$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/C20F79C4BEC711EFB3955851C4F9AE02.roa File: C20F79C4BEC711EFB3955851C4F9AE02.roa (raw, json) Hash identifier: VTGuDVySoTaiWxAbdd/1KW1PWx6PDU5QdYkfoW8ucbc= Subject key identifier: 0D:48:60:F9:21:E8:D0:C1:A1:80:95:4A:5A:A6:20:DE:F1:07:98:7A Certificate issuer: /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Certificate serial: 02 Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/C20F79C4BEC711EFB3955851C4F9AE02.roa Signing time: Fri 20 Dec 2024 11:44:24 +0000 ROA not before: Fri 20 Dec 2024 11:44:24 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 137209 IP address blocks: 160.250.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 05:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618 Validity Not Before: Dec 20 11:44:24 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67655897-8e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:ce:d5:57:75:59:14:37:ef:d3:1f:95:84: f5:8d:d2:a6:b2:5a:19:48:3c:07:f8:dd:fb:66:e9: 2e:fc:07:b1:9c:23:0e:3f:97:fc:68:ec:da:97:ce: 4c:3c:70:65:10:e2:e3:97:4a:f7:e5:ea:3c:54:31: d9:4c:63:d0:6f:2e:83:eb:f6:d8:56:27:1b:42:8f: b7:26:ee:24:64:40:87:12:40:5b:d3:12:35:17:d8: e1:5f:18:1d:f4:1e:3f:f5:7e:39:de:41:cd:5d:b2: ff:7c:fb:64:5c:4e:33:4b:c9:59:aa:97:08:51:0d: 6c:02:2e:c4:5f:f4:62:95:57:f0:b6:d3:7d:ee:5c: 36:8d:3f:10:69:93:08:f8:02:c2:0c:3b:01:35:55: cc:b1:b1:e9:f9:74:05:b3:0a:e7:38:cf:72:77:da: 5f:89:d3:c4:c3:b4:20:45:c1:30:5e:26:a1:47:86: eb:19:ab:f3:13:e8:93:cf:c5:15:39:af:1b:23:9d: 7b:c1:45:74:b2:96:69:cd:b6:f5:cf:86:e9:ec:96: 10:72:89:a9:32:34:56:4a:a3:59:0d:13:4d:60:14: 25:c9:02:ab:26:0d:48:9b:d1:35:0f:1c:71:f0:02: 8f:72:36:bf:3d:d7:95:8f:67:ed:37:95:f8:37:c8: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:48:60:F9:21:E8:D0:C1:A1:80:95:4A:5A:A6:20:DE:F1:07:98:7A X509v3 Authority Key Identifier: keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/C20F79C4BEC711EFB3955851C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.254.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:dd:c9:de:24:bd:1a:9b:d1:2f:56:09:a1:e4:c1:1e:1b:80: ef:ea:97:3c:0e:93:38:6f:87:fb:6c:62:25:9b:02:7e:55:00: 87:bb:84:f5:8d:99:37:ef:cb:58:8c:ae:1c:2a:10:82:d4:23: 64:14:b7:ec:13:df:6a:d2:59:95:4c:29:07:d9:10:68:6c:42: 61:45:1f:66:a6:18:b7:f4:d5:17:89:ab:52:fa:f7:6d:da:e0: 14:62:4a:2d:ab:dc:63:27:c8:46:73:c8:6b:a2:0f:6a:03:91: ce:b9:ad:f0:9a:01:af:f3:ff:61:ce:64:ac:59:f1:45:ca:09: 09:96:2d:5b:73:22:95:fd:53:1c:f6:41:03:ae:eb:6e:d2:a3: 39:74:98:fe:d3:c4:0e:d7:9d:96:cf:e6:dd:03:c0:1a:b4:64: ae:30:2d:8a:99:bb:75:df:37:a3:54:99:b5:f8:7a:8a:9f:ae: 83:bc:8d:da:df:44:0c:39:1b:d3:02:22:ba:e9:89:77:45:48: 49:04:1b:6b:82:c1:5b:bc:73:63:7c:67:f0:c4:f6:4d:73:92: 77:0f:1d:d5:11:ee:13:59:d9:4a:db:12:b7:da:63:80:ce:0b: a5:9b:b8:b3:bb:ae:f6:cd:7d:c4:2d:5d:1c:4e:45:7e:b2:5f: bb:79:98:83 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTYxODExMC8GA1UEBRMoQzEzQThBQkQ1NzA0M0FBRkE1OEY1ODUzQkUyRkFCQ0E5 RjI2RjBFRDAeFw0yNDEyMjAxMTQ0MjRaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NjU1ODk3LThlNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzYc7VV3VZFDfv0x+VhPWN0qayWhlIPAf43ftm6S78B7GcIw4/l/xo7NqXzkw8 cGUQ4uOXSvfl6jxUMdlMY9BvLoPr9thWJxtCj7cm7iRkQIcSQFvTEjUX2OFfGB30 Hj/1fjneQc1dsv98+2RcTjNLyVmqlwhRDWwCLsRf9GKVV/C2033uXDaNPxBpkwj4 AsIMOwE1Vcyxsen5dAWzCuc4z3J32l+J08TDtCBFwTBeJqFHhusZq/MT6JPPxRU5 rxsjnXvBRXSylmnNtvXPhunslhByiakyNFZKo1kNE01gFCXJAqsmDUib0TUPHHHw Ao9yNr8915WPZ+03lfg3yLePAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUDUhg+SHo 0MGhgJVKWqYg3vEHmHowHwYDVR0jBBgwFoAUwTqKvVcEOq+lj1hTvi+ryp8m8O0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNjE4L0U2RjY2REQyQkVD MzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3EtbGoxaFR2aS1yeXA4bThP MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd1RxS3ZWY0VPcS1sajFoVHZpLXJ5cDhtOE8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTYxOC9FNkY2NkREMkJFQzMxMUVGQUZEQzFEMjlDNEY5QUUwMi9DMjBGNzlDNEJF QzcxMUVGQjM5NTU4NTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaD6/jANBgkqhkiG9w0BAQsFAAOCAQEAOt3J3iS9GpvRL1YJ oeTBHhuA7+qXPA6TOG+H+2xiJZsCflUAh7uE9Y2ZN+/LWIyuHCoQgtQjZBS37BPf atJZlUwpB9kQaGxCYUUfZqYYt/TVF4mrUvr3bdrgFGJKLavcYyfIRnPIa6IPagOR zrmt8JoBr/P/Yc5krFnxRcoJCZYtW3Milf1THPZBA67rbtKjOXSY/tPEDtedls/m 3QPAGrRkrjAtipm7dd83o1SZtfh6ip+ug7yN2t9EDDkb0wIiuumJd0VISQQba4LB W7xzY3xn8MT2TXOSdw8d1RHuE1nZStsSt9pjgM4LpZu4s7uu9s19xC1dHE5FfrJf u3mYgw== -----END CERTIFICATE-----Generated at Wed Feb 5 23:11:38 2025 by rpki-client