$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/4ECE44B0D24311EF919B6D12C4F9AE02.roa File: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (raw, json) Hash identifier: HTX8AzlBVBkYFaGVRN5GWHgC9HxdFLqil4uBj/GLN6g= Subject key identifier: C4:E6:6A:0D:F4:61:0C:0E:24:F4:EC:F3:D8:E7:F9:69:20:DA:B0:52 Certificate issuer: /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC Certificate serial: 02 Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/4ECE44B0D24311EF919B6D12C4F9AE02.roa Signing time: Tue 14 Jan 2025 06:46:40 +0000 ROA not before: Tue 14 Jan 2025 06:46:40 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137248 IP address blocks: 161.248.168.0/23 maxlen: 23 161.248.168.0/24 maxlen: 24 161.248.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E660, serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC Validity Not Before: Jan 14 06:46:40 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67860850-204e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:81:92:0c:dc:46:37:66:88:1a:2b:2e:b3:1b: 5f:2b:1b:74:3c:2d:ff:29:59:62:e4:20:10:fd:f8: 64:10:82:78:66:a1:ba:ae:18:65:31:1c:b7:aa:54: 90:98:b3:3f:92:26:0f:77:4e:ee:4d:ee:6e:38:bc: 0a:80:e5:47:58:18:68:c1:bc:e6:58:a1:2c:9e:2f: 2c:58:3c:79:9d:4d:46:2c:4b:35:97:46:c6:7f:40: f3:3e:d3:02:a2:7b:7e:07:ba:c1:2d:27:51:a1:b6: 10:f7:0c:f7:5f:8d:0e:fa:70:1c:1e:2c:e1:c1:84: 36:d9:69:f7:af:cb:1e:2a:c5:97:e7:6f:f6:d0:fa: 28:3d:ed:8b:e2:1a:83:63:c2:43:f7:40:86:60:80: dc:7d:a2:61:3c:8c:b1:ad:7f:a6:46:1e:17:16:a3: 58:6c:ee:c9:bf:f8:01:39:1f:e4:be:13:66:66:bb: 19:3f:d1:a6:e4:d4:b3:97:b9:40:48:ce:68:8b:9d: 3f:e7:f6:ff:e3:83:bf:37:4c:7c:c1:dd:b5:05:cb: 53:9f:4b:69:13:aa:08:41:0f:58:4d:51:55:40:3c: cf:ec:51:12:16:11:0f:46:d2:b0:3a:19:16:e8:ea: b9:64:33:28:b7:f1:85:bd:b5:19:ee:da:d8:ba:79: d8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E6:6A:0D:F4:61:0C:0E:24:F4:EC:F3:D8:E7:F9:69:20:DA:B0:52 X509v3 Authority Key Identifier: keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/4ECE44B0D24311EF919B6D12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.168.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:22:07:f9:95:db:0b:b5:ef:89:bb:a1:c7:79:e0:d8:37:85: 16:6e:80:0d:22:5c:99:a5:55:8b:b6:83:cd:12:a3:96:a5:2d: c0:1d:6b:f8:99:9c:5f:08:09:ec:e1:77:20:8b:46:2a:f2:a8: 57:91:7c:51:b9:8a:03:0f:47:76:87:6a:e2:b2:ed:87:08:bd: 4b:7e:cf:d3:4e:eb:26:fb:0f:58:2f:3f:a3:52:66:ef:72:6a: 97:1e:30:0e:46:1f:11:74:dc:b7:07:d4:16:ee:23:27:b7:ea: 17:94:db:ae:0e:0e:3e:39:87:4b:38:8f:fc:03:5c:51:a0:a2: e6:a6:9e:3f:33:00:d2:2b:ed:61:04:e6:73:00:cf:60:6c:85: 50:98:f7:90:bd:aa:61:84:09:9e:a2:a1:bb:ea:41:0d:fc:5b: 97:1f:64:c8:84:3b:2e:52:41:74:68:45:99:70:3e:81:8a:f0: c5:b5:75:fd:08:4a:d5:f4:33:31:46:13:70:16:2b:04:d3:a1: 76:79:25:b4:34:a8:64:36:99:36:0a:55:06:ae:e4:da:58:83: 95:8f:28:e3:01:f7:d2:08:88:b5:29:5e:48:cc:ff:96:37:02: 97:d9:4b:3c:71:78:49:aa:e9:22:85:76:38:c0:03:2e:f9:5b: eb:9f:2a:e2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTY2MDExMC8GA1UEBRMoNzYyMDI2NkI5ODkxQTIxOEMwRTVGMkVGMjg4Rjc4MkQ1 NzE3RjJCQzAeFw0yNTAxMTQwNjQ2NDBaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ODYwODUwLTIwNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYgZIM3EY3ZogaKy6zG18rG3Q8Lf8pWWLkIBD9+GQQgnhmobquGGUxHLeqVJCY sz+SJg93Tu5N7m44vAqA5UdYGGjBvOZYoSyeLyxYPHmdTUYsSzWXRsZ/QPM+0wKi e34HusEtJ1GhthD3DPdfjQ76cBweLOHBhDbZafevyx4qxZfnb/bQ+ig97YviGoNj wkP3QIZggNx9omE8jLGtf6ZGHhcWo1hs7sm/+AE5H+S+E2Zmuxk/0abk1LOXuUBI zmiLnT/n9v/jg783THzB3bUFy1OfS2kTqghBD1hNUVVAPM/sURIWEQ9G0rA6GRbo 6rlkMyi38YW9tRnu2ti6edhVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUxOZqDfRh DA4k9Ozz2Of5aSDasFIwHwYDVR0jBBgwFoAUdiAma5iRohjA5fLvKI94LVcX8rww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNjYwL0Y5ODcxMURBRDI0 MjExRUY4OEM1QkMxMUM0RjlBRTAyL2RpQW1hNWlSb2hqQTVmTHZLSTk0TFZjWDhy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZGlBbWE1aVJvaGpBNWZMdktJOTRMVmNYOHJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY2MC9GOTg3MTFEQUQyNDIxMUVGODhDNUJDMTFDNEY5QUUwMi80RUNFNDRCMEQy NDMxMUVGOTE5QjZEMTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4qDANBgkqhkiG9w0BAQsFAAOCAQEAXCIH+ZXbC7Xvibuh x3ng2DeFFm6ADSJcmaVVi7aDzRKjlqUtwB1r+JmcXwgJ7OF3IItGKvKoV5F8UbmK Aw9Hdodq4rLthwi9S37P007rJvsPWC8/o1Jm73Jqlx4wDkYfEXTctwfUFu4jJ7fq F5Tbrg4OPjmHSziP/ANcUaCi5qaePzMA0ivtYQTmcwDPYGyFUJj3kL2qYYQJnqKh u+pBDfxblx9kyIQ7LlJBdGhFmXA+gYrwxbV1/QhK1fQzMUYTcBYrBNOhdnkltDSo ZDaZNgpVBq7k2liDlY8o4wH30giItSleSMz/ljcCl9lLPHF4SarpIoV2OMADLvlb 658q4g== -----END CERTIFICATE-----Generated at Sat Apr 26 20:02:28 2025 by rpki-client