$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/3139D35EBFA811EFA9B7DC2AC4F9AE02.roa File: 3139D35EBFA811EFA9B7DC2AC4F9AE02.roa (raw, json) Hash identifier: gL/pv5Q4H259tRW/M/fWgTAynaK4mXLMVK09D4O3Mmw= Subject key identifier: C6:40:40:12:40:43:1E:69:3C:78:7D:36:17:87:1C:1D:4B:DE:C6:5D Certificate issuer: /CN=A91E8BE3/serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Certificate serial: 0B Authority key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/3139D35EBFA811EFA9B7DC2AC4F9AE02.roa Signing time: Sat 21 Dec 2024 14:31:18 +0000 ROA not before: Sat 21 Dec 2024 14:31:18 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 151133 IP address blocks: 161.248.0.0/23 maxlen: 23 161.248.0.0/24 maxlen: 24 161.248.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BE3 Validity Not Before: Dec 21 14:31:18 2024 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6766d136-bff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8c:5b:d2:32:f7:7f:2f:14:c1:2d:3c:9d:13: 32:35:bb:e7:0d:53:57:fa:32:e3:61:32:7b:4e:5c: 56:7a:6e:61:90:24:52:76:a2:fa:81:32:0f:ad:f1: 98:9d:c3:ce:d5:c3:d8:62:a3:58:4a:6e:1f:79:85: 96:7b:b5:9f:ae:e0:40:76:99:5b:94:cf:4b:3d:05: 67:92:a7:55:ad:9e:c8:1b:78:13:1c:5c:f7:df:03: 52:16:0e:e0:71:9a:93:7c:e6:55:62:93:96:2c:29: f3:9c:eb:0e:3e:56:0b:d2:c7:05:03:6a:76:fd:3e: 59:49:2a:51:32:6c:a3:97:18:84:b0:2b:fa:89:4f: 7b:de:fb:2a:b9:77:ac:76:43:b0:51:ac:f1:0e:5f: dd:1c:4b:65:d2:e2:ca:c8:b7:b8:14:3f:ed:60:44: 7e:16:04:81:58:f4:7c:60:94:13:cb:bd:4f:0e:73: ec:54:ec:04:2a:a6:4f:c0:5c:51:97:0b:0c:f0:b1: 85:4e:39:9a:09:ae:ba:14:3e:38:6a:bd:a8:cf:3d: f4:0d:d7:0f:09:a6:87:28:2d:9e:34:2e:88:92:d7: ae:8e:a2:ea:f8:16:0e:4e:cf:21:5a:1e:d5:81:18: 08:49:f5:b1:41:83:df:92:cf:c8:38:0b:47:e2:41: 4a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:40:40:12:40:43:1E:69:3C:78:7D:36:17:87:1C:1D:4B:DE:C6:5D X509v3 Authority Key Identifier: keyid:6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/3139D35EBFA811EFA9B7DC2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.0.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:af:f1:97:b2:6b:0b:f3:0a:74:83:90:0a:8a:94:f6:96:a1: 1f:a4:ee:25:44:a5:37:39:2f:bb:ee:74:fa:c6:2a:10:d6:32: 55:d6:dc:86:22:a0:79:95:1a:0b:6f:f9:a0:93:1e:c7:38:11: 26:17:76:d3:ee:58:f7:ea:8e:92:42:21:88:1c:54:77:34:04: 7e:df:d5:84:ea:43:97:c1:44:ff:1a:1c:d4:e8:7b:dc:f0:5b: c6:5c:43:d6:bb:ce:9e:72:76:f8:4e:44:75:02:dd:a6:a5:6e: cb:17:63:02:8b:2f:74:8c:e7:76:35:46:28:b5:77:86:91:2d: 53:2c:98:bf:6c:70:b0:91:c2:14:5b:26:d6:d2:c1:fe:28:0b: f6:ed:e2:33:ae:e6:6c:eb:31:ae:2f:87:f4:e2:94:32:e1:4e: 8e:62:19:b0:83:de:8d:9e:c5:7e:0b:0e:c8:11:9c:7d:29:2e: 27:cf:34:8a:37:b1:31:88:4c:e4:81:11:3a:3c:1e:c1:7d:f3: 7f:26:8d:5b:48:9f:10:48:28:4f:30:8c:5c:17:ae:ba:48:b3: 2d:f6:2b:a8:71:92:dc:f2:25:54:ea:99:7a:37:f7:90:38:b0: 62:fe:75:ca:93:dd:86:40:57:82:46:29:be:e3:85:d0:63:40: eb:06:27:bb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OEJFMzExMC8GA1UEBRMoNkZEMDg4N0EzOTAzRTNENkUxN0JCOUNGRDhFRjI2OTI3 MEJBQ0IwNzAeFw0yNDEyMjExNDMxMThaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NjZkMTM2LWJmZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFjFvSMvd/LxTBLTydEzI1u+cNU1f6MuNhMntOXFZ6bmGQJFJ2ovqBMg+t8Zid w87Vw9hio1hKbh95hZZ7tZ+u4EB2mVuUz0s9BWeSp1WtnsgbeBMcXPffA1IWDuBx mpN85lVik5YsKfOc6w4+VgvSxwUDanb9PllJKlEybKOXGISwK/qJT3ve+yq5d6x2 Q7BRrPEOX90cS2XS4srIt7gUP+1gRH4WBIFY9HxglBPLvU8Oc+xU7AQqpk/AXFGX CwzwsYVOOZoJrroUPjhqvajPPfQN1w8JpocoLZ40LoiS166Oour4Fg5OzyFaHtWB GAhJ9bFBg9+Sz8g4C0fiQUoxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUxkBAEkBD Hmk8eH02F4ccHUvexl0wHwYDVR0jBBgwFoAUb9CIejkD49bhe7nP2O8mknC6ywcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4QkUzL0U2RTZCRTQ0QkY5 QzExRUY5REE4ODI4MkM0RjlBRTAyL2I5Q0llamtENDliaGU3blAyTzhta25DNnl3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYjlDSWVqa0Q0OWJoZTduUDJPOG1rbkM2eXdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJFMy9FNkU2QkU0NEJGOUMxMUVGOURBODgyODJDNEY5QUUwMi8zMTM5RDM1RUJG QTgxMUVGQTlCN0RDMkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4ADANBgkqhkiG9w0BAQsFAAOCAQEAm6/xl7JrC/MKdIOQ CoqU9pahH6TuJUSlNzkvu+50+sYqENYyVdbchiKgeZUaC2/5oJMexzgRJhd20+5Y 9+qOkkIhiBxUdzQEft/VhOpDl8FE/xoc1Oh73PBbxlxD1rvOnnJ2+E5EdQLdpqVu yxdjAosvdIzndjVGKLV3hpEtUyyYv2xwsJHCFFsm1tLB/igL9u3iM67mbOsxri+H 9OKUMuFOjmIZsIPejZ7FfgsOyBGcfSkuJ880ijexMYhM5IEROjwewX3zfyaNW0if EEgoTzCMXBeuukizLfYrqHGS3PIlVOqZejf3kDiwYv51ypPdhkBXgkYpvuOF0GNA 6wYnuw== -----END CERTIFICATE-----Generated at Wed Feb 5 21:49:02 2025 by rpki-client