$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/4BC4F6A614DF11EEAB46A86DC4F9AE02.roa File: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (raw, json) Hash identifier: UFLmIYqMMQZsSlXO+J3Nx0+Pb9WqTG32RlxuAiHOUdE= Subject key identifier: F4:E6:BF:C7:13:46:92:10:5A:48:6E:C2:0D:AA:3C:F0:7E:7B:F4:24 Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB Certificate serial: 0188 Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/4BC4F6A614DF11EEAB46A86DC4F9AE02.roa Signing time: Wed 18 Dec 2024 16:13:39 +0000 ROA not before: Wed 18 Dec 2024 16:13:39 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 173 IP address blocks: 192.47.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB Validity Not Before: Dec 18 16:13:39 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6762f4b3-8fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dc:61:88:b2:a5:92:c2:af:9a:94:17:92:5f: 06:63:01:76:3f:ee:81:d0:a8:90:9c:ea:7a:04:e9: 18:e7:03:66:80:e6:b2:d2:d4:67:47:78:b2:02:8f: 7b:2b:d6:d0:c6:0b:91:94:1f:03:26:c5:27:ae:cf: 6a:53:7a:b2:45:ee:11:70:30:ac:51:bc:45:32:84: 97:1b:94:29:33:21:e1:0b:d6:d6:46:33:cf:87:a5: e3:51:58:64:b6:2b:91:57:91:51:d2:b5:19:8b:3a: 73:f9:2c:a8:94:28:2a:16:93:20:3a:37:16:f9:34: db:40:13:b1:e1:b9:06:72:78:02:38:3c:5f:7b:44: f6:54:49:da:98:6e:21:7b:a8:3f:1a:2e:29:9b:e6: 87:89:8a:4a:fa:31:c1:39:7a:c1:96:c5:6d:1c:bc: f8:dc:19:dd:73:47:03:0c:0a:bc:62:15:f8:ec:b8: 3c:a1:80:d7:b7:29:2d:36:dc:af:b4:0d:c5:33:c3: a4:32:4c:2d:57:c7:db:f9:78:a4:61:3f:cd:5c:5f: ee:25:1b:15:cf:8c:d3:dc:5e:91:0f:41:45:84:82: b6:47:ca:2d:17:53:c6:f6:34:77:60:a8:43:eb:51: d3:2e:1b:25:5b:87:6a:7d:38:28:bf:11:6b:f5:84: b2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E6:BF:C7:13:46:92:10:5A:48:6E:C2:0D:AA:3C:F0:7E:7B:F4:24 X509v3 Authority Key Identifier: keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/4BC4F6A614DF11EEAB46A86DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.47.168.0/23 Signature Algorithm: sha256WithRSAEncryption 58:4b:11:19:4c:8e:f3:45:bf:f9:ff:e0:8f:6e:9e:4b:c6:7d: f6:f0:7f:71:a9:b8:55:f2:31:74:d6:90:02:50:e0:21:67:c4: 2b:ed:bb:48:61:a6:b4:c8:51:53:80:3d:ad:54:b6:7e:d6:1f: a4:af:94:9f:e1:b8:38:b4:c6:fc:72:17:c9:c2:69:7d:a5:5b: 38:89:4d:d9:d9:b2:58:52:30:04:c1:10:e4:93:ff:62:e8:03: 79:e9:51:41:21:27:71:1b:3d:d3:d2:f5:85:cc:32:94:22:d4: 5c:4d:1d:89:5c:7f:f8:bc:e3:89:14:7d:6b:e0:81:20:60:f4: 4f:66:29:ac:5d:dd:a1:37:95:83:0c:d8:01:9a:e4:62:c2:ef: af:9d:bc:75:b1:cc:f0:8d:09:13:c3:b5:db:65:36:fa:f4:c0: a0:55:17:1e:ed:b8:11:fc:51:e3:21:d2:52:c0:f0:bb:cc:0e: e0:c6:e2:f8:b1:f0:2c:e8:0a:d3:1f:a9:5c:84:85:f7:36:83: a1:8a:16:f6:40:64:95:05:7c:0a:dd:e8:ea:e9:2e:48:3b:7b: 91:4a:b9:be:b1:5f:6c:6f:5b:8e:85:2b:31:75:c0:6d:18:01: 6e:de:e5:d7:d2:f0:2d:84:65:a1:19:b0:e6:16:cd:24:f1:3d: 65:ba:53:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKDk4NThDRTRCNEJDNzJFNzZFNjY4QzQ3RDQ0ODk4QzA5 MDg5NkFCRUIwHhcNMjQxMjE4MTYxMzM5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYyZjRiMy04ZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39xhiLKlksKvmpQXkl8GYwF2P+6B0KiQnOp6BOkY5wNmgOay0tRnR3iyAo97 K9bQxguRlB8DJsUnrs9qU3qyRe4RcDCsUbxFMoSXG5QpMyHhC9bWRjPPh6XjUVhk tiuRV5FR0rUZizpz+SyolCgqFpMgOjcW+TTbQBOx4bkGcngCODxfe0T2VEnamG4h e6g/Gi4pm+aHiYpK+jHBOXrBlsVtHLz43Bndc0cDDAq8YhX47Lg8oYDXtyktNtyv tA3FM8OkMkwtV8fb+XikYT/NXF/uJRsVz4zT3F6RD0FFhIK2R8otF1PG9jR3YKhD 61HTLhslW4dqfTgovxFr9YSy0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPTmv8cT RpIQWkhuwg2qPPB+e/QkMB8GA1UdIwQYMBaAFJhYzktLxy525mjEfUSJjAkIlqvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS9CNDVGM0ZDNDgx OUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExuYm1hTVI5UkltTUNRaVdx LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21Gak9TMHZITG5ibWFNUjlSSW1NQ1FpV3Etcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRCMUEvQjQ1RjNGQzQ4MTlBMTFFRDhENjFCQTJCQzRGOUFFMDIvNEJDNEY2QTYx NERGMTFFRUFCNDZBODZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHAL6gwDQYJKoZIhvcNAQELBQADggEBAFhLERlMjvNFv/n/ 4I9unkvGffbwf3GpuFXyMXTWkAJQ4CFnxCvtu0hhprTIUVOAPa1Utn7WH6SvlJ/h uDi0xvxyF8nCaX2lWziJTdnZslhSMATBEOST/2LoA3npUUEhJ3EbPdPS9YXMMpQi 1FxNHYlcf/i844kUfWvggSBg9E9mKaxd3aE3lYMM2AGa5GLC76+dvHWxzPCNCRPD tdtlNvr0wKBVFx7tuBH8UeMh0lLA8LvMDuDG4vix8CzoCtMfqVyEhfc2g6GKFvZA ZJUFfArd6OrpLkg7e5FKub6xX2xvW46FKzF1wG0YAW7e5dfS8C2EZaEZsOYWzSTx PWW6U2s= -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:20 2025 by rpki-client