$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/4E2CAC386E8711EF8521ED6FC4F9AE02.roa File: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (raw, json) Hash identifier: rFJbuDYL88Z9KeNowFp3y8pDODtibJ7P1KjjzQ7u73o= Subject key identifier: 93:F3:8F:76:CE:8E:19:AD:2E:AB:32:22:EB:40:1C:66:EE:00:4E:E4 Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Certificate serial: D6 Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/4E2CAC386E8711EF8521ED6FC4F9AE02.roa Signing time: Thu 13 Feb 2025 07:08:33 +0000 ROA not before: Thu 13 Feb 2025 07:08:33 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 140627 IP address blocks: 157.10.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 04:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13A6 Validity Not Before: Feb 13 07:08:33 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ad9a70-a1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:98:de:da:65:fe:88:8d:39:3d:95:81:3e:f0: 4d:5f:60:b3:cc:bf:34:92:1b:fa:15:65:74:b7:87: 2c:26:e4:42:c2:89:31:e7:89:a4:a0:a9:1b:82:e7: aa:8a:80:69:d3:ee:af:42:ba:13:71:49:f4:2d:df: 15:db:2f:b5:06:45:2d:bc:00:b2:5b:7d:79:3d:63: 42:2a:d7:0a:fa:57:73:3b:35:74:f5:9a:26:83:f8: 63:af:c1:57:24:09:87:88:6f:36:4c:b3:f0:f8:e6: 1d:1e:6d:ea:b1:91:d8:2e:07:26:62:30:34:a5:3d: ce:92:7f:f8:c5:8d:ab:0e:f8:91:8c:30:7b:0e:04: 7c:2a:ad:33:cf:36:f0:85:6e:2a:a1:51:76:75:b2: 31:d7:79:f7:bf:7c:3b:5a:c8:95:7f:05:14:1b:5f: 25:ce:52:1c:80:dc:28:2e:94:4d:f3:79:ad:a9:fe: f3:3a:fd:19:d1:a3:0b:aa:7b:f4:2a:8d:c8:b7:9d: 87:09:b1:88:c6:28:2e:92:bd:02:f6:a6:e0:f4:80: 4c:87:e5:f0:c5:98:bf:bb:dc:f5:59:ce:77:d1:bc: 7b:3b:86:31:36:08:49:6b:f9:5f:eb:41:ed:6d:45: 3c:6a:60:ec:3b:08:d6:37:f8:1e:97:b7:4e:20:a6: 68:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F3:8F:76:CE:8E:19:AD:2E:AB:32:22:EB:40:1C:66:EE:00:4E:E4 X509v3 Authority Key Identifier: keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/4E2CAC386E8711EF8521ED6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.104.0/24 Signature Algorithm: sha256WithRSAEncryption 59:c8:70:b4:53:31:ca:de:f2:0e:c4:ac:e4:a4:c9:96:cf:e9: 5f:79:34:85:c1:71:6e:b5:26:8e:76:24:7c:ce:87:a7:2d:19: 43:90:01:9e:9f:83:c3:c6:8d:f2:a6:be:01:4f:1f:3f:44:04: a5:19:e3:db:12:9b:75:e9:f8:c0:fd:10:66:e7:75:13:9f:43: 56:bb:60:aa:cd:1e:c8:08:1d:dc:9d:b1:d4:f3:5c:4a:82:cb: cc:cc:fc:d1:44:e4:c3:00:3e:bb:ac:dd:d5:9d:bb:cc:00:bb: 31:06:3f:60:3c:78:b5:d2:c3:9c:15:a8:be:8f:95:ee:50:0e: 99:4a:ab:0a:82:9b:52:3b:2d:b7:f1:46:eb:c3:db:40:2d:c1: 77:81:84:e2:b7:2c:e2:9b:35:21:c3:be:6f:2c:ed:19:1a:d2: b1:99:76:19:9b:5a:02:73:e3:0f:87:80:d3:5e:b1:2b:f3:95: ed:a2:82:56:ec:e0:34:52:fd:15:7a:03:f3:43:e1:dc:45:bd: de:c3:d3:65:e4:ca:fe:b5:7c:a8:6b:98:a9:1b:6c:e7:26:b3: 9a:c9:d1:38:70:91:fd:b0:ee:38:38:a0:f0:24:46:e6:ec:bb: 19:0f:b2:eb:21:3f:0d:3d:c7:db:95:2c:46:35:98:41:5b:bf: e7:9f:b4:a2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQTYxMTAvBgNVBAUTKEM0NzU4OTk2MkVEMEQzODkyNjIyQkU1QjdCOEJFRUZF OENFNzg4QTcwHhcNMjUwMjEzMDcwODMzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FkOWE3MC1hMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5je2mX+iI05PZWBPvBNX2CzzL80khv6FWV0t4csJuRCwokx54mkoKkbgueq ioBp0+6vQroTcUn0Ld8V2y+1BkUtvACyW315PWNCKtcK+ldzOzV09Zomg/hjr8FX JAmHiG82TLPw+OYdHm3qsZHYLgcmYjA0pT3Okn/4xY2rDviRjDB7DgR8Kq0zzzbw hW4qoVF2dbIx13n3v3w7WsiVfwUUG18lzlIcgNwoLpRN83mtqf7zOv0Z0aMLqnv0 Ko3It52HCbGIxigukr0C9qbg9IBMh+XwxZi/u9z1Wc530bx7O4YxNghJa/lf60Ht bUU8amDsOwjWN/gel7dOIKZopwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJPzj3bO jhmtLqsyIutAHGbuAE7kMB8GA1UdIwQYMBaAFMR1iZYu0NOJJiK+W3uL7v6M54in MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNBNi84MDc5NEM5QUMw OEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0a21JcjViZTR2dV9vem5p S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hIV0psaTdRMDRrbUlyNWJlNHZ1X296bmlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTEzQTYvODA3OTRDOUFDMDhDMTFFRUJEODA1QjI0QzRGOUFFMDIvNEUyQ0FDMzg2 RTg3MTFFRjg1MjFFRDZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdCmgwDQYJKoZIhvcNAQELBQADggEBAFnIcLRTMcre8g7E rOSkyZbP6V95NIXBcW61Jo52JHzOh6ctGUOQAZ6fg8PGjfKmvgFPHz9EBKUZ49sS m3Xp+MD9EGbndROfQ1a7YKrNHsgIHdydsdTzXEqCy8zM/NFE5MMAPrus3dWdu8wA uzEGP2A8eLXSw5wVqL6Ple5QDplKqwqCm1I7LbfxRuvD20AtwXeBhOK3LOKbNSHD vm8s7Rka0rGZdhmbWgJz4w+HgNNesSvzle2iglbs4DRS/RV6A/ND4dxFvd7D02Xk yv61fKhrmKkbbOcms5rJ0Thwkf2w7jg4oPAkRubsuxkPsushPw09x9uVLEY1mEFb v+eftKI= -----END CERTIFICATE-----Generated at Tue Mar 11 05:05:26 2025 by rpki-client