$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/0850C906FBE511EFA186694BC4F9AE02.roa File: 0850C906FBE511EFA186694BC4F9AE02.roa (raw, json) Hash identifier: YlGML7Y+l2aCWZpP+MJw5lVj7z7kGZXUYzC2djMj+3E= Subject key identifier: 31:EE:87:C7:1A:D3:CD:E7:34:8E:05:29:E5:7C:4A:8C:EC:B2:67:AC Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 0351 Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/0850C906FBE511EFA186694BC4F9AE02.roa Signing time: Sat 08 Mar 2025 06:17:38 +0000 ROA not before: Sat 08 Mar 2025 06:17:38 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 59371 IP address blocks: 157.119.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Validity Not Before: Mar 8 06:17:38 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67cbe101-16ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:10:15:51:f1:bf:05:6b:49:6f:90:4c:a3: a7:ed:48:48:b1:63:50:67:00:3d:d6:9c:26:21:97: 38:74:6e:da:8a:38:72:70:1d:04:52:a1:b0:ca:36: 9f:5b:cd:67:f0:3c:c8:4c:42:df:9a:14:e5:c2:7c: 6d:da:09:b8:06:bb:2e:11:aa:be:96:e6:b8:4c:00: 1a:8a:1c:86:d3:07:fd:9a:69:f1:b8:b8:2d:a2:dc: c7:5a:cc:55:3c:f5:ea:4a:93:ca:1f:db:cb:93:40: 7e:8a:1f:d0:b0:90:a0:62:29:b2:0d:c0:aa:70:9b: 52:17:4e:75:2d:52:d2:ea:fd:7e:76:6f:aa:54:27: b1:ae:5c:a3:19:fd:72:63:f4:1e:99:7b:67:03:aa: 45:b9:07:4a:67:6a:a1:5b:c7:fd:5f:1d:54:c6:cd: 3d:e2:e6:c2:41:73:e5:dd:36:23:63:7a:f1:94:36: 60:8d:2d:4b:a5:21:40:7a:2d:ff:ce:5e:a0:68:31: 4c:51:da:58:66:89:4a:e3:27:09:5d:9a:c7:ae:ae: 19:f1:13:04:66:49:aa:90:d6:ab:f0:07:31:bb:ef: be:2a:2b:d4:1f:1d:9e:29:e5:9d:55:75:cc:5d:93: d4:2b:95:07:05:c4:ab:25:a4:57:98:25:f5:de:33: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EE:87:C7:1A:D3:CD:E7:34:8E:05:29:E5:7C:4A:8C:EC:B2:67:AC X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/0850C906FBE511EFA186694BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.119.22.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:ad:2c:8f:48:c9:9a:84:b4:72:e5:53:9e:8a:3a:2e:59:4e: 46:fc:be:26:3f:41:99:f3:ae:1b:e3:2c:36:cd:9c:c5:97:bd: b4:e4:2c:c7:e7:ed:9e:90:87:e0:41:0c:0a:9a:92:5f:a3:cf: a7:e2:15:8d:74:d9:84:09:e2:95:83:e2:3b:0c:a4:f8:5a:27: 39:23:14:50:0e:0a:f2:63:e3:11:49:25:8f:99:90:56:6b:ed: dc:8a:80:32:0a:8d:c3:ae:62:1d:dd:2b:2e:b5:1c:71:07:de: 8a:9b:ac:56:bc:84:27:8d:30:0e:fe:02:35:26:2f:18:47:0d: cd:43:a8:67:86:4f:43:89:f2:02:6f:a2:4c:42:e9:ed:0f:dd: cb:89:c9:0b:93:d5:0d:dc:e8:99:b0:4a:b9:1c:a7:bc:12:9c: 6a:f2:9f:5e:76:30:d0:6e:6e:e6:ca:fe:0e:d3:18:6b:d5:bf: 54:2e:dd:1d:17:69:ba:46:60:9c:3d:77:ef:27:ab:da:48:01: 75:83:fb:0d:d7:be:88:85:e4:14:50:82:fc:41:7a:48:bd:63: 67:b2:07:70:26:6c:d0:dd:f4:5a:bd:e9:bb:cd:74:b7:14:f3: 86:fd:98:59:2b:99:45:a7:8e:23:71:b3:41:9c:23:30:5d:79: f9:95:aa:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjUwMzA4MDYxNzM4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NiZTEwMS0xNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC4QFVHxvwVrSW+QTKOn7UhIsWNQZwA91pwmIZc4dG7aijhycB0EUqGwyjaf W81n8DzITELfmhTlwnxt2gm4BrsuEaq+lua4TAAaihyG0wf9mmnxuLgtotzHWsxV PPXqSpPKH9vLk0B+ih/QsJCgYimyDcCqcJtSF051LVLS6v1+dm+qVCexrlyjGf1y Y/QemXtnA6pFuQdKZ2qhW8f9Xx1Uxs094ubCQXPl3TYjY3rxlDZgjS1LpSFAei3/ zl6gaDFMUdpYZolK4ycJXZrHrq4Z8RMEZkmqkNar8Acxu+++KivUHx2eKeWdVXXM XZPUK5UHBcSrJaRXmCX13jOn9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDHuh8ca 083nNI4FKeV8SozssmesMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyQjUvNkQ1RkVEOTJDQzJGMTFFQzg1NTM4MDM3QzRGOUFFMDIvMDg1MEM5MDZG QkU1MTFFRkExODY2OTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACddxYwDQYJKoZIhvcNAQELBQADggEBAG2tLI9IyZqEtHLl U56KOi5ZTkb8viY/QZnzrhvjLDbNnMWXvbTkLMfn7Z6Qh+BBDAqakl+jz6fiFY10 2YQJ4pWD4jsMpPhaJzkjFFAOCvJj4xFJJY+ZkFZr7dyKgDIKjcOuYh3dKy61HHEH 3oqbrFa8hCeNMA7+AjUmLxhHDc1DqGeGT0OJ8gJvokxC6e0P3cuJyQuT1Q3c6Jmw Srkcp7wSnGryn152MNBububK/g7TGGvVv1Qu3R0XabpGYJw9d+8nq9pIAXWD+w3X voiF5BRQgvxBeki9Y2eyB3AmbNDd9Fq96bvNdLcU84b9mFkrmUWnjiNxs0GcIzBd efmVqhY= -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:03 2025 by rpki-client