$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/01935FDC35F911EFBF29CF70C4F9AE02.roa File: 01935FDC35F911EFBF29CF70C4F9AE02.roa (raw, json) Hash identifier: IfjKXBSjqSuFJaVoDqP6oYZ3wH/2zlYfGaCM0ODem/4= Subject key identifier: 47:3A:2C:20:05:8A:AD:3B:89:53:32:88:15:B3:0C:E2:84:EF:0F:68 Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Certificate serial: 8F Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/01935FDC35F911EFBF29CF70C4F9AE02.roa Signing time: Mon 20 Jan 2025 09:19:43 +0000 ROA not before: Mon 20 Jan 2025 09:19:43 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 133112 IP address blocks: 160.20.116.0/24 maxlen: 24 160.20.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Validity Not Before: Jan 20 09:19:43 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=678e152f-909e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:2f:ff:7f:dc:06:84:2e:79:cf:3a:e6:9c: 96:6b:11:92:e5:c6:33:a3:b9:a2:25:61:85:ba:04: fc:cd:f9:53:9c:be:ee:3c:5a:04:43:31:4c:58:35: ec:fa:d3:02:2e:11:81:9a:b1:71:3c:00:7a:1b:54: 6a:e6:c7:f6:17:36:15:bd:33:8f:e6:bb:2c:d9:07: 4b:e3:65:7e:8d:d3:bf:04:d3:e2:21:18:5c:20:df: de:13:42:76:04:4c:18:a6:6a:d7:de:33:57:93:c7: 2d:a1:f1:4a:ba:74:2c:6c:86:f5:a6:e4:1c:49:b1: 61:1d:d1:5f:15:41:61:aa:e0:00:42:b4:43:c7:0f: 9d:ef:6e:02:2a:95:da:2a:0e:ff:1a:10:86:4f:11: 0f:c8:37:36:21:81:e3:4a:a3:fb:20:84:7f:de:63: bc:3b:36:33:15:49:eb:d5:37:62:41:bd:4e:af:ae: d7:ce:18:4e:58:46:2c:6c:3c:a2:1b:c3:d2:f9:49: d4:76:21:6e:39:3e:df:80:3c:50:5f:09:e8:98:89: dd:08:fa:5a:a6:55:71:56:83:95:8b:e0:58:cd:39: 94:f6:d8:75:a9:fa:0c:63:89:f5:d2:c1:73:4f:6c: 71:63:a1:d4:05:52:fc:8d:eb:35:38:78:d1:5e:33: 29:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3A:2C:20:05:8A:AD:3B:89:53:32:88:15:B3:0C:E2:84:EF:0F:68 X509v3 Authority Key Identifier: keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/01935FDC35F911EFBF29CF70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.20.116.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:b5:b8:c2:05:f4:4e:4e:9b:2d:58:43:b8:4e:f4:39:c6:b4: da:b4:51:98:35:82:ba:89:c9:86:e4:40:68:3a:8b:2f:23:c1: 78:6a:ad:63:d4:70:c3:27:e2:2f:25:fc:ff:28:3f:c1:dd:d3: c1:e0:53:f9:35:1b:4b:3e:93:c8:57:8c:97:89:49:92:41:48: d2:16:7a:a0:00:e3:32:15:60:d4:38:30:ee:fb:55:5b:c5:48: b5:45:94:ee:01:65:b4:e2:be:4f:48:f3:77:de:81:ff:69:ee: 1a:e8:ad:d0:1e:3d:c0:eb:91:ea:1b:81:0c:c9:4f:01:e0:83: fc:d2:db:01:c7:22:06:c5:a8:73:00:dc:e2:00:c7:c5:06:f8: af:f9:0a:5d:7f:3b:75:e7:6b:ae:39:ad:a7:de:71:64:f5:ff: aa:86:e1:35:ab:28:2c:47:5c:40:4c:a1:39:d6:8e:64:b9:2d: cf:1b:c1:1a:28:2b:9e:66:d9:9b:b1:f8:04:ce:6f:3b:d0:56: af:9e:80:eb:6e:44:d8:b2:29:46:cb:b8:fa:4a:f7:4a:72:de: ad:bc:59:de:55:52:e1:13:41:2b:d7:d1:04:d8:8c:a3:ae:8f: 36:b1:e7:2c:33:83:37:ab:1d:f0:c8:ee:30:e9:ab:35:d0:44: 80:35:88:da -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKEFBNDQwNUIxQkZBOTZDOUM2OUIwMjkwMzNFRjQ4MUQ4 RjU4QTc3RTUwHhcNMjUwMTIwMDkxOTQzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhlMTUyZi05MDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlov/3/cBoQuec865pyWaxGS5cYzo7miJWGFugT8zflTnL7uPFoEQzFMWDXs +tMCLhGBmrFxPAB6G1Rq5sf2FzYVvTOP5rss2QdL42V+jdO/BNPiIRhcIN/eE0J2 BEwYpmrX3jNXk8ctofFKunQsbIb1puQcSbFhHdFfFUFhquAAQrRDxw+d724CKpXa Kg7/GhCGTxEPyDc2IYHjSqP7IIR/3mO8OzYzFUnr1TdiQb1Or67XzhhOWEYsbDyi G8PS+UnUdiFuOT7fgDxQXwnomIndCPpaplVxVoOVi+BYzTmU9th1qfoMY4n10sFz T2xxY6HUBVL8jes1OHjRXjMpjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEc6LCAF iq07iVMyiBWzDOKE7w9oMB8GA1UdIwQYMBaAFKpEBbG/qWycabApAz70gdj1infl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy85NkEzNkFBODE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJKeHBzQ2tEUHZTQjJQV0tk LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FrUUZzYi1wYkp4cHNDa0RQdlNCMlBXS2QtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA1RDcvOTZBMzZBQTgxNkQ4MTFFRkJGOTAxRTVGQzRGOUFFMDIvMDE5MzVGREMz NUY5MTFFRkJGMjlDRjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFHQwDQYJKoZIhvcNAQELBQADggEBACy1uMIF9E5Omy1Y Q7hO9DnGtNq0UZg1grqJyYbkQGg6iy8jwXhqrWPUcMMn4i8l/P8oP8Hd08HgU/k1 G0s+k8hXjJeJSZJBSNIWeqAA4zIVYNQ4MO77VVvFSLVFlO4BZbTivk9I83fegf9p 7hrordAePcDrkeobgQzJTwHgg/zS2wHHIgbFqHMA3OIAx8UG+K/5Cl1/O3Xna645 rafecWT1/6qG4TWrKCxHXEBMoTnWjmS5Lc8bwRooK55m2Zux+ATObzvQVq+egOtu RNiyKUbLuPpK90py3q28Wd5VUuETQSvX0QTYjKOujzax5ywzgzerHfDI7jDpqzXQ RIA1iNo= -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:27 2025 by rpki-client