZvRKLf5RcXcRhi35uI= Subject key identifier: C7:45:B1:12:1E:94:D8:25:43:BD:24:DA:69:61:02:A8:23:8C:4D:6D Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 0FCB Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/5D563164AF3411EFB5B51A57C4F9AE02.roa Signing time: Mon 30 Dec 2024 14:24:50 +0000 ROA not before: Mon 30 Dec 2024 14:24:50 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9498 IP address blocks: 128.185.0.0/16 maxlen: 24 152.52.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Feb 2025 14:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4043 (0xfcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3 Validity Not Before: Dec 30 14:24:50 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6772ad32-cdd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:f0:37:d2:f3:2c:a4:4f:18:a5:4f:8b:ca: 57:34:45:43:f1:b5:63:af:96:3f:06:0d:05:c8:28: 00:05:d0:42:9f:69:2b:27:51:c3:4c:60:3c:91:7c: de:14:d2:be:d4:18:b3:55:24:53:dc:99:65:37:69: 63:3e:3c:ae:bb:e1:01:22:89:2f:f7:6e:e5:16:00: 29:0d:c4:5f:ab:e4:1a:99:c7:62:52:52:2e:56:ac: 6b:36:74:a1:f4:47:28:ae:8f:4e:f8:97:40:3a:0a: 6d:a3:d9:4f:0b:1a:4c:82:59:d4:90:61:0d:f7:a1: dd:c1:b1:11:f0:dc:24:1b:00:b8:28:17:84:8f:d9: cd:b1:da:5d:5a:58:2e:ee:20:86:f8:8a:80:96:14: 2a:36:58:85:85:f0:85:85:91:67:ed:b8:47:4b:6e: 16:9a:3d:9c:12:0f:3d:9c:59:ad:d4:ad:26:26:ba: 6b:2a:a1:4d:b3:92:ca:cb:43:61:2b:7e:1a:99:7c: 04:2b:17:51:0d:94:2a:e7:8a:84:5a:81:b3:13:a2: d1:1b:53:31:0c:7d:6e:b4:44:08:5d:73:e1:ad:6f: 26:c4:20:ad:19:f8:f9:e0:c8:74:9b:fe:0e:67:eb: 87:db:42:9c:a0:13:39:be:f9:f0:6c:74:92:b5:3f: ee:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:45:B1:12:1E:94:D8:25:43:BD:24:DA:69:61:02:A8:23:8C:4D:6D X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/5D563164AF3411EFB5B51A57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 128.185.0.0/16 152.52.0.0/16 Signature Algorithm: sha256WithRSAEncryption 49:5a:89:e1:5d:e7:ec:30:14:cd:fd:9b:3c:bd:9f:88:b4:21: f4:90:be:d9:4e:5f:01:7b:c5:26:63:aa:e8:b2:37:30:1f:9a: 71:53:8b:a9:71:64:71:64:24:c1:86:cd:20:e3:57:49:ce:26: e7:dc:af:68:39:c5:21:c5:36:bb:8b:c3:3e:67:ea:66:0c:4e: 94:37:db:4d:d6:33:10:1a:2d:a2:da:e2:fc:10:ba:ba:32:91: ef:6e:4c:fc:42:a4:72:24:b9:69:1b:5f:49:59:36:34:46:80: 3a:bf:58:6d:29:d9:6d:4f:f7:24:45:ca:56:dc:e2:5f:77:c4: 42:05:7f:66:bd:0c:9c:f1:86:2d:a0:91:38:1b:fa:63:84:1d: 34:dc:4f:6a:b6:d0:c8:66:cc:af:c1:77:66:1b:59:91:79:b9: 77:31:18:56:4b:bf:c7:ff:f7:cc:b3:2a:1d:9a:4f:47:89:15: be:ec:d7:a2:f0:47:66:13:93:2e:af:1d:b5:be:d3:59:14:9d: 3f:21:45:cf:21:70:66:25:29:10:3d:5a:53:92:a8:f5:15:b5: cf:85:be:64:ee:6c:a9:f9:fc:24:ba:89:68:50:59:64:1c:11: 67:e2:ca:ff:92:78:56:f8:c2:60:8f:e0:41:8c:51:7d:5c:de: 18:9c:b3:41 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICD8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjQxMjMwMTQyNDUwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzcyYWQzMi1jZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9DwN9LzLKRPGKVPi8pXNEVD8bVjr5Y/Bg0FyCgABdBCn2krJ1HDTGA8kXze FNK+1BizVSRT3JllN2ljPjyuu+EBIokv927lFgApDcRfq+QamcdiUlIuVqxrNnSh 9Ecoro9O+JdAOgpto9lPCxpMglnUkGEN96HdwbER8NwkGwC4KBeEj9nNsdpdWlgu 7iCG+IqAlhQqNliFhfCFhZFn7bhHS24Wmj2cEg89nFmt1K0mJrprKqFNs5LKy0Nh K34amXwEKxdRDZQq54qEWoGzE6LRG1MxDH1utEQIXXPhrW8mxCCtGfj54Mh0m/4O Z+uH20KcoBM5vvnwbHSStT/ucQIDAQABo4ICmTCCApUwHQYDVR0OBBYEFMdFsRIe lNglQ70k2mlhAqgjjE1tMB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTY0QjMvMkE1OTQwRjI0QkIzMTFFOUFCMTUxQzE3QzRGOUFFMDIvNUQ1NjMxNjRB RjM0MTFFRkI1QjUxQTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIwYIKwYBBQUHAQcBAf8E FDASMBAEAgABMAoDAwCAuQMDAJg0MA0GCSqGSIb3DQEBCwUAA4IBAQBJWonhXefs MBTN/Zs8vZ+ItCH0kL7ZTl8Be8UmY6rosjcwH5pxU4upcWRxZCTBhs0g41dJzibn 3K9oOcUhxTa7i8M+Z+pmDE6UN9tN1jMQGi2i2uL8ELq6MpHvbkz8QqRyJLlpG19J WTY0RoA6v1htKdltT/ckRcpW3OJfd8RCBX9mvQyc8YYtoJE4G/pjhB003E9qttDI ZsyvwXdmG1mRebl3MRhWS7/H//fMsyodmk9HiRW+7Nei8EdmE5Murx21vtNZFJ0/ IUXPIXBmJSkQPVpTkqj1FbXPhb5k7myp+fwkuoloUFlkHBFn4sr/knhW+MJgj+BB jFF9XN4YnLNB -----END CERTIFICATE-----Generated at Wed Feb 19 20:33:45 2025 by rpki-client