$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2171B7C0B7A111EF88C1E184C4F9AE02.roa File: 2171B7C0B7A111EF88C1E184C4F9AE02.roa (raw, json) Hash identifier: +Y7cNl+t5CObIVrNa3uJBHfKKnueLVG5/k2srwejSAM= Subject key identifier: D2:FF:F3:BB:58:FD:48:0B:0F:0F:72:F8:AB:D1:B2:77:65:81:42:E9 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 049B Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2171B7C0B7A111EF88C1E184C4F9AE02.roa Signing time: Wed 11 Dec 2024 09:20:15 +0000 ROA not before: Wed 11 Dec 2024 09:20:15 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153435 IP address blocks: 160.250.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1179 (0x49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Dec 11 09:20:15 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6759594f-06d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:28:00:33:fc:69:12:0c:aa:a9:f2:2f:1a: 18:4d:d2:73:7d:4a:f9:f9:b1:51:8f:16:32:95:98: 32:f3:39:8a:e5:7d:a0:32:dc:5d:37:59:f2:92:df: 9d:96:e5:8b:e1:9a:31:d6:60:48:d1:37:60:94:f5: 6a:53:9c:91:06:53:7b:ad:d4:cb:ce:98:1d:b2:a6: 7e:09:9c:a3:a5:66:c7:14:e4:d4:13:59:fd:3e:b0: f2:be:ca:33:5a:2e:16:46:28:db:7b:96:05:2e:92: 80:75:0f:46:f4:2e:4a:15:04:b7:68:d6:60:da:f3: 56:df:7d:ab:90:ec:ab:cf:76:02:d6:7d:9d:4b:06: 93:fb:83:1c:d1:b5:33:2a:07:cb:ac:ae:eb:b0:d6: 99:45:2e:a5:72:e6:7b:43:9f:9b:e5:12:e8:e4:da: 4a:38:5b:75:fc:4e:c5:f1:cd:19:59:13:98:72:11: ec:8c:f1:37:d4:a5:a1:af:57:fa:29:f8:90:0b:7e: cb:65:42:e7:a4:05:97:21:78:d8:db:7a:82:69:17: ee:f7:c0:5d:94:a7:40:83:25:60:ae:4a:a2:38:47: 29:d1:1b:59:b5:8f:7d:e9:fe:68:95:1a:6c:fb:e4: 75:5b:9e:24:a0:64:b0:3c:3c:cc:40:79:c8:52:85: 41:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FF:F3:BB:58:FD:48:0B:0F:0F:72:F8:AB:D1:B2:77:65:81:42:E9 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2171B7C0B7A111EF88C1E184C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.124.0/23 Signature Algorithm: sha256WithRSAEncryption 91:f1:31:ec:04:be:3a:05:77:d4:e0:f0:2d:b1:f7:d0:cb:22: 70:06:b7:84:26:bc:c3:32:c7:25:2f:5f:62:c4:d5:b7:b0:71: 82:ae:23:85:ce:9e:ff:15:93:31:cd:8e:6e:82:98:30:68:4f: 5e:9c:4a:b9:5d:dc:b4:43:a7:e9:68:65:4a:a2:cb:c6:f1:69: 3a:b8:6c:5a:5f:f6:07:1f:38:6f:75:71:35:eb:68:3a:81:9f: dc:1e:0a:64:8a:b8:c6:4d:7b:d7:f0:f4:9b:2a:01:07:f0:be: 02:fd:02:05:fd:8c:15:c8:74:a5:bb:cb:72:c4:00:8d:dc:3b: 60:90:04:88:0e:54:f8:29:7d:39:9e:5d:8a:55:77:c6:35:a9: 77:6b:5b:23:2d:03:5c:fc:ba:62:c8:b2:eb:4c:20:0e:c0:6e: 53:2b:f2:be:4b:88:28:d9:b7:dc:c6:04:89:6b:b5:fd:b8:02: 45:90:87:39:69:60:ad:70:e5:9b:6d:50:bf:40:a2:0d:dc:87: 4b:be:d0:5e:96:a8:59:43:2c:5a:74:b4:aa:dc:8c:e4:8e:ef: 33:10:74:25:56:7b:eb:3a:45:73:f9:1e:10:12:1e:8e:23:57: 38:b3:0c:d9:ef:17:39:27:82:64:f0:fa:40:fe:64:93:d5:46: 01:e7:14:51 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQxMjExMDkyMDE1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU5NTk0Zi0wNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKUoADP8aRIMqqnyLxoYTdJzfUr5+bFRjxYylZgy8zmK5X2gMtxdN1nykt+d luWL4Zox1mBI0TdglPVqU5yRBlN7rdTLzpgdsqZ+CZyjpWbHFOTUE1n9PrDyvsoz Wi4WRijbe5YFLpKAdQ9G9C5KFQS3aNZg2vNW332rkOyrz3YC1n2dSwaT+4Mc0bUz KgfLrK7rsNaZRS6lcuZ7Q5+b5RLo5NpKOFt1/E7F8c0ZWROYchHsjPE31KWhr1f6 KfiQC37LZULnpAWXIXjY23qCaRfu98BdlKdAgyVgrkqiOEcp0RtZtY996f5olRps ++R1W54koGSwPDzMQHnIUoVBIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNL/87tY /UgLDw9y+KvRsndlgULpMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMjE3MUI3QzBC N0ExMTFFRjg4QzFFMTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGg+nwwDQYJKoZIhvcNAQELBQADggEBAJHxMewEvjoFd9Tg 8C2x99DLInAGt4QmvMMyxyUvX2LE1bewcYKuI4XOnv8VkzHNjm6CmDBoT16cSrld 3LRDp+loZUqiy8bxaTq4bFpf9gcfOG91cTXraDqBn9weCmSKuMZNe9fw9JsqAQfw vgL9AgX9jBXIdKW7y3LEAI3cO2CQBIgOVPgpfTmeXYpVd8Y1qXdrWyMtA1z8umLI sutMIA7AblMr8r5LiCjZt9zGBIlrtf24AkWQhzlpYK1w5ZttUL9Aog3ch0u+0F6W qFlDLFp0tKrcjOSO7zMQdCVWe+s6RXP5HhASHo4jVzizDNnvFzkngmTw+kD+ZJPV RgHnFFE= -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:48 2025 by rpki-client