$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/1ED36EFC590C11F0913BCB35C4F9AE02.roa File: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (raw, json) Hash identifier: WTYmLvNpyq/A5Kbra5mtKRBFCjY1e4fS3rGmshvrNGY= Subject key identifier: BD:F9:17:69:52:D9:DD:E7:66:EC:EF:4F:93:A9:95:E3:30:5D:E0:6A Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: 51 Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/1ED36EFC590C11F0913BCB35C4F9AE02.roa Signing time: Fri 04 Jul 2025 19:21:45 +0000 ROA not before: Fri 04 Jul 2025 19:21:45 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 150372 IP address blocks: 161.248.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Jul 4 19:21:45 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=686829c8-e231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:ab:1c:c0:ac:10:88:41:da:42:c2:d8:a0: 1b:14:8c:3a:25:5d:30:b5:a4:6d:22:1c:35:2c:d0: 24:1e:e6:95:a9:a2:3d:51:97:c6:19:31:e7:ec:59: 84:ee:02:d1:11:9a:b0:a7:fd:ac:ff:13:63:3e:e7: 44:48:1b:8c:c3:08:f4:a3:40:71:a3:65:90:68:2f: ce:ac:29:f2:3a:ed:bf:81:e8:43:17:bc:27:09:12: 26:08:5d:bb:2e:1f:f0:63:c1:a6:bb:a2:9b:b1:61: 84:df:e1:08:23:4f:93:05:ca:ab:45:75:91:c4:f0: 83:89:9b:2d:08:06:a4:e0:0d:b8:5a:5b:70:22:da: d2:7c:ea:2c:4e:b5:9d:ee:3a:c2:fb:ef:f6:6f:bc: 8d:2b:d2:e6:25:99:d9:13:aa:06:0f:49:66:72:72: 14:e9:2a:36:c5:ab:55:7b:24:db:ca:b0:4e:b4:3b: b7:af:1d:8f:a6:14:64:bd:0f:98:44:75:51:50:f0: a2:44:fe:3a:4d:b7:57:bd:c2:81:0d:9f:6c:62:00: 23:60:d8:7b:2b:f7:36:53:24:2b:bb:24:76:fb:85: 2d:9b:89:de:40:29:ad:1b:e3:c7:64:cb:20:6b:9c: bd:52:62:ec:c8:59:2c:c1:c5:28:7d:24:bf:5d:24: 5b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F9:17:69:52:D9:DD:E7:66:EC:EF:4F:93:A9:95:E3:30:5D:E0:6A X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/1ED36EFC590C11F0913BCB35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.57.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:86:8a:be:12:03:2a:c7:f0:f3:f9:6e:7a:75:6c:a0:7f:ef: f3:43:36:06:27:12:f1:0d:5e:65:7a:e5:fc:0b:63:b4:d2:c2: 7e:53:4c:22:ef:ce:d4:06:62:e7:5f:4c:35:1f:40:f0:09:59: 31:8e:24:80:68:17:ff:ec:4b:6a:8e:ba:9c:8b:c5:36:4b:1d: 30:90:d6:d8:bd:ed:6c:28:36:a4:5e:48:b1:5a:6d:b8:a5:31: b2:2f:1a:19:86:e7:54:95:03:5e:44:cc:0c:b2:43:ab:12:87: 34:fb:49:cb:91:19:25:d0:ec:f1:0f:6a:25:b4:70:1f:46:53: 2d:6a:58:79:43:f6:57:fd:60:e4:35:ba:69:70:38:bb:4f:e5: 82:e8:93:68:0c:0b:44:50:c3:2f:2b:85:ce:4b:28:a8:d5:ff: 61:3f:ea:da:2f:95:6d:83:fb:ee:68:0c:30:63:33:c8:1b:4c: 8c:14:c1:19:9b:89:5a:9a:9e:aa:a4:36:71:43:e6:42:f5:13: 15:71:b7:f3:d6:ca:90:8e:85:07:37:eb:46:97:70:f2:cf:74: cf:b5:11:82:94:0c:dd:bb:7d:14:6e:bf:cf:33:12:df:25:d4: 1c:74:5b:ff:33:70:bc:d9:b6:4a:1c:18:bd:35:96:12:a6:a0: 2d:25:5f:13 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoNDQ2RkFGOTIzQkVCQUY5NjM1NzI4N0ZFMjUwOTkxQzc1 NDkxNDU0RDAeFw0yNTA3MDQxOTIxNDVaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NjgyOWM4LWUyMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/yKscwKwQiEHaQsLYoBsUjDolXTC1pG0iHDUs0CQe5pWpoj1Rl8YZMefsWYTu AtERmrCn/az/E2M+50RIG4zDCPSjQHGjZZBoL86sKfI67b+B6EMXvCcJEiYIXbsu H/Bjwaa7opuxYYTf4QgjT5MFyqtFdZHE8IOJmy0IBqTgDbhaW3Ai2tJ86ixOtZ3u OsL77/ZvvI0r0uYlmdkTqgYPSWZychTpKjbFq1V7JNvKsE60O7evHY+mFGS9D5hE dVFQ8KJE/jpNt1e9woENn2xiACNg2Hsr9zZTJCu7JHb7hS2bid5AKa0b48dkyyBr nL1SYuzIWSzBxSh9JL9dJFuZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUvfkXaVLZ 3edm7O9Pk6mV4zBd4GowHwYDVR0jBBgwFoAURG+vkjvrr5Y1cof+JQmRx1SRRU0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzNBRkMzM0UyRUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJV MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkctdmtqdnJyNVkxY29mLUpRbVJ4MVNSUlUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjFDQy8zQUZDMzNFMkVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi8xRUQzNkVGQzU5 MEMxMUYwOTEzQkNCMzVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKH4OTANBgkqhkiG9w0BAQsFAAOCAQEAn4aKvhIDKsfw8/lu enVsoH/v80M2BicS8Q1eZXrl/AtjtNLCflNMIu/O1AZi519MNR9A8AlZMY4kgGgX /+xLao66nIvFNksdMJDW2L3tbCg2pF5IsVptuKUxsi8aGYbnVJUDXkTMDLJDqxKH NPtJy5EZJdDs8Q9qJbRwH0ZTLWpYeUP2V/1g5DW6aXA4u0/lguiTaAwLRFDDLyuF zksoqNX/YT/q2i+VbYP77mgMMGMzyBtMjBTBGZuJWpqeqqQ2cUPmQvUTFXG389bK kI6FBzfrRpdw8s90z7URgpQM3bt9FG6/zzMS3yXUHHRb/zNwvNm2ShwYvTWWEqag LSVfEw== -----END CERTIFICATE-----Generated at Sun Jul 20 22:33:20 2025 by rpki-client