$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/19C407C0CC1011EFBC7E0050C4F9AE02.roa File: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (raw, json) Hash identifier: 0uD06YfXP8jJiypkQtgg/+0Dg/DOv6s8Gpjo5ybB4rE= Subject key identifier: BC:BB:50:37:23:C5:B7:EE:6B:3A:9A:C7:12:69:70:CA:F5:C5:C0:A2 Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Certificate serial: 02 Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/19C407C0CC1011EFBC7E0050C4F9AE02.roa Signing time: Mon 06 Jan 2025 09:25:00 +0000 ROA not before: Mon 06 Jan 2025 09:25:00 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 153483 IP address blocks: 161.248.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4 Validity Not Before: Jan 6 09:25:00 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677ba16b-c613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:50:ee:5d:ca:d2:44:e6:47:35:73:b9:5b: 5a:ac:e1:99:7d:72:67:c8:0f:71:c9:2d:34:1e:33: c5:fa:6f:1d:d7:64:a8:9e:7b:dd:2f:8a:36:4d:dc: 98:02:94:92:79:a9:6c:d0:f4:e5:92:bb:3a:57:36: ca:ba:21:3f:94:2a:a8:84:fb:92:f3:a3:42:98:2a: 90:38:89:6e:bc:fc:d7:18:09:23:48:60:0e:c0:3c: 37:71:8e:1a:43:87:bd:d6:58:0b:a2:0f:09:af:1b: 98:c2:89:36:64:f5:af:a9:f8:80:d2:dd:21:56:80: 5e:2b:c4:a8:79:c2:1a:af:a7:cc:cd:97:75:8c:56: 4c:cf:ef:6b:4d:f5:93:63:a9:26:d7:64:ee:ee:55: 89:86:9e:87:54:f6:0b:31:da:2a:f0:7d:f9:81:51: 4a:1a:91:7a:4c:ec:04:ba:1f:31:4c:1e:32:7d:83: 9c:1c:4d:76:83:2e:bc:d3:23:88:df:a2:dd:cd:37: 3f:2f:54:30:5c:77:41:bb:a4:2c:09:44:1c:07:7a: dd:dc:95:88:7c:3b:9b:dd:0d:61:7f:03:53:8c:88: b9:b8:97:27:47:26:72:b1:e6:4c:3b:71:e0:97:c8: 6b:c5:3c:b2:f8:a7:47:59:4f:4f:b6:c9:e2:be:4c: 6b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BB:50:37:23:C5:B7:EE:6B:3A:9A:C7:12:69:70:CA:F5:C5:C0:A2 X509v3 Authority Key Identifier: keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/19C407C0CC1011EFBC7E0050C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.100.0/23 Signature Algorithm: sha256WithRSAEncryption 66:63:1f:36:f5:0c:59:09:48:91:10:1d:95:0e:01:38:29:6e: 85:a1:3b:2c:19:f3:2f:e4:a0:1e:9e:08:00:37:94:3f:68:ad: 24:81:67:d2:e4:df:37:99:4b:a7:51:82:18:b2:ec:a0:90:ef: 6e:b0:2e:fc:5a:4b:c2:78:6b:fb:01:2a:3f:e2:57:ac:db:cf: a7:ea:b1:85:08:51:62:63:1c:3a:4a:4b:31:cb:10:27:46:30: 23:ce:a0:c9:b0:58:a5:d3:91:50:08:9d:ee:91:12:39:c7:c2: 72:af:2b:e8:ad:5b:bf:9c:b4:73:21:04:83:d1:10:16:eb:37: 16:22:a1:e9:03:8c:94:d1:63:fd:b9:6f:d7:8c:f9:ed:85:e8: 46:90:e6:51:3a:dd:5c:ae:a0:a0:c9:5f:a6:7d:7d:b4:2e:67: 7d:87:2d:ae:45:bc:9b:fc:a8:73:44:d3:9b:e4:68:27:0f:c1: b7:41:03:8c:ef:64:6d:65:32:8d:a0:a1:9b:bd:83:76:13:6d: 70:17:4c:af:90:a6:a5:a5:c6:d8:4c:fb:41:13:73:10:56:66: 99:9d:9b:36:a6:d5:28:7a:77:22:ea:2a:ba:b0:93:89:15:cd: ce:86:63:0b:f4:1b:e5:5f:61:90:6b:dd:81:04:06:7b:2b:b6: d1:7c:3d:b0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTdBNDExMC8GA1UEBRMoMzA2NDkwREI3NDVDOTVFQzg2NjE0OTlGRkM4MjY0NjY3 QkE2N0Y4QTAeFw0yNTAxMDYwOTI1MDBaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2JhMTZiLWM2MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC42lDuXcrSROZHNXO5W1qs4Zl9cmfID3HJLTQeM8X6bx3XZKiee90vijZN3JgC lJJ5qWzQ9OWSuzpXNsq6IT+UKqiE+5Lzo0KYKpA4iW68/NcYCSNIYA7APDdxjhpD h73WWAuiDwmvG5jCiTZk9a+p+IDS3SFWgF4rxKh5whqvp8zNl3WMVkzP72tN9ZNj qSbXZO7uVYmGnodU9gsx2irwffmBUUoakXpM7AS6HzFMHjJ9g5wcTXaDLrzTI4jf ot3NNz8vVDBcd0G7pCwJRBwHet3clYh8O5vdDWF/A1OMiLm4lydHJnKx5kw7ceCX yGvFPLL4p0dZT0+2yeK+TGsfAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUvLtQNyPF t+5rOprHEmlwyvXFwKIwHwYDVR0jBBgwFoAUMGSQ23RcleyGYUmf/IJkZnumf4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFN0E0L0I4OTBERkQyQ0Mw RjExRUZBMjc4RkQ0Q0M0RjlBRTAyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTUdTUTIzUmNsZXlHWVVtZl9JSmtabnVtZjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdBNC9CODkwREZEMkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi8xOUM0MDdDMEND MTAxMUVGQkM3RTAwNTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4ZDANBgkqhkiG9w0BAQsFAAOCAQEAZmMfNvUMWQlIkRAd lQ4BOCluhaE7LBnzL+SgHp4IADeUP2itJIFn0uTfN5lLp1GCGLLsoJDvbrAu/FpL wnhr+wEqP+JXrNvPp+qxhQhRYmMcOkpLMcsQJ0YwI86gybBYpdORUAid7pESOcfC cq8r6K1bv5y0cyEEg9EQFus3FiKh6QOMlNFj/blv14z57YXoRpDmUTrdXK6goMlf pn19tC5nfYctrkW8m/yoc0TTm+RoJw/Bt0EDjO9kbWUyjaChm72DdhNtcBdMr5Cm paXG2Ez7QRNzEFZmmZ2bNqbVKHp3IuoqurCTiRXNzoZjC/Qb5V9hkGvdgQQGeyu2 0Xw9sA== -----END CERTIFICATE-----Generated at Wed Feb 5 22:54:55 2025 by rpki-client