$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/EA8CF7A8CB5311EF91F1081BC4F9AE02.roa File: EA8CF7A8CB5311EF91F1081BC4F9AE02.roa (raw, json) Hash identifier: GSX0pyaiwOS5Abzctg8JuUZl0TI6LV3O2e6/wEsG5kM= Subject key identifier: 19:EA:49:66:C6:02:0E:E3:4B:86:D3:4F:18:9B:9B:2D:04:95:55:03 Certificate issuer: /CN=A91CDBF5/serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90 Certificate serial: 02 Authority key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/EA8CF7A8CB5311EF91F1081BC4F9AE02.roa Signing time: Sun 05 Jan 2025 10:57:55 +0000 ROA not before: Sun 05 Jan 2025 10:57:55 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131266 IP address blocks: 160.30.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5 Validity Not Before: Jan 5 10:57:55 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=677a65b3-6de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:0b:bf:52:44:91:ee:20:ca:a8:f6:6a:b0: f5:96:65:d5:94:5a:52:31:44:98:1c:d5:a9:77:07: 10:50:f8:79:1f:b8:14:73:3c:f8:ea:1e:a3:b0:f9: e2:5c:db:5f:47:33:e3:c4:02:2b:9f:4f:3d:ab:86: ed:a9:f7:1d:b1:36:14:f2:98:dc:25:39:7d:e7:54: 3e:1e:59:28:2d:bc:a6:2e:7a:44:72:8d:5f:f4:c2: 1a:dd:cc:20:bc:b8:f8:48:52:a0:63:52:57:08:d5: 16:67:bb:21:c2:fa:aa:8b:b5:29:f6:84:fe:86:b7: 1d:83:fd:32:10:74:6f:56:91:40:1a:d6:5b:0b:c0: de:e5:08:58:73:81:00:9f:07:8d:a9:7d:fa:6f:67: 0e:2c:3a:4a:10:61:f8:ff:7a:db:31:9d:77:84:6a: 4f:62:ec:49:8c:ed:e5:6b:b8:41:31:6e:5d:74:53: 5e:28:11:10:45:e4:d7:de:7f:04:7a:2a:33:f4:2e: ed:e0:e3:07:52:3e:c4:14:ee:d0:b0:59:2d:c6:a5: 57:4b:6b:9f:f0:12:e0:ee:79:5f:9b:c0:97:b9:a0: 80:ff:4b:18:a8:4f:8e:b5:b5:8e:28:eb:36:43:ae: c6:88:49:2e:eb:00:ef:c4:30:f7:d3:61:35:0a:57: a4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EA:49:66:C6:02:0E:E3:4B:86:D3:4F:18:9B:9B:2D:04:95:55:03 X509v3 Authority Key Identifier: keyid:98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/EA8CF7A8CB5311EF91F1081BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.180.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:cd:4f:f8:94:52:9a:70:48:31:bd:68:01:08:38:57:20:f9: 73:f9:88:17:cc:23:3c:87:1c:ba:1b:12:76:ae:2d:f8:07:46: 06:5d:30:92:cb:e2:13:6d:d7:d9:a3:46:fa:11:aa:25:7d:4b: c2:fb:63:c5:12:e4:9d:07:85:ab:02:b1:71:9a:86:1c:5b:6f: ad:cf:8b:9b:87:0e:46:2a:23:cf:e8:7b:b1:5c:34:d8:fd:ea: 6e:ff:69:5c:02:67:60:3a:79:c3:94:a3:fa:da:7d:fb:17:da: 31:40:eb:53:8a:55:86:33:50:71:01:cf:2d:75:a3:26:5c:c5: ef:53:39:f6:e6:3e:37:82:ff:8e:c8:0e:a5:b9:49:58:5a:bd: 80:db:66:e8:b4:69:ac:03:eb:4f:11:63:15:59:60:b5:29:d0: bf:3e:b8:5a:d7:c6:fc:3c:08:54:f9:63:86:0d:81:f9:7b:ef: 92:a8:e0:1a:e3:e0:1d:01:68:c9:43:7e:a9:f6:41:1d:5b:d2: 3a:09:63:83:4e:11:dc:a9:0f:b6:1f:c7:98:a8:72:b2:f4:ba: 0c:24:c1:34:61:c4:63:50:bb:b1:2a:7b:d3:ca:de:f1:c6:ed: 4d:e5:a8:97:08:e7:c9:3b:65:fc:ae:6c:84:7c:05:20:e6:07: 29:fc:eb:e5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REJGNTExMC8GA1UEBRMoOTgwQ0U1QkJGMkNGMzVENjBBRTNCMDcyMThBQjVDQTkx MDE0MkM5MDAeFw0yNTAxMDUxMDU3NTVaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2E2NWIzLTZkZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4XQu/UkSR7iDKqPZqsPWWZdWUWlIxRJgc1al3BxBQ+HkfuBRzPPjqHqOw+eJc 219HM+PEAiufTz2rhu2p9x2xNhTymNwlOX3nVD4eWSgtvKYuekRyjV/0whrdzCC8 uPhIUqBjUlcI1RZnuyHC+qqLtSn2hP6Gtx2D/TIQdG9WkUAa1lsLwN7lCFhzgQCf B42pffpvZw4sOkoQYfj/etsxnXeEak9i7EmM7eVruEExbl10U14oERBF5NfefwR6 KjP0Lu3g4wdSPsQU7tCwWS3GpVdLa5/wEuDueV+bwJe5oID/SxioT461tY4o6zZD rsaISS7rAO/EMPfTYTUKV6STAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUGepJZsYC DuNLhtNPGJubLQSVVQMwHwYDVR0jBBgwFoAUmAzlu/LPNdYK47ByGKtcqRAULJAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQkY1LzVFOUM0QkIwQ0I1 MTExRUY5MDQwMEQxN0M0RjlBRTAyL21Bemx1X0xQTmRZSzQ3QnlHS3RjcVJBVUxK QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbUF6bHVfTFBOZFlLNDdCeUdLdGNxUkFVTEpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REJGNS81RTlDNEJCMENCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi9FQThDRjdBOENC NTMxMUVGOTFGMTA4MUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAetDANBgkqhkiG9w0BAQsFAAOCAQEAX81P+JRSmnBIMb1o AQg4VyD5c/mIF8wjPIccuhsSdq4t+AdGBl0wksviE23X2aNG+hGqJX1LwvtjxRLk nQeFqwKxcZqGHFtvrc+Lm4cORiojz+h7sVw02P3qbv9pXAJnYDp5w5Sj+tp9+xfa MUDrU4pVhjNQcQHPLXWjJlzF71M59uY+N4L/jsgOpblJWFq9gNtm6LRprAPrTxFj FVlgtSnQvz64WtfG/DwIVPljhg2B+XvvkqjgGuPgHQFoyUN+qfZBHVvSOgljg04R 3KkPth/HmKhysvS6DCTBNGHEY1C7sSp708re8cbtTeWolwjnyTtl/K5shHwFIOYH Kfzr5Q== -----END CERTIFICATE-----Generated at Wed Feb 5 22:47:51 2025 by rpki-client