$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/167FCE12844B11EA91F6956BC4F9AE02.roa File: 167FCE12844B11EA91F6956BC4F9AE02.roa (raw, json) Hash identifier: 89eEUpRQHSJ8X1lImXGmURAImfIF1FtpfbrbpBLEmDo= Subject key identifier: 53:20:99:6A:85:E7:A1:EB:F5:34:FE:A4:9E:D7:76:31:98:2D:06:27 Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Certificate serial: 36CD Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/167FCE12844B11EA91F6956BC4F9AE02.roa Signing time: Sat 22 Mar 2025 15:01:22 +0000 ROA not before: Sat 22 Mar 2025 15:01:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9260 IP address blocks: 182.190.88.0/24 maxlen: 24 182.190.89.0/24 maxlen: 24 182.190.252.0/24 maxlen: 24 182.190.253.0/24 maxlen: 24 182.190.254.0/24 maxlen: 24 182.190.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14029 (0x36cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Validity Not Before: Mar 22 15:01:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67ded0c1-505c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:30:ba:66:f4:34:2a:55:07:a9:84:bb:17: 03:26:67:12:39:6c:29:46:50:55:db:06:00:8d:f0: 3d:50:b2:24:b5:9f:43:67:20:9e:bc:23:52:0c:d7: 87:b8:70:37:dd:f2:d4:dd:be:16:a4:73:dc:50:87: 5e:7b:f7:6d:a7:f8:e3:30:4e:81:9a:cd:9f:fa:c9: 1a:6b:dc:1b:ab:0a:f9:60:26:c5:9c:08:ae:e2:ce: 08:45:bb:d3:95:60:01:e1:b0:da:ac:ac:76:f6:4c: 0f:69:3c:ff:ff:3d:88:4e:e6:91:5c:d8:cc:26:f5: da:de:fb:81:08:a2:43:d7:ef:71:e0:b4:b0:39:c6: bb:ad:7c:42:f0:2e:30:d0:eb:85:54:a2:47:e6:a1: b3:11:20:7d:cf:11:c0:dc:28:19:77:04:68:1e:9b: fb:ee:7c:48:0b:f5:cd:de:6a:43:3a:67:30:0b:66: a0:9b:1e:29:25:e6:3a:76:52:96:da:1a:35:19:58: 2e:33:c7:40:52:c5:67:0e:27:5e:42:f5:15:23:6b: 47:67:00:d7:fc:56:6a:bd:19:6c:ad:a8:5f:7f:ca: 17:80:aa:d9:8c:12:be:51:73:49:f1:27:ef:bb:50: 84:b5:4c:43:9c:7a:bf:18:a0:fe:a2:4c:0f:1d:ed: fe:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:20:99:6A:85:E7:A1:EB:F5:34:FE:A4:9E:D7:76:31:98:2D:06:27 X509v3 Authority Key Identifier: keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/167FCE12844B11EA91F6956BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.190.88.0/23 182.190.252.0/22 Signature Algorithm: sha256WithRSAEncryption c6:61:a9:29:5a:53:11:ec:dd:3c:b0:02:75:02:e5:02:cf:77: 37:b2:6b:9a:a9:89:a8:ed:07:9d:c8:17:ed:8f:3d:80:13:d9: 4b:b0:48:a8:00:f0:f8:29:82:02:75:ee:1e:21:c7:04:ba:7a: 1f:7d:04:c7:df:89:5a:c9:08:56:5f:fd:7e:b7:2d:5d:77:7c: 0d:28:08:6d:d3:53:ee:05:de:aa:b1:00:57:3b:f9:09:4e:5f: 89:2f:c6:77:60:8c:0b:08:f0:5f:00:a2:d0:48:0b:ac:5b:1d: b3:bd:31:31:24:13:5f:29:89:03:2d:04:70:43:58:8a:fe:5f: 59:f7:b0:d1:21:88:a2:2b:fb:03:93:0e:24:36:09:6f:02:c9: 47:eb:f3:9b:83:c7:31:37:bb:2d:0a:fd:7c:ad:c5:29:00:0a: c4:07:50:55:a3:bd:7a:23:dc:26:81:98:ab:43:2d:3a:35:9b: 3f:98:ae:6e:81:5c:0d:0d:a8:cc:36:dc:e7:d4:c6:07:4e:ba: 13:be:e6:9d:4a:7b:b9:40:ee:00:c0:6d:37:0f:e5:fe:b0:8b: c2:56:c6:83:f8:72:69:17:ce:d1:93:1e:28:66:dd:82:8e:ee: ec:7c:83:13:6f:25:ce:72:3c:d5:c6:2b:6d:09:c3:7f:b5:88: f7:1d:a1:cf -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB NzYwQUVCNTQwHhcNMjUwMzIyMTUwMTIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RlZDBjMS01MDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfowumb0NCpVB6mEuxcDJmcSOWwpRlBV2wYAjfA9ULIktZ9DZyCevCNSDNeH uHA33fLU3b4WpHPcUIdee/dtp/jjME6Bms2f+skaa9wbqwr5YCbFnAiu4s4IRbvT lWAB4bDarKx29kwPaTz//z2ITuaRXNjMJvXa3vuBCKJD1+9x4LSwOca7rXxC8C4w 0OuFVKJH5qGzESB9zxHA3CgZdwRoHpv77nxIC/XN3mpDOmcwC2agmx4pJeY6dlKW 2ho1GVguM8dAUsVnDideQvUVI2tHZwDX/FZqvRlsrahff8oXgKrZjBK+UXNJ8Sfv u1CEtUxDnHq/GKD+okwPHe3+xQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFMgmWqF 56Hr9TT+pJ7XdjGYLQYnMB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA4MzIvOURBRjc4MEUxRDk0MTFFMjk5MDFGM0Y4MDhCMDJDRDIvMTY3RkNFMTI4 NDRCMTFFQTkxRjY5NTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAG2vlgDBAK2vvwwDQYJKoZIhvcNAQELBQADggEBAMZhqSla UxHs3TywAnUC5QLPdzeya5qpiajtB53IF+2PPYAT2UuwSKgA8PgpggJ17h4hxwS6 eh99BMffiVrJCFZf/X63LV13fA0oCG3TU+4F3qqxAFc7+QlOX4kvxndgjAsI8F8A otBIC6xbHbO9MTEkE18piQMtBHBDWIr+X1n3sNEhiKIr+wOTDiQ2CW8CyUfr85uD xzE3uy0K/XytxSkACsQHUFWjvXoj3CaBmKtDLTo1mz+Yrm6BXA0NqMw23OfUxgdO uhO+5p1Ke7lA7gDAbTcP5f6wi8JWxoP4cmkXztGTHihm3YKO7ux8gxNvJc5yPNXG K20Jw3+1iPcdoc8= -----END CERTIFICATE-----Generated at Sat Apr 26 08:17:40 2025 by rpki-client