$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/8F7DFE66C96E11EF98B64E15C4F9AE02.roa File: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (raw, json) Hash identifier: NJttL+qjjIMKQduatRuB9wCf9GQJviKk9JlU07XKUgE= Subject key identifier: 76:80:2A:F0:34:66:7E:0C:7B:17:44:3F:E0:BC:88:A9:81:AC:D5:22 Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Certificate serial: 0D Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/8F7DFE66C96E11EF98B64E15C4F9AE02.roa Signing time: Fri 03 Jan 2025 01:03:36 +0000 ROA not before: Fri 03 Jan 2025 01:03:36 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 210000 IP address blocks: 160.250.164.0/24 maxlen: 24 160.250.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B Validity Not Before: Jan 3 01:03:36 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67773768-6d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:9a:d9:fc:7d:78:f0:db:39:e9:5e:d4:f7: 8b:39:f7:04:75:03:8c:10:5a:c8:f9:6b:4a:34:65: f4:7c:62:13:0a:47:02:cb:06:87:64:12:21:9c:0c: 51:37:78:fd:af:48:a4:ac:1a:8f:dd:46:64:d9:7c: d1:6a:7b:7c:47:ab:d6:32:57:dc:00:fd:a6:ad:f2: 7a:6b:0b:d5:36:20:f8:de:ee:30:20:64:f1:1e:1c: 7b:30:4f:c3:a4:94:bf:ee:5b:fb:dd:76:28:c7:87: 68:9c:83:4a:d8:61:3d:79:53:de:4a:ac:8e:40:4a: 7f:8a:9d:f1:7b:14:18:e7:10:26:84:9d:21:46:cf: c9:74:32:25:61:e6:63:c5:dc:5f:01:f2:d1:bc:3a: 1a:c8:40:57:da:1b:17:41:ea:b6:d5:37:5e:b8:a5: 4e:a5:a7:d4:c9:54:c8:91:69:5a:bb:14:a3:a1:ac: cd:fd:13:f4:e5:b6:26:25:da:30:8e:d1:22:21:a7: f5:16:a9:26:90:aa:d9:0f:b7:de:58:b2:f9:64:1e: a6:57:68:15:13:b2:7f:2d:b3:25:8c:64:b4:7e:2c: 21:37:fb:2f:1c:20:6b:51:ef:98:3f:38:7a:7c:26: b9:9b:f2:d3:8b:e8:6b:9b:a5:f3:29:af:1e:2f:98: 71:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:80:2A:F0:34:66:7E:0C:7B:17:44:3F:E0:BC:88:A9:81:AC:D5:22 X509v3 Authority Key Identifier: keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/8F7DFE66C96E11EF98B64E15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.164.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:2e:71:19:25:82:d4:64:28:79:9e:93:07:9a:43:48:53:ea: 98:4b:58:c0:e5:77:89:ff:6d:74:37:9f:d6:d8:4b:c4:1b:e7: f0:dc:fe:e1:1d:71:77:fd:54:54:a7:bf:21:6a:3c:8c:fb:6a: 16:ce:6d:d5:99:df:90:fe:25:5e:c2:50:05:14:ff:27:0d:d7: 94:13:bf:32:68:f4:45:34:ce:80:51:e0:c3:37:57:3b:86:39: ef:de:0d:53:1d:fa:f0:b3:dc:b4:50:e6:c8:c7:c4:33:c3:a7: 6c:24:9e:66:ab:be:b2:ef:d6:f5:e8:d1:67:03:78:c5:54:db: 1f:cc:59:16:35:50:ab:a9:41:29:b5:4c:f2:6a:f1:b1:2e:3e: 8b:a4:b9:9f:29:c3:49:11:48:b5:2e:32:58:8b:a1:c5:ce:78: 91:87:44:00:f2:29:17:38:30:c3:72:08:96:23:39:5e:4e:fe: 3b:82:05:ac:9d:d0:9e:ce:0b:80:f6:67:ae:df:9e:ff:43:a9: 7c:f5:2a:fe:c6:15:07:a5:80:5f:cd:26:94:6a:4c:98:41:ab: d7:a8:4b:c8:90:6b:17:05:16:5d:cd:ce:ec:d9:b9:d5:76:92: e1:38:11:52:92:62:29:a0:23:c9:3b:42:81:1d:90:92:45:a7: ee:a0:b1:5d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODM3QjExMC8GA1UEBRMoRkEyMjgwMUM1MkFFMkE1RkM0OTFCN0NCRUJFNjhFRkNB MkM4RDFEOTAeFw0yNTAxMDMwMTAzMzZaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NzczNzY4LTZkNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaTprZ/H148Ns56V7U94s59wR1A4wQWsj5a0o0ZfR8YhMKRwLLBodkEiGcDFE3 eP2vSKSsGo/dRmTZfNFqe3xHq9YyV9wA/aat8nprC9U2IPje7jAgZPEeHHswT8Ok lL/uW/vddijHh2icg0rYYT15U95KrI5ASn+KnfF7FBjnECaEnSFGz8l0MiVh5mPF 3F8B8tG8OhrIQFfaGxdB6rbVN164pU6lp9TJVMiRaVq7FKOhrM39E/TltiYl2jCO 0SIhp/UWqSaQqtkPt95YsvlkHqZXaBUTsn8tsyWMZLR+LCE3+y8cIGtR75g/OHp8 Jrmb8tOL6GubpfMprx4vmHEVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUdoAq8DRm fgx7F0Q/4LyIqYGs1SIwHwYDVR0jBBgwFoAU+iKAHFKuKl/EkbfL6+aO/KLI0dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MzdCLzE1OEQ3RjNDQjk5 QzExRUY5NjM4Rjc2OUM0RjlBRTAyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWlLQUhGS3VLbF9Fa2JmTDYtYU9fS0xJMGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM3Qi8xNThEN0YzQ0I5OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi84RjdERkU2NkM5 NkUxMUVGOThCNjRFMTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaD6pDANBgkqhkiG9w0BAQsFAAOCAQEACy5xGSWC1GQoeZ6T B5pDSFPqmEtYwOV3if9tdDef1thLxBvn8Nz+4R1xd/1UVKe/IWo8jPtqFs5t1Znf kP4lXsJQBRT/Jw3XlBO/Mmj0RTTOgFHgwzdXO4Y5794NUx368LPctFDmyMfEM8On bCSeZqu+su/W9ejRZwN4xVTbH8xZFjVQq6lBKbVM8mrxsS4+i6S5nynDSRFItS4y WIuhxc54kYdEAPIpFzgww3IIliM5Xk7+O4IFrJ3Qns4LgPZnrt+e/0OpfPUq/sYV B6WAX80mlGpMmEGr16hLyJBrFwUWXc3O7Nm51XaS4TgRUpJiKaAjyTtCgR2QkkWn 7qCxXQ== -----END CERTIFICATE-----Generated at Wed Feb 5 23:09:50 2025 by rpki-client