$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/2343647034AF11EE90E6263DC4F9AE02.roa File: 2343647034AF11EE90E6263DC4F9AE02.roa (raw, json) Hash identifier: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw= Subject key identifier: 56:C8:9A:5F:3B:C6:E0:20:9C:9F:D3:A1:6C:F8:B7:A1:CF:74:15:D2 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 0126 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/2343647034AF11EE90E6263DC4F9AE02.roa Signing time: Fri 31 Jan 2025 04:20:09 +0000 ROA not before: Fri 31 Jan 2025 04:20:09 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 14618 IP address blocks: 192.150.138.0/24 maxlen: 24 192.150.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5 Validity Not Before: Jan 31 04:20:09 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679c4f79-771e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:cd:22:d4:09:40:77:2e:47:ae:c4:6c:c4: 37:27:5e:e2:98:a7:35:99:3f:b6:a9:a8:42:d7:ed: 45:49:04:7e:a2:27:9d:6d:b2:db:9e:78:b4:76:91: 0e:15:26:38:f2:5f:66:cb:5c:bb:36:9f:ac:81:c6: 7a:6c:b0:e0:55:cd:78:37:b7:47:60:3a:ff:c1:4b: b4:50:e6:20:0b:38:49:52:80:03:98:44:c7:2f:88: 46:e2:2c:0f:d6:ec:dc:50:9c:ff:24:c9:6d:1c:04: af:c8:90:59:ed:81:88:28:ce:ba:5d:65:85:7d:f0: 93:5b:eb:9b:0f:b8:24:ad:cb:50:db:ef:39:2c:dc: c7:e2:66:15:2c:e5:66:f6:bf:a6:96:a9:3f:73:c9: 09:b4:4b:fa:85:82:cd:c5:c3:6d:a5:c4:4b:56:b8: 73:3d:32:4b:96:f9:65:92:24:c4:bd:87:d5:29:2c: 42:6f:70:21:60:70:78:22:cf:7d:35:c3:7a:e2:f1: a4:d4:79:d0:8f:ef:30:31:77:d1:6f:cd:b9:e8:39: 16:84:4c:e1:d1:fe:94:ca:45:9d:ba:d2:42:9d:08: bf:dd:76:12:f5:a6:ac:19:4a:4a:ec:7a:e6:65:b7: 8a:f3:43:8e:5e:39:7e:32:4a:34:47:be:69:37:67: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C8:9A:5F:3B:C6:E0:20:9C:9F:D3:A1:6C:F8:B7:A1:CF:74:15:D2 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/2343647034AF11EE90E6263DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.150.138.0/23 Signature Algorithm: sha256WithRSAEncryption c4:9b:bb:25:8b:90:90:4c:05:a8:dc:90:6a:b6:b8:08:4f:5c: 11:f8:3f:f6:69:02:37:26:56:e8:7c:5c:85:b7:8e:50:bf:cf: 1b:05:ab:38:aa:d2:e0:cf:1b:49:ef:8f:02:a3:a6:c3:a4:36: 19:9c:90:2c:4c:88:e8:09:55:d0:ac:f6:b0:96:78:ad:7c:1f: 53:bc:c8:b7:5a:e6:6a:bf:7e:30:88:0b:d3:f9:be:8b:1d:e8: 60:02:68:5f:7c:70:ab:d1:78:00:cd:75:d6:d0:51:b4:64:fc: db:d8:ac:f4:79:b4:ef:1c:4e:eb:61:bc:92:7d:f6:2f:51:d9: bf:18:01:a6:06:14:7d:ba:e3:a1:0b:4d:c6:f2:12:c9:d0:76: 77:e0:4f:11:f7:92:a9:8e:48:ff:d0:80:fb:28:da:94:da:08: fc:c3:57:ca:b1:27:f8:93:26:f8:c8:52:8b:04:b1:63:60:0a: e0:2d:bc:06:e4:48:43:f5:66:dd:e4:61:00:aa:1b:4b:b8:51: a6:2b:eb:93:1e:ac:0e:84:8e:7c:79:09:3f:55:03:14:7d:58: a8:94:b3:41:28:56:59:1d:2b:5a:4d:ff:19:06:01:a3:fb:3e: a3:8a:52:b9:f6:7b:d4:77:18:e4:13:32:f4:fd:b1:9d:16:0b: c8:6c:f5:f8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUwMTMxMDQyMDA5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzljNGY3OS03NzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsV7NItQJQHcuR67EbMQ3J17imKc1mT+2qahC1+1FSQR+oiedbbLbnni0dpEO FSY48l9my1y7Np+sgcZ6bLDgVc14N7dHYDr/wUu0UOYgCzhJUoADmETHL4hG4iwP 1uzcUJz/JMltHASvyJBZ7YGIKM66XWWFffCTW+ubD7gkrctQ2+85LNzH4mYVLOVm 9r+mlqk/c8kJtEv6hYLNxcNtpcRLVrhzPTJLlvllkiTEvYfVKSxCb3AhYHB4Is99 NcN64vGk1HnQj+8wMXfRb8256DkWhEzh0f6UykWdutJCnQi/3XYS9aasGUpK7Hrm ZbeK80OOXjl+Mko0R75pN2dtOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFbIml87 xuAgnJ/ToWz4t6HPdBXSMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzc0QjUvOTgwNDM1NkUzNEFBMTFFRUEwNkFFMTMzQzRGOUFFMDIvMjM0MzY0NzAz NEFGMTFFRTkwRTYyNjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHAloowDQYJKoZIhvcNAQELBQADggEBAMSbuyWLkJBMBajc kGq2uAhPXBH4P/ZpAjcmVuh8XIW3jlC/zxsFqziq0uDPG0nvjwKjpsOkNhmckCxM iOgJVdCs9rCWeK18H1O8yLda5mq/fjCIC9P5vosd6GACaF98cKvReADNddbQUbRk /NvYrPR5tO8cTuthvJJ99i9R2b8YAaYGFH2646ELTcbyEsnQdnfgTxH3kqmOSP/Q gPso2pTaCPzDV8qxJ/iTJvjIUosEsWNgCuAtvAbkSEP1Zt3kYQCqG0u4UaYr65Me rA6Ejnx5CT9VAxR9WKiUs0EoVlkdK1pN/xkGAaP7PqOKUrn2e9R3GOQTMvT9sZ0W C8hs9fg= -----END CERTIFICATE-----Generated at Fri Apr 4 23:58:35 2025 by rpki-client