$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/382A68AADFB411EF906ED349C4F9AE02.roa File: 382A68AADFB411EF906ED349C4F9AE02.roa (raw, json) Hash identifier: nkOf/XTpymMfxEKWyd+N5JgW4iYPdSTHalYEA2LC4jA= Subject key identifier: BC:68:14:32:B3:C1:B6:84:6F:12:CD:C6:42:37:56:E7:0A:71:BF:27 Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: A4 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/382A68AADFB411EF906ED349C4F9AE02.roa Signing time: Fri 31 Jan 2025 09:17:40 +0000 ROA not before: Fri 31 Jan 2025 09:17:40 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 14618 IP address blocks: 160.20.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 07:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2 Validity Not Before: Jan 31 09:17:40 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=679c9534-a32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:0d:f5:51:df:74:eb:d2:cc:17:04:37:b1: 8c:6c:3b:db:ad:6a:7a:10:eb:40:b7:2e:f6:c4:bf: e7:f7:b4:8a:50:91:d6:b2:78:98:6a:65:33:7d:a9: e1:01:c3:de:54:a8:bf:8e:24:13:7e:ce:d8:65:b6: 37:55:a7:9a:f1:82:1f:76:69:25:0b:21:7e:2f:9b: 69:a1:24:e3:ed:9e:01:1e:a3:e8:4e:0a:d7:a9:85: 7a:b2:25:9f:15:94:bb:58:59:ba:95:b3:9c:25:77: b8:a6:32:99:0b:46:98:8b:27:0a:6b:0e:93:15:55: 6d:6b:28:e0:cc:09:7e:f5:f1:3a:65:d2:e0:35:f0: c4:0e:d5:09:ae:56:af:3b:99:5e:4a:6f:62:42:8d: de:35:76:b2:0e:d8:16:be:e2:6f:dd:9b:2f:c5:c9: db:72:af:4e:ab:08:a9:12:2e:a4:22:e0:b5:44:0b: e8:25:0e:7d:70:4d:6a:84:5b:b5:0d:91:4a:a5:42: ed:e2:c8:86:4f:11:16:e4:73:bd:63:11:c8:26:f7: ed:16:e5:f7:ff:d8:c9:cd:87:e2:e7:3e:b9:e7:da: 2d:88:4e:16:ec:2b:94:28:94:77:71:63:b1:f8:d0: 72:a8:ab:8d:2b:12:70:f6:e0:30:70:33:25:23:f1: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:68:14:32:B3:C1:B6:84:6F:12:CD:C6:42:37:56:E7:0A:71:BF:27 X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/382A68AADFB411EF906ED349C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.20.121.0/24 Signature Algorithm: sha256WithRSAEncryption 84:70:68:4e:93:3d:59:6a:f6:ff:ec:00:6a:e9:37:56:17:99: c2:26:7d:96:7c:e5:02:c9:a6:c2:2c:42:14:7b:6e:eb:e2:f2: 6b:67:d9:75:cd:8e:0e:b8:8f:21:23:74:ab:a0:fc:74:29:bb: 85:8c:56:01:2a:87:57:09:8b:81:e2:d1:47:b1:2a:a4:5d:03: d5:ef:b9:c1:ca:28:51:60:37:ee:47:6b:e1:36:99:7c:63:3e: eb:d0:e0:41:f6:a7:9a:2d:4c:73:17:e9:55:77:5e:a1:50:7e: 66:59:a1:1e:34:f5:4b:a5:9d:91:fb:29:ce:bc:20:b3:44:f2: 79:86:26:8e:4d:0e:27:dc:77:49:ab:8f:2b:50:a8:75:a6:5e: 1f:bf:5a:e3:7f:90:86:2b:f3:14:e2:0c:b3:fd:fe:2b:c4:ce: d4:74:57:93:0f:73:cd:27:2e:ec:2a:f4:25:31:87:43:88:e9: 9b:2a:85:3b:1b:63:64:4c:85:93:bb:c6:1a:95:e8:eb:0d:2c: 6e:af:bd:52:40:47:3c:29:7f:ba:28:de:93:3a:1b:f4:de:c9: ad:86:99:8e:1d:00:f9:15:18:61:1e:2c:f4:a7:36:90:37:7e: 1e:15:b7:77:42:b5:21:bd:aa:79:94:97:1c:34:5b:4c:05:b2: 07:0e:d8:e8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjUwMTMxMDkxNzQwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzljOTUzNC1hMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCAN9VHfdOvSzBcEN7GMbDvbrWp6EOtAty72xL/n97SKUJHWsniYamUzfanh AcPeVKi/jiQTfs7YZbY3Vaea8YIfdmklCyF+L5tpoSTj7Z4BHqPoTgrXqYV6siWf FZS7WFm6lbOcJXe4pjKZC0aYiycKaw6TFVVtayjgzAl+9fE6ZdLgNfDEDtUJrlav O5leSm9iQo3eNXayDtgWvuJv3Zsvxcnbcq9OqwipEi6kIuC1RAvoJQ59cE1qhFu1 DZFKpULt4siGTxEW5HO9YxHIJvftFuX3/9jJzYfi5z6559otiE4W7CuUKJR3cWOx +NByqKuNKxJw9uAwcDMlI/HOqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLxoFDKz wbaEbxLNxkI3VucKcb8nMB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgwQzIvOTgzRTYxNTAxNzFBMTFFRjg2NTc3NTRGQzRGOUFFMDIvMzgyQTY4QUFE RkI0MTFFRjkwNkVEMzQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFHkwDQYJKoZIhvcNAQELBQADggEBAIRwaE6TPVlq9v/s AGrpN1YXmcImfZZ85QLJpsIsQhR7buvi8mtn2XXNjg64jyEjdKug/HQpu4WMVgEq h1cJi4Hi0UexKqRdA9XvucHKKFFgN+5Ha+E2mXxjPuvQ4EH2p5otTHMX6VV3XqFQ fmZZoR409UulnZH7Kc68ILNE8nmGJo5NDifcd0mrjytQqHWmXh+/WuN/kIYr8xTi DLP9/ivEztR0V5MPc80nLuwq9CUxh0OI6ZsqhTsbY2RMhZO7xhqV6OsNLG6vvVJA Rzwpf7oo3pM6G/Teya2GmY4dAPkVGGEeLPSnNpA3fh4Vt3dCtSG9qnmUlxw0W0wF sgcO2Og= -----END CERTIFICATE-----Generated at Wed Feb 19 20:35:43 2025 by rpki-client