$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/2CE185A4CF3E11EF92809831C4F9AE02.roa File: 2CE185A4CF3E11EF92809831C4F9AE02.roa (raw, json) Hash identifier: qic18VLt4fPLdZFyt0snUGiStxh75XVChLRqrx6aGwY= Subject key identifier: E9:F2:46:F8:EC:5A:C8:AF:33:19:09:8F:CA:91:13:FA:2C:FB:53:DE Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: 06 Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/2CE185A4CF3E11EF92809831C4F9AE02.roa Signing time: Fri 10 Jan 2025 10:32:22 +0000 ROA not before: Fri 10 Jan 2025 10:32:22 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 150696 IP address blocks: 161.248.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578 Validity Not Before: Jan 10 10:32:22 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6780f736-e777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c3:c6:89:2d:40:fe:6c:68:f6:8a:56:f8:97: 57:97:75:c4:48:6f:b2:19:bc:c8:37:c8:33:b1:85: bb:db:e1:5b:53:07:6d:92:bb:33:4f:de:ca:b9:a3: 72:ab:b0:ec:73:bf:61:8a:f6:a3:82:7d:14:70:14: dd:ff:0a:c6:14:ae:ed:21:6f:c0:99:be:2a:a2:3a: 66:a1:6e:aa:2b:5a:51:cc:df:22:08:6a:87:d5:7b: 70:fb:7e:e8:52:7f:11:cf:a3:15:73:f5:36:dd:38: 7c:6a:52:e8:44:8b:2e:dd:a5:ab:81:7a:aa:6c:b5: 42:a1:f9:7f:51:51:5e:69:a9:b7:d2:31:16:b4:34: 1a:ed:11:8b:88:70:44:ef:70:52:c5:92:cd:39:cb: 0f:5e:f3:ac:4c:95:51:e0:38:d0:4b:d9:a3:f7:5b: 9c:23:39:7e:b3:7d:14:8f:b1:c6:4b:e8:2b:82:65: 7a:f5:d7:e7:f4:d6:a6:6b:79:61:1b:93:5a:15:fc: 50:60:2c:9d:dc:64:91:45:ee:06:d4:ca:93:9c:94: b3:0b:3a:6d:ec:63:9c:47:7b:6b:16:a7:fe:21:3c: 99:84:48:8f:e5:07:c0:d6:c0:4a:c7:f7:40:6b:ff: 6f:8b:5d:87:c3:ef:43:39:32:28:13:ea:9f:91:96: e0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F2:46:F8:EC:5A:C8:AF:33:19:09:8F:CA:91:13:FA:2C:FB:53:DE X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/2CE185A4CF3E11EF92809831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.155.0/24 Signature Algorithm: sha256WithRSAEncryption 46:86:ab:d7:f7:2b:01:a8:5c:7e:bc:a3:e5:11:18:9c:3b:41: 88:ce:11:bd:46:11:dd:11:8d:21:50:7e:b4:18:ae:01:59:04: 29:af:f1:a9:52:cb:68:0a:57:ad:6a:df:6d:1b:c3:f6:cc:33: a6:b4:57:ce:37:bb:60:c7:e7:b1:a5:5d:b5:2e:4c:33:12:55: 63:72:de:34:94:93:b8:1f:5c:7d:ae:d5:2b:f3:47:3c:c4:35: 42:7a:41:ae:64:09:7a:82:99:39:91:93:ad:89:74:6a:0e:b0: 1c:c1:74:3b:65:b0:bb:29:97:6d:b6:67:27:8d:08:47:48:36: 0f:4e:15:d8:44:91:9f:6f:89:6d:60:bd:54:51:08:39:e0:74: c4:59:78:66:0b:f9:1f:cd:14:ea:43:9a:ea:df:ef:b1:2b:50: e3:e5:8e:22:42:10:84:74:c3:ba:71:17:81:6c:14:b1:1d:2f: 90:c1:13:a5:4f:95:cf:4c:98:2e:73:35:7e:93:0a:c4:3c:73: d7:29:b1:a9:fd:6d:d7:2f:6d:86:da:5e:67:62:1f:bc:bd:8f: dd:92:8d:42:6b:7a:d0:82:71:22:09:8b:f4:e1:88:2f:df:b2: 36:09:a0:ea:d8:87:2b:04:85:bd:f7:57:3f:30:d3:ea:cd:7c: e0:cc:24:28 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDU3ODExMC8GA1UEBRMoMUQzREFFRjdEMjc4ODM3M0VEREZDQjFBRDVDNEMyMzU2 QzU3QURFRDAeFw0yNTAxMTAxMDMyMjJaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ODBmNzM2LWU3NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7w8aJLUD+bGj2ilb4l1eXdcRIb7IZvMg3yDOxhbvb4VtTB22SuzNP3sq5o3Kr sOxzv2GK9qOCfRRwFN3/CsYUru0hb8CZviqiOmahbqorWlHM3yIIaofVe3D7fuhS fxHPoxVz9TbdOHxqUuhEiy7dpauBeqpstUKh+X9RUV5pqbfSMRa0NBrtEYuIcETv cFLFks05yw9e86xMlVHgONBL2aP3W5wjOX6zfRSPscZL6CuCZXr11+f01qZreWEb k1oV/FBgLJ3cZJFF7gbUypOclLMLOm3sY5xHe2sWp/4hPJmESI/lB8DWwErH90Br /2+LXYfD70M5MigT6p+RluD5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU6fJG+Oxa yK8zGQmPypET+iz7U94wHwYDVR0jBBgwFoAUHT2u99J4g3Pt38sa1cTCNWxXre0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNTc4LzAwM0E3OURBQ0Yz RDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSFQydTk5SjRnM1B0MzhzYTFjVENOV3hYcmUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDU3OC8wMDNBNzlEQUNGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi8yQ0UxODVBNENG M0UxMUVGOTI4MDk4MzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKH4mzANBgkqhkiG9w0BAQsFAAOCAQEARoar1/crAahcfryj 5REYnDtBiM4RvUYR3RGNIVB+tBiuAVkEKa/xqVLLaApXrWrfbRvD9swzprRXzje7 YMfnsaVdtS5MMxJVY3LeNJSTuB9cfa7VK/NHPMQ1QnpBrmQJeoKZOZGTrYl0ag6w HMF0O2WwuymXbbZnJ40IR0g2D04V2ESRn2+JbWC9VFEIOeB0xFl4Zgv5H80U6kOa 6t/vsStQ4+WOIkIQhHTDunEXgWwUsR0vkMETpU+Vz0yYLnM1fpMKxDxz1ymxqf1t 1y9thtpeZ2IfvL2P3ZKNQmt60IJxIgmL9OGIL9+yNgmg6tiHKwSFvfdXPzDT6s18 4MwkKA== -----END CERTIFICATE-----Generated at Wed Feb 5 21:46:30 2025 by rpki-client