$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/08C7D93ACE8911EFBEC5D618C4F9AE02.roa File: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (raw, json) Hash identifier: nvtKwWFEZOMd88gDjqvdFcOF+TJpXNSXEguvJEtlOSQ= Subject key identifier: AA:08:10:47:21:60:50:BD:4A:3C:B8:D9:52:4D:7D:64:81:17:BB:AB Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Certificate serial: 02 Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/08C7D93ACE8911EFBEC5D618C4F9AE02.roa Signing time: Thu 09 Jan 2025 12:55:43 +0000 ROA not before: Thu 09 Jan 2025 12:55:43 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 153495 IP address blocks: 161.248.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Validity Not Before: Jan 9 12:55:43 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677fc74e-7ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:6b:41:8b:5f:03:24:4b:59:9d:c4:c4:e4: 58:e1:f4:e8:f8:24:41:4c:b4:4d:f9:bd:c2:0c:c8: 10:2c:f2:c6:41:ed:b1:c6:06:2c:f7:93:e2:af:62: 61:6d:3e:37:7d:24:d8:11:76:b8:d9:5c:a9:d8:35: 10:10:c5:68:08:1c:07:6e:40:3c:28:d0:9c:ec:f6: 90:c3:b6:8e:17:0f:e6:aa:5c:f4:80:25:d2:a4:36: e9:88:8d:36:02:b3:bd:53:16:58:4f:00:ab:3c:ee: 29:45:19:91:23:94:cc:e6:9d:1d:3d:26:78:21:e7: d6:30:62:f9:90:e3:c1:24:59:de:64:9e:6e:20:32: 67:d4:bd:52:55:c1:07:98:3b:be:a2:60:01:96:0b: bd:f1:a7:98:88:21:4b:3e:ce:67:00:9f:ca:dc:3e: 13:9d:47:c4:a4:7d:74:51:93:8c:c7:a8:f0:9f:e4: 55:e4:77:6c:70:f0:11:35:be:27:63:e4:75:4a:ea: 6c:f2:84:89:44:62:a1:51:be:c6:a1:99:b2:23:b0: 10:2d:7b:07:18:15:5e:4a:08:61:b3:c6:c5:9b:09: 29:9c:c1:14:72:64:8a:3b:e0:17:a5:10:02:42:ed: cc:fe:de:02:6a:0e:4d:e4:f8:07:1e:4a:1f:a3:d7: d1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:08:10:47:21:60:50:BD:4A:3C:B8:D9:52:4D:7D:64:81:17:BB:AB X509v3 Authority Key Identifier: keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/08C7D93ACE8911EFBEC5D618C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.130.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:d6:ff:d9:6e:12:07:73:64:13:4e:f1:b7:23:07:42:7b:08: 4e:93:ca:48:2f:a9:b3:8e:3d:a2:05:fa:0a:f2:f5:cc:1e:bd: 8a:a3:4e:73:54:40:d6:73:6e:9d:6a:1c:86:f2:4d:d5:71:54: da:4a:a3:09:b0:fe:bc:fe:4d:7f:ba:3c:a9:b3:d3:dc:1c:d5: 85:c0:6e:06:39:5b:81:0f:8f:38:fc:6b:0f:8d:ae:b8:eb:53: 4f:19:54:59:32:69:ab:8c:74:c0:f1:38:69:8a:eb:e7:07:f2: 49:2c:68:97:fe:a5:17:a2:9f:1c:87:cb:13:12:6d:32:7d:10: 52:82:51:48:13:6b:a5:e6:d6:b0:68:15:36:34:bf:57:45:5c: b1:82:97:68:18:6c:da:d2:68:a8:6c:66:34:c5:0c:a3:ff:bc: b3:1a:23:92:4e:57:eb:3f:4d:6d:37:16:50:1d:5b:6b:75:4a: 21:81:d4:b1:55:be:0b:b5:4c:bc:81:e4:b1:b6:d6:c7:71:5f: 15:bc:ae:9d:4b:d0:61:de:e2:8e:d0:97:70:4d:44:ce:e8:b6: 22:12:fd:0f:cb:e1:1d:dd:d9:13:d0:b8:33:41:ea:70:7f:45: c0:61:f2:9b:86:e7:f0:90:66:64:d5:55:cc:60:2e:86:b2:d0: 54:02:5f:86 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkQ4RTExMC8GA1UEBRMoNTA2MTk0NzEwMEJDQjMzMjg5RTI2QTBCREZFQ0UyQzVG QjlFMDlEMjAeFw0yNTAxMDkxMjU1NDNaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2ZjNzRlLTdhYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDPWtBi18DJEtZncTE5Fjh9Oj4JEFMtE35vcIMyBAs8sZB7bHGBiz3k+KvYmFt Pjd9JNgRdrjZXKnYNRAQxWgIHAduQDwo0Jzs9pDDto4XD+aqXPSAJdKkNumIjTYC s71TFlhPAKs87ilFGZEjlMzmnR09Jngh59YwYvmQ48EkWd5knm4gMmfUvVJVwQeY O76iYAGWC73xp5iIIUs+zmcAn8rcPhOdR8SkfXRRk4zHqPCf5FXkd2xw8BE1vidj 5HVK6mzyhIlEYqFRvsahmbIjsBAtewcYFV5KCGGzxsWbCSmcwRRyZIo74BelEAJC 7cz+3gJqDk3k+AceSh+j19H5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUqggQRyFg UL1KPLjZUk19ZIEXu6swHwYDVR0jBBgwFoAUUGGUcQC8szKJ4moL3+zixfueCdIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCRDhFLzNBRjU3RkRBQ0U4 ODExRUY4N0MwNzExN0M0RjlBRTAyL1VHR1VjUUM4c3pLSjRtb0wzLXppeGZ1ZUNk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUdHVWNRQzhzektKNG1vTDMteml4ZnVlQ2RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkQ4RS8zQUY1N0ZEQUNFODgxMUVGODdDMDcxMTdDNEY5QUUwMi8wOEM3RDkzQUNF ODkxMUVGQkVDNUQ2MThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4gjANBgkqhkiG9w0BAQsFAAOCAQEAD9b/2W4SB3NkE07x tyMHQnsITpPKSC+ps449ogX6CvL1zB69iqNOc1RA1nNunWochvJN1XFU2kqjCbD+ vP5Nf7o8qbPT3BzVhcBuBjlbgQ+POPxrD42uuOtTTxlUWTJpq4x0wPE4aYrr5wfy SSxol/6lF6KfHIfLExJtMn0QUoJRSBNrpebWsGgVNjS/V0VcsYKXaBhs2tJoqGxm NMUMo/+8sxojkk5X6z9NbTcWUB1ba3VKIYHUsVW+C7VMvIHksbbWx3FfFbyunUvQ Yd7ijtCXcE1Ezui2IhL9D8vhHd3ZE9C4M0HqcH9FwGHym4bn8JBmZNVVzGAuhrLQ VAJfhg== -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:51 2025 by rpki-client