$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa File: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (raw, json) Hash identifier: oApvSZT8Sv3uSmM9SxIKbWqw6D6WWZsa1SWpMmDS0a4= Subject key identifier: 4F:34:01:B1:47:94:5E:B4:35:8F:E3:08:FD:CD:B1:E0:19:9E:91:2E Certificate issuer: /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Certificate serial: D3 Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa Signing time: Fri 03 Jan 2025 04:07:21 +0000 ROA not before: Fri 03 Jan 2025 04:07:21 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152137 IP address blocks: 210.79.182.0/23 maxlen: 23 210.79.182.0/24 maxlen: 24 210.79.183.0/24 maxlen: 24 2001:df3:3bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Validity Not Before: Jan 3 04:07:21 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67776279-86af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:0b:cb:30:50:a6:d4:19:ed:d9:76:7a:ff: 3f:29:c1:80:74:ac:63:6c:b5:76:a8:03:12:9e:b2: 3a:db:55:82:9e:c6:c4:ef:3e:71:2b:0a:2d:40:af: ec:6d:d3:22:73:fa:7f:03:94:e2:e1:0c:13:fe:e9: 5a:68:20:cd:33:b6:66:a5:6b:74:97:06:6c:37:03: f0:89:b9:cf:e3:01:80:dd:92:89:e9:4d:58:d4:d6: 32:c7:6a:fa:fc:12:e4:43:c6:ea:5a:8c:3b:5f:6c: b2:6c:b9:d6:25:0a:db:20:6d:c8:ec:76:50:13:2c: 63:fe:ab:68:fa:58:69:10:ab:c2:d5:cf:40:bb:c8: a9:1b:46:87:e9:80:09:d3:ef:46:c0:2a:0e:a3:8d: 63:d2:e5:12:60:98:b0:5e:47:83:20:15:1f:ff:b9: b5:22:bc:52:1a:51:11:89:cb:a0:05:7c:f0:48:62: 00:eb:12:3d:06:12:81:c0:e8:c2:4d:e7:48:ae:a3: bc:2f:98:fb:6e:cd:05:1d:8b:1c:91:1d:64:9a:f4: 4f:a2:9c:14:1c:e2:3c:95:cd:7e:06:7b:f3:01:1a: 60:83:6e:93:0e:fa:cf:94:86:c4:11:74:36:69:de: 55:83:7f:e4:89:76:23:36:17:ee:5d:2c:24:f9:d8: 00:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:34:01:B1:47:94:5E:B4:35:8F:E3:08:FD:CD:B1:E0:19:9E:91:2E X509v3 Authority Key Identifier: keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.79.182.0/23 IPv6: 2001:df3:3bc0::/48 Signature Algorithm: sha256WithRSAEncryption 94:53:22:50:f1:9c:9b:ae:dd:25:36:46:67:80:5b:fb:0f:94: fa:90:46:a1:32:fd:d1:b1:cf:e9:38:0b:c2:79:22:6b:d9:03: 50:40:94:eb:ef:15:a5:19:af:59:2b:a9:fc:29:ba:55:3e:40: 8a:01:6e:c4:57:38:c4:2d:c8:37:f0:f0:cb:14:f3:17:b4:3f: 5f:31:7e:80:21:3b:92:ff:34:d5:63:40:bf:16:d8:3a:a5:75: 46:cc:e1:97:da:68:8e:f4:f8:40:2c:d5:43:79:e6:08:b4:cd: 1c:ff:71:87:bb:8e:dd:3c:f6:c6:4e:42:91:2f:8c:34:d4:9d: 1b:d1:e3:ff:95:b7:45:79:01:9c:97:46:db:11:ac:1a:62:28: 77:3e:13:8b:52:4b:8e:90:3d:78:cc:c5:79:05:99:0e:f3:22: 06:42:32:73:12:d2:54:fe:a1:8e:a5:a1:72:5d:3b:14:b4:6d: 36:aa:9a:79:29:b5:2c:a3:39:49:e4:89:01:7f:e6:eb:13:a7: c8:a6:71:a9:83:94:4b:36:ad:ba:d4:11:76:d6:f7:b5:79:4f: 83:25:57:85:a6:45:78:3e:2a:74:d3:bb:fb:3f:a6:2a:48:ce: 85:48:24:66:7e:4f:85:3c:1c:ca:26:95:1d:5f:33:97:a6:d4: 3e:64:e6:44 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRjIxMTAvBgNVBAUTKDVDQzkxQUZENUI4QjM3RUQ4QzUwOUY2MTE4OUY0NDhF NzMxMjFGOTcwHhcNMjUwMTAzMDQwNzIxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc3NjI3OS04NmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TMLyzBQptQZ7dl2ev8/KcGAdKxjbLV2qAMSnrI621WCnsbE7z5xKwotQK/s bdMic/p/A5Ti4QwT/ulaaCDNM7ZmpWt0lwZsNwPwibnP4wGA3ZKJ6U1Y1NYyx2r6 /BLkQ8bqWow7X2yybLnWJQrbIG3I7HZQEyxj/qto+lhpEKvC1c9Au8ipG0aH6YAJ 0+9GwCoOo41j0uUSYJiwXkeDIBUf/7m1IrxSGlERicugBXzwSGIA6xI9BhKBwOjC TedIrqO8L5j7bs0FHYsckR1kmvRPopwUHOI8lc1+BnvzARpgg26TDvrPlIbEEXQ2 ad5Vg3/kiXYjNhfuXSwk+dgATQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFE80AbFH lF60NY/jCP3NseAZnpEuMB8GA1UdIwQYMBaAFFzJGv1bizftjFCfYRifRI5zEh+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNGMi8wMDUxREJDQzk3 RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4tMk1VSjloR0o5RWpuTVNI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0IzRjIvMDA1MURCQ0M5N0UyMTFFRTg5ODEzRDIzQzRGOUFFMDIvMTYwODNFMTBB OTVFMTFFRUJDMEE3RTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHST7YwDwQCAAIwCQMHACABDfM7wDANBgkqhkiG9w0BAQsF AAOCAQEAlFMiUPGcm67dJTZGZ4Bb+w+U+pBGoTL90bHP6TgLwnkia9kDUECU6+8V pRmvWSup/Cm6VT5AigFuxFc4xC3IN/DwyxTzF7Q/XzF+gCE7kv801WNAvxbYOqV1 Rszhl9pojvT4QCzVQ3nmCLTNHP9xh7uO3Tz2xk5CkS+MNNSdG9Hj/5W3RXkBnJdG 2xGsGmIodz4Ti1JLjpA9eMzFeQWZDvMiBkIycxLSVP6hjqWhcl07FLRtNqqaeSm1 LKM5SeSJAX/m6xOnyKZxqYOUSzatutQRdtb3tXlPgyVXhaZFeD4qdNO7+z+mKkjO hUgkZn5PhTwcyiaVHV8zl6bUPmTmRA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:41 2025 by rpki-client