$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/01D7E35CBC8411EFA72EDB72C4F9AE02.roa File: 01D7E35CBC8411EFA72EDB72C4F9AE02.roa (raw, json) Hash identifier: Q2O3UQQcNoLM1v/zHql7wsFe9RZlWk5/+eqvd3Q27EE= Subject key identifier: DC:9C:38:BA:2F:8A:98:AD:3E:6F:5B:FD:F3:8C:10:B0:57:05:7B:54 Certificate issuer: /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3 Certificate serial: 10 Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/01D7E35CBC8411EFA72EDB72C4F9AE02.roa Signing time: Tue 17 Dec 2024 14:34:22 +0000 ROA not before: Tue 17 Dec 2024 14:34:22 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 134424 IP address blocks: 160.187.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91879AC, serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3 Validity Not Before: Dec 17 14:34:22 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67618bee-a12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:73:ae:42:ed:9e:d0:ea:0c:c7:8d:15:95:80: 70:fc:7a:d9:16:75:78:cf:fa:16:20:11:99:9c:20: 8b:6f:74:2e:e0:69:1f:87:8a:5e:ea:ed:4a:6d:f3: cf:96:ed:18:3c:80:9f:af:ca:c7:ef:7d:1a:98:8b: 8a:eb:0d:b9:b5:48:50:46:be:73:56:87:0f:f3:02: de:10:2b:1e:04:09:fc:5c:04:4e:f3:b4:8f:aa:5f: 73:e9:20:08:91:59:56:ae:1f:84:43:ae:9f:95:68: f8:c3:30:da:84:7c:9d:76:1c:ca:eb:b3:52:4c:ec: 1b:6d:3e:03:9d:5b:12:ae:5e:3a:51:a4:00:0e:d0: bb:b9:16:5d:6c:92:04:18:a1:44:a2:51:7d:cc:3e: 1c:f2:24:d1:d5:2e:c0:57:92:5d:d2:91:a7:33:00: ad:41:a8:b8:85:9e:cf:08:a0:70:ba:3b:69:b9:19: ba:97:07:60:e9:14:47:62:ab:a3:49:a1:23:13:8c: 06:0f:3c:8b:2f:9b:ee:b7:63:12:b6:20:3b:f9:6b: 65:bc:ac:af:35:8a:ed:78:a3:56:22:30:82:da:51: 6a:92:0c:fa:c5:98:4c:34:c6:7c:46:3d:e3:16:33: 17:34:52:38:77:dd:18:8c:da:47:55:6d:a1:ab:7e: 16:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9C:38:BA:2F:8A:98:AD:3E:6F:5B:FD:F3:8C:10:B0:57:05:7B:54 X509v3 Authority Key Identifier: keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/01D7E35CBC8411EFA72EDB72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.109.0/24 Signature Algorithm: sha256WithRSAEncryption ae:df:db:b2:16:0a:ac:fb:40:5c:7f:6c:db:17:09:c4:04:db: 78:76:63:25:96:5a:2e:9a:4c:c7:4b:6b:8b:39:b8:5b:45:81: d5:f9:e4:43:3c:42:d0:26:37:76:e9:3f:42:04:b4:b5:3c:25: ab:ba:07:14:37:78:ee:43:c0:65:8d:f1:9d:4f:24:e1:f2:87: d3:b3:f6:20:2d:f8:b4:a7:5a:cf:5d:11:82:88:27:a0:0d:a6: be:12:58:ef:83:7d:71:d4:2c:2c:97:b5:46:57:1d:9b:c0:78: 82:b7:7a:b1:ab:94:df:af:36:55:2a:0b:57:63:df:36:73:65: 44:74:99:fc:1d:fe:b9:19:6b:10:22:f0:1b:f5:46:03:3d:b3: 1e:b0:e4:9d:75:f4:2c:da:95:8b:d0:fb:d2:70:77:79:37:f8: d7:3c:6d:cb:20:2a:61:c1:b9:48:99:e8:8c:49:00:76:5e:aa: af:49:75:a6:0d:82:f6:59:4f:ed:81:05:d9:1a:0c:e3:13:12: 00:ce:42:30:27:33:71:86:71:d4:e5:e2:d9:5d:fb:02:ba:1f: 87:2f:5b:7d:12:9c:d3:25:e6:a5:9a:93:ca:64:86:f1:8e:1e: c3:a2:18:ed:54:ca:78:8d:ce:00:11:ef:52:5a:0b:ae:37:9c: 8b:bf:1a:f5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzlBQzExMC8GA1UEBRMoOThDQTQ5NERGNjlERURGNjE2RTQxRDA1OUExNEU3RjY4 NzlDREZCMzAeFw0yNDEyMTcxNDM0MjJaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NjE4YmVlLWExMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnc65C7Z7Q6gzHjRWVgHD8etkWdXjP+hYgEZmcIItvdC7gaR+Hil7q7Upt88+W 7Rg8gJ+vysfvfRqYi4rrDbm1SFBGvnNWhw/zAt4QKx4ECfxcBE7ztI+qX3PpIAiR WVauH4RDrp+VaPjDMNqEfJ12HMrrs1JM7BttPgOdWxKuXjpRpAAO0Lu5Fl1skgQY oUSiUX3MPhzyJNHVLsBXkl3SkaczAK1BqLiFns8IoHC6O2m5GbqXB2DpFEdiq6NJ oSMTjAYPPIsvm+63YxK2IDv5a2W8rK81iu14o1YiMILaUWqSDPrFmEw0xnxGPeMW Mxc0Ujh33RiM2kdVbaGrfhZRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU3Jw4ui+K mK0+b1v984wQsFcFe1QwHwYDVR0jBBgwFoAUmMpJTfad7fYW5B0FmhTn9oec37Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OUFDLzYwOTQ2Q0Q2QTgw MTExRUZBNDA2NzUzQkM0RjlBRTAyL21NcEpUZmFkN2ZZVzVCMEZtaFRuOW9lYzM3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbU1wSlRmYWQ3ZllXNUIwRm1oVG45b2VjMzdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzlBQy82MDk0NkNENkE4MDExMUVGQTQwNjc1M0JDNEY5QUUwMi8wMUQ3RTM1Q0JD ODQxMUVGQTcyRURCNzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKC7bTANBgkqhkiG9w0BAQsFAAOCAQEArt/bshYKrPtAXH9s 2xcJxATbeHZjJZZaLppMx0trizm4W0WB1fnkQzxC0CY3duk/QgS0tTwlq7oHFDd4 7kPAZY3xnU8k4fKH07P2IC34tKdaz10RgognoA2mvhJY74N9cdQsLJe1Rlcdm8B4 grd6sauU3682VSoLV2PfNnNlRHSZ/B3+uRlrECLwG/VGAz2zHrDknXX0LNqVi9D7 0nB3eTf41zxtyyAqYcG5SJnojEkAdl6qr0l1pg2C9llP7YEF2RoM4xMSAM5CMCcz cYZx1OXi2V37Arofhy9bfRKc0yXmpZqTymSG8Y4ew6IY7VTKeI3OABHvUloLrjec i78a9Q== -----END CERTIFICATE-----Generated at Sat Apr 26 17:03:15 2025 by rpki-client