$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/212A832AD7E311EF86266212C4F9AE02.roa File: 212A832AD7E311EF86266212C4F9AE02.roa (raw, json) Hash identifier: OADH0Zf3ANJ0fVSGo4++5SGmG3UFA33H5Jy/cHOt0/k= Subject key identifier: 87:0D:36:32:9D:2D:60:42:7E:81:60:74:5D:83:33:F5:B2:01:76:4D Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC Certificate serial: 02 Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/212A832AD7E311EF86266212C4F9AE02.roa Signing time: Tue 21 Jan 2025 10:33:18 +0000 ROA not before: Tue 21 Jan 2025 10:33:18 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139833 IP address blocks: 160.187.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC Validity Not Before: Jan 21 10:33:18 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=678f77ee-351a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:50:fa:44:5a:ec:25:58:82:42:d1:21:a1: c3:50:1b:98:e8:d2:3a:6b:d2:52:2b:30:a9:3c:ab: 06:4c:02:75:d3:76:99:ae:c1:8a:f0:b9:50:88:48: b5:18:02:73:c2:60:82:3c:24:f4:bc:4a:39:47:b6: d5:a6:fa:eb:71:6f:9e:27:38:52:d3:2d:b3:1a:50: d1:5a:ca:01:30:bb:60:8d:62:58:a9:1e:7b:ea:2c: 46:b5:a0:df:37:90:22:48:6b:84:fb:10:e9:1f:24: fa:13:94:2d:be:2c:dc:67:42:f3:06:f3:c0:03:e6: 50:6f:9b:11:ed:5c:a6:32:e0:ad:46:37:17:66:fb: 9d:c8:47:a0:ba:c2:c3:5c:bf:ca:b9:6b:b8:b8:c9: 2d:76:a7:f8:a0:fb:2d:74:b9:9a:e9:56:df:9c:c8: f3:4b:db:6d:38:8b:47:d4:2f:aa:48:dd:2d:cd:00: 30:d3:ef:17:e5:d1:65:4e:31:c4:9b:f2:7d:a7:7f: 72:b0:af:2f:c5:03:e4:c0:17:d9:39:03:a5:f4:ca: 0c:28:2c:54:a9:42:b4:2c:35:a1:c3:25:69:c1:16: f6:ca:c1:89:d7:bf:c1:0a:1b:ad:26:e1:7a:74:c8: ff:4b:c0:c0:95:30:ad:01:59:68:96:04:74:48:ab: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0D:36:32:9D:2D:60:42:7E:81:60:74:5D:83:33:F5:B2:01:76:4D X509v3 Authority Key Identifier: keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/212A832AD7E311EF86266212C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.113.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:ef:98:9e:42:52:21:07:e1:93:5e:1b:52:6a:65:f6:bc:0d: 53:40:d3:ba:0c:5a:ec:4d:a5:02:82:37:63:2d:48:da:12:95: ed:f3:aa:0c:87:bc:aa:ea:7f:fb:64:40:ac:97:12:e0:b9:c7: 3f:c3:34:83:c2:2d:da:ef:87:c9:34:42:f4:b1:84:37:cb:fa: 45:8c:44:4b:d8:d3:68:a2:8b:79:56:86:92:5a:30:95:fb:91: 1e:8a:df:1d:92:70:23:49:33:d4:1d:f4:f1:83:66:68:36:a5: 47:75:ec:f5:20:08:4a:b4:12:4c:80:e4:c3:00:49:50:e3:d1: e6:19:23:11:54:9a:04:25:73:9d:70:d0:eb:54:e7:33:6b:0d: d4:b8:11:6c:9b:0c:c6:78:45:eb:7e:f4:06:b0:1c:aa:d7:50: f5:9b:22:ff:b3:4d:07:45:5f:2b:80:07:86:5e:f4:35:6a:99: de:f4:79:57:cc:a3:a1:37:c8:9e:76:dc:62:8c:c0:12:d3:7c: f3:ee:bf:90:41:5e:7c:fc:e8:9d:04:56:f4:9f:dc:00:56:ab: 2c:a7:fb:dd:1f:77:92:b6:80:72:17:8c:1c:6b:db:89:06:63: 19:67:5c:25:18:6a:4d:8c:1a:13:67:a1:18:14:24:7e:85:11: 23:fb:8f:6b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Rjg3MDExMC8GA1UEBRMoNUQ1NUYxNTA5QjZGMDM0MjREMjk0NEY4MTFGODY5OTM4 MDk5QkJCQzAeFw0yNTAxMjExMDMzMThaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OGY3N2VlLTM1MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLDFD6RFrsJViCQtEhocNQG5jo0jpr0lIrMKk8qwZMAnXTdpmuwYrwuVCISLUY AnPCYII8JPS8SjlHttWm+utxb54nOFLTLbMaUNFaygEwu2CNYlipHnvqLEa1oN83 kCJIa4T7EOkfJPoTlC2+LNxnQvMG88AD5lBvmxHtXKYy4K1GNxdm+53IR6C6wsNc v8q5a7i4yS12p/ig+y10uZrpVt+cyPNL2204i0fUL6pI3S3NADDT7xfl0WVOMcSb 8n2nf3Kwry/FA+TAF9k5A6X0ygwoLFSpQrQsNaHDJWnBFvbKwYnXv8EKG60m4Xp0 yP9LwMCVMK0BWWiWBHRIq0snAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUhw02Mp0t YEJ+gWB0XYMz9bIBdk0wHwYDVR0jBBgwFoAUXVXxUJtvA0JNKUT4Efhpk4CZu7ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGODcwL0M5MjQyNDZBRDdF MjExRUZBRjBCM0I3REM0RjlBRTAyL1hWWHhVSnR2QTBKTktVVDRFZmhwazRDWnU3 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFZYeFVKdHZBMEpOS1VUNEVmaHBrNENadTd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Rjg3MC9DOTI0MjQ2QUQ3RTIxMUVGQUYwQjNCN0RDNEY5QUUwMi8yMTJBODMyQUQ3 RTMxMUVGODYyNjYyMTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKC7cTANBgkqhkiG9w0BAQsFAAOCAQEAeu+YnkJSIQfhk14b Umpl9rwNU0DTugxa7E2lAoI3Yy1I2hKV7fOqDIe8qup/+2RArJcS4LnHP8M0g8It 2u+HyTRC9LGEN8v6RYxES9jTaKKLeVaGklowlfuRHorfHZJwI0kz1B308YNmaDal R3Xs9SAISrQSTIDkwwBJUOPR5hkjEVSaBCVznXDQ61TnM2sN1LgRbJsMxnhF6370 BrAcqtdQ9Zsi/7NNB0VfK4AHhl70NWqZ3vR5V8yjoTfInnbcYozAEtN88+6/kEFe fPzonQRW9J/cAFarLKf73R93kraAcheMHGvbiQZjGWdcJRhqTYwaE2ehGBQkfoUR I/uPaw== -----END CERTIFICATE-----Generated at Sat Apr 26 14:25:05 2025 by rpki-client