$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa File: 32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa (raw, json) Hash identifier: fRxukvtDkGIC3D8QBaI9ZwcR1VcfpvwmoqPaTDJZIsg= Subject key identifier: A8:DE:5F:73:68:F9:CB:28:1E:83:9B:C6:1E:46:AA:4C:3B:A3:07:2B Certificate issuer: /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E Certificate serial: F4 Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa Signing time: Thu 03 Apr 2025 05:02:19 +0000 ROA not before: Thu 03 Apr 2025 05:02:19 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 152322 IP address blocks: 157.10.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E Validity Not Before: Apr 3 05:02:19 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67ee165b-08b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:ba:ca:11:1e:eb:d2:9f:07:b5:db:3c:4e: f5:f7:be:d5:04:b4:b9:95:6b:c5:8a:78:98:d9:55: 3a:5b:87:47:e9:92:a9:e2:2e:6f:b3:d1:81:59:e8: 41:af:2a:8a:08:1b:09:c0:09:40:cd:31:e5:38:fc: 2e:e4:68:83:7e:40:34:a2:26:4c:f0:69:06:fb:3c: 0a:0c:91:bf:3d:26:49:4c:df:72:de:f4:3a:d6:c6: a3:f3:02:31:0f:58:0c:50:d7:a9:8c:dc:34:7e:b5: 95:a4:a7:39:54:84:76:cd:25:75:20:d6:05:cc:f3: 3d:24:7f:64:6b:1e:c4:b2:4e:f9:29:0c:55:06:b3: de:2e:9f:ae:a6:35:89:23:5c:48:c5:82:c1:40:89: e3:36:1a:71:42:5c:75:ce:8d:b1:3f:01:11:af:60: cd:53:5c:ef:8c:b9:30:6a:23:eb:17:61:72:39:81: f9:fe:69:be:1a:92:66:fc:9b:99:20:58:91:b1:7c: 9b:9e:73:c0:ac:f4:2b:30:7e:eb:4b:43:26:bf:a5: 94:ef:95:b2:68:f0:70:45:8f:1e:30:25:82:26:9f: 04:91:eb:9a:0d:3c:35:f9:88:4e:02:c7:98:1d:61: 49:a1:8f:2d:1f:c7:d2:58:5c:4f:3a:6e:06:d0:a1: d3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DE:5F:73:68:F9:CB:28:1E:83:9B:C6:1E:46:AA:4C:3B:A3:07:2B X509v3 Authority Key Identifier: keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.134.0/23 Signature Algorithm: sha256WithRSAEncryption 07:ae:a7:f1:e2:32:c4:19:77:8a:86:fd:04:93:c6:e2:67:6f: 9e:e0:df:06:ea:c9:e2:7e:2a:7a:b5:7b:0d:02:d9:79:fb:83: ec:b7:df:c3:36:42:8a:c4:c4:38:6a:4d:90:27:4e:9d:49:95: b0:a7:f0:55:fd:e2:89:35:e5:c2:bd:90:33:b0:77:0f:56:1c: e8:a6:36:43:c0:29:f2:e9:da:1a:58:59:88:b6:a3:6a:c2:d7: 2e:4c:13:bf:03:aa:14:84:d9:fe:eb:fa:bc:f7:10:cf:8d:5f: 91:8c:98:fc:be:62:1b:2a:a7:14:cf:72:e8:32:d0:83:6c:e8: 51:6f:c5:a9:de:83:35:69:5b:6f:ea:fe:9b:5d:7b:eb:2b:15: c7:47:67:fe:fc:26:a0:1b:93:75:f4:2e:1c:65:49:4e:ed:d4: cf:35:c1:f6:9d:db:85:93:d9:2b:6d:f8:80:e4:39:82:23:5f: 35:4e:59:8c:b2:3d:74:7d:85:ca:bf:ba:2c:53:91:08:c4:8d: bd:2e:ef:88:63:52:80:d7:24:8c:e6:70:31:4f:60:92:39:20: d3:12:b5:24:c9:2e:e5:48:5f:24:57:d2:ab:6a:61:88:cf:17: e6:55:d7:4d:54:04:f6:40:0a:3e:30:24:3f:fe:a1:5e:f9:4c: 2a:c3:c1:52 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKEJFRkZCRUY4RUZDNTAyN0MzNERGRjcwNEM3OUZCMjgx MkE3MTMzMUUwHhcNMjUwNDAzMDUwMjE5WhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VlMTY1Yi0wOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeG6yhEe69KfB7XbPE71977VBLS5lWvFiniY2VU6W4dH6ZKp4i5vs9GBWehB ryqKCBsJwAlAzTHlOPwu5GiDfkA0oiZM8GkG+zwKDJG/PSZJTN9y3vQ61saj8wIx D1gMUNepjNw0frWVpKc5VIR2zSV1INYFzPM9JH9kax7Esk75KQxVBrPeLp+upjWJ I1xIxYLBQInjNhpxQlx1zo2xPwERr2DNU1zvjLkwaiPrF2FyOYH5/mm+GpJm/JuZ IFiRsXybnnPArPQrMH7rS0Mmv6WU75WyaPBwRY8eMCWCJp8EkeuaDTw1+YhOAseY HWFJoY8tH8fSWFxPOm4G0KHT2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFKjeX3No +csoHoObxh5Gqkw7owcrMB8GA1UdIwQYMBaAFL7/vvjvxQJ8NN/3BMefsoEqcTMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS85NTA3NEEwQUFG NTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFudzAzX2NFeDUteWdTcHhN eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z2LS0tT19GQW53MDNfY0V4NS15Z1NweE14NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRCMzkvOTUwNzRBMEFBRjU2MTFFRUE2NTVCNTgxQzRGOUFFMDIvMzJFN0E0QjBB RjkxMTFFRUEzQjE0QzJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCoYwDQYJKoZIhvcNAQELBQADggEBAAeup/HiMsQZd4qG /QSTxuJnb57g3wbqyeJ+Knq1ew0C2Xn7g+y338M2QorExDhqTZAnTp1JlbCn8FX9 4ok15cK9kDOwdw9WHOimNkPAKfLp2hpYWYi2o2rC1y5ME78DqhSE2f7r+rz3EM+N X5GMmPy+YhsqpxTPcugy0INs6FFvxanegzVpW2/q/ptde+srFcdHZ/78JqAbk3X0 LhxlSU7t1M81wfad24WT2Stt+IDkOYIjXzVOWYyyPXR9hcq/uixTkQjEjb0u74hj UoDXJIzmcDFPYJI5INMStSTJLuVIXyRX0qtqYYjPF+ZV101UBPZACj4wJD/+oV75 TCrDwVI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:29 2025 by rpki-client