$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0CA779BCAB1011EFA3DA074FC4F9AE02.roa File: 0CA779BCAB1011EFA3DA074FC4F9AE02.roa (raw, json) Hash identifier: ShqtPEKOG/iyYoO0BEOIEulbBrU9A5IoBT/PSbSLgg8= Subject key identifier: 75:EC:49:04:9E:DA:55:93:BF:BB:9B:03:AC:FC:93:EB:B5:6E:8C:0D Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0447 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0CA779BCAB1011EFA3DA074FC4F9AE02.roa Signing time: Mon 25 Nov 2024 09:31:29 +0000 ROA not before: Mon 25 Nov 2024 09:31:29 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 152947 IP address blocks: 160.25.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1095 (0x447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Nov 25 09:31:29 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=674443f1-5325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:2c:88:06:32:d6:26:af:11:68:82:cd:6c: 9b:2a:72:b9:82:e8:fc:58:ad:14:e5:69:49:9e:f5: dd:b8:db:4f:db:40:b9:de:a2:f0:8c:59:7a:ee:87: ad:c4:7d:25:f3:f2:4a:b3:92:02:9b:2d:1d:48:78: 45:17:6a:83:4b:63:77:61:7e:82:13:64:61:45:2f: a6:a6:35:20:a9:79:4b:bf:38:c7:dd:b2:e5:ee:91: ae:5d:60:40:72:9a:2e:be:5f:35:2a:c2:0e:8d:99: ef:0b:b6:1f:81:cf:eb:ed:b3:8c:e3:14:9c:d2:b0: 87:41:e0:98:9e:d4:e1:94:7e:6a:c5:f9:a8:d0:74: 9c:17:b0:ba:66:ed:fd:43:14:43:b8:14:3f:b4:d6: 63:8f:3b:23:0d:2d:15:03:a1:d3:41:36:16:6b:8a: 46:ca:3d:10:8f:8e:9c:ca:74:14:3b:a9:37:dc:5a: 71:d1:72:c5:23:08:6f:7d:f1:fc:34:5d:83:73:11: de:04:98:f2:c6:cb:7e:a9:eb:83:a6:38:98:03:bb: 20:96:e8:ec:85:81:4e:7e:0d:dc:8d:02:62:2e:19: 54:3d:91:d4:84:3e:47:23:b7:39:48:d5:c7:4e:6d: 1d:50:6c:58:94:d8:50:03:d6:70:e6:1f:37:dd:23: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EC:49:04:9E:DA:55:93:BF:BB:9B:03:AC:FC:93:EB:B5:6E:8C:0D X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0CA779BCAB1011EFA3DA074FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.148.0/23 Signature Algorithm: sha256WithRSAEncryption 04:b1:21:6c:c0:66:9b:81:10:f1:16:4d:7f:3d:0f:6c:ff:9f: 52:55:1b:d7:ea:5b:60:0a:6e:f2:3d:eb:19:19:bb:b1:53:47: a6:24:d9:d7:30:5d:c6:4e:35:65:80:cc:0f:b1:38:07:fd:1b: 58:d8:d7:8a:91:74:90:9c:68:06:25:bf:dd:e2:4d:f6:91:7c: 86:c3:08:64:d7:01:c4:5c:80:41:49:0d:e8:8d:ec:3c:4f:87: eb:aa:35:2d:c7:9e:96:4a:e6:11:58:ae:f7:5d:c9:2b:d7:1c: ee:9d:3e:44:d7:43:53:bf:d5:17:a4:0e:cb:b1:ec:74:60:f2: 1a:8a:53:f4:8e:e6:43:36:7b:8b:f9:99:3d:85:23:ce:a6:8d: df:42:7a:50:1a:18:62:b5:88:21:bd:6e:4f:b2:0b:82:07:e8: 29:b0:6d:b1:5d:d8:dc:08:ef:c7:39:7d:19:1f:97:59:2d:0a: e1:95:f2:e5:65:49:39:b6:5d:d0:af:69:55:29:ea:45:c8:99: 05:2d:ff:5a:75:d8:c0:e8:33:12:06:92:9d:ea:3a:3e:ca:76: 1f:b7:68:36:26:14:6c:68:aa:d0:18:97:9f:6d:ed:89:da:71: bc:dc:05:66:3b:20:ad:9c:9e:33:c2:d7:27:ba:e0:c9:fe:36: a6:af:76:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQxMTI1MDkzMTI5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ0NDNmMS01MzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3YsiAYy1iavEWiCzWybKnK5guj8WK0U5WlJnvXduNtP20C53qLwjFl67oet xH0l8/JKs5ICmy0dSHhFF2qDS2N3YX6CE2RhRS+mpjUgqXlLvzjH3bLl7pGuXWBA cpouvl81KsIOjZnvC7Yfgc/r7bOM4xSc0rCHQeCYntThlH5qxfmo0HScF7C6Zu39 QxRDuBQ/tNZjjzsjDS0VA6HTQTYWa4pGyj0Qj46cynQUO6k33Fpx0XLFIwhvffH8 NF2DcxHeBJjyxst+qeuDpjiYA7sglujshYFOfg3cjQJiLhlUPZHUhD5HI7c5SNXH Tm0dUGxYlNhQA9Zw5h833SMUbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHXsSQSe 2lWTv7ubA6z8k+u1bowNMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMENBNzc5QkNB QjEwMTFFRkEzREEwNzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGZQwDQYJKoZIhvcNAQELBQADggEBAASxIWzAZpuBEPEW TX89D2z/n1JVG9fqW2AKbvI96xkZu7FTR6Yk2dcwXcZONWWAzA+xOAf9G1jY14qR dJCcaAYlv93iTfaRfIbDCGTXAcRcgEFJDeiN7DxPh+uqNS3HnpZK5hFYrvddySvX HO6dPkTXQ1O/1RekDsux7HRg8hqKU/SO5kM2e4v5mT2FI86mjd9CelAaGGK1iCG9 bk+yC4IH6CmwbbFd2NwI78c5fRkfl1ktCuGV8uVlSTm2XdCvaVUp6kXImQUt/1p1 2MDoMxIGkp3qOj7Kdh+3aDYmFGxoqtAYl59t7YnacbzcBWY7IK2cnjPC1ye64Mn+ NqavdlY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:01 2025 by rpki-client