$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/4CD3C8DC14D011EA93366A85C4F9AE02.roa File: 4CD3C8DC14D011EA93366A85C4F9AE02.roa (raw, json) Hash identifier: JwI9xru2SKVmPRR5P37ZWy6F3njGvB5RFaYgtRHbNFY= Subject key identifier: 35:E7:E3:B2:99:FA:DD:4B:BC:CA:1E:4C:DE:86:43:33:AC:6F:EB:0D Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Certificate serial: 0D08 Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/4CD3C8DC14D011EA93366A85C4F9AE02.roa Signing time: Tue 14 Jan 2025 18:16:06 +0000 ROA not before: Tue 14 Jan 2025 18:16:06 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 10455 IP address blocks: 134.159.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 17:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0 Validity Not Before: Jan 14 18:16:06 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6786a9e6-6359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:19:be:db:e9:58:a9:a2:cc:fd:f7:55:2b:3e: dd:3b:8b:05:1f:c7:4d:5b:eb:08:9c:72:f0:5d:c7: 2f:b0:36:92:34:96:2a:e0:e4:57:47:ea:9f:99:62: 50:30:e0:3f:e5:18:78:90:9a:3c:3f:14:e5:1e:cd: 9b:79:ae:93:1e:ea:96:2f:ed:aa:0e:62:33:87:01: 6a:7f:e6:45:af:a1:2d:75:de:9b:3d:25:e3:ec:11: 7c:a7:2b:59:86:d6:90:0d:57:3b:95:37:d4:fd:7b: 2b:28:d1:3a:aa:1f:bc:75:8c:07:1b:ab:93:c8:b1: 8d:b9:4c:c9:e1:f1:c8:83:63:6d:a4:68:36:ed:86: 76:9d:1a:d5:25:9c:a9:56:2d:bc:0c:d5:54:ec:8d: b7:cd:c2:b2:6a:26:b9:77:72:d3:d0:00:3d:df:da: b4:b4:9c:fe:7a:ba:34:ca:a2:9b:ee:66:13:9f:5e: 9d:b9:00:f5:f7:c0:be:a0:57:d9:30:fc:86:12:14: eb:93:b1:20:89:76:b4:ca:90:0b:19:a5:9e:9e:96: ee:27:e7:b9:93:82:a8:9f:a8:89:ce:7e:97:74:27: d0:8e:f7:2f:61:af:90:f2:a3:78:73:62:90:55:3a: 58:ad:8f:f2:de:bc:77:55:1f:8c:9a:5a:b9:a0:97: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E7:E3:B2:99:FA:DD:4B:BC:CA:1E:4C:DE:86:43:33:AC:6F:EB:0D X509v3 Authority Key Identifier: keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/4CD3C8DC14D011EA93366A85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 134.159.99.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:56:03:a0:5c:ca:15:cc:ab:af:ce:7c:e3:bc:cc:2a:9c:fb: 19:bc:f7:54:cb:e7:2b:08:25:82:88:ab:b9:80:56:5b:c7:58: 40:35:1b:c5:c3:cd:fd:be:37:e3:96:6c:5d:bd:d1:86:40:5e: 50:f6:3a:a3:9f:93:30:64:38:96:59:b7:47:e9:3c:6e:0d:e6: 8e:0b:5b:3a:d1:05:2a:83:e3:5c:5b:08:a3:a1:8b:01:a8:8e: 0f:2d:da:5a:49:8f:ac:6d:b3:82:1e:3d:19:d4:5e:24:31:c3: 3c:13:9a:05:ce:81:70:ce:54:c0:d5:0d:aa:b9:cf:bb:15:83: 55:f9:bc:ec:b0:fb:0b:dc:0c:ac:1a:dd:fd:9a:12:96:c3:28: 04:96:13:7c:dc:d6:05:84:50:9d:1d:ad:65:24:1d:e5:91:e9: b6:ab:7a:53:a0:73:9a:de:02:59:21:bc:d7:45:93:0e:44:76: 35:c0:78:f2:d5:0a:7c:cf:8d:b2:28:f3:c1:0a:5e:7c:64:3d: e8:3b:a1:03:c2:27:d6:7b:ed:2d:a0:98:42:0e:fd:e6:a4:ff: cb:78:2f:78:74:87:f8:41:a8:94:3b:c4:5b:cf:97:64:32:03: 23:22:47:03:a0:fe:fe:4c:90:10:ec:a0:75:88:a8:d6:73:b6: 22:24:5e:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1 NTAzQ0VBNjAwHhcNMjUwMTE0MTgxNjA2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg2YTllNi02MzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hm+2+lYqaLM/fdVKz7dO4sFH8dNW+sInHLwXccvsDaSNJYq4ORXR+qfmWJQ MOA/5Rh4kJo8PxTlHs2bea6THuqWL+2qDmIzhwFqf+ZFr6Etdd6bPSXj7BF8pytZ htaQDVc7lTfU/XsrKNE6qh+8dYwHG6uTyLGNuUzJ4fHIg2NtpGg27YZ2nRrVJZyp Vi28DNVU7I23zcKyaia5d3LT0AA939q0tJz+ero0yqKb7mYTn16duQD198C+oFfZ MPyGEhTrk7EgiXa0ypALGaWenpbuJ+e5k4Kon6iJzn6XdCfQjvcvYa+Q8qN4c2KQ VTpYrY/y3rx3VR+Mmlq5oJepvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDXn47KZ +t1LvMoeTN6GQzOsb+sNMB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMTUwQkY2OTBEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvNENEM0M4REMx NEQwMTFFQTkzMzY2QTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACGn2MwDQYJKoZIhvcNAQELBQADggEBAIpWA6BcyhXMq6/O fOO8zCqc+xm891TL5ysIJYKIq7mAVlvHWEA1G8XDzf2+N+OWbF290YZAXlD2OqOf kzBkOJZZt0fpPG4N5o4LWzrRBSqD41xbCKOhiwGojg8t2lpJj6xts4IePRnUXiQx wzwTmgXOgXDOVMDVDaq5z7sVg1X5vOyw+wvcDKwa3f2aEpbDKASWE3zc1gWEUJ0d rWUkHeWR6barelOgc5reAlkhvNdFkw5EdjXAePLVCnzPjbIo88EKXnxkPeg7oQPC J9Z77S2gmEIO/eak/8t4L3h0h/hBqJQ7xFvPl2QyAyMiRwOg/v5MkBDsoHWIqNZz tiIkXkY= -----END CERTIFICATE-----Generated at Mon Apr 7 06:58:01 2025 by rpki-client