$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/E02064A0C9E911EFABA90568C4F9AE02.roa File: E02064A0C9E911EFABA90568C4F9AE02.roa (raw, json) Hash identifier: Lj7oe1PG2x11wd3w8JgQmVhkgZC0GIoGb3aNynIb3Ac= Subject key identifier: D9:4A:72:83:9A:D9:C9:2B:48:A9:0C:A8:CD:DB:0D:24:0C:16:6C:04 Certificate issuer: /CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E Certificate serial: 6D Authority key identifier: 22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/E02064A0C9E911EFABA90568C4F9AE02.roa Signing time: Fri 03 Jan 2025 15:46:20 +0000 ROA not before: Fri 03 Jan 2025 15:46:20 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 152928 IP address blocks: 160.22.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91106C7, serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E Validity Not Before: Jan 3 15:46:20 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6778064b-d405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:ff:af:e7:85:59:1c:dd:f2:35:12:7c:29: a1:ef:52:29:e9:b8:54:2e:16:07:3e:83:a6:b0:29: b6:7a:b5:e9:7d:22:37:ba:69:d8:b7:52:41:cb:f5: b3:2f:f4:84:56:16:77:1a:4b:64:06:41:33:cd:a9: 2c:af:b8:1c:fc:a6:40:78:91:70:66:97:bb:ce:b9: 42:5b:fe:dd:71:f3:41:c1:4d:94:ad:65:40:9e:6a: 05:ce:0c:7d:fb:9a:d0:c0:c7:f7:f3:ad:4d:6b:ba: fc:69:71:87:3e:fe:43:5a:61:ab:17:3c:e9:e3:3d: a8:76:9d:b3:47:9d:d1:db:7f:b9:3c:9b:39:b9:3d: b7:11:dd:55:a1:b0:24:bf:c4:89:56:40:00:60:c5: 72:a3:c7:12:09:8c:26:76:11:19:ae:7b:8e:e6:42: d0:3e:bf:a7:d5:5f:ad:a2:4f:b3:bb:83:82:f0:70: 7f:a1:08:63:e2:7e:ca:c2:24:ad:39:db:b3:bc:dc: b2:dc:82:90:69:d7:76:57:cc:98:4a:14:f7:73:ed: ab:6b:ca:19:10:34:0c:09:8f:04:8d:51:73:1c:ae: e6:16:01:58:11:83:e6:4d:63:6e:29:56:e0:70:f2: eb:3b:29:f4:61:b1:7a:59:07:d3:8b:95:26:ad:61: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4A:72:83:9A:D9:C9:2B:48:A9:0C:A8:CD:DB:0D:24:0C:16:6C:04 X509v3 Authority Key Identifier: keyid:22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/E02064A0C9E911EFABA90568C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.215.0/24 Signature Algorithm: sha256WithRSAEncryption 42:89:af:f7:44:99:d6:8c:e0:d3:e5:af:8e:b2:22:e2:00:23: 26:d4:64:2d:b0:f3:28:41:55:07:e7:42:06:e3:a9:37:c4:24: c3:4d:ef:4d:9a:d6:52:25:9d:df:44:ae:cb:12:89:3c:e5:6f: 71:d4:97:ff:e0:d6:1c:3a:c1:2f:01:41:16:4f:9d:f4:b9:36: 1e:08:f1:b9:44:a0:01:34:eb:c0:9a:36:5f:67:8e:2b:19:6f: 05:bd:38:cd:89:3c:ab:d5:c5:80:4b:bf:a0:32:27:f1:ac:54: e8:f8:00:c8:33:f0:6d:43:68:e0:07:7a:c4:2c:a4:4d:d5:8d: 26:27:9a:39:1f:07:82:cc:7b:3c:8d:71:ab:84:52:17:16:8f: 18:0d:4a:9e:72:06:bb:09:74:03:1c:0c:c5:42:46:96:23:74: 68:c3:f9:61:b0:0d:34:0f:06:ba:c1:3d:65:78:b1:ed:5c:cc: fa:e0:09:29:24:99:41:e2:e8:69:eb:76:36:52:70:f5:74:a3: 87:48:73:9b:bd:97:cc:99:9a:25:48:22:7a:39:97:bf:96:ef: 2b:e1:22:92:df:da:c9:64:bf:d2:c5:fd:3c:b2:d9:e0:ab:44: a7:81:b0:ac:02:dc:1a:e5:cc:3a:2b:4a:db:37:56:5e:23:9d: 4c:e4:66:5e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDZDNzExMC8GA1UEBRMoMjI5RUU2Q0ZCNzk1ODRCQTIzMTBBQ0NFNDUyODM4RjdB NDhBNTAxRTAeFw0yNTAxMDMxNTQ2MjBaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NzgwNjRiLWQ0MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdR/+v54VZHN3yNRJ8KaHvUinpuFQuFgc+g6awKbZ6tel9Ije6adi3UkHL9bMv 9IRWFncaS2QGQTPNqSyvuBz8pkB4kXBml7vOuUJb/t1x80HBTZStZUCeagXODH37 mtDAx/fzrU1ruvxpcYc+/kNaYasXPOnjPah2nbNHndHbf7k8mzm5PbcR3VWhsCS/ xIlWQABgxXKjxxIJjCZ2ERmue47mQtA+v6fVX62iT7O7g4LwcH+hCGPifsrCJK05 27O83LLcgpBp13ZXzJhKFPdz7atryhkQNAwJjwSNUXMcruYWAVgRg+ZNY24pVuBw 8us7KfRhsXpZB9OLlSatYRjZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU2Upyg5rZ yStIqQyozdsNJAwWbAQwHwYDVR0jBBgwFoAUIp7mz7eVhLojEKzORSg496SKUB4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNkM3LzZGMDNENjMwMzIw RTExRUZCNkUwREE3NkM0RjlBRTAyL0lwN216N2VWaExvakVLek9SU2c0OTZTS1VC NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSXA3bXo3ZVZoTG9qRUt6T1JTZzQ5NlNLVUI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDZDNy82RjAzRDYzMDMyMEUxMUVGQjZFMERBNzZDNEY5QUUwMi9FMDIwNjRBMEM5 RTkxMUVGQUJBOTA1NjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKAW1zANBgkqhkiG9w0BAQsFAAOCAQEAQomv90SZ1ozg0+Wv jrIi4gAjJtRkLbDzKEFVB+dCBuOpN8Qkw03vTZrWUiWd30SuyxKJPOVvcdSX/+DW HDrBLwFBFk+d9Lk2HgjxuUSgATTrwJo2X2eOKxlvBb04zYk8q9XFgEu/oDIn8axU 6PgAyDPwbUNo4Ad6xCykTdWNJieaOR8Hgsx7PI1xq4RSFxaPGA1KnnIGuwl0AxwM xUJGliN0aMP5YbANNA8GusE9ZXix7VzM+uAJKSSZQeLoaet2NlJw9XSjh0hzm72X zJmaJUgiejmXv5bvK+Eikt/ayWS/0sX9PLLZ4KtEp4GwrALcGuXMOitK2zdWXiOd TORmXg== -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:41 2025 by rpki-client