$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/40BC278038EB11EF9AD66E7FC4F9AE02.roa File: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (raw, json) Hash identifier: r+E4tv3uimhBOzrNZaN5fn8Ync8wrwOD2GgwaX3Fu0A= Subject key identifier: 12:C2:44:BF:8F:C0:D3:3B:31:1B:B8:6D:5A:2A:61:1D:CD:01:47:18 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: 8B Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/40BC278038EB11EF9AD66E7FC4F9AE02.roa Signing time: Tue 11 Mar 2025 05:53:39 +0000 ROA not before: Tue 11 Mar 2025 05:53:39 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 58644 IP address blocks: 175.158.104.0/24 maxlen: 24 175.158.105.0/24 maxlen: 24 175.158.106.0/24 maxlen: 24 175.158.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Mar 11 05:53:39 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67cfcfe3-4cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:97:bb:cc:5b:cb:c6:fc:e1:ab:42:f6:c6: 81:ee:99:dc:fc:c0:f9:c7:fa:97:c9:94:e7:79:91: 0f:6a:63:57:f8:59:f1:f0:cd:e1:af:68:b1:6c:f2: e2:52:ab:b7:a6:7b:4a:d6:e4:ba:e2:64:65:ad:46: 9a:8d:f0:17:d0:29:45:52:bb:9b:c2:23:1a:2b:f9: 74:bf:a6:5f:07:58:93:24:d9:4e:1b:fd:d0:e2:37: 86:b7:00:66:ff:3f:72:45:8d:00:e2:bb:2d:54:f4: 03:de:fc:dd:c3:9b:a1:45:1a:14:99:27:78:2c:82: 93:8f:a2:b2:c0:2d:88:87:7a:c1:72:ab:06:71:84: d3:f7:86:c9:4e:33:a6:73:6a:ba:b5:2f:05:e6:1f: 56:35:9e:f0:f3:41:fe:3d:d6:19:5d:dc:4b:82:1b: 6c:0c:5e:bc:63:03:b5:5e:c2:71:3c:6e:e0:52:a8: b3:8e:c4:36:1e:8f:6a:a9:59:87:ee:2f:39:ff:04: 42:f2:3b:4f:ae:33:ba:c7:79:18:90:0b:7d:a3:e3: a1:38:db:8f:67:03:6a:53:f5:93:60:8c:d7:e3:ad: 78:83:c7:d4:08:d8:02:81:f2:ef:3a:b1:04:a5:ca: 37:53:5f:39:5f:7e:35:6c:ef:db:14:7c:2b:25:92: 38:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C2:44:BF:8F:C0:D3:3B:31:1B:B8:6D:5A:2A:61:1D:CD:01:47:18 X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/40BC278038EB11EF9AD66E7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.158.104.0/22 Signature Algorithm: sha256WithRSAEncryption 68:dc:42:53:5c:c0:1d:b4:95:da:db:fc:b2:52:fb:70:77:95: 97:20:5e:e8:ab:87:c6:30:f8:e3:47:c7:43:c2:da:e3:67:85: d6:b0:82:50:d2:57:62:66:0d:1e:3f:63:61:05:d1:91:9d:45: e5:89:a7:5a:b6:bf:3c:99:ae:e4:c6:7e:e4:e2:a5:17:84:dc: 67:bc:c1:38:47:69:4b:70:49:7d:0d:53:3a:5c:cc:63:0e:a6: 35:ce:24:5e:70:bc:6c:bc:36:80:04:48:bb:6e:6e:a4:42:c1: b9:30:d3:d0:27:4d:1e:18:02:dc:44:01:68:7d:ce:a6:17:13: 2f:3c:63:99:b2:a8:94:c6:0a:0b:a1:50:20:67:da:18:d9:7d: fb:ac:75:ef:10:f9:b3:c2:84:b5:1b:58:08:0d:50:4f:e1:b7: f6:93:78:98:6b:12:a9:06:ce:89:f0:a6:61:4f:1b:11:df:f2: f2:0b:5a:34:b9:9f:4d:c8:b8:de:64:4a:a4:59:77:3f:45:cc: b2:04:dc:76:b6:36:74:a3:a1:8c:19:23:34:49:90:21:e4:8c: a7:90:0a:25:40:a9:5b:98:3d:06:53:aa:c7:39:cf:67:32:c2: c8:ee:f0:8e:08:13:1d:8c:59:5b:17:0f:39:5d:b0:1f:69:8e: 29:13:bd:ec -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjUwMzExMDU1MzM5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmY2ZlMy00Y2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxr6Xu8xby8b84atC9saB7pnc/MD5x/qXyZTneZEPamNX+Fnx8M3hr2ixbPLi Uqu3pntK1uS64mRlrUaajfAX0ClFUrubwiMaK/l0v6ZfB1iTJNlOG/3Q4jeGtwBm /z9yRY0A4rstVPQD3vzdw5uhRRoUmSd4LIKTj6KywC2Ih3rBcqsGcYTT94bJTjOm c2q6tS8F5h9WNZ7w80H+PdYZXdxLghtsDF68YwO1XsJxPG7gUqizjsQ2Ho9qqVmH 7i85/wRC8jtPrjO6x3kYkAt9o+OhONuPZwNqU/WTYIzX4614g8fUCNgCgfLvOrEE pco3U185X341bO/bFHwrJZI4SQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBLCRL+P wNM7MRu4bVoqYR3NAUcYMB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjEwREQvNjU2MzI0RjQzOEVBMTFFRkIwRkIyMTdEQzRGOUFFMDIvNDBCQzI3ODAz OEVCMTFFRjlBRDY2RTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKvnmgwDQYJKoZIhvcNAQELBQADggEBAGjcQlNcwB20ldrb /LJS+3B3lZcgXuirh8Yw+ONHx0PC2uNnhdawglDSV2JmDR4/Y2EF0ZGdReWJp1q2 vzyZruTGfuTipReE3Ge8wThHaUtwSX0NUzpczGMOpjXOJF5wvGy8NoAESLtubqRC wbkw09AnTR4YAtxEAWh9zqYXEy88Y5myqJTGCguhUCBn2hjZffusde8Q+bPChLUb WAgNUE/ht/aTeJhrEqkGzonwpmFPGxHf8vILWjS5n03IuN5kSqRZdz9FzLIE3Ha2 NnSjoYwZIzRJkCHkjKeQCiVAqVuYPQZTqsc5z2cywsju8I4IEx2MWVsXDzldsB9p jikTvew= -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:45 2025 by rpki-client