$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5D5359F8E3AA11EFA9ED913FC4F9AE02.roa File: 5D5359F8E3AA11EFA9ED913FC4F9AE02.roa (raw, json) Hash identifier: FTD4IcL/b+GkS1lkv2F4Qn7LkQd5dpRssagZnS6VmyY= Subject key identifier: A5:AC:98:D7:CD:09:22:FC:72:5E:46:BE:DD:CE:D3:C2:C6:EA:7B:E1 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 051C Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5D5359F8E3AA11EFA9ED913FC4F9AE02.roa Signing time: Wed 05 Feb 2025 10:17:12 +0000 ROA not before: Wed 05 Feb 2025 10:17:12 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153543 IP address blocks: 161.248.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1308 (0x51c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Feb 5 10:17:12 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67a33aa8-ef51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ad:ff:b7:b2:f9:88:84:1d:42:80:36:0d:89: 48:62:5b:bd:04:93:df:2f:cf:3e:eb:e8:44:b6:f6: b0:33:d4:8d:8c:a8:e1:0d:dd:3a:c5:0e:74:6d:88: a4:1f:ff:ca:fb:bf:fe:3d:ab:ae:23:b7:d8:2f:a4: 17:e5:5a:90:e0:98:c2:42:b3:7c:b2:07:9d:b1:2b: 1c:96:f5:28:75:75:ad:0c:86:89:9c:0f:b7:de:57: 0b:83:8f:37:92:3e:6f:a7:d3:60:81:72:45:ae:be: 68:f7:76:91:a2:7e:d9:86:05:3f:46:d0:df:18:d3: be:1f:f2:46:3a:af:ca:03:51:60:58:b9:e1:c1:bf: c3:39:e5:44:19:0a:b7:54:06:6a:a5:8e:d3:50:cc: 79:ad:e8:17:49:57:3e:fb:4d:36:b1:fc:7b:db:4c: 61:05:d8:30:a5:e5:36:0c:93:19:83:a0:c9:af:e5: 86:fb:66:cf:ff:35:b9:72:58:4b:2d:05:14:e9:df: a6:10:e0:6b:14:c6:09:1c:20:56:5c:9f:e8:cb:f8: 83:3a:a2:f2:61:a0:97:8a:d2:d6:e9:62:97:b5:90: 11:33:a3:36:c6:51:98:04:d6:f7:b4:17:ca:45:22: 3d:33:ab:1f:be:94:ae:8c:fd:cf:46:23:38:4c:23: 0f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AC:98:D7:CD:09:22:FC:72:5E:46:BE:DD:CE:D3:C2:C6:EA:7B:E1 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5D5359F8E3AA11EFA9ED913FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.212.0/23 Signature Algorithm: sha256WithRSAEncryption ab:fd:81:b5:dd:a7:5a:ab:70:7a:dc:a1:47:4e:e8:43:45:99: 1c:d6:52:0d:34:87:9f:4c:e3:3f:9a:dc:8b:ac:b9:ed:e6:f2: 03:92:dd:f3:a5:f7:8b:86:dd:1c:7a:2b:d9:f3:5f:25:a0:bb: 14:81:08:ca:4f:ed:7f:ae:76:9a:ca:2c:9c:04:de:9e:85:a9: 21:e6:32:01:16:3a:a4:7c:b7:0d:6a:23:b7:46:5a:af:70:6c: 41:51:f1:22:a8:d6:3d:54:df:2f:dd:b4:60:48:65:07:e2:b0: dd:48:c5:eb:5d:72:0a:e9:0c:54:65:6b:6f:33:d3:bd:12:b0: 57:c5:ad:cb:9a:6c:1c:6e:1c:49:04:f8:49:ba:18:84:1b:d2: 7a:a6:49:d8:fb:46:13:d1:f3:68:7b:2b:22:65:54:09:c7:19: 86:f0:21:32:f3:60:3d:41:4a:c5:83:58:d0:5f:d2:4c:ed:d2: ef:0d:2a:34:79:f1:d1:bf:bf:20:b9:e3:18:16:32:90:bb:74: f3:2d:75:ea:de:0c:b0:3d:f7:4b:e5:f2:43:e6:42:9b:b2:e2: 0b:ec:02:93:5e:c0:c6:e7:a5:f0:7a:e9:ba:c6:43:9e:e9:e9: 1e:18:cb:f4:1c:f9:67:1f:0e:7c:4b:4f:44:ed:75:23:c3:cf: 5e:c1:08:48 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwMjA1MTAxNzEyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EzM2FhOC1lZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxa3/t7L5iIQdQoA2DYlIYlu9BJPfL88+6+hEtvawM9SNjKjhDd06xQ50bYik H//K+7/+PauuI7fYL6QX5VqQ4JjCQrN8sgedsSsclvUodXWtDIaJnA+33lcLg483 kj5vp9NggXJFrr5o93aRon7ZhgU/RtDfGNO+H/JGOq/KA1FgWLnhwb/DOeVEGQq3 VAZqpY7TUMx5regXSVc++002sfx720xhBdgwpeU2DJMZg6DJr+WG+2bP/zW5clhL LQUU6d+mEOBrFMYJHCBWXJ/oy/iDOqLyYaCXitLW6WKXtZARM6M2xlGYBNb3tBfK RSI9M6sfvpSujP3PRiM4TCMP2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFKWsmNfN CSL8cl5Gvt3O08LG6nvhMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNUQ1MzU5RjhF M0FBMTFFRkE5RUQ5MTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGh+NQwDQYJKoZIhvcNAQELBQADggEBAKv9gbXdp1qrcHrc oUdO6ENFmRzWUg00h59M4z+a3Iusue3m8gOS3fOl94uG3Rx6K9nzXyWguxSBCMpP 7X+udprKLJwE3p6FqSHmMgEWOqR8tw1qI7dGWq9wbEFR8SKo1j1U3y/dtGBIZQfi sN1IxetdcgrpDFRla28z070SsFfFrcuabBxuHEkE+Em6GIQb0nqmSdj7RhPR82h7 KyJlVAnHGYbwITLzYD1BSsWDWNBf0kzt0u8NKjR58dG/vyC54xgWMpC7dPMtdere DLA990vl8kPmQpuy4gvsApNewMbnpfB66brGQ57p6R4Yy/Qc+WcfDnxLT0TtdSPD z17BCEg= -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:32 2025 by rpki-client