$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/8A941156D7E211EFBF26DA72C4F9AE02.roa File: 8A941156D7E211EFBF26DA72C4F9AE02.roa (raw, json) Hash identifier: a4pNtK3CV+mQ7nJwDHXCGhAdmpO8QsQ6bTiqCpOkfws= Subject key identifier: F5:6A:7B:BF:5A:40:C5:6F:4A:F6:68:91:D1:33:B4:3A:6E:3D:2E:C3 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: 2D Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/8A941156D7E211EFBF26DA72C4F9AE02.roa Signing time: Thu 10 Apr 2025 10:24:33 +0000 ROA not before: Thu 10 Apr 2025 10:24:33 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153523 IP address blocks: 161.248.188.0/24 maxlen: 24 161.248.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 07:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: Apr 10 10:24:33 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67f79c61-db05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:21:cc:03:a4:f2:f9:f4:a7:f0:56:7d:9a:e6: cc:fe:2c:9b:17:9d:8c:53:3c:e4:a8:55:59:62:30: 60:2c:c5:9d:76:b2:9f:07:84:e5:94:8b:83:c5:dc: 73:79:92:c1:c4:6a:57:4d:6e:09:ba:74:99:ff:fd: 44:42:c5:ab:3c:00:53:fe:3f:67:65:a0:18:0f:74: 49:39:30:91:bc:f4:a9:f3:b8:ff:a6:08:26:88:54: fb:48:bb:e3:fc:f8:ed:f3:3c:a8:56:25:52:49:fa: b4:ae:1d:ab:c1:ad:3d:c2:61:5c:68:c1:9a:23:5e: bb:00:e5:cf:88:f5:27:ad:60:41:80:f0:03:ba:0f: 3c:ff:a3:5a:d2:9e:1a:de:de:4e:d4:e3:ff:e3:a1: bc:5f:37:37:03:2f:c6:9f:4e:ae:f1:a2:08:b4:df: 58:59:d0:f9:c2:ba:c0:97:9f:af:e6:f2:f9:76:0c: 37:d5:a6:72:c4:d9:78:f8:8d:9b:9d:a0:29:bb:0a: 28:25:fd:1c:45:ee:78:34:00:48:a3:cf:f7:ed:ed: f3:a6:cd:b0:4f:84:c1:e8:32:3c:31:9a:7b:bc:48: 65:a3:55:31:97:f1:e4:e6:fd:4c:e3:5f:0d:8f:98: b8:16:12:9e:fc:5e:1b:9c:a8:a2:10:23:f5:cb:7d: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6A:7B:BF:5A:40:C5:6F:4A:F6:68:91:D1:33:B4:3A:6E:3D:2E:C3 X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/8A941156D7E211EFBF26DA72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.188.0/23 Signature Algorithm: sha256WithRSAEncryption 68:a0:15:1d:23:32:f7:a0:ee:62:c9:9c:9a:b5:27:c9:5a:5b: 87:f3:25:bf:2d:82:5a:d7:8e:6c:0f:01:92:bd:c4:1f:36:e3: f5:a1:0c:da:57:b1:03:3f:4b:34:00:86:40:15:c8:42:6d:6c: 4e:53:65:b0:ae:cf:0c:c1:d8:ed:db:4b:ef:83:11:4d:9d:b1: ba:b2:00:a6:03:a8:6e:ed:97:73:36:d8:8a:c7:9a:3f:b7:83: 8f:40:e5:a5:53:b5:9d:83:55:4d:06:f4:04:45:a8:f4:89:d3: 60:12:78:f8:9d:b1:88:d5:a4:79:dc:49:7c:66:7d:f8:af:52: 2b:85:99:f9:bb:f9:b0:d2:0b:1a:42:5b:17:03:f1:5a:8d:18: 68:dd:2c:e7:7c:ac:86:d5:2a:ac:2f:ce:01:34:ba:03:63:35: c2:08:04:5b:cb:83:b4:7d:9f:f5:de:91:85:4a:ef:45:30:19: b5:36:05:08:1f:b8:53:f5:78:d7:ad:5f:5b:ef:f2:12:7e:fa: 78:40:13:40:00:f1:29:e3:8b:14:78:89:41:a9:e7:b5:e1:e1: c7:7b:40:e7:1e:8c:da:98:c0:cf:ec:80:be:df:d0:e1:1c:b3: 9c:f4:50:c8:ae:fd:c8:19:8c:a4:61:29:c0:df:2b:1b:48:e5: 54:96:c0:05 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNUVGREU5OEM0RkJGOEQxMTg3QjY4NThFQkM4MUYwNjI1 QjI5MzE2MDAeFw0yNTA0MTAxMDI0MzNaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Zjc5YzYxLWRiMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhIcwDpPL59KfwVn2a5sz+LJsXnYxTPOSoVVliMGAsxZ12sp8HhOWUi4PF3HN5 ksHEaldNbgm6dJn//URCxas8AFP+P2dloBgPdEk5MJG89KnzuP+mCCaIVPtIu+P8 +O3zPKhWJVJJ+rSuHavBrT3CYVxowZojXrsA5c+I9SetYEGA8AO6Dzz/o1rSnhre 3k7U4//jobxfNzcDL8afTq7xogi031hZ0PnCusCXn6/m8vl2DDfVpnLE2Xj4jZud oCm7Cigl/RxF7ng0AEijz/ft7fOmzbBPhMHoMjwxmnu8SGWjVTGX8eTm/UzjXw2P mLgWEp78XhucqKIQI/XLfbchAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9Wp7v1pA xW9K9miR0TO0Om49LsMwHwYDVR0jBBgwFoAUXv3pjE+/jRGHtoWOvIHwYlspMWAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzIwQkUxQTMwRDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1X QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHYzcGpFLV9qUkdIdG9XT3ZJSHdZbHNwTVdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUNGRi8yMEJFMUEzMEQ3RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi84QTk0MTE1NkQ3 RTIxMUVGQkYyNkRBNzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4vDANBgkqhkiG9w0BAQsFAAOCAQEAaKAVHSMy96DuYsmc mrUnyVpbh/Mlvy2CWteObA8Bkr3EHzbj9aEM2lexAz9LNACGQBXIQm1sTlNlsK7P DMHY7dtL74MRTZ2xurIApgOobu2XczbYiseaP7eDj0DlpVO1nYNVTQb0BEWo9InT YBJ4+J2xiNWkedxJfGZ9+K9SK4WZ+bv5sNILGkJbFwPxWo0YaN0s53yshtUqrC/O ATS6A2M1wggEW8uDtH2f9d6RhUrvRTAZtTYFCB+4U/V4161fW+/yEn76eEATQADx KeOLFHiJQannteHhx3tA5x6M2pjAz+yAvt/Q4RyznPRQyK79yBmMpGEpwN8rG0jl VJbABQ== -----END CERTIFICATE-----Generated at Wed Apr 30 23:36:12 2025 by rpki-client