$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/A3815188C9D211EFB961F44DC4F9AE02.roa File: A3815188C9D211EFB961F44DC4F9AE02.roa (raw, json) Hash identifier: q3EE6bhQvO1jqMvzi5TnaMDMrsSHuVeWmQU0kCxzZeQ= Subject key identifier: B8:68:F1:7A:4F:FC:17:F7:0C:7A:E0:54:DD:B8:85:DB:84:D2:ED:D7 Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Certificate serial: 04 Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/A3815188C9D211EFB961F44DC4F9AE02.roa Signing time: Fri 03 Jan 2025 13:00:00 +0000 ROA not before: Fri 03 Jan 2025 13:00:00 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 140641 IP address blocks: 160.250.204.0/24 maxlen: 24 160.250.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9 Validity Not Before: Jan 3 13:00:00 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6777df4f-a360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:4b:2c:87:2e:73:da:42:3e:7e:ee:a7:b4: 9e:7d:6e:4a:8b:e1:0d:36:20:09:bd:a7:d2:1a:f1: c9:3b:dd:40:db:85:2a:c0:ba:7b:61:7c:f9:fc:9a: f7:27:ba:99:c0:a1:9a:86:58:97:58:9e:01:3d:07: 3f:e4:45:1a:4f:f1:59:c6:f8:d4:c8:14:9d:68:7a: 79:5e:87:54:34:28:b0:7b:34:52:65:02:8f:74:a2: c5:a2:73:51:20:d4:a1:2b:a4:24:72:05:6a:7c:cd: f1:97:aa:a7:c7:c5:0c:c5:90:2a:aa:c3:ec:92:21: 73:d5:bc:46:c6:ab:e1:9b:d9:f5:83:1e:12:66:fc: 02:d9:b4:33:a6:96:6f:54:2f:c4:40:53:c1:bd:18: ca:6e:68:bf:98:dd:3f:d4:d8:fb:a9:18:94:26:fb: 2b:66:60:e2:0c:4c:d7:79:e7:f8:11:88:2e:97:0f: 1c:45:83:fc:ed:a6:91:c8:33:94:6b:10:89:66:27: 97:fc:6e:65:ff:a7:39:60:3e:e1:85:35:65:1f:a3: 0d:2a:e6:f1:3a:31:6b:0a:2d:d6:60:f7:a5:fb:6b: af:fe:20:c9:62:7e:3b:70:c9:7e:32:09:b4:57:ae: 2a:48:2e:22:6e:84:21:13:06:43:2c:b4:4d:4f:24: 77:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:68:F1:7A:4F:FC:17:F7:0C:7A:E0:54:DD:B8:85:DB:84:D2:ED:D7 X509v3 Authority Key Identifier: keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/A3815188C9D211EFB961F44DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.204.0/23 Signature Algorithm: sha256WithRSAEncryption 49:3d:5c:2c:80:12:f8:d9:4c:3d:cb:a4:a6:03:70:f8:14:e5: 32:62:68:6a:7e:56:68:b2:eb:04:27:84:a3:74:88:68:a9:79: e4:f6:37:db:6e:9a:54:47:6c:1c:bc:b5:3a:fe:c7:3e:eb:4a: e3:ad:17:6f:21:79:35:5c:86:8f:d9:8e:f8:dc:12:1d:fb:e1: ab:6f:8b:79:43:23:d5:c4:28:89:71:f0:ba:db:af:fa:ac:62: 69:a6:85:79:ae:a8:c4:39:de:1a:4a:b1:56:82:36:32:18:c4: 49:8a:6d:0f:99:50:6c:16:84:d5:1e:49:0c:1c:76:ab:9e:bc: 3e:e6:83:05:86:60:e3:27:31:da:4d:ab:0e:ad:27:a8:38:3f: df:be:f3:52:4a:79:52:62:38:42:e4:7a:ff:af:a8:f8:9d:f6: 57:1f:ee:c6:ec:77:92:eb:ba:31:73:33:82:c9:c7:c3:6f:e9: d1:f5:01:34:75:70:ae:8d:59:47:37:40:7e:46:37:f5:3c:2a: bb:e7:44:65:08:0a:01:15:17:4a:e6:d6:c6:70:f2:a7:d1:c0: 99:1c:93:d4:94:ff:31:45:4c:e7:37:a0:41:d0:fa:26:1b:34: 0c:21:1e:d6:e6:11:83:54:ec:3c:61:ac:3d:d2:1d:01:7e:c6: 3d:97:d4:4b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MjNEOTExMC8GA1UEBRMoQkU4QjQ3MzNCMUFFOEE0NzM2QjdFOTEzMjczM0Q2NTQw OTFFM0QyQjAeFw0yNTAxMDMxMzAwMDBaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NzdkZjRmLWEzNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpSUsshy5z2kI+fu6ntJ59bkqL4Q02IAm9p9Ia8ck73UDbhSrAunthfPn8mvcn upnAoZqGWJdYngE9Bz/kRRpP8VnG+NTIFJ1oenleh1Q0KLB7NFJlAo90osWic1Eg 1KErpCRyBWp8zfGXqqfHxQzFkCqqw+ySIXPVvEbGq+Gb2fWDHhJm/ALZtDOmlm9U L8RAU8G9GMpuaL+Y3T/U2PupGJQm+ytmYOIMTNd55/gRiC6XDxxFg/ztppHIM5Rr EIlmJ5f8bmX/pzlgPuGFNWUfow0q5vE6MWsKLdZg96X7a6/+IMlifjtwyX4yCbRX ripILiJuhCETBkMstE1PJHftAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUuGjxek/8 F/cMeuBU3biF24TS7dcwHwYDVR0jBBgwFoAUvotHM7Guikc2t+kTJzPWVAkePSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyM0Q5LzdCOEJENkNDQzlE MTExRUY5NzVCREM0QkM0RjlBRTAyL3ZvdEhNN0d1aWtjMnQta1RKelBXVkFrZVBT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdm90SE03R3Vpa2MydC1rVEp6UFdWQWtlUFNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNEOS83QjhCRDZDQ0M5RDExMUVGOTc1QkRDNEJDNEY5QUUwMi9BMzgxNTE4OEM5 RDIxMUVGQjk2MUY0NERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaD6zDANBgkqhkiG9w0BAQsFAAOCAQEAST1cLIAS+NlMPcuk pgNw+BTlMmJoan5WaLLrBCeEo3SIaKl55PY3226aVEdsHLy1Ov7HPutK460XbyF5 NVyGj9mO+NwSHfvhq2+LeUMj1cQoiXHwutuv+qxiaaaFea6oxDneGkqxVoI2MhjE SYptD5lQbBaE1R5JDBx2q568PuaDBYZg4ycx2k2rDq0nqDg/377zUkp5UmI4QuR6 /6+o+J32Vx/uxux3kuu6MXMzgsnHw2/p0fUBNHVwro1ZRzdAfkY39Twqu+dEZQgK ARUXSubWxnDyp9HAmRyT1JT/MUVM5zegQdD6Jhs0DCEe1uYRg1TsPGGsPdIdAX7G PZfUSw== -----END CERTIFICATE-----Generated at Wed Feb 5 23:10:00 2025 by rpki-client