$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/2017BFC2B07211EF83629B37C4F9AE02.roa File: 2017BFC2B07211EF83629B37C4F9AE02.roa (raw, json) Hash identifier: mN3+2+qtTy+oq/2mSPD3LwNlHAef4eKWai8tbwHg/2k= Subject key identifier: 08:D0:B7:09:CC:45:79:3E:4B:53:63:1A:76:5E:66:A2:04:24:4D:FE Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Certificate serial: 07 Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/2017BFC2B07211EF83629B37C4F9AE02.roa Signing time: Mon 02 Dec 2024 05:56:08 +0000 ROA not before: Mon 02 Dec 2024 05:56:08 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151637 IP address blocks: 160.250.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Validity Not Before: Dec 2 05:56:08 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=674d4bf8-106d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:cf:d3:b1:a3:1a:f0:96:d1:f8:a3:1b:1a: df:b7:08:f5:71:a7:1c:25:41:09:f7:ee:f3:58:55: d5:99:7c:d4:4f:07:a1:dd:4b:82:18:c7:8b:94:fb: 1f:bf:58:79:80:3f:15:b7:86:46:b1:58:68:19:13: 7f:f2:e2:77:52:eb:19:bb:3f:ed:d0:4e:d7:d4:04: 97:1e:46:09:14:44:f7:9c:7c:41:c0:79:31:f9:1f: cb:b0:bf:7b:91:af:f9:86:86:19:ec:8b:b0:31:6c: bd:a9:bd:80:82:75:13:25:79:b3:09:ac:8b:f2:06: 2a:55:ba:fc:20:4f:55:63:75:29:c4:c0:d0:40:6b: 9c:f3:1d:89:67:8b:73:4b:6d:94:41:74:75:a7:0e: 88:ee:3b:d7:d7:92:60:8b:05:e4:9c:12:67:dd:dc: a2:1f:55:a0:ec:c0:c1:ee:69:18:9a:ec:f8:c7:0f: 1c:6c:f5:3f:0d:ad:f2:c8:93:31:14:b0:59:cd:2b: bd:ef:5f:4b:b3:1b:f8:1c:36:c4:89:a9:e0:68:0c: 3a:8f:8a:d5:ab:29:26:81:17:c2:40:ca:1c:7f:c5: 54:86:73:54:23:8a:34:76:ac:b0:02:54:4e:fe:5d: d8:23:dd:f2:12:a9:ad:ed:6a:d0:a6:ca:18:05:84: 2d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D0:B7:09:CC:45:79:3E:4B:53:63:1A:76:5E:66:A2:04:24:4D:FE X509v3 Authority Key Identifier: keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/2017BFC2B07211EF83629B37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.66.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:cf:0f:37:b0:a4:7f:0d:37:0e:d0:cf:7f:c7:90:e5:69:b7: ec:ea:1e:03:80:67:cd:39:2b:1d:f9:0d:c0:2d:89:66:df:01: 8c:7a:5c:c4:cc:f3:9f:f7:dc:97:df:d0:c7:23:a0:75:97:6d: e0:02:f4:43:41:ee:af:18:8a:74:d8:37:38:a3:27:ec:20:ce: 56:b2:17:f2:ae:56:63:c9:d0:77:37:4f:ed:ac:a5:f1:b3:2b: 1a:4b:b4:ef:8f:90:43:5c:92:4f:76:24:ed:f7:10:86:f3:48: 83:e1:48:6f:46:ef:42:57:47:ee:37:f1:ae:a5:a2:eb:59:1a: fc:83:be:c5:41:11:0c:25:5d:5d:2f:9f:d1:19:da:35:3f:1e: 12:26:44:ad:f0:ed:27:f3:90:90:68:33:1d:37:2e:e1:ff:b0: 6e:8d:02:a6:59:94:73:dc:d4:b5:ae:5d:a0:64:c1:0b:bd:30: 7c:29:80:81:32:95:4f:c3:ad:83:8e:ca:33:ea:e9:60:68:e7: 24:1a:8f:b3:d7:f5:2b:e3:08:08:95:3d:41:b5:13:1c:21:61: 64:9a:9a:d0:bf:ae:77:73:d4:c3:f3:fd:23:7c:e0:b4:45:de: bf:6d:f4:a3:57:34:f9:bc:21:10:e2:61:cb:45:ff:c6:6e:0b: 3b:93:9a:1d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ1RjExMC8GA1UEBRMoNDExNTIyMzQ2MEEzRERGQUM4M0E4MkZDNjFCMkJFOUVD NjI2QzIwQzAeFw0yNDEyMDIwNTU2MDhaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NGQ0YmY4LTEwNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwz8/TsaMa8JbR+KMbGt+3CPVxpxwlQQn37vNYVdWZfNRPB6HdS4IYx4uU+x+/ WHmAPxW3hkaxWGgZE3/y4ndS6xm7P+3QTtfUBJceRgkURPecfEHAeTH5H8uwv3uR r/mGhhnsi7AxbL2pvYCCdRMlebMJrIvyBipVuvwgT1VjdSnEwNBAa5zzHYlni3NL bZRBdHWnDojuO9fXkmCLBeScEmfd3KIfVaDswMHuaRia7PjHDxxs9T8NrfLIkzEU sFnNK73vX0uzG/gcNsSJqeBoDDqPitWrKSaBF8JAyhx/xVSGc1QjijR2rLACVE7+ Xdgj3fISqa3tatCmyhgFhC23AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUCNC3CcxF eT5LU2Madl5mogQkTf4wHwYDVR0jBBgwFoAUQRUiNGCj3frIOoL8YbK+nsYmwgww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDVGLzhDQTIwQTFDQUFE MjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdn dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVJVaU5HQ2ozZnJJT29MOFliSy1uc1ltd2d3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ1Ri84Q0EyMEExQ0FBRDIxMUVGOUFBMEVGODBDNEY5QUUwMi8yMDE3QkZDMkIw NzIxMUVGODM2MjlCMzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKD6QjANBgkqhkiG9w0BAQsFAAOCAQEATs8PN7Ckfw03DtDP f8eQ5Wm37OoeA4BnzTkrHfkNwC2JZt8BjHpcxMzzn/fcl9/QxyOgdZdt4AL0Q0Hu rxiKdNg3OKMn7CDOVrIX8q5WY8nQdzdP7ayl8bMrGku074+QQ1yST3Yk7fcQhvNI g+FIb0bvQldH7jfxrqWi61ka/IO+xUERDCVdXS+f0RnaNT8eEiZErfDtJ/OQkGgz HTcu4f+wbo0CplmUc9zUta5doGTBC70wfCmAgTKVT8Otg47KM+rpYGjnJBqPs9f1 K+MICJU9QbUTHCFhZJqa0L+ud3PUw/P9I3zgtEXev230o1c0+bwhEOJhy0X/xm4L O5OaHQ== -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:24 2025 by rpki-client