$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/197A8B3CD23611EF9EA7495DC4F9AE02.roa File: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (raw, json) Hash identifier: cWI1CNGvgjuWGw7j5Q/yYWJkIlWwLO+A7fIPZIXhqyc= Subject key identifier: 26:E0:D5:37:CD:9D:58:96:F4:00:38:B1:99:A3:1F:93:AD:E3:6B:72 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: 02 Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/197A8B3CD23611EF9EA7495DC4F9AE02.roa Signing time: Tue 14 Jan 2025 05:12:07 +0000 ROA not before: Tue 14 Jan 2025 05:12:07 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 7604 IP address blocks: 160.250.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9 Validity Not Before: Jan 14 05:12:07 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6785f227-5d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:55:7a:b6:af:7e:1b:b0:5d:0c:5d:30:7d: d9:a2:7b:15:38:6c:48:a3:cf:6a:a0:27:94:fb:0a: 5a:d6:23:10:cd:0f:37:15:d7:50:48:43:8b:77:dd: c4:c4:86:0a:d8:82:f3:a6:d7:97:63:7d:44:00:3f: 2e:bf:ce:c4:4a:9d:25:d2:af:98:57:58:df:46:7b: 05:8d:91:a0:dc:f3:09:66:38:9c:24:72:b4:74:24: 90:0d:2d:3a:88:9a:de:be:3c:cd:40:01:64:d3:0c: cc:35:20:9f:5c:46:29:d3:0f:13:9e:b3:c7:b1:40: 4b:f3:88:be:b7:9d:3a:1d:d8:18:e5:36:29:7e:bf: 3a:cb:33:53:fa:a5:f6:ab:4d:61:52:e6:70:41:d2: 97:77:a2:f4:a9:15:11:0e:ae:c4:52:2c:a9:b9:7c: 6f:1a:28:00:c9:ab:32:e0:71:17:b3:96:38:e3:1f: 34:0f:49:ad:e7:5e:2a:c1:47:f4:ff:a3:55:0e:79: c0:e9:05:01:d1:28:b1:a4:48:27:68:64:ee:a1:3d: 47:99:3c:6b:cf:d7:4a:3c:ea:d6:5e:12:7d:54:c4: 89:5d:b8:a7:f7:29:e8:e3:a6:50:de:ce:a8:32:65: 69:c5:c0:34:ba:d1:00:2e:33:70:b8:00:cf:0e:3c: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E0:D5:37:CD:9D:58:96:F4:00:38:B1:99:A3:1F:93:AD:E3:6B:72 X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/197A8B3CD23611EF9EA7495DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.34.0/24 Signature Algorithm: sha256WithRSAEncryption b0:3b:02:32:62:d1:d9:de:c0:76:6f:59:22:f1:c4:95:08:1c: 34:a3:28:74:dd:fa:7b:53:b1:90:86:69:24:6b:b5:a2:e0:2d: 53:97:51:c6:4d:34:ed:a6:20:2c:67:54:f2:d7:e0:15:da:eb: 69:c3:aa:d3:6b:f4:76:50:ae:ed:91:83:85:32:7a:2c:af:1f: 81:e2:3c:8b:94:3a:27:a4:fb:1e:2a:52:ed:f4:2e:20:21:95: 7c:de:84:9a:56:97:b8:eb:3a:f9:1b:13:d4:18:84:07:88:ea: ba:8c:40:fc:63:58:0a:e9:28:e6:96:ee:cb:cf:37:61:0a:ee: 7e:e3:cc:45:33:ce:fb:c6:49:b6:7e:49:f9:24:30:68:aa:0c: ab:cc:c9:a2:f2:97:ca:f6:d2:f7:03:a4:32:73:b1:2f:fb:35: b4:b0:ce:7a:61:34:85:bb:c6:a8:88:84:5b:dd:ae:8e:b1:7b: c6:46:af:2b:46:5e:bd:eb:c8:1b:31:e6:16:db:a7:73:8f:ee: c9:bf:bc:c8:70:b4:1d:ad:24:0f:47:30:f6:c1:aa:7d:12:d2: 8d:62:8d:9c:fc:33:4b:03:b1:82:47:4f:35:93:05:16:90:9b: 56:24:71:b8:17:d5:06:2b:4e:fc:e2:a9:0e:27:b7:46:89:58: c6:fe:e9:18 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDRCOTExMC8GA1UEBRMoMjc2RENGM0YyMzQxQURDN0QwQkM0NkYzNjM0NEY3MTU2 MDBEOUE1ODAeFw0yNTAxMTQwNTEyMDdaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ODVmMjI3LTVkNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJLFV6tq9+G7BdDF0wfdmiexU4bEijz2qgJ5T7ClrWIxDNDzcV11BIQ4t33cTE hgrYgvOm15djfUQAPy6/zsRKnSXSr5hXWN9GewWNkaDc8wlmOJwkcrR0JJANLTqI mt6+PM1AAWTTDMw1IJ9cRinTDxOes8exQEvziL63nTod2BjlNil+vzrLM1P6pfar TWFS5nBB0pd3ovSpFREOrsRSLKm5fG8aKADJqzLgcRezljjjHzQPSa3nXirBR/T/ o1UOecDpBQHRKLGkSCdoZO6hPUeZPGvP10o86tZeEn1UxIlduKf3KejjplDezqgy ZWnFwDS60QAuM3C4AM8OPH05AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJuDVN82d WJb0ADixmaMfk63ja3IwHwYDVR0jBBgwFoAUJ23PPyNBrcfQvEbzY0T3FWANmlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNEI5L0NFODQwNTY4RDIz NTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1s Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSjIzUFB5TkJyY2ZRdkVielkwVDNGV0FObWxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDRCOS9DRTg0MDU2OEQyMzUxMUVGOEZFMjlDNUNDNEY5QUUwMi8xOTdBOEIzQ0Qy MzYxMUVGOUVBNzQ5NURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKD6IjANBgkqhkiG9w0BAQsFAAOCAQEAsDsCMmLR2d7Adm9Z IvHElQgcNKModN36e1OxkIZpJGu1ouAtU5dRxk007aYgLGdU8tfgFdrracOq02v0 dlCu7ZGDhTJ6LK8fgeI8i5Q6J6T7HipS7fQuICGVfN6EmlaXuOs6+RsT1BiEB4jq uoxA/GNYCuko5pbuy883YQrufuPMRTPO+8ZJtn5J+SQwaKoMq8zJovKXyvbS9wOk MnOxL/s1tLDOemE0hbvGqIiEW92ujrF7xkavK0ZevevIGzHmFtunc4/uyb+8yHC0 Ha0kD0cw9sGqfRLSjWKNnPwzSwOxgkdPNZMFFpCbViRxuBfVBitO/OKpDie3RolY xv7pGA== -----END CERTIFICATE-----Generated at Wed Feb 5 22:49:00 2025 by rpki-client